last executing test programs: 4.857051035s ago: executing program 4 (id=4529): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c2518010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b700000000000000950072626fd708f2"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x5, 0x5, 0x8, 0x7, 0x8}, 0x14) 4.670996643s ago: executing program 4 (id=4532): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x18}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) 4.64127689s ago: executing program 4 (id=4535): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xd9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x13ac, 0x13, 0x200, 0x70bd28, 0x25dfdbfc, {0x6, 0x6, 0xe3, 0x8, {0x4e20, 0x4e24, [0x0, 0x1, 0x2c16160e, 0x3fc], [0x7, 0x9, 0x4], r3, [0x100, 0x1]}, 0x8, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "6faba83cf4155a87fd5de4d5ed7963dda92dc7cbf184c65a18d3b7e86bab6a84d50059bd01fd1089502fd812c5d483c744d994b4b72bad728a27d09a51fbc3b07856487d30872c351e3e803ce057bd382934716a6609aa17f5e0bb7878ffb39bae623e7d1d9169548d6ae0811031a787cb44b02fdf804be50bf4b9063f139d4353cf0ef9c89ad24b9b5536e13490fd30be93dc"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "4060f9c795bf1a6ac55bb5cc59dad6f3a61b52fbbf4fded608dad630a483ef281ba00649499fbaa1bdadf6b21dfe1f3382543396b86609ebd4c139004e200a20812c72006f76fadbd05de51540d2e6e73e803e30d9d3bd72224390327467a46fa25f09944cf45c434a1bff4e48319e2682083d153a1cbc79d7cb264aa4b2eca5ea86dab238b4d87f62cb0c01c22be8edfabfed80c9dee4145c99800eeac14740"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "a80827154a0fa750a9378dadcc6de9756841afa851d2fc8e498c2faf58e267ae9aac105960c48465fc183ff2a1113968500c54d4152f3ef4c95a0d3d4e3dc34e83725149027da01adbf49db39606c4d0b70886de4f8a972f9ee9c9ec9e07c768e7aae5330f1ac135e6a422ef9cd4abc0a9f1083504a74b1893819950"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "fc98416535f889b38ac625302ecfeca8f563d3a3a084621d5fba07836649b2a598728c66eb10334f12996b9eaacdfca9d3c22a915d2b1305b65b0cb754a222a67688b80b8fe21a67a4ba8a2315b786a6e039e205197b839a37c646d1e360d1ad4cdc42ea9da4ce6f3636be6ba0c508e035a2170c90b07d3e567acbd68605c2df04"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "8c6f375225d82854ccfb1c764d5ec7a37de414eaeb9c672c838ba771049dd1454558c774db4ae48bdf7ed0d0285e4c7bbe3e51"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "45f933200322c18b935c0706002d2b12a403c4370491c974490d50030fd7b7cc4edc6a06ccf6c500921c1c4f9919c5d92bc65f9b689c88466f0b2f85529510a0a5fd621b60e8fc1bb2d899f38dbc847b8df15248a44996cc0659d51ff8c8a237434a9ab4d8308292dbf39602ba49889045d9d2862e80cf4dbad8f4206b04a7d39d79dd7c8d1d7af2dcbe35e3e8f82512ce9128be54d881d508616781d532b6a6d9638e159bd1e18c860b887fd13281dccecd08b5eb0d1ac94b0694a481e097efc87323563d6984"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "fb6c674ea6c884837f"}]}, 0x13ac}, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = accept$netrom(r4, &(0x7f0000000500)={{0x3, @null}, [@default, @null, @rose, @netrom, @bcast, @default, @default, @netrom]}, &(0x7f00000019c0)=0x48) accept4$netrom(r5, &(0x7f0000001a00)={{0x3, @default}, [@bcast, @bcast, @netrom, @default, @null, @bcast, @rose, @default]}, &(0x7f0000001a80)=0x48, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) r7 = socket(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x80800) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000340)={'raw\x00', 0x80, "dd0c1073cc788fbda8272b5fd29beae520c1d48608cb7845d0f69e6993bb725115a87ed44932b190a4ee0631b6f8b6a2d50b6501597d8cc2e934a45faca3757c141e7ec1f16ab901aca105d853c4e045b4918ad9fab33bb0582436808e04229c712dd65f702aa4e84e691a4dd58d3824aa90f740210d3738bca0996a3cc027a6"}, &(0x7f0000000400)=0xa4) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x6044) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x80000, 0x4) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) 4.21917242s ago: executing program 4 (id=4546): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xb, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101480, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRES64=r1, @ANYRES32=r5, @ANYRES32=r3], 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0501ffffffff030000002e00000008000300", @ANYRES32=r9, @ANYBLOB="175b6133ed57b536cbb8f4f020ba15b15aeecea25a356cccbe59ec206b43834b296989fd7e5dc3d46eea7baa28af3d88fd2e0afb58495556cb97388ed79b0780ff1ecd10ca21e089c001e12d77d506f43b012a67150db4d655859fc0367965a8a1c4dc35785edbbfa5a95fe3bf6c97d9"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24004050) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r11 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r11, 0x40106183, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', 0x102e}) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000800008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.230848339s ago: executing program 3 (id=4559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x2000000f}) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000007f190001000000000000000000021800000000ff000000000008000100ac1414000c000900"], 0x30}}, 0x0) 3.130067217s ago: executing program 3 (id=4563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8cffff0700"/20], 0x14}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote, 'macvlan1\x00'}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000006400000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(r4, &(0x7f0000003740)=[{{&(0x7f0000000280), 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/101, 0x65}], 0x5, &(0x7f0000000700)=""/159, 0x9f}, 0x3}, {{&(0x7f00000007c0)=@un=@abs, 0x80, &(0x7f0000000100)=[{&(0x7f0000000840)=""/121, 0x79}], 0x1, &(0x7f00000008c0)=""/176, 0xb0}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/86, 0x56}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000a00)=""/2, 0x2}, {&(0x7f0000000a40)=""/179, 0xb3}, {&(0x7f0000000b00)=""/23, 0x17}, {&(0x7f0000000b40)=""/150, 0x96}], 0x6, &(0x7f0000000c80)=""/40, 0x28}, 0xd457}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/150, 0x96}, {&(0x7f0000000d80)=""/22, 0x16}], 0x2, &(0x7f0000000e00)=""/88, 0x58}, 0x4}, {{&(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000f00)=""/112, 0x70}, {&(0x7f0000000f80)=""/186, 0xba}, {&(0x7f0000001080)=""/254, 0xfe}, {&(0x7f0000001180)=""/45, 0x2d}, {&(0x7f00000011c0)=""/204, 0xcc}, {&(0x7f00000012c0)=""/196, 0xc4}, {&(0x7f00000013c0)=""/28, 0x1c}], 0x7, &(0x7f0000001480)=""/4096, 0x1000}, 0xb2a}, {{&(0x7f0000002480)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002500)=""/249, 0xf9}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)=""/133, 0x85}], 0x1, &(0x7f0000002740)=""/4096, 0x1000}, 0x7f}], 0x7, 0x1, &(0x7f0000003900)={0x77359400}) pselect6(0x40, &(0x7f0000000040)={0x5, 0x5, 0x9, 0x80, 0x2, 0xc, 0x2000000000000009, 0x3}, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'batadv_slave_0\x00', @remote}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) write$bt_hci(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) 1.948119284s ago: executing program 0 (id=4577): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80800) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f00000003c0)=""/225, 0xe1}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="0200260b0a000200aaaaaaaaaabb000008000f00fb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1.940353439s ago: executing program 3 (id=4578): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020202000900030073797a3100000000090001"], 0x40}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa884}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6f2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3d3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2101, 0x0) close(r7) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0)=0x40, 0x4) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000000440)) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xa, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x38}}, 0x4080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.802328539s ago: executing program 0 (id=4580): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {0x3, 0xc}, {0xb, 0xb}}, [{0x8, 0xb, 0x3ba}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xa, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r3) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$unix(0x1, 0x2, 0x0) 1.615065722s ago: executing program 3 (id=4582): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x2, 0x4, 0x3, 0x6, 0x7fffffff, 0xfffffff7, 0x3, r2}, &(0x7f0000000200)=0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x20000090) 1.606696338s ago: executing program 0 (id=4583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000140)=0x38) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x2b, 0x0, &(0x7f00000003c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x1, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='vcan0\x00', 0x4, 0xa1}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x5c, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {0xfff2, 0xe}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 1.523246158s ago: executing program 3 (id=4584): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000d0a01030000000000000000050000000900020073797a32000000000900020073797a320000000008000440000000000900010073797a30000000000800144000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x30) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x10}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044040}, 0x4004020) 1.371174439s ago: executing program 0 (id=4586): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df75e3ffe46630d4a1741b1554dd5a55e66eaecea76d5d174c21eea8e02493ac4beba5ab57d22b47f9e9db8fb29de336d8af9753fcd0c84e77c8802ffa8bc448d6c1ab4894bf471b20dc769a5e517a269f117ee", 0x86, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)) 1.300878872s ago: executing program 1 (id=4587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000040000000060a010400000000000000000500000008000b400000000018000480140001800b00010074806e6e656c0000040002800900010073797a300000000014000000110001f481639ee849f4cb000000000a"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.200465841s ago: executing program 0 (id=4588): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/233, &(0x7f0000000100)=0xe9) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000140)={0x0, {0x8, 0x7, 0x4, 0x6, 0x6c7}}) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/84, 0x54}], 0x3, 0x5, 0x8) (async) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0)={0x27, 0x0}, &(0x7f0000000440)=0x60) getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f0000000480)=""/173, 0xad) (async) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000540)={0x2, 'syz1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}}, 0x2850) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000680)={{0xa, 0x4e24, 0x4, @mcast1, 0x68cd}, {0xa, 0x4e21, 0xda29, @empty, 0x1}, 0xffffffffffffffff, {[0xce, 0x7, 0x6, 0x771, 0xd11, 0x4d, 0x3a, 0x6]}}, 0x5c) (async) r4 = socket$inet(0x2, 0x3, 0x7fffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x500, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000840)={'vxcan1\x00'}) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x154, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbaf7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5aa}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8}, 0x844) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000b00)={0x2, 0x4e24, @remote}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000b40)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000b80)={@initdev, @multicast2}, &(0x7f0000000bc0)=0xc) (async) r9 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000d00)=0xe8) (async) r11 = getgid() setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000d40)={r9, r10, r11}, 0xc) (async) r12 = socket(0x1f, 0x80000, 0x2) (async, rerun: 64) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000d80)={0x10000, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x0, 0x8, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e20, @loopback}}]}, 0x490) (rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000001240)={0x7, 'hsr0\x00', {0x1}, 0x55}) (async, rerun: 32) setsockopt$inet6_tcp_TLS_RX(r12, 0x11a, 0x2, &(0x7f0000001280)=@gcm_128={{0x303}, "486ec64673dd8bee", "14c4c9322adf9fd27d3991ce4f5ea92e", "37df4bdb", "2cd0bc62cbf9a799"}, 0x28) (rerun: 32) 950.585517ms ago: executing program 1 (id=4589): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) (async) 948.70424ms ago: executing program 0 (id=4590): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000780), 0x0, 0x24040851) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.events\x00', 0x7a05, 0x1700) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x5}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa070056698cc681001000080045b4002800000000a3069078ac1414bfac1414aa4e224001", @ANYRES32, @ANYRESOCT=r6, @ANYRES8=r0], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x10, 0x803, 0x7) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff1}}, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r2], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)}, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"c959", 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x5}, {0x3, 0x0, 0x7}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x27}, @remote, [0x0, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0xff000000], 'syzkaller1\x00', 'syzkaller1\x00', {}, {}, 0x88, 0x6, 0x1, 0xd}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000500ffffff0500feff000000109500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 903.663264ms ago: executing program 2 (id=4591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000130a0102"], 0x14}}, 0x0) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x9}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00010100000000000000000080"], 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x70bd25, 0x25dfdbfc, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@rand_addr=0x64010102, 0x0, 0x3c}, @in=@local, {0x200000, 0x8, 0x0, 0x0, 0x5, 0xffffffffffffd3e7}, {}, {0x40}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000000)=0x6, 0x4) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x10}, {0xffff, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x44000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r10}, 0x8) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000380)={'syzkaller0\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) 876.804717ms ago: executing program 1 (id=4592): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x5}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x401) listen(r5, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="412b03cc7610da9f9a95579d4b53a871f19d569cbc1776838072fdb59a85e7a20dad7c5f2013e4f16f5324fd8861adeec3bfee16043c8a131d4e55c0c6dc8be932b51cacca3ad56faef40625ae0c134f61b6b14d1454ce4090277d8c3226339fa8dbf3132d54d5", @ANYBLOB="e30ea53401f343e5bc715751ec4e87454d63e91ecc004098b91854ca49c8209ff8c1217c3121c05036facd28d65c5e18f0ab34cc9364bd1940f630879fe0b7ef80b7e603552ca029263f89b1d71466e43dc16d658196a0173243c36b819342bb3d4b863b098fef64629c6a5829ad63d93c0aae5b94751d31c548b93b0aad7f", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES64=r1], 0x12) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r3, 0x77, "b42d3e64c288b5cfb4b9c52bd4eb75484dec4e274960ece869afb5fbde541a1eb0bc35bd4dd5b17b535d3cbbd0588089e35a003bc78146eb74090c819514bd7dbaf0eedad502e25a90433addb323b12aeddd4d9d9b12e58c8014fefb9f5228756a215d59e2e82e3a2810875066cc3a01f40f2960b06dc0"}, &(0x7f0000000100)=0x7f) r6 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r6, 0x8943, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r8, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 628.774009ms ago: executing program 1 (id=4593): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_deladdr={0x50, 0x15, 0x10, 0x70bd27, 0x25dfdbfe, {0xa, 0x1, 0x2, 0xfd, r1}, [@IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x400409, 0x9, 0x800, 0x7}}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x50}}, 0x0) 608.809926ms ago: executing program 2 (id=4594): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x40010) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) (async) socket$inet6(0xa, 0x5, 0x1) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) listen(0xffffffffffffffff, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814) socket$key(0xf, 0x3, 0x2) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x8, 0x1f8, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private2, [0xffff00, 0xffffff00, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xff000000, 0xd4f83f6004a958b1, 0xffffff00], @ipv4=@local, [0xffffff00, 0xff, 0xb03b5fbda16b5e78, 0xffffffff], @ipv6=@remote, [0xff000000, 0xff, 0xffffffff, 0xffffff00], 0xd, 0x8000, 0x29, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x32b, 0x1c32}, 0x80, 0x1c01}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001000)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x0, 0x4e23, 0x6, 0xa, 0x80, 0x20, 0x33, 0x0, 0xffffffffffffffff}, {0x918f, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x80000001, 0xfe}, {0xb9f8, 0x3, 0x9, 0x1e20}, 0x10001, 0x6e6bba, 0x1, 0x1, 0x3, 0x3}, {{@in=@rand_addr=0x64010100, 0x4cf, 0x3c}, 0xa, @in6=@remote, 0x3506, 0x0, 0x1, 0x78, 0x81, 0x10001, 0x5}}, 0xe8) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025d4480e23514beb1f00030000000000", @ANYRES32=r7, @ANYBLOB="0800270002000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r9, 0x4, 0x0, 0xff, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7806, 0x700, 0x67a7, 0x32}}) (async) socket$nl_route(0x10, 0x3, 0x0) 582.439626ms ago: executing program 1 (id=4595): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x370, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x4}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x340, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x39}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x800}]}}]}, 0x370}}, 0x8800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 410.358738ms ago: executing program 2 (id=4596): socket(0x10, 0x3, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (async) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x0, 0x0) 409.006459ms ago: executing program 1 (id=4597): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x44) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4110, 0x100e}], 0x1}, 0x0) (async, rerun: 64) r5 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) sendmsg$nl_crypto(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000100001000000000000000000647262675f70725f686d61635f73686133383400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053a9cb65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a73d99a793f5c670f14826a963300afe4c55f067ac0747578569d8261731776bac621b3965"], 0xe0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x11, 0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) 199.006636ms ago: executing program 2 (id=4598): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 162.661783ms ago: executing program 4 (id=4599): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}], 0x1}}], 0x1, 0x4008440) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) tee(r4, r5, 0x528, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000009c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000940)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/240, 0xf0, 0x0, &(0x7f0000000800)=""/196, 0xc4}, &(0x7f0000000980)=0x40) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 74.770271ms ago: executing program 2 (id=4600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfd, {0x80, 0x20, 0x14, 0xd8, 0xff, 0x0, 0xc8, 0xa, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r4}, 0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x3}, 0x8) 73.722836ms ago: executing program 4 (id=4601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x30, 0x48, 0x2, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x10, 0x0, r5, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x4008000) 72.993877ms ago: executing program 3 (id=4602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001400000000deffff0000000001000000", @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x48}}], 0x2, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x42, 0x0, &(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x60, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x60}}, 0x20000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x8, 0x4) 0s ago: executing program 2 (id=4603): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x4000}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) (async) write(r0, &(0x7f0000000200)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x6fb8651b) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20050800) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_REMOVE(r6, 0x0, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000300)=""/148, &(0x7f00000000c0)=0x94) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000600908be021d88c53f6e3d286"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) kernel console output (not intermixed with test programs): slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.482068][T16318] xt_limit: Overflow, try lower: 271964/0 [ 300.775283][T16220] chnl_net:caif_netlink_parms(): no params data found [ 300.842861][T16337] 8021q: VLANs not supported on ip6_vti0 [ 301.029687][T16220] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.038124][T16220] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.046054][T16220] bridge_slave_0: entered allmulticast mode [ 301.055362][T16220] bridge_slave_0: entered promiscuous mode [ 301.055680][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 301.064347][T16220] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.080709][T16220] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.088182][T16220] bridge_slave_1: entered allmulticast mode [ 301.095867][T16220] bridge_slave_1: entered promiscuous mode [ 301.211938][T16220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.230903][T16220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.309879][T16220] team0: Port device team_slave_0 added [ 301.332934][T16220] team0: Port device team_slave_1 added [ 301.391113][T16220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.398631][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.442159][T16220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.462287][T16220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.470125][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.498472][T16220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.554190][T16220] hsr_slave_0: entered promiscuous mode [ 301.561316][T16220] hsr_slave_1: entered promiscuous mode [ 301.569441][T16220] debugfs: 'hsr0' already exists in 'hsr' [ 301.575322][T16220] Cannot create hsr debugfs directory [ 301.656501][T16377] openvswitch: netlink: Duplicate or invalid key (type 0). [ 301.666604][T16377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.899957][T16220] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.956816][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.964538][T16220] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.964893][ C1] lec:lec_tx_timeout: lec0 [ 301.980349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.045912][T16220] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.110882][T16220] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.149226][ T5843] Bluetooth: hci1: command tx timeout [ 302.461384][T16220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.513763][T16220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.565562][T16220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.607321][T16427] netlink: 'syz.0.2924': attribute type 5 has an invalid length. [ 302.630352][T16220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 302.670752][T16427] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2924'. [ 302.682943][T16427] IPVS: set_ctl: invalid protocol: 136 10.1.1.0:20001 [ 302.819321][T16449] gtp1: entered promiscuous mode [ 302.840415][T16449] gtp1: entered allmulticast mode [ 302.935789][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 303.124471][T16220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.200543][T16220] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.213232][T16470] sctp: [Deprecated]: syz.0.2934 (pid 16470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.213232][T16470] Use struct sctp_sack_info instead [ 303.239407][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.246602][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.288844][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.296044][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.314486][T16478] netlink: 'syz.2.2936': attribute type 2 has an invalid length. [ 303.336489][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 303.363390][T16478] netlink: 'syz.2.2936': attribute type 2 has an invalid length. [ 303.372278][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 303.812884][T16477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.847911][T16477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.227176][ T5843] Bluetooth: hci1: command tx timeout [ 304.265142][T16477] bond12: left promiscuous mode [ 304.273459][T16477] bridge3: left promiscuous mode [ 304.321812][T16480] bond10: (slave C): Releasing backup interface [ 304.337968][T16480] bond10: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 304.351191][T16480] team0: left allmulticast mode [ 304.356265][T16480] team_slave_0: left allmulticast mode [ 304.363522][T16480] team_slave_1: left allmulticast mode [ 304.370425][T16480] geneve0: left allmulticast mode [ 304.375606][T16480] team0: left promiscuous mode [ 304.380926][T16480] team_slave_0: left promiscuous mode [ 304.386672][T16480] team_slave_1: left promiscuous mode [ 304.393090][T16480] geneve0: left promiscuous mode [ 304.400211][T16480] bridge0: port 2(team0) entered disabled state [ 304.410253][T16480] bridge_slave_0: left promiscuous mode [ 304.416501][T16480] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.428419][T16480] bond0: (slave bond_slave_0): Releasing backup interface [ 304.437728][T16480] team0: Port device team_slave_0 removed [ 304.445066][T16480] team0: Port device team_slave_1 removed [ 304.452090][T16480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.460477][T16480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.470697][T16480] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.895754][ T6257] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.904918][ T6257] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.914161][ T6257] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.923340][ T6257] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.945558][T16496] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 305.980906][T16507] syzkaller1: entered promiscuous mode [ 305.988414][T16507] syzkaller1: entered allmulticast mode [ 305.996004][ T6257] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.006915][ T6257] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.016155][ T6257] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.052311][ T6257] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.195074][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 306.309848][ T5843] Bluetooth: hci1: command tx timeout [ 306.439701][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2949'. [ 306.490520][T16545] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 306.646963][T16552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2951'. [ 306.727881][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.789501][T16220] veth0_vlan: entered promiscuous mode [ 306.827692][T16220] veth1_vlan: entered promiscuous mode [ 306.889385][T16560] can: request_module (can-proto-0) failed. [ 306.892822][T16220] veth0_macvtap: entered promiscuous mode [ 306.905922][T16220] veth1_macvtap: entered promiscuous mode [ 306.973919][T16220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.986867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 306.994917][ C1] lec:lec_tx_timeout: lec0 [ 307.000285][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.009833][T16569] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2958'. [ 307.012408][T16220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.062384][ T164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.084456][ T164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.118827][T16569] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2958'. [ 307.135139][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.149324][ T164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.376160][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.394807][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.455616][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.464461][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.580644][T16600] netlink: 'syz.4.2971': attribute type 11 has an invalid length. [ 307.594266][T16600] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2971'. [ 307.608570][T16602] netlink: 'syz.4.2971': attribute type 11 has an invalid length. [ 307.617532][T16602] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2971'. [ 307.699846][T16607] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2860'. [ 307.781288][T16615] netlink: 'syz.2.2970': attribute type 3 has an invalid length. [ 308.156693][T16636] netlink: 'syz.4.2978': attribute type 1 has an invalid length. [ 308.173219][T16636] netlink: 'syz.4.2978': attribute type 2 has an invalid length. [ 308.390300][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2983'. [ 308.544067][T16648] No such timeout policy "syz0" [ 308.644637][T16653] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2985'. [ 308.924440][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.933981][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.952942][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.006443][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.037923][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.162340][T16664] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 309.312789][T16688] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 309.895195][T16723] : entered promiscuous mode [ 309.938982][T16664] lo speed is unknown, defaulting to 1000 [ 310.391037][T16754] : renamed from hsr0 (while UP) [ 310.621417][T16768] netlink: 'syz.2.3008': attribute type 23 has an invalid length. [ 310.650937][T16767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.689270][T16768] wireguard0: entered promiscuous mode [ 310.694783][T16768] wireguard0: entered allmulticast mode [ 310.738550][T16768] team0: Port device wireguard0 added [ 310.766144][T16664] chnl_net:caif_netlink_parms(): no params data found [ 310.768389][T16773] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.979874][T16664] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.002408][T16664] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.020563][T16664] bridge_slave_0: entered allmulticast mode [ 311.038997][T16664] bridge_slave_0: entered promiscuous mode [ 311.061214][T16664] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.078125][T16664] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.095679][T16664] bridge_slave_1: entered allmulticast mode [ 311.108044][ T5850] Bluetooth: hci2: command tx timeout [ 311.117560][T16664] bridge_slave_1: entered promiscuous mode [ 311.292070][T16664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.340818][T16664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.414989][T16799] __nla_validate_parse: 5 callbacks suppressed [ 311.415009][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 311.475927][T16664] team0: Port device team_slave_0 added [ 311.517449][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3017'. [ 311.535282][T16664] team0: Port device team_slave_1 added [ 311.595340][T16806] tipc: Started in network mode [ 311.602629][T16806] tipc: Node identity 6eddedff2e34, cluster identity 4711 [ 311.610635][T16806] tipc: Enabled bearer , priority 0 [ 311.661382][T16807] syzkaller0: entered promiscuous mode [ 311.673320][T16807] syzkaller0: entered allmulticast mode [ 311.695745][T16664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.713564][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.766916][T16664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.779556][T16807] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 311.816554][T16664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.836559][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.865809][T16664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.881032][T16806] tipc: Resetting bearer [ 311.902730][T16819] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3021'. [ 311.971835][T16805] tipc: Resetting bearer [ 312.006827][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 312.014895][ C1] lec:lec_tx_timeout: lec0 [ 312.020075][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.031084][T16805] tipc: Disabling bearer [ 312.154673][T16664] hsr_slave_0: entered promiscuous mode [ 312.165566][T16664] hsr_slave_1: entered promiscuous mode [ 312.172691][T16664] debugfs: 'hsr0' already exists in 'hsr' [ 312.178507][T16664] Cannot create hsr debugfs directory [ 312.396673][T16841] bond1: option lp_interval: invalid value (0) [ 312.404347][T16841] bond1: option lp_interval: allowed values 1 - 2147483647 [ 312.414667][T16841] bond1 (unregistering): Released all slaves [ 312.519240][T16664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.539552][T16853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 312.573894][T16853] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3031'. [ 312.606633][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3032'. [ 312.624473][T16664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.746010][T16664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.843832][T16664] netdevsim netdevsim0 v (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.977386][T16877] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 312.984792][T16877] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 313.102915][T16881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.158187][T16889] netlink: 'syz.1.3043': attribute type 21 has an invalid length. [ 313.169756][T16885] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.186984][ T5850] Bluetooth: hci2: command tx timeout [ 313.253393][T16889] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 313.268964][T16889] bond14 (unregistering): Released all slaves [ 313.370485][T16892] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 313.460829][T16664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.486137][T16664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.509427][T16664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.531374][T16664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.533403][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'. [ 313.777014][T16915] sctp: [Deprecated]: syz.1.3049 (pid 16915) Use of int in maxseg socket option. [ 313.777014][T16915] Use struct sctp_assoc_value instead [ 313.813943][T16664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.819759][T16918] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3050'. [ 313.859728][T16664] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.885446][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.892771][T16671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.935445][T16667] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.942690][T16667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.960104][ T30] audit: type=1107 audit(1764902790.057:7): pid=16919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 313.985172][ T30] audit: type=1107 audit(1764902790.057:8): pid=16919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¶½);PHŠÏì¦ †©g‘Öó³ô' [ 314.061732][T16892] lo speed is unknown, defaulting to 1000 [ 314.140413][T16920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3052'. [ 314.422864][T16942] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3054'. [ 314.612026][T16664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.724465][T16664] veth0_vlan: entered promiscuous mode [ 314.776079][T16664] veth1_vlan: entered promiscuous mode [ 314.856193][T16664] veth0_macvtap: entered promiscuous mode [ 314.891078][T16664] veth1_macvtap: entered promiscuous mode [ 314.961364][T16664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.994697][T16664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.041205][ T1319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.071068][ T1319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.100852][ T1319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.140031][ T1319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.268667][ T5850] Bluetooth: hci2: command tx timeout [ 315.346030][T16674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.349035][T16979] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 315.368871][T16674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.545329][ T6261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.578028][ T6261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.775392][T17001] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 315.798791][T17001] netlink: 'syz.0.2981': attribute type 2 has an invalid length. [ 316.320554][T17025] Cannot find del_set index 4 as target [ 316.433675][T17027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.493451][T17031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.560425][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.569839][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.586916][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.596504][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.608074][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.625845][T17034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.671693][T17009] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 316.771242][T17041] __nla_validate_parse: 2 callbacks suppressed [ 316.771262][T17041] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3084'. [ 316.832401][T16674] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.868249][T16674] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.890529][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 316.991336][T16674] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.012982][T16674] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.026921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 317.035030][ C1] lec:lec_tx_timeout: lec0 [ 317.040320][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.092634][T16674] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.127156][T16674] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.190511][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.228234][T17054] netlink: 'syz.3.3087': attribute type 2 has an invalid length. [ 317.249335][T16674] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.259811][T16674] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.291738][T17054] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3087'. [ 317.347213][ T5850] Bluetooth: hci2: command tx timeout [ 317.374002][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 317.406195][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 317.698085][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3095'. [ 317.777825][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.788392][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.796964][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.805713][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.813890][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.856441][T17083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.310692][T16674] dvmrp6 (unregistering): left allmulticast mode [ 318.328739][T16674] dvmrp0 (unregistering): left allmulticast mode [ 318.392527][T16674] bridge0 (unregistering): left allmulticast mode [ 318.735059][T16674] bond0 (unregistering): Released all slaves [ 318.755949][T16674] bond1 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface [ 318.765149][T16674] bond1 (unregistering): (slave ÿÿÿÿÿÿ): last VLAN challenged slave left bond - VLAN blocking is removed [ 318.781868][T16674] bond1 (unregistering): Released all slaves [ 318.882051][T16674] bond2 (unregistering): Released all slaves [ 318.894537][T16674] bond3 (unregistering): Released all slaves [ 318.908266][T16674] bond4 (unregistering): Released all slaves [ 318.920540][T16674] bond5 (unregistering): Released all slaves [ 318.932826][T16674] bond6 (unregistering): Released all slaves [ 319.040848][T16674] bond7 (unregistering): Released all slaves [ 319.143220][T16674] bond8 (unregistering): Released all slaves [ 319.157723][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 319.259741][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 319.293317][T17112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3102'. [ 319.338052][T16674] : left promiscuous mode [ 319.347994][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 319.444221][T17079] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 319.483068][T16674] tipc: Left network mode [ 319.608699][T17127] ip6gre0: Master is either lo or non-ether device [ 319.649726][T17129] netlink: 'syz.4.3109': attribute type 1 has an invalid length. [ 319.809084][T17129] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 319.907547][ T5850] Bluetooth: hci0: command tx timeout [ 319.988466][T17079] lo speed is unknown, defaulting to 1000 [ 320.156616][T17157] netlink: 'syz.0.3117': attribute type 30 has an invalid length. [ 320.366991][T17184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.414362][T17182] pimreg: entered allmulticast mode [ 320.572264][T17180] pimreg: left allmulticast mode [ 320.614625][T17194] netlink: 'syz.1.3126': attribute type 1 has an invalid length. [ 320.624368][T17194] netlink: 'syz.1.3126': attribute type 9 has an invalid length. [ 320.789333][T16674] hsr_slave_0: left promiscuous mode [ 320.796094][T16674] hsr_slave_1: left promiscuous mode [ 320.863899][T16674] team0 (unregistering): Port device wireguard0 removed [ 321.485781][ T6257] smc: removing ib device sz1 [ 321.637012][T17199] bridge_slave_1: left allmulticast mode [ 321.642697][T17199] bridge_slave_1: left promiscuous mode [ 321.685672][T17199] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.749385][T17199] bridge_slave_0: left allmulticast mode [ 321.765360][T17199] bridge_slave_0: left promiscuous mode [ 321.804290][T17199] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.989550][ T5850] Bluetooth: hci0: command tx timeout [ 322.046807][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.054889][ C1] lec:lec_tx_timeout: lec0 [ 322.059508][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.294079][T10391] IPVS: starting estimator thread 0... [ 322.394974][T17228] : renamed from bond_slave_0 [ 322.417931][T17226] IPVS: using max 35 ests per chain, 84000 per kthread [ 322.454728][T17230] __nla_validate_parse: 4 callbacks suppressed [ 322.454746][T17230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3135'. [ 322.493595][T17234] netlink: 'syz.4.3137': attribute type 1 has an invalid length. [ 322.518523][T17230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3135'. [ 322.533674][T17234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.589847][T17234] netlink: 'syz.4.3137': attribute type 15 has an invalid length. [ 322.907506][T17079] chnl_net:caif_netlink_parms(): no params data found [ 322.939298][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 323.382718][T17079] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.390251][T17079] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.398241][T17079] bridge_slave_0: entered allmulticast mode [ 323.408945][T17079] bridge_slave_0: entered promiscuous mode [ 323.439169][T17079] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.446625][T17079] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.454075][T17079] bridge_slave_1: entered allmulticast mode [ 323.479299][T17079] bridge_slave_1: entered promiscuous mode [ 323.706424][T17283] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3146'. [ 323.765324][T17281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3146'. [ 323.785323][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 323.952832][T17079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.014889][T17286] chnl_net:caif_netlink_parms(): no params data found [ 324.071365][ T5850] Bluetooth: hci0: command tx timeout [ 324.219682][T17079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.253100][T17309] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.267986][T17275] lo speed is unknown, defaulting to 1000 [ 324.445398][T17079] team0: Port device team_slave_0 added [ 324.460061][T17079] team0: Port device team_slave_1 added [ 324.568881][T17079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.575847][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.603934][T17079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.624421][T17323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3153'. [ 324.673848][T17079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.705743][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.770180][T17079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.818473][T17324] syzkaller1: entered promiscuous mode [ 324.824098][T17324] syzkaller1: entered allmulticast mode [ 324.929222][T16674] IPVS: stop unused estimator thread 0... [ 324.930889][T17336] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3158'. [ 324.987957][T17079] hsr_slave_0: entered promiscuous mode [ 324.994313][T17079] hsr_slave_1: entered promiscuous mode [ 325.017800][T17079] debugfs: 'hsr0' already exists in 'hsr' [ 325.026201][T17079] Cannot create hsr debugfs directory [ 325.071293][T17345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3160'. [ 325.315588][T17356] sctp: [Deprecated]: syz.0.3164 (pid 17356) Use of int in max_burst socket option. [ 325.315588][T17356] Use struct sctp_assoc_value instead [ 325.537405][T17366] bond1: option min_links: invalid value (18446744073709551614) [ 325.545174][T17366] bond1: option min_links: allowed values 0 - 2147483647 [ 325.555955][T17366] bond1 (unregistering): Released all slaves [ 325.593450][T17368] veth0: entered promiscuous mode [ 325.607542][T17370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.633689][T17374] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 325.642717][T17374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.671026][T17365] veth0: left promiscuous mode [ 325.779617][T17384] xt_l2tp: missing protocol rule (udp|l2tpip) [ 325.962839][T17392] bond1: entered promiscuous mode [ 325.970025][T17392] bond1: entered allmulticast mode [ 325.982263][T17392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.080667][T17392] bond2: entered promiscuous mode [ 326.085738][T17392] bond2: entered allmulticast mode [ 326.105273][T17392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.149105][ T5843] Bluetooth: hci0: command tx timeout [ 326.184983][T17398] vlan0: entered allmulticast mode [ 326.212870][T17398] hsr0: entered allmulticast mode [ 326.218490][T17398] hsr_slave_0: entered allmulticast mode [ 326.225083][T17398] hsr_slave_1: entered allmulticast mode [ 326.266595][T17409] block nbd0: NBD_DISCONNECT [ 326.348313][T17414] bridge_slave_0: entered promiscuous mode [ 326.420669][T17414] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3180'. [ 326.788872][ T25] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 180 seconds [ 326.799775][ T25] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 180 seconds [ 326.810921][ T25] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 180 seconds [ 326.821982][ T25] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 180 seconds [ 327.066895][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.069394][T17409] block nbd0: Send disconnect failed -512 [ 327.074950][ C1] lec:lec_tx_timeout: lec0 [ 327.075112][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.085602][T17409] block nbd0: Disconnected due to user request. [ 327.099635][T17409] block nbd0: shutting down sockets [ 327.112608][T17079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.186523][T17079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.220687][T17079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.240513][T17079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.496584][T17456] __nla_validate_parse: 3 callbacks suppressed [ 327.496602][T17456] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3195'. [ 327.515114][T17456] block nbd0: not configured, cannot reconfigure [ 327.610362][T17079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.670713][T17459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3197'. [ 327.677596][T17079] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.733575][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.740805][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.790653][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.797892][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.987240][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 328.027825][T17481] netlink: 'syz.3.3199': attribute type 11 has an invalid length. [ 328.320679][T17495] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 328.399736][T17079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.501468][T17079] veth0_vlan: entered promiscuous mode [ 328.529542][T17079] veth1_vlan: entered promiscuous mode [ 328.597312][T17079] veth0_macvtap: entered promiscuous mode [ 328.638238][T17079] veth1_macvtap: entered promiscuous mode [ 328.699659][T17079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.714421][T17519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 328.723332][T17079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.741189][T17522] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 328.746683][ T6257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.764570][T17519] netlink: 'syz.1.3213': attribute type 7 has an invalid length. [ 328.774394][T17519] netlink: 'syz.1.3213': attribute type 8 has an invalid length. [ 328.783625][ T6257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.794607][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'. [ 328.833564][T17519] gretap0: entered promiscuous mode [ 328.852104][T17519] batadv_slave_1: entered promiscuous mode [ 328.872296][T17519] gretap0: left promiscuous mode [ 328.882240][T17532] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3216'. [ 328.897864][T17519] batadv_slave_1: left promiscuous mode [ 328.924748][ T6257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.949566][ T6257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.973242][T17539] netlink: 'syz.3.3216': attribute type 11 has an invalid length. [ 329.124580][T17543] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 329.159269][T17553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3224'. [ 329.406271][T17562] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3228'. [ 329.482317][T16671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.490699][T16671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.597767][T16674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.628120][T17577] pimreg: entered allmulticast mode [ 329.633610][T16674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.847003][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3237'. [ 329.966513][T17600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3238'. [ 329.987307][T17600] Bluetooth: MGMT ver 1.23 [ 330.224336][T17610] team0: Port device team_slave_0 removed [ 330.640940][T17635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.701919][T17628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.157661][T17654] netlink: 'syz.4.3254': attribute type 4 has an invalid length. [ 331.244751][T17654] `: renamed from bond0 (while UP) [ 331.283138][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.296284][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.304479][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.312541][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.320232][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.363373][T17665] bridge0: port 3(syz_tun) entered blocking state [ 331.380515][T17665] bridge0: port 3(syz_tun) entered disabled state [ 331.390052][T17665] syz_tun: entered allmulticast mode [ 331.398404][T17665] syz_tun: entered promiscuous mode [ 331.404931][T17665] bridge0: port 3(syz_tun) entered blocking state [ 331.408656][T17661] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 331.411816][T17665] bridge0: port 3(syz_tun) entered forwarding state [ 331.429573][T17658] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 331.489788][T17667] pim6reg1: entered promiscuous mode [ 331.495103][T17667] pim6reg1: entered allmulticast mode [ 331.579131][T17675] openvswitch: netlink: IP tunnel dst address not specified [ 331.579131][T17676] openvswitch: netlink: IP tunnel dst address not specified [ 331.610047][T17678] bridge0: port 4(ipvlan2) entered blocking state [ 331.616653][T17678] bridge0: port 4(ipvlan2) entered disabled state [ 331.624742][T17678] ipvlan2: entered allmulticast mode [ 331.635663][T17678] bridge0: entered allmulticast mode [ 331.644369][T17678] ipvlan2: left allmulticast mode [ 331.651134][T17678] bridge0: left allmulticast mode [ 331.680244][T17663] lo speed is unknown, defaulting to 1000 [ 332.098576][T17707] sctp: [Deprecated]: syz.4.3266 (pid 17707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.098576][T17707] Use struct sctp_sack_info instead [ 332.187168][T17663] chnl_net:caif_netlink_parms(): no params data found [ 332.508131][T17729] team0: No ports can be present during mode change [ 332.518838][T17663] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.526060][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.542161][T17663] bridge_slave_0: entered allmulticast mode [ 332.569299][T17663] bridge_slave_0: entered promiscuous mode [ 332.600603][T17663] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.611838][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.619867][T17663] bridge_slave_1: entered allmulticast mode [ 332.631608][T17663] bridge_slave_1: entered promiscuous mode [ 332.704222][T17663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.731346][T17663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.784059][T17663] team0: Port device team_slave_0 added [ 332.794164][T17663] team0: Port device team_slave_1 added [ 332.866805][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 332.874997][ C1] lec:lec_tx_timeout: lec0 [ 332.879884][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.886900][T17663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.893886][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.922383][T17663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.957125][T17663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.964186][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.996504][T17663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.178584][T17755] __nla_validate_parse: 6 callbacks suppressed [ 333.178603][T17755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3279'. [ 333.197568][T17755] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 333.198030][T17751] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3278'. [ 333.244953][T17755] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3279'. [ 333.254974][T17755] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 333.348721][ T5843] Bluetooth: hci3: command tx timeout [ 333.413126][T17663] hsr_slave_0: entered promiscuous mode [ 333.420642][T17663] hsr_slave_1: entered promiscuous mode [ 333.434115][T17663] debugfs: 'hsr0' already exists in 'hsr' [ 333.439991][T17663] Cannot create hsr debugfs directory [ 333.496432][T17764] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 333.515305][T17764] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 333.687253][T17780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3288'. [ 333.716561][T17764] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 333.736146][T17764] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3282'. [ 333.756232][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 334.174323][T17803] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3294'. [ 334.369787][T17663] bond0: (slave netdevsim0): Releasing backup interface [ 334.530855][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3304'. [ 334.792858][T17663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.812032][T17663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.907792][T17663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.927371][T17663] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.065052][T17841] netlink: 'syz.0.3308': attribute type 8 has an invalid length. [ 335.168634][T17849] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3309'. [ 335.279876][T17663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.293714][T17852] netlink: 'syz.0.3311': attribute type 2 has an invalid length. [ 335.338985][T17663] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.378562][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.385766][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.466970][ T5843] Bluetooth: hci3: command tx timeout [ 335.477709][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.484867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.558200][T17860] openvswitch: netlink: IP tunnel TTL not specified. [ 335.895002][T17868] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 336.124008][T17886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.198267][T17891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3318'. [ 336.233330][T17663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.374811][T17663] veth0_vlan: entered promiscuous mode [ 336.441589][T17663] veth1_vlan: entered promiscuous mode [ 336.462629][T17912] sctp: [Deprecated]: syz.3.3325 (pid 17912) Use of int in max_burst socket option. [ 336.462629][T17912] Use struct sctp_assoc_value instead [ 336.526220][T17663] veth0_macvtap: entered promiscuous mode [ 336.545823][T17663] veth1_macvtap: entered promiscuous mode [ 336.592934][T17663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.615245][T17922] netlink: 'syz.3.3328': attribute type 5 has an invalid length. [ 336.628561][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.658764][ T6257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.677250][ T6257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.705147][ T6257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.719616][ T6257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.805676][ T6257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.843933][ T6257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.872296][T17930] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 336.890431][T17930] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 336.905695][T16686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.913979][T17934] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 336.930584][T16686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.974278][T17938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.987631][T17939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.001750][T17934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.032502][T17936] bond2: entered promiscuous mode [ 337.058182][T17936] bond2: entered allmulticast mode [ 337.125391][T17934] bond0: (slave caif0): Error: Device type is different from other slaves [ 337.431384][T17970] netlink: 'syz.1.3342': attribute type 29 has an invalid length. [ 337.443654][T17970] netlink: 'syz.1.3342': attribute type 29 has an invalid length. [ 337.512010][ T5843] Bluetooth: hci3: command tx timeout [ 337.646481][T17981] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 337.717593][T17984] syzkaller0: create flow: hash 1294037526 index 1 [ 337.809828][T17986] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 337.820227][T17984] syzkaller0: delete flow: hash 1294037526 index 1 [ 337.917197][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 337.925312][ C1] lec:lec_tx_timeout: lec0 [ 337.929957][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.368636][T18007] tipc: Started in network mode [ 339.376924][T18007] tipc: Node identity 46e331df27f5, cluster identity 4711 [ 339.384311][T18007] tipc: Enabled bearer , priority 0 [ 339.437686][T18012] syzkaller0: entered promiscuous mode [ 339.448458][T18012] syzkaller0: entered allmulticast mode [ 339.492492][T18007] tipc: Resetting bearer [ 339.554800][T18020] lo speed is unknown, defaulting to 1000 [ 339.588780][ T5843] Bluetooth: hci3: command tx timeout [ 339.675651][T18033] sctp: [Deprecated]: syz.4.3361 (pid 18033) Use of int in maxseg socket option. [ 339.675651][T18033] Use struct sctp_assoc_value instead [ 339.790579][T18006] tipc: Resetting bearer [ 339.840719][T18006] tipc: Disabling bearer [ 340.072883][T18048] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 340.090556][T18050] __nla_validate_parse: 8 callbacks suppressed [ 340.090574][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'. [ 340.410072][T18061] netlink: 'syz.4.3373': attribute type 10 has an invalid length. [ 340.418399][T18061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3373'. [ 340.702273][T18061] team0: Port device geneve0 added [ 340.703426][T18085] netlink: 'syz.0.3379': attribute type 21 has an invalid length. [ 340.708495][T18078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3378'. [ 340.743210][T18083] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 340.777544][T18085] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 340.855880][T18092] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3381'. [ 341.021097][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 341.209224][T18114] netlink: 'syz.0.3388': attribute type 3 has an invalid length. [ 341.361244][T18130] nbd: couldn't find device at index 1 [ 341.608956][T18148] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3396'. [ 341.621546][T18148] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.628987][T18148] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.879902][T18165] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3401'. [ 341.968839][T18167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3403'. [ 341.994879][T18170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.029162][T18164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3402'. [ 342.128862][T18181] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3408'. [ 342.407454][T18209] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 342.419289][T18209] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 342.499653][T18209] netlink: 'syz.1.3417': attribute type 2 has an invalid length. [ 342.667497][T18227] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 342.683009][T18227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.772341][T18231] hsr_slave_0 (unregistering): left promiscuous mode [ 342.936850][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.944922][ C1] lec:lec_tx_timeout: lec0 [ 342.950891][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.206652][T18275] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 343.270215][T18280] netlink: 'syz.3.3434': attribute type 8 has an invalid length. [ 343.319495][T18282] nbd: couldn't find a device at index 0 [ 343.381341][T18273] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.396389][T18273] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.406416][T18273] ` (unregistering): Released all slaves [ 344.496201][T18375] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 344.554018][T18375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.946097][T18404] syzkaller0: entered promiscuous mode [ 344.956007][T18404] syzkaller0: entered allmulticast mode [ 345.754503][T18434] __nla_validate_parse: 30 callbacks suppressed [ 345.754523][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3477'. [ 346.590900][T18418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.613617][T18412] lo speed is unknown, defaulting to 1000 [ 346.818113][T18440] nbd6: detected capacity change from 0 to 127 [ 346.871862][ T5843] block nbd6: Receive control failed (result -32) [ 347.041102][T18465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3485'. [ 347.108396][T18469] ipt_REJECT: TCP_RESET invalid for non-tcp [ 347.231475][T18479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3488'. [ 347.242607][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'. [ 347.574652][T18502] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 347.642094][T18506] netlink: 580 bytes leftover after parsing attributes in process `syz.1.3497'. [ 347.698683][T18506] netlink: 580 bytes leftover after parsing attributes in process `syz.1.3497'. [ 347.780007][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'. [ 347.966811][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 347.974893][ C1] lec:lec_tx_timeout: lec0 [ 347.979715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.204057][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 348.208566][T18535] pim6reg1: entered promiscuous mode [ 348.213368][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3506'. [ 348.226929][T18535] pim6reg1: entered allmulticast mode [ 348.971611][T18577] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3516'. [ 349.467855][T18612] tipc: Started in network mode [ 349.473181][T18612] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 349.480736][T18612] tipc: Enabled bearer , priority 2 [ 349.602659][T18628] syz.1.3533: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 349.641240][T18630] netlink: 'syz.3.3534': attribute type 1 has an invalid length. [ 349.649468][T18628] CPU: 0 UID: 0 PID: 18628 Comm: syz.1.3533 Not tainted syzkaller #0 PREEMPT(full) [ 349.649495][T18628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.649510][T18628] Call Trace: [ 349.649517][T18628] [ 349.649525][T18628] dump_stack_lvl+0x189/0x250 [ 349.649552][T18628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.649571][T18628] ? __pfx__printk+0x10/0x10 [ 349.649592][T18628] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.649615][T18628] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.649641][T18628] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 349.649667][T18628] warn_alloc+0x214/0x310 [ 349.649695][T18628] ? __pfx_warn_alloc+0x10/0x10 [ 349.649726][T18628] ? __get_vm_area_node+0x28f/0x300 [ 349.649745][T18628] ? xskq_create+0xbf/0x170 [ 349.649767][T18628] __vmalloc_node_range_noprof+0x690/0x12d0 [ 349.649817][T18628] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.649841][T18628] ? __kasan_kmalloc+0x93/0xb0 [ 349.649869][T18628] vmalloc_user_noprof+0xad/0xf0 [ 349.649889][T18628] ? xskq_create+0xbf/0x170 [ 349.649908][T18628] xskq_create+0xbf/0x170 [ 349.649929][T18628] xsk_init_queue+0xb0/0x110 [ 349.649950][T18628] xsk_setsockopt+0x57b/0x8d0 [ 349.649970][T18628] ? __pfx_xsk_setsockopt+0x10/0x10 [ 349.649991][T18628] ? __pfx_aa_sk_perm+0x10/0x10 [ 349.650016][T18628] ? aa_sock_opt_perm+0xff/0x1a0 [ 349.650036][T18628] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 349.650056][T18628] ? __pfx_xsk_setsockopt+0x10/0x10 [ 349.650074][T18628] do_sock_setsockopt+0x17c/0x1b0 [ 349.650103][T18628] __x64_sys_setsockopt+0x13f/0x1b0 [ 349.650131][T18628] do_syscall_64+0xfa/0xf80 [ 349.650153][T18628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.650169][T18628] ? clear_bhb_loop+0x60/0xb0 [ 349.650189][T18628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.650204][T18628] RIP: 0033:0x7fc761d8f749 [ 349.650224][T18628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.650239][T18628] RSP: 002b:00007fc762cd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 349.650256][T18628] RAX: ffffffffffffffda RBX: 00007fc761fe6180 RCX: 00007fc761d8f749 [ 349.650268][T18628] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 349.650278][T18628] RBP: 00007fc761e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 349.650288][T18628] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 349.650299][T18628] R13: 00007fc761fe6218 R14: 00007fc761fe6180 R15: 00007ffe13686f78 [ 349.650330][T18628] [ 349.650344][T18628] Mem-Info: [ 349.658366][T18630] netlink: 'syz.3.3534': attribute type 1 has an invalid length. [ 349.676646][T18628] active_anon:5229 inactive_anon:0 isolated_anon:0 [ 349.676646][T18628] active_file:2889 inactive_file:39990 isolated_file:0 [ 349.676646][T18628] unevictable:768 dirty:68 writeback:0 [ 349.676646][T18628] slab_reclaimable:12397 slab_unreclaimable:118270 [ 349.676646][T18628] mapped:29268 shmem:1363 pagetables:1150 [ 349.676646][T18628] sec_pagetables:0 bounce:0 [ 349.676646][T18628] kernel_misc_reclaimable:0 [ 349.676646][T18628] free:1300999 free_pcp:15293 free_cma:0 [ 349.889818][T18648] bridge0: port 3(batadv0) entered blocking state [ 349.926827][T18628] Node 0 active_anon:21200kB inactive_anon:0kB active_file:11556kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117076kB dirty:272kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16644kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 349.979641][T18648] bridge0: port 3(batadv0) entered disabled state [ 350.018752][T18628] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.057075][T18648] batadv0: entered allmulticast mode [ 350.088150][T18648] batadv0: entered promiscuous mode [ 350.096951][T18628] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.136624][T18652] netlink: 'syz.0.3539': attribute type 6 has an invalid length. [ 350.145685][T18652] netlink: 'syz.0.3539': attribute type 5 has an invalid length. [ 350.154044][T18652] netlink: 'syz.0.3539': attribute type 6 has an invalid length. [ 350.164487][T18652] netlink: 'syz.0.3539': attribute type 5 has an invalid length. [ 350.172313][T18628] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 350.179956][T18652] netlink: 'syz.0.3539': attribute type 6 has an invalid length. [ 350.189233][T18628] Node 0 DMA32 free:1295280kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20856kB inactive_anon:0kB active_file:11556kB inactive_file:159756kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2564520kB mlocked:0kB bounce:0kB free_pcp:41372kB local_pcp:23480kB free_cma:0kB [ 350.223066][T18652] netlink: 'syz.0.3539': attribute type 5 has an invalid length. [ 350.231841][T18652] netlink: 'syz.0.3539': attribute type 6 has an invalid length. [ 350.254725][T18628] lowmem_reserve[]: 0 0 0 0 0 [ 350.261517][T18652] netlink: 'syz.0.3539': attribute type 5 has an invalid length. [ 350.276520][T18628] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.312450][T18662] openvswitch: netlink: IP tunnel dst address not specified [ 350.327778][T18628] lowmem_reserve[]: 0 0 0 0 0 [ 350.333637][T18628] Node 1 Normal free:3895780kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15304kB local_pcp:10216kB free_cma:0kB [ 350.397650][T16490] IPVS: starting estimator thread 0... [ 350.405542][T18628] lowmem_reserve[]: 0 0 0 0 0 [ 350.410758][T18628] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.421244][ T2925] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 350.431407][T18661] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.434137][ T2925] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 350.487821][T18628] Node 0 DMA32: 425*4kB (UM) 127*8kB (UME) 128*16kB (UME) 205*32kB (UME) 41*64kB (ME) 36*128kB (UME) 96*256kB (UME) 50*512kB (UME) 52*1024kB (UM) 7*2048kB (UM) 283*4096kB (UM) = 1295484kB [ 350.507130][T18665] IPVS: using max 33 ests per chain, 79200 per kthread [ 350.518294][T18628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.533428][T18628] Node 1 Normal: 2*4kB (E) 32*8kB (UME) 41*16kB (UME) 128*32kB (UME) 40*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895832kB [ 350.569195][T18628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.593067][T18628] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.605940][T18628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.617029][T18628] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.628537][T18628] 44234 total pagecache pages [ 350.635389][T18628] 0 pages in swap cache [ 350.645056][ T9] tipc: Node number set to 10136234 [ 350.673568][T18628] Free swap = 124996kB [ 350.687436][T18628] Total swap = 124996kB [ 350.691777][T18628] 2097051 pages RAM [ 350.698776][T18628] 0 pages HighMem/MovableOnly [ 350.715789][T18628] 424279 pages reserved [ 350.721780][T18628] 0 pages cma reserved [ 350.814354][T18684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.998587][ T9] IPVS: starting estimator thread 0... [ 351.015408][T18705] __nla_validate_parse: 203 callbacks suppressed [ 351.015427][T18705] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.3556'. [ 351.097069][T18703] IPVS: using max 29 ests per chain, 69600 per kthread [ 351.127240][T18698] nbd7: detected capacity change from 0 to 127 [ 351.137774][ T5843] block nbd7: Receive control failed (result -32) [ 351.166600][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3558'. [ 351.284064][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 351.341394][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 351.385879][T18720] lo speed is unknown, defaulting to 1000 [ 351.763776][T18754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3570'. [ 351.818584][T18760] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 351.944088][T18771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3576'. [ 351.954398][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3576'. [ 352.123492][T18776] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3581'. [ 352.330061][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 352.501921][T18810] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.530768][T18810] bond5: (slave lo): Enslaving as a backup interface with an up link [ 352.543129][T18810] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 352.654754][T18812] syzkaller0: entered promiscuous mode [ 352.660522][T18812] syzkaller0: entered allmulticast mode [ 352.667229][T18814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3591'. [ 352.928044][T18836] xt_addrtype: ipv6 does not support BROADCAST matching [ 352.988676][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 352.996770][ C1] lec:lec_tx_timeout: lec0 [ 353.001545][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.295322][T18850] bridge0: port 4(team0) entered blocking state [ 354.308935][T18850] bridge0: port 4(team0) entered disabled state [ 354.331343][T18850] team0: entered allmulticast mode [ 354.353624][T18850] team_slave_0: entered allmulticast mode [ 354.369007][T18850] team_slave_1: entered allmulticast mode [ 354.383919][T18850] team0: entered promiscuous mode [ 354.399077][T18850] team_slave_0: entered promiscuous mode [ 354.408319][T18850] team_slave_1: entered promiscuous mode [ 354.415237][T18850] bridge0: port 4(team0) entered blocking state [ 354.421667][T18850] bridge0: port 4(team0) entered forwarding state [ 354.553495][T18863] ve: renamed from dummy0 (while UP) [ 354.780678][T18879] validate_nla: 128 callbacks suppressed [ 354.780696][T18879] netlink: 'syz.1.3608': attribute type 1 has an invalid length. [ 354.864498][T18884] erspan0: entered allmulticast mode [ 354.900330][T18886] tipc: Invalid UDP bearer configuration [ 354.900384][T18886] tipc: Enabling of bearer rejected, failed to enable media [ 355.411490][T18919] team_slave_0: entered promiscuous mode [ 355.417534][T18919] team_slave_1: entered promiscuous mode [ 355.465978][T18919] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 355.518358][T18926] xt_hashlimit: size too large, truncated to 1048576 [ 355.568422][T18922] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 355.615890][T18930] netlink: 'syz.4.3623': attribute type 13 has an invalid length. [ 355.648519][T18930] netlink: 'syz.4.3623': attribute type 17 has an invalid length. [ 355.939489][T18930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.085388][T18970] __nla_validate_parse: 10 callbacks suppressed [ 356.085407][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3633'. [ 356.124104][T18971] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3631'. [ 356.185507][T18963] bridge0: port 3(syz_tun) entered disabled state [ 356.202982][T18963] bridge0: port 4(team0) entered disabled state [ 356.209756][T18963] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.217417][T18963] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.241489][T18982] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3636'. [ 356.363197][T18991] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3633'. [ 356.519157][T18963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.574154][T18963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.745297][T19008] x_tables: duplicate entry at hook 3 [ 356.870274][ T25] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 210 seconds [ 356.881125][ T25] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 210 seconds [ 356.894532][ T25] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 210 seconds [ 356.906067][ T25] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 210 seconds [ 356.925146][T18968] netlink: 'syz.0.3631': attribute type 13 has an invalid length. [ 356.962514][T18974] netlink: 'syz.0.3631': attribute type 13 has an invalid length. [ 356.980545][T18986] syzkaller0: entered promiscuous mode [ 356.989399][T18986] syzkaller0: entered allmulticast mode [ 356.998791][T16685] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.030477][T16685] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.060338][T18964] netlink: 'syz.2.3630': attribute type 1 has an invalid length. [ 357.110969][ T6253] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.128890][T18964] netlink: 'syz.2.3630': attribute type 1 has an invalid length. [ 357.147025][ T6253] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.301485][T19037] veth1_to_bond: entered allmulticast mode [ 357.348050][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3646'. [ 357.472158][T19050] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 357.535869][T19041] veth1_to_bond (unregistering): left allmulticast mode [ 357.546076][T19054] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 357.555055][T19054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3649'. [ 357.647413][T19050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.661519][T19053] tipc: Started in network mode [ 357.666587][T19053] tipc: Node identity 2a5f3bb4b5a2, cluster identity 4711 [ 357.684483][T19053] tipc: Enabled bearer , priority 0 [ 357.738125][T19029] tipc: Resetting bearer [ 357.760204][T19047] syzkaller0: entered promiscuous mode [ 357.766239][T19047] syzkaller0: entered allmulticast mode [ 357.808823][T19028] tipc: Resetting bearer [ 357.843530][T19028] tipc: Disabling bearer [ 357.904867][T19083] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 358.016834][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 358.024897][ C1] lec:lec_tx_timeout: lec0 [ 358.029734][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 358.057815][T19088] netlink: 'syz.2.3657': attribute type 2 has an invalid length. [ 358.434688][T19119] tipc: Started in network mode [ 358.439692][T19119] tipc: Node identity ac14140f, cluster identity 4711 [ 358.446727][T19119] tipc: New replicast peer: 255.255.255.255 [ 358.453394][T19119] tipc: Enabled bearer , priority 10 [ 358.461449][T19119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'. [ 358.956379][T19147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3675'. [ 358.965607][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'. [ 358.986447][T19147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.119046][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3679'. [ 359.361642][T19154] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 359.549377][T19184] openvswitch: netlink: Duplicate or invalid key (type 0). [ 359.557012][T19184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.567210][ T9] tipc: Node number set to 2886997007 [ 359.620494][T19184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.662009][T19191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.672275][T19191] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.690419][T19191] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 359.721309][T19184] gretap1: entered promiscuous mode [ 359.732656][T19184] bond3: (slave gretap1): making interface the new active one [ 359.741639][T19184] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 359.761020][T19191] bond3: entered promiscuous mode [ 359.766659][T19191] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 359.776469][T19191] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 359.797703][T19191] bond3: left promiscuous mode [ 360.288162][T19226] bond0: entered promiscuous mode [ 360.298851][T19226] bond_slave_0: entered promiscuous mode [ 360.305812][T19226] bond_slave_1: entered promiscuous mode [ 360.313842][T19226] batadv0: entered promiscuous mode [ 360.320417][T19226] debugfs: 'hsr1' already exists in 'hsr' [ 360.328326][T19226] Cannot create hsr debugfs directory [ 360.334105][T19226] hsr1: entered allmulticast mode [ 360.356607][T19232] IPVS: length: 8 != 1152 [ 360.367148][T19226] bond0: entered allmulticast mode [ 360.373294][T19226] bond_slave_0: entered allmulticast mode [ 360.379302][T19226] bond_slave_1: entered allmulticast mode [ 360.385889][T19226] batadv0: entered allmulticast mode [ 360.394133][T19226] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 360.402503][T19226] bond0: left promiscuous mode [ 360.408298][T19226] bond_slave_0: left promiscuous mode [ 360.413918][T19226] bond_slave_1: left promiscuous mode [ 360.420907][T19226] batadv0: left promiscuous mode [ 361.071900][T19281] syzkaller0: entered promiscuous mode [ 361.087603][T19281] syzkaller0: entered allmulticast mode [ 361.104078][T19273] validate_nla: 3 callbacks suppressed [ 361.104096][T19273] netlink: 'syz.3.3713': attribute type 8 has an invalid length. [ 361.339064][T19294] __nla_validate_parse: 5 callbacks suppressed [ 361.339082][T19294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3719'. [ 361.354887][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.617655][T19317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3725'. [ 361.628303][T19318] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3724'. [ 361.664686][T19317] netlink: 'syz.2.3725': attribute type 1 has an invalid length. [ 361.881080][T19329] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 361.938786][T19322] pim6reg: entered allmulticast mode [ 362.127537][T19338] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3732'. [ 362.204743][T19347] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3735'. [ 362.352184][T19354] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 362.392196][T19354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3737'. [ 362.443845][T19361] Bluetooth: MGMT ver 1.23 [ 362.689886][T19369] bond3: entered promiscuous mode [ 362.710243][T19369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.732007][T19380] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.744696][T19378] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20004 [ 362.749146][T19380] netlink: 'syz.2.3746': attribute type 3 has an invalid length. [ 362.846399][T19386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3747'. [ 362.857137][T19386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3747'. [ 363.014666][T19401] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 363.036860][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 363.045269][ C1] lec:lec_tx_timeout: lec0 [ 363.050957][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 363.076508][T19402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.081223][T19408] netlink: 'syz.4.3753': attribute type 23 has an invalid length. [ 363.088094][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'. [ 363.102395][T19402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.204530][T19419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3755'. [ 363.515184][T19440] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 363.515260][T19439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.623986][T19445] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 363.708040][T19452] netlink: 'syz.4.3764': attribute type 2 has an invalid length. [ 363.918712][T19469] sctp: [Deprecated]: syz.3.3768 (pid 19469) Use of int in maxseg socket option. [ 363.918712][T19469] Use struct sctp_assoc_value instead [ 363.936121][T19470] sctp: [Deprecated]: syz.3.3768 (pid 19470) Use of int in maxseg socket option. [ 363.936121][T19470] Use struct sctp_assoc_value instead [ 363.983083][T19469] bridge_slave_0: left allmulticast mode [ 363.991143][T19469] bridge_slave_0: left promiscuous mode [ 364.000276][T19469] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.014809][T19469] bridge_slave_1: left allmulticast mode [ 364.025663][T19469] bridge_slave_1: left promiscuous mode [ 364.033257][T19469] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.044142][T19469] bond0: (slave bond_slave_0): Releasing backup interface [ 364.054351][T19469] bond0: (slave bond_slave_1): Releasing backup interface [ 364.069770][T19469] team_slave_0: left promiscuous mode [ 364.078868][T19469] team0: Port device team_slave_0 removed [ 364.088743][T19469] team_slave_1: left promiscuous mode [ 364.099347][T19469] team0: Port device team_slave_1 removed [ 364.106059][T19469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.113603][T19469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.122657][T19469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.130515][T19469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.139843][T19469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.339266][T19482] netlink: 'syz.2.3774': attribute type 1 has an invalid length. [ 364.357188][T19482] netlink: 'syz.2.3774': attribute type 2 has an invalid length. [ 364.689704][T19505] netlink: 'syz.3.3781': attribute type 2 has an invalid length. [ 365.176942][T19536] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 365.258299][T19540] netlink: 'syz.1.3792': attribute type 1 has an invalid length. [ 365.582740][T19562] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 365.787418][T19571] netlink: 'syz.4.3799': attribute type 12 has an invalid length. [ 366.303404][T19621] syzkaller1: entered promiscuous mode [ 366.314096][T19621] syzkaller1: entered allmulticast mode [ 366.405471][T19632] __nla_validate_parse: 14 callbacks suppressed [ 366.405489][T19632] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3815'. [ 366.589223][T19644] syz.0.3818 (19644) used obsolete PPPIOCDETACH ioctl [ 366.618542][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3820'. [ 366.641847][T19644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.663525][T19644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.685138][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 366.694670][T19650] netlink: 'syz.4.3821': attribute type 64 has an invalid length. [ 366.706236][T19650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3821'. [ 366.770157][T19654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.969787][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'. [ 367.001240][T19670] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3827'. [ 367.110878][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.137548][T19680] netlink: 'syz.4.3832': attribute type 1 has an invalid length. [ 367.148452][T19681] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3830'. [ 367.632042][T19711] netlink: 'syz.0.3842': attribute type 1 has an invalid length. [ 367.691859][T19711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.824863][T19722] bond3: option lp_interval: invalid value (0) [ 367.838528][T19722] bond3: option lp_interval: allowed values 1 - 2147483647 [ 367.848527][T19722] bond3 (unregistering): Released all slaves [ 367.872251][T19728] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3846'. [ 367.918186][T19739] ip6gre1: entered allmulticast mode [ 368.066958][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 368.075067][ C1] lec:lec_tx_timeout: lec0 [ 368.080216][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 368.106281][T19751] ip6t_srh: unknown srh invflags 4000 [ 368.111917][T19751] ip6t_srh: unknown srh invflags 4000 [ 368.117538][T19751] ip6t_srh: unknown srh invflags 4000 [ 368.123129][T19751] ip6t_srh: unknown srh invflags 4000 [ 368.129056][T19751] ip6t_srh: unknown srh invflags 4000 [ 368.134653][T19751] ip6t_srh: unknown srh invflags 4000 [ 368.140558][T19751] ip6t_srh: unknown srh invflags 4000 [ 368.155544][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3853'. [ 368.169881][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3853'. [ 368.288571][T19766] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 368.296257][T19766] team0: Device macvtap2 is already an upper device of the team interface [ 368.397882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.534835][T19782] openvswitch: netlink: Key type 31 is not supported [ 368.534835][T19783] openvswitch: netlink: Key type 31 is not supported [ 368.620367][T19789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.627676][T19789] IPv6: NLM_F_CREATE should be set when creating new route [ 368.646408][T19789] tipc: Enabled bearer , priority 0 [ 368.654181][T19789] syzkaller0: entered promiscuous mode [ 368.661213][T19789] syzkaller0: entered allmulticast mode [ 368.735783][T19789] tipc: Resetting bearer [ 368.761413][T19788] tipc: Resetting bearer [ 368.812717][T19788] tipc: Disabling bearer [ 368.840126][T19796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.147656][T19823] syzkaller0: entered promiscuous mode [ 369.153161][T19823] syzkaller0: entered allmulticast mode [ 369.171060][T19822] tipc: Enabled bearer , priority 0 [ 369.178441][T19830] netlink: 'syz.3.3880': attribute type 1 has an invalid length. [ 369.263030][T19822] tipc: Resetting bearer [ 369.338551][T19822] tipc: Disabling bearer [ 369.474425][T19851] netlink: 'syz.1.3886': attribute type 3 has an invalid length. [ 369.739137][T19873] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 369.806723][T19873] team1: entered promiscuous mode [ 369.812307][T19873] team1: entered allmulticast mode [ 370.009087][T19898] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 370.056268][T19898] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.063993][T19898] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.294456][T19926] syzkaller0: entered promiscuous mode [ 370.310653][T19926] syzkaller0: entered allmulticast mode [ 370.325690][T19926] 0: reclassify loop, rule prio 0, protocol 800 [ 370.961226][T19976] syzkaller0: entered promiscuous mode [ 370.987175][T19976] syzkaller0: entered allmulticast mode [ 371.395200][T20008] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 371.546922][T20028] __nla_validate_parse: 13 callbacks suppressed [ 371.546941][T20028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3939'. [ 371.602713][T20028] netlink: 'syz.4.3939': attribute type 3 has an invalid length. [ 371.892154][T20057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3948'. [ 371.919294][T20061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3949'. [ 371.942542][T20061] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3949'. [ 371.965492][T20061] netlink: 'syz.1.3949': attribute type 6 has an invalid length. [ 371.977970][T20061] netlink: 'syz.1.3949': attribute type 5 has an invalid length. [ 371.985905][T20061] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3949'. [ 372.601002][T20103] netlink: 'syz.4.3958': attribute type 1 has an invalid length. [ 372.709884][T20098] lo speed is unknown, defaulting to 1000 [ 372.783400][T20108] bond3: (slave geneve2): making interface the new active one [ 372.814904][T20108] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 372.851819][T20117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3960'. [ 372.875742][T16685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.894677][ T6253] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 373.037767][T20127] raw_sendmsg: syz.2.3960 forgot to set AF_INET. Fix it! [ 373.086991][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 373.095078][ C1] lec:lec_tx_timeout: lec0 [ 373.100084][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 373.711474][ T6253] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 373.722970][ T6253] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 373.737514][ T6253] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 374.051143][T20154] netlink: 'syz.1.3968': attribute type 11 has an invalid length. [ 374.208483][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3968'. [ 374.241935][T20163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3970'. [ 374.281251][T20163] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3970'. [ 374.314241][T20163] syzkaller0: entered promiscuous mode [ 374.331126][T20163] syzkaller0: entered allmulticast mode [ 374.352139][T20163] 0: reclassify loop, rule prio 0, protocol 800 [ 374.400110][T20176] : renamed from hsr0 (while UP) [ 374.616019][T20189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.653522][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 374.664746][T20192] netlink: 'syz.4.3979': attribute type 11 has an invalid length. [ 374.687220][T20197] tipc: Enabling of bearer rejected, failed to enable media [ 374.788289][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.824913][T20204] pimreg: entered allmulticast mode [ 374.927187][T20210] syzkaller1: entered promiscuous mode [ 374.932778][T20210] syzkaller1: entered allmulticast mode [ 375.034741][T20220] netlink: 'syz.2.3990': attribute type 10 has an invalid length. [ 375.074658][T20220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.084120][T20220] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 375.094500][T20221] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 375.118277][T20220] netlink: 'syz.2.3990': attribute type 10 has an invalid length. [ 375.169118][T20220] batadv0: entered promiscuous mode [ 375.175103][T20220] batadv0: entered allmulticast mode [ 375.190361][T20220] bond0: (slave batadv0): Releasing backup interface [ 375.221117][T20220] bridge0: port 5(batadv0) entered blocking state [ 375.228677][T20220] bridge0: port 5(batadv0) entered disabled state [ 375.274686][T20234] ip6gre1: entered allmulticast mode [ 375.327433][T16685] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 375.336732][T16685] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 375.367877][T20244] netlink: 'syz.1.3996': attribute type 1 has an invalid length. [ 375.391722][T20246] lo speed is unknown, defaulting to 1000 [ 375.528439][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.537807][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.552997][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.562135][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.573632][T20261] openvswitch: netlink: Flow key attr not present in new flow. [ 377.359946][T20297] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 377.476307][T20307] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 377.517186][T20307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 377.589978][T20320] __nla_validate_parse: 7 callbacks suppressed [ 377.589994][T20320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4016'. [ 377.622966][T20320] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 377.698493][T20315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 377.708466][T20320] bond5: entered promiscuous mode [ 377.713905][T20320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.740673][T20330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4018'. [ 377.785511][T20330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4018'. [ 377.953233][T20350] sctp: [Deprecated]: syz.3.4025 (pid 20350) Use of int in max_burst socket option. [ 377.953233][T20350] Use struct sctp_assoc_value instead [ 377.991470][ T6257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.157808][T20357] netlink: 'syz.1.4026': attribute type 10 has an invalid length. [ 378.175942][T20357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4026'. [ 378.190578][T20357] ve: entered promiscuous mode [ 378.208434][T20357] bridge0: port 3(ve) entered blocking state [ 378.214697][T20357] bridge0: port 3(ve) entered disabled state [ 378.227970][T20357] ve: entered allmulticast mode [ 378.240115][T20357] bridge0: port 3(ve) entered blocking state [ 378.246291][T20357] bridge0: port 3(ve) entered forwarding state [ 378.304349][T20365] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4030'. [ 378.539202][T20377] netlink: 'syz.3.4031': attribute type 1 has an invalid length. [ 378.677657][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.886379][T20386] bond4: Removing last arp target with arp_interval on [ 378.905244][T20399] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 378.996558][T20395] lo speed is unknown, defaulting to 1000 [ 379.210364][T20404] tipc: Invalid UDP bearer configuration [ 379.210418][T20404] tipc: Enabling of bearer rejected, failed to enable media [ 379.260017][T20406] x_tables: duplicate underflow at hook 1 [ 379.267596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 379.275649][ C1] lec:lec_tx_timeout: lec0 [ 379.293727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 379.339938][T20410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4039'. [ 379.371832][T20410] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4039'. [ 379.399436][T20410] netlink: 'syz.2.4039': attribute type 6 has an invalid length. [ 379.408014][T20410] netlink: 'syz.2.4039': attribute type 5 has an invalid length. [ 379.415890][T20410] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4039'. [ 379.833882][T20427] netlink: 'syz.4.4045': attribute type 1 has an invalid length. [ 380.194592][T20434] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.478263][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'. [ 380.549621][T20450] team0: Device gtp0 is up. Set it down before adding it as a team port [ 380.569783][T20458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.669632][T20458] xt_TCPMSS: Only works on TCP SYN packets [ 381.117695][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.149265][T20461] bridge_slave_0: default FDB implementation only supports local addresses [ 381.856922][ T30] audit: type=1107 audit(1764902857.937:9): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¤CäB¶d€7ê¤íÅ°yÑ~' [ 381.890051][T10389] page_pool_release_retry() stalled pool shutdown: id 70, 1 inflight 61 sec [ 381.998273][T20493] openvswitch: netlink: Message has 2688 unknown bytes. [ 382.455453][T20509] netlink: 'syz.4.4067': attribute type 10 has an invalid length. [ 382.538574][T20509] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 382.847705][T20519] __nla_validate_parse: 5 callbacks suppressed [ 382.847726][T20519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4071'. [ 382.950520][T20521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4072'. [ 382.982830][T20521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4072'. [ 383.040451][T20521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4072'. [ 383.111803][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.419756][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4076'. [ 383.581657][T20543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.684860][T20552] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4079'. [ 384.348093][T20566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4085'. [ 384.542962][T20573] syzkaller1: entered promiscuous mode [ 384.576532][T20573] syzkaller1: entered allmulticast mode [ 384.654427][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 385.028548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 385.036575][ C1] lec:lec_tx_timeout: lec0 [ 385.049293][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.605458][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4094'. [ 385.873982][T20599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4095'. [ 386.618142][T20626] netlink: 'syz.1.4104': attribute type 1 has an invalid length. [ 386.787092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.015069][ T25] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 240 seconds [ 387.039495][T20626] bond6: entered promiscuous mode [ 387.047139][ T25] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 240 seconds [ 387.055438][T20626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.067586][ T25] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 240 seconds [ 387.088435][ T25] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 240 seconds [ 387.271962][T20639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.420354][T20646] netlink: 'syz.2.4111': attribute type 1 has an invalid length. [ 387.481189][T20646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.615941][T20648] bond5: Unable to set up delay as MII monitoring is disabled [ 387.648636][T20648] bond5 (unregistering): Released all slaves [ 387.699694][ T5843] block nbd8: Receive control failed (result -32) [ 388.047713][T20657] v: renamed from veth0_vlan [ 388.321039][T20671] netlink: 'syz.3.4118': attribute type 1 has an invalid length. [ 388.348862][T20675] __nla_validate_parse: 5 callbacks suppressed [ 388.348881][T20675] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4120'. [ 388.433794][T20668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'. [ 388.510948][T20680] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 388.532813][T20680] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 388.552794][T20680] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 388.672575][T20672] lo speed is unknown, defaulting to 1000 [ 388.749952][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 388.869709][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.333649][T20697] nbd: couldn't find device at index 0 [ 389.346416][T20699] netlink: 'syz.0.4124': attribute type 5 has an invalid length. [ 390.058588][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 390.066626][ C1] lec:lec_tx_timeout: lec0 [ 390.071470][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 390.151672][T16667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.234024][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 390.312342][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4130'. [ 390.331778][T20717] netlink: 'syz.1.4130': attribute type 15 has an invalid length. [ 390.790578][T20742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4135'. [ 391.313236][T20760] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4140'. [ 391.497191][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4144'. [ 391.527622][T20763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.571808][T20767] tipc: Enabled bearer , priority 0 [ 391.802444][T20771] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 391.845633][T20771] bond6 (unregistering): Released all slaves [ 391.919661][T20779] syzkaller0: entered promiscuous mode [ 391.927081][T20779] syzkaller0: entered allmulticast mode [ 391.936594][T20785] tipc: Resetting bearer [ 391.956492][T20766] tipc: Resetting bearer [ 392.017322][T20766] tipc: Disabling bearer [ 392.245387][T20799] bond6: invalid ARP target 0.0.0.0 specified for addition [ 392.308763][T20799] bond6: option arp_ip_target: invalid value (0) [ 392.343425][T20799] bond6 (unregistering): Released all slaves [ 392.361200][T20809] netlink: 'syz.2.4157': attribute type 13 has an invalid length. [ 392.409567][T20809] macvtap0: entered allmulticast mode [ 392.425662][T20809] macvtap0: refused to change device tx_queue_len [ 392.472485][T20809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4157'. [ 392.497485][T20809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4157'. [ 392.635500][T20811] xfrm1: entered allmulticast mode [ 392.679478][ T5843] block nbd9: Receive control failed (result -1) [ 393.019914][T20831] netlink: 'syz.3.4166': attribute type 3 has an invalid length. [ 393.160620][T20837] x_tables: duplicate underflow at hook 2 [ 393.347091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.581364][T20849] __nla_validate_parse: 4 callbacks suppressed [ 393.581382][T20849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4172'. [ 393.608950][T20849] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 393.926412][T20858] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4173'. [ 393.944687][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4177'. [ 394.051677][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4178'. [ 394.632675][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.832280][T20881] bridge: RTM_NEWNEIGH with invalid ether address [ 394.842785][T20887] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.959988][T20896] netlink: 'syz.2.4189': attribute type 13 has an invalid length. [ 395.018761][T20896] erspan0: refused to change device tx_queue_len [ 395.026141][T20896] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 395.087122][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 395.095610][ C1] lec:lec_tx_timeout: lec0 [ 395.157644][T20908] bridge_slave_0: left promiscuous mode [ 395.216726][T20908] bond1: left promiscuous mode [ 395.238661][T20908] bond2: left promiscuous mode [ 395.239786][T10389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.268423][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.277759][T20911] sctp: [Deprecated]: syz.3.4193 (pid 20911) Use of int in max_burst socket option. [ 395.277759][T20911] Use struct sctp_assoc_value instead [ 395.362596][T20915] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4195'. [ 395.379671][T20915] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4195'. [ 395.573860][T20931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4197'. [ 395.597118][T20931] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 395.613526][T20923] "syz.0.4197" (20923) uses obsolete ecb(arc4) skcipher [ 395.752564][T20935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4199'. [ 395.897389][T10389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.950300][T20939] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 395.963055][T20939] bond5 (unregistering): Released all slaves [ 396.266023][T20966] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4208'. [ 396.457040][T20976] ip6t_srh: unknown srh match flags 4000 [ 396.644582][T20983] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 396.720138][T20983] bond7 (unregistering): Released all slaves [ 396.983690][T21016] openvswitch: netlink: IPv4 tunnel dst address is zero [ 397.003243][T21015] macvtap1: entered allmulticast mode [ 397.009835][T21015] veth0_macvtap: entered allmulticast mode [ 397.072502][T21019] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4223'. [ 397.294937][T21039] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 397.732347][T21045] infiniband syz1: set down [ 397.737424][T21045] infiniband syz1: added bond0 [ 397.783411][T21064] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 397.800311][T21045] RDS/IB: syz1: added [ 397.804382][T21045] smc: adding ib device syz1 with port count 1 [ 397.811265][T21045] smc: ib device syz1 port 1 has no pnetid [ 397.814578][T21070] netlink: 'syz.1.4239': attribute type 29 has an invalid length. [ 397.861715][T21070] netlink: 'syz.1.4239': attribute type 29 has an invalid length. [ 397.890577][T21070] netlink: 'syz.1.4239': attribute type 29 has an invalid length. [ 397.905905][T21070] netlink: 'syz.1.4239': attribute type 29 has an invalid length. [ 397.942059][T21070] netlink: 'syz.1.4239': attribute type 29 has an invalid length. [ 397.963137][T21070] netlink: 'syz.1.4239': attribute type 29 has an invalid length. [ 398.165612][T21082] netlink: 'syz.3.4244': attribute type 11 has an invalid length. [ 398.190204][T21082] netlink: 'syz.3.4244': attribute type 11 has an invalid length. [ 398.212666][T21084] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 0, id = 0 [ 398.404740][T21090] openvswitch: netlink: Multiple metadata blocks provided [ 398.423818][T21090] openvswitch: netlink: Multiple metadata blocks provided [ 398.477895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.719101][T21111] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 398.746978][T21111] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 399.748083][ T5155] Bluetooth: hci0: command tx timeout [ 399.818007][T21178] bond8: Unable to set down delay as MII monitoring is disabled [ 399.851821][T21178] bond8 (unregistering): Released all slaves [ 399.914206][T21180] __nla_validate_parse: 6 callbacks suppressed [ 399.914226][T21180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4269'. [ 399.933847][T21189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4274'. [ 400.029735][T21193] sctp: [Deprecated]: syz.2.4274 (pid 21193) Use of int in max_burst socket option. [ 400.029735][T21193] Use struct sctp_assoc_value instead [ 400.073483][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4275'. [ 400.084452][T21194] vlan0: entered promiscuous mode [ 400.394703][T16671] net_ratelimit: 1 callbacks suppressed [ 400.394720][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.547758][T21221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4285'. [ 401.044235][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.380070][T21265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.489153][T21270] netlink: 'syz.3.4305': attribute type 1 has an invalid length. [ 401.538792][T21254] siw: device registration error -23 [ 401.626035][T21270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.673982][T21281] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4307'. [ 401.701160][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4310'. [ 401.706900][T21281] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4307'. [ 401.711538][T21287] netlink: 'syz.3.4310': attribute type 5 has an invalid length. [ 401.728598][T21287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4310'. [ 401.771356][T21281] netlink: 'syz.0.4307': attribute type 5 has an invalid length. [ 401.792774][T21281] netlink: 'syz.0.4307': attribute type 6 has an invalid length. [ 401.817159][T21281] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4307'. [ 401.826461][T21292] sctp: [Deprecated]: syz.4.4313 (pid 21292) Use of int in max_burst socket option deprecated. [ 401.826461][T21292] Use struct sctp_assoc_value instead [ 401.827013][ T5843] Bluetooth: hci0: command tx timeout [ 401.863977][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'. [ 401.985958][T21306] sctp: [Deprecated]: syz.1.4316 (pid 21306) Use of int in maxseg socket option. [ 401.985958][T21306] Use struct sctp_assoc_value instead [ 402.063779][T21292] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.102576][T21301] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 402.169078][T21311] bridge0: entered promiscuous mode [ 402.184074][T21311] macsec1: entered promiscuous mode [ 402.190424][T21311] macsec1: entered allmulticast mode [ 402.195898][T21311] bridge0: entered allmulticast mode [ 402.204223][T21311] bridge0: port 4(macsec1) entered blocking state [ 402.213603][T21311] bridge0: port 4(macsec1) entered disabled state [ 402.225993][T21311] bridge0: left allmulticast mode [ 402.241999][T21311] bridge0: left promiscuous mode [ 402.294922][T21318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.303907][T21318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.313698][T21318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.322509][T21318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.168863][T21353] validate_nla: 1 callbacks suppressed [ 403.168882][T21353] netlink: 'syz.2.4330': attribute type 3 has an invalid length. [ 403.445453][T21371] lo speed is unknown, defaulting to 1000 [ 403.489118][T21373] syzkaller0: entered promiscuous mode [ 403.501196][T21373] syzkaller0: entered allmulticast mode [ 403.729748][T21379] netlink: 'syz.3.4337': attribute type 3 has an invalid length. [ 403.790377][T21388] xfrm1: entered allmulticast mode [ 403.907021][ T5843] Bluetooth: hci0: command tx timeout [ 404.136351][T21403] vlan3: entered promiscuous mode [ 404.145789][T21403] geneve1: entered promiscuous mode [ 404.161389][T21403] vlan3: entered allmulticast mode [ 404.173535][T21403] geneve1: entered allmulticast mode [ 404.222003][T21412] tipc: Enabled bearer , priority 0 [ 404.254116][T21410] netem: change failed [ 404.286658][T21410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.246138][T21470] __nla_validate_parse: 5 callbacks suppressed [ 405.246157][T21470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4363'. [ 405.913276][T21514] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 405.920933][T21520] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4380'. [ 405.988959][ T5843] Bluetooth: hci0: command tx timeout [ 406.043823][T21528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4384'. [ 406.183341][T21536] bridge0: port 4(ipvlan2) entered blocking state [ 406.191290][T21536] bridge0: port 4(ipvlan2) entered disabled state [ 406.198397][T21536] ipvlan2: entered allmulticast mode [ 406.203824][T21536] bridge0: entered allmulticast mode [ 406.219347][T21536] ipvlan2: left allmulticast mode [ 406.228158][T21536] bridge0: left allmulticast mode [ 406.575616][T21570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4393'. [ 406.676610][T21577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4395'. [ 407.128081][T21607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4402'. [ 407.128329][T21609] netlink: 'syz.1.4404': attribute type 12 has an invalid length. [ 407.513082][T21633] syzkaller1: entered promiscuous mode [ 407.528081][T21633] syzkaller1: entered allmulticast mode [ 407.543661][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4411'. [ 407.558320][T21633] lo: entered allmulticast mode [ 407.627870][T21645] tipc: Enabled bearer , priority 0 [ 407.638693][T21645] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 407.648755][T21645] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 407.675749][T21645] tipc: Resetting bearer [ 407.762980][T21650] tipc: Invalid UDP bearer configuration [ 407.763033][T21650] tipc: Enabling of bearer rejected, failed to enable media [ 407.790678][T21656] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4421'. [ 407.909515][T21662] syzkaller1: entered promiscuous mode [ 407.916918][T21662] syzkaller1: entered allmulticast mode [ 408.076398][T21665] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 408.213031][T21676] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 408.221370][T21675] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 408.537994][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 408.604441][T16685] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.650338][T16685] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.663880][T16685] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.678019][T16685] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.834228][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4441'. [ 408.880309][T21720] gretap1: entered promiscuous mode [ 408.893765][T21720] gretap1: entered allmulticast mode [ 409.013299][T21729] netlink: 'syz.1.4445': attribute type 5 has an invalid length. [ 409.248974][T21749] FAULT_INJECTION: forcing a failure. [ 409.248974][T21749] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 409.262865][T21749] CPU: 1 UID: 0 PID: 21749 Comm: syz.1.4452 Not tainted syzkaller #0 PREEMPT(full) [ 409.262891][T21749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.262906][T21749] Call Trace: [ 409.262916][T21749] [ 409.262923][T21749] dump_stack_lvl+0x189/0x250 [ 409.262948][T21749] ? __pfx____ratelimit+0x10/0x10 [ 409.262968][T21749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.262987][T21749] ? __pfx__printk+0x10/0x10 [ 409.263008][T21749] ? __might_fault+0xb0/0x130 [ 409.263039][T21749] should_fail_ex+0x414/0x560 [ 409.263063][T21749] _copy_from_iter+0x1cd/0x1630 [ 409.263096][T21749] ? __pfx__copy_from_iter+0x10/0x10 [ 409.263119][T21749] ? aa_file_perm+0x139/0x1530 [ 409.263136][T21749] ? aa_sk_perm+0x15f/0x920 [ 409.263159][T21749] ? skb_put+0x11b/0x210 [ 409.263185][T21749] hci_sock_sendmsg+0x422/0xef0 [ 409.263211][T21749] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 409.263231][T21749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.263248][T21749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.263269][T21749] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 409.263290][T21749] __sock_sendmsg+0x21c/0x270 [ 409.263313][T21749] sock_write_iter+0x279/0x360 [ 409.263334][T21749] ? __pfx_sock_write_iter+0x10/0x10 [ 409.263363][T21749] ? bpf_lsm_file_permission+0x9/0x20 [ 409.263385][T21749] ? security_file_permission+0x75/0x290 [ 409.263414][T21749] vfs_write+0x5c9/0xb30 [ 409.263440][T21749] ? __pfx_sock_write_iter+0x10/0x10 [ 409.263465][T21749] ? __pfx_vfs_write+0x10/0x10 [ 409.263495][T21749] ? __fget_files+0x2a/0x420 [ 409.263520][T21749] ksys_write+0x145/0x250 [ 409.263542][T21749] ? __pfx_ksys_write+0x10/0x10 [ 409.263565][T21749] ? do_syscall_64+0xbe/0xf80 [ 409.263589][T21749] do_syscall_64+0xfa/0xf80 [ 409.263610][T21749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.263626][T21749] ? clear_bhb_loop+0x60/0xb0 [ 409.263647][T21749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.263662][T21749] RIP: 0033:0x7fc761d8f749 [ 409.263677][T21749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.263692][T21749] RSP: 002b:00007fc762d14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.263710][T21749] RAX: ffffffffffffffda RBX: 00007fc761fe5fa0 RCX: 00007fc761d8f749 [ 409.263723][T21749] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 409.263733][T21749] RBP: 00007fc762d14090 R08: 0000000000000000 R09: 0000000000000000 [ 409.263743][T21749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.263753][T21749] R13: 00007fc761fe6038 R14: 00007fc761fe5fa0 R15: 00007ffe13686f78 [ 409.263783][T21749] [ 410.047989][T21782] netlink: 'syz.2.4460': attribute type 3 has an invalid length. [ 410.210051][T21795] FAULT_INJECTION: forcing a failure. [ 410.210051][T21795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.236896][T21795] CPU: 0 UID: 0 PID: 21795 Comm: syz.2.4464 Not tainted syzkaller #0 PREEMPT(full) [ 410.236921][T21795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.236931][T21795] Call Trace: [ 410.236937][T21795] [ 410.236945][T21795] dump_stack_lvl+0x189/0x250 [ 410.236967][T21795] ? __pfx____ratelimit+0x10/0x10 [ 410.236987][T21795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.237002][T21795] ? __pfx__printk+0x10/0x10 [ 410.237023][T21795] ? __might_fault+0xb0/0x130 [ 410.237052][T21795] should_fail_ex+0x414/0x560 [ 410.237074][T21795] _copy_from_iter+0x1cd/0x1630 [ 410.237104][T21795] ? __pfx__copy_from_iter+0x10/0x10 [ 410.237127][T21795] ? aa_file_perm+0x139/0x1530 [ 410.237142][T21795] ? aa_sk_perm+0x15f/0x920 [ 410.237165][T21795] ? skb_put+0x11b/0x210 [ 410.237191][T21795] hci_sock_sendmsg+0x422/0xef0 [ 410.237215][T21795] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 410.237234][T21795] ? aa_sock_msg_perm+0xf1/0x1b0 [ 410.237251][T21795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.237272][T21795] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 410.237288][T21795] __sock_sendmsg+0x21c/0x270 [ 410.237309][T21795] sock_write_iter+0x279/0x360 [ 410.237330][T21795] ? __pfx_sock_write_iter+0x10/0x10 [ 410.237357][T21795] ? bpf_lsm_file_permission+0x9/0x20 [ 410.237379][T21795] ? security_file_permission+0x75/0x290 [ 410.237413][T21795] vfs_write+0x5c9/0xb30 [ 410.237437][T21795] ? __pfx_sock_write_iter+0x10/0x10 [ 410.237455][T21795] ? __pfx_vfs_write+0x10/0x10 [ 410.237482][T21795] ? __fget_files+0x2a/0x420 [ 410.237505][T21795] ksys_write+0x145/0x250 [ 410.237527][T21795] ? __pfx_ksys_write+0x10/0x10 [ 410.237556][T21795] ? do_syscall_64+0xbe/0xf80 [ 410.237579][T21795] do_syscall_64+0xfa/0xf80 [ 410.237600][T21795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.237615][T21795] ? clear_bhb_loop+0x60/0xb0 [ 410.237634][T21795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.237648][T21795] RIP: 0033:0x7f0b6f98f749 [ 410.237663][T21795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.237677][T21795] RSP: 002b:00007f0b707ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.237693][T21795] RAX: ffffffffffffffda RBX: 00007f0b6fbe5fa0 RCX: 00007f0b6f98f749 [ 410.237705][T21795] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 410.237713][T21795] RBP: 00007f0b707ea090 R08: 0000000000000000 R09: 0000000000000000 [ 410.237722][T21795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.237732][T21795] R13: 00007f0b6fbe6038 R14: 00007f0b6fbe5fa0 R15: 00007ffe6b82d708 [ 410.237759][T21795] [ 410.597017][T21805] __nla_validate_parse: 13 callbacks suppressed [ 410.597036][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4467'. [ 410.677219][T21810] netlink: 'syz.1.4468': attribute type 10 has an invalid length. [ 410.694102][T21805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.707146][ T5843] Bluetooth: hci0: command tx timeout [ 410.744879][T21805] xt_hashlimit: max too large, truncated to 1048576 [ 410.755504][T21810] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 410.948105][T21831] FAULT_INJECTION: forcing a failure. [ 410.948105][T21831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.974404][T21831] CPU: 0 UID: 0 PID: 21831 Comm: syz.0.4477 Not tainted syzkaller #0 PREEMPT(full) [ 410.974431][T21831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.974441][T21831] Call Trace: [ 410.974448][T21831] [ 410.974454][T21831] dump_stack_lvl+0x189/0x250 [ 410.974476][T21831] ? __pfx____ratelimit+0x10/0x10 [ 410.974495][T21831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.974512][T21831] ? __pfx__printk+0x10/0x10 [ 410.974544][T21831] should_fail_ex+0x414/0x560 [ 410.974568][T21831] _copy_to_user+0x31/0xb0 [ 410.974592][T21831] simple_read_from_buffer+0xe1/0x170 [ 410.974621][T21831] proc_fail_nth_read+0x1b3/0x220 [ 410.974645][T21831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.974669][T21831] ? rw_verify_area+0x2a6/0x4d0 [ 410.974688][T21831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.974710][T21831] vfs_read+0x200/0xa30 [ 410.974726][T21831] ? fdget_pos+0x247/0x320 [ 410.974745][T21831] ? __pfx___mutex_lock+0x10/0x10 [ 410.974765][T21831] ? __pfx_vfs_read+0x10/0x10 [ 410.974785][T21831] ? __fget_files+0x2a/0x420 [ 410.974802][T21831] ? __fget_files+0x3a0/0x420 [ 410.974815][T21831] ? __fget_files+0x2a/0x420 [ 410.974834][T21831] ksys_read+0x145/0x250 [ 410.974853][T21831] ? __pfx_ksys_read+0x10/0x10 [ 410.974874][T21831] ? do_syscall_64+0xbe/0xf80 [ 410.974896][T21831] do_syscall_64+0xfa/0xf80 [ 410.974915][T21831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.974931][T21831] ? clear_bhb_loop+0x60/0xb0 [ 410.974950][T21831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.974964][T21831] RIP: 0033:0x7f5a6398e15c [ 410.974980][T21831] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 410.974993][T21831] RSP: 002b:00007f5a61bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.975010][T21831] RAX: ffffffffffffffda RBX: 00007f5a63be5fa0 RCX: 00007f5a6398e15c [ 410.975021][T21831] RDX: 000000000000000f RSI: 00007f5a61bf60a0 RDI: 0000000000000003 [ 410.975031][T21831] RBP: 00007f5a61bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 410.975040][T21831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.975048][T21831] R13: 00007f5a63be6038 R14: 00007f5a63be5fa0 R15: 00007ffe42e941e8 [ 410.975076][T21831] [ 411.323845][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4482'. [ 411.351320][T21842] netlink: 'syz.2.4480': attribute type 39 has an invalid length. [ 411.404969][T21842] syz_tun (unregistering): left allmulticast mode [ 411.413403][T21846] netlink: 'syz.0.4484': attribute type 10 has an invalid length. [ 411.419431][T21842] syz_tun (unregistering): left promiscuous mode [ 411.446970][T21842] bridge0: port 3(syz_tun) entered disabled state [ 411.501166][T21846] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 411.697701][T21867] tipc: Enabled bearer , priority 0 [ 411.707949][T21867] syzkaller0: entered promiscuous mode [ 411.713537][T21867] syzkaller0: entered allmulticast mode [ 411.722955][T21867] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 411.812854][T21874] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4493'. [ 411.816494][T21867] tipc: Resetting bearer [ 411.868538][T21865] tipc: Resetting bearer [ 411.930658][T21882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4496'. [ 411.957557][T21865] tipc: Disabling bearer [ 411.988134][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 412.001934][T21891] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4496'. [ 412.016092][T21890] netlink: 412 bytes leftover after parsing attributes in process `syz.0.4499'. [ 412.029279][T21890] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 412.046622][T21886] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 412.196299][T21905] netlink: 'syz.1.4504': attribute type 1 has an invalid length. [ 412.242073][T21905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 412.291388][T21905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 412.298776][T21905] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 412.312612][T21905] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 412.379707][T21915] veth3: entered promiscuous mode [ 412.392044][T21915] bond7: (slave veth3): Enslaving as an active interface with a down link [ 412.405719][T21905] vlan2: entered allmulticast mode [ 412.419848][T21905] bond7: entered allmulticast mode [ 412.530598][T21921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4508'. [ 412.543397][T21921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4508'. [ 412.558162][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4508'. [ 412.578131][T21926] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 412.796922][ T5843] Bluetooth: hci0: command tx timeout [ 412.943091][T21949] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 413.200823][T21975] pimreg: left allmulticast mode [ 413.456004][T21995] xfrm1: entered allmulticast mode [ 413.917974][T22025] netlink: 'syz.1.4538': attribute type 6 has an invalid length. [ 414.037463][T22033] netlink: 'syz.0.4540': attribute type 1 has an invalid length. [ 414.135407][T22039] C: renamed from team_slave_0 (while UP) [ 414.164327][T22039] netlink: 'syz.1.4543': attribute type 1 has an invalid length. [ 414.204693][T22039] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 414.348748][T22060] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 414.454272][T22049] lo speed is unknown, defaulting to 1000 [ 414.481047][T22056] net veth1_virt_wifi .: renamed from virt_wifi0 [ 414.666409][T22073] syzkaller0: entered promiscuous mode [ 414.708063][T22073] syzkaller0: entered allmulticast mode [ 414.866944][ T5843] Bluetooth: hci0: command tx timeout [ 415.468357][T10381] lec:lec_start_xmit: lec0:No lecd attached [ 415.485590][T22121] nbd: couldn't find a device at index 0 [ 415.741116][T22133] xt_l2tp: v2 tid > 0xffff: 1114244 [ 416.478192][T22157] __nla_validate_parse: 16 callbacks suppressed [ 416.478213][T22157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4578'. [ 416.505196][T22159] bond_slave_1: default FDB implementation only supports local addresses [ 416.527587][T22157] tipc: Enabling of bearer rejected, already enabled [ 416.547615][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 416.585442][T22157] sch_tbf: burst 127 is lower than device veth0_to_hsr mtu (1514) ! [ 416.677610][T22166] openvswitch: netlink: Message has -2 unknown bytes. [ 416.933466][T22176] netlink: 'syz.3.4584': attribute type 3 has an invalid length. [ 416.947147][ T5155] Bluetooth: hci0: command tx timeout [ 416.972775][T22176] netlink: 'syz.3.4584': attribute type 1 has an invalid length. [ 417.036661][T22176] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4584'. [ 417.159736][T22164] veth9: entered allmulticast mode [ 417.315553][T22176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.468697][T22176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.553932][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4591'. [ 417.580299][T22176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.692409][ T25] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 270 seconds [ 417.703322][ T25] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 270 seconds [ 417.715673][ T25] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 270 seconds [ 417.727557][ T25] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 270 seconds [ 417.823941][T22176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.082144][ T6261] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.105522][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4597'. [ 418.117392][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4597'. [ 418.137982][ T6261] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.178496][ T6261] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.226337][ T67] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.321603][T22251] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 418.528674][T22254] [ 418.531035][T22254] ====================================================== [ 418.538066][T22254] WARNING: possible circular locking dependency detected [ 418.545097][T22254] syzkaller #0 Not tainted [ 418.549519][T22254] ------------------------------------------------------ [ 418.556530][T22254] syz.3.4602/22254 is trying to acquire lock: [ 418.562582][T22254] ffff888025449988 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 418.572057][T22254] [ 418.572057][T22254] but task is already holding lock: [ 418.579407][T22254] ffff888025449448 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 418.589616][T22254] [ 418.589616][T22254] which lock already depends on the new lock. [ 418.589616][T22254] [ 418.600008][T22254] [ 418.600008][T22254] the existing dependency chain (in reverse order) is: [ 418.609010][T22254] [ 418.609010][T22254] -> #6 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 418.617621][T22254] blk_alloc_queue+0x538/0x620 [ 418.622902][T22254] __blk_mq_alloc_disk+0x15c/0x340 [ 418.628520][T22254] nbd_dev_add+0x46c/0xae0 [ 418.633446][T22254] nbd_init+0x168/0x1f0 [ 418.638107][T22254] do_one_initcall+0x1fb/0x7f0 [ 418.643378][T22254] do_initcall_level+0x104/0x190 [ 418.648823][T22254] do_initcalls+0x59/0xa0 [ 418.653665][T22254] kernel_init_freeable+0x334/0x4b0 [ 418.659398][T22254] kernel_init+0x1d/0x1d0 [ 418.664232][T22254] ret_from_fork+0x599/0xb30 [ 418.669328][T22254] ret_from_fork_asm+0x1a/0x30 [ 418.674596][T22254] [ 418.674596][T22254] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 418.681793][T22254] fs_reclaim_acquire+0x72/0x100 [ 418.687250][T22254] kmem_cache_alloc_node_noprof+0x48/0x710 [ 418.693569][T22254] __alloc_skb+0x255/0x430 [ 418.698492][T22254] tcp_stream_alloc_skb+0x3d/0x350 [ 418.704103][T22254] tcp_sendmsg_locked+0x1ab8/0x5520 [ 418.709801][T22254] tcp_sendmsg+0x2f/0x50 [ 418.714557][T22254] __sock_sendmsg+0x19c/0x270 [ 418.719745][T22254] sock_write_iter+0x279/0x360 [ 418.725016][T22254] vfs_write+0x5c9/0xb30 [ 418.729764][T22254] ksys_write+0x145/0x250 [ 418.734629][T22254] do_syscall_64+0xfa/0xf80 [ 418.739724][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.746119][T22254] [ 418.746119][T22254] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 418.753754][T22254] lock_sock_nested+0x48/0x100 [ 418.759034][T22254] tcp_sendmsg+0x21/0x50 [ 418.763777][T22254] __sock_sendmsg+0x19c/0x270 [ 418.768969][T22254] sock_sendmsg+0x158/0x230 [ 418.773975][T22254] __sock_xmit+0x25f/0x530 [ 418.778898][T22254] nbd_disconnect+0x384/0x510 [ 418.784082][T22254] nbd_disconnect_and_put+0x37/0x2a0 [ 418.789875][T22254] nbd_genl_disconnect+0x485/0x570 [ 418.795494][T22254] genl_family_rcv_msg_doit+0x215/0x300 [ 418.801562][T22254] genl_rcv_msg+0x60e/0x790 [ 418.806573][T22254] netlink_rcv_skb+0x208/0x470 [ 418.811842][T22254] genl_rcv+0x28/0x40 [ 418.816330][T22254] netlink_unicast+0x82f/0x9e0 [ 418.821601][T22254] netlink_sendmsg+0x805/0xb30 [ 418.826871][T22254] __sock_sendmsg+0x21c/0x270 [ 418.832054][T22254] ____sys_sendmsg+0x505/0x820 [ 418.837336][T22254] ___sys_sendmsg+0x21f/0x2a0 [ 418.842528][T22254] __x64_sys_sendmsg+0x19b/0x260 [ 418.847974][T22254] do_syscall_64+0xfa/0xf80 [ 418.852984][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.859379][T22254] [ 418.859379][T22254] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 418.867011][T22254] __mutex_lock+0x187/0x1350 [ 418.872120][T22254] nbd_queue_rq+0x257/0xf10 [ 418.877148][T22254] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 418.883198][T22254] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 418.890030][T22254] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 418.896513][T22254] blk_mq_run_hw_queue+0x348/0x4f0 [ 418.902150][T22254] blk_mq_dispatch_list+0xd0c/0xe00 [ 418.907853][T22254] blk_mq_flush_plug_list+0x469/0x550 [ 418.913728][T22254] __blk_flush_plug+0x3d3/0x4b0 [ 418.919089][T22254] __submit_bio+0x2d3/0x5a0 [ 418.924095][T22254] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 418.930316][T22254] block_read_full_folio+0x599/0x830 [ 418.936108][T22254] filemap_read_folio+0x117/0x380 [ 418.941646][T22254] do_read_cache_folio+0x350/0x590 [ 418.947272][T22254] read_part_sector+0xb6/0x2b0 [ 418.952554][T22254] adfspart_check_ICS+0xa4/0xa50 [ 418.958006][T22254] bdev_disk_changed+0x75f/0x14b0 [ 418.963559][T22254] blkdev_get_whole+0x380/0x510 [ 418.968918][T22254] bdev_open+0x31e/0xd30 [ 418.973670][T22254] blkdev_open+0x457/0x600 [ 418.978617][T22254] do_dentry_open+0x7ce/0x1420 [ 418.983904][T22254] vfs_open+0x3b/0x340 [ 418.988474][T22254] path_openat+0x340e/0x3dd0 [ 418.993574][T22254] do_filp_open+0x1fa/0x410 [ 418.998582][T22254] do_sys_openat2+0x121/0x200 [ 419.003762][T22254] __x64_sys_openat+0x138/0x170 [ 419.009126][T22254] do_syscall_64+0xfa/0xf80 [ 419.014138][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.020542][T22254] [ 419.020542][T22254] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 419.027827][T22254] __mutex_lock+0x187/0x1350 [ 419.032929][T22254] nbd_queue_rq+0xc8/0xf10 [ 419.037853][T22254] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 419.043994][T22254] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 419.050838][T22254] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 419.057319][T22254] blk_mq_run_hw_queue+0x348/0x4f0 [ 419.062936][T22254] blk_mq_dispatch_list+0xd0c/0xe00 [ 419.068636][T22254] blk_mq_flush_plug_list+0x469/0x550 [ 419.074597][T22254] __blk_flush_plug+0x3d3/0x4b0 [ 419.079954][T22254] __submit_bio+0x2d3/0x5a0 [ 419.084973][T22254] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 419.091108][T22254] block_read_full_folio+0x599/0x830 [ 419.096903][T22254] filemap_read_folio+0x117/0x380 [ 419.102435][T22254] do_read_cache_folio+0x350/0x590 [ 419.108057][T22254] read_part_sector+0xb6/0x2b0 [ 419.113331][T22254] adfspart_check_ICS+0xa4/0xa50 [ 419.118773][T22254] bdev_disk_changed+0x75f/0x14b0 [ 419.124308][T22254] blkdev_get_whole+0x380/0x510 [ 419.129663][T22254] bdev_open+0x31e/0xd30 [ 419.134407][T22254] blkdev_open+0x457/0x600 [ 419.139415][T22254] do_dentry_open+0x7ce/0x1420 [ 419.144680][T22254] vfs_open+0x3b/0x340 [ 419.149248][T22254] path_openat+0x340e/0x3dd0 [ 419.154344][T22254] do_filp_open+0x1fa/0x410 [ 419.159352][T22254] do_sys_openat2+0x121/0x200 [ 419.164548][T22254] __x64_sys_openat+0x138/0x170 [ 419.169929][T22254] do_syscall_64+0xfa/0xf80 [ 419.174958][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.181378][T22254] [ 419.181378][T22254] -> #1 (set->srcu){.+.+}-{0:0}: [ 419.188503][T22254] __synchronize_srcu+0x96/0x390 [ 419.193957][T22254] elevator_switch+0x12b/0x640 [ 419.199227][T22254] elevator_change+0x315/0x4c0 [ 419.204497][T22254] elevator_set_default+0x186/0x260 [ 419.210200][T22254] blk_register_queue+0x34e/0x3f0 [ 419.215739][T22254] __add_disk+0x677/0xd50 [ 419.220572][T22254] add_disk_fwnode+0xfc/0x480 [ 419.225760][T22254] nbd_dev_add+0x717/0xae0 [ 419.230682][T22254] nbd_init+0x168/0x1f0 [ 419.235356][T22254] do_one_initcall+0x1fb/0x7f0 [ 419.240624][T22254] do_initcall_level+0x104/0x190 [ 419.246067][T22254] do_initcalls+0x59/0xa0 [ 419.250895][T22254] kernel_init_freeable+0x334/0x4b0 [ 419.256602][T22254] kernel_init+0x1d/0x1d0 [ 419.261431][T22254] ret_from_fork+0x599/0xb30 [ 419.266540][T22254] ret_from_fork_asm+0x1a/0x30 [ 419.271810][T22254] [ 419.271810][T22254] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 419.279612][T22254] __lock_acquire+0x15a6/0x2cf0 [ 419.284966][T22254] lock_acquire+0x117/0x340 [ 419.289968][T22254] __mutex_lock+0x187/0x1350 [ 419.295071][T22254] elevator_change+0x1e5/0x4c0 [ 419.300426][T22254] elevator_set_none+0x42/0xb0 [ 419.305691][T22254] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 419.312008][T22254] nbd_start_device+0x17f/0xb10 [ 419.317362][T22254] nbd_genl_connect+0x135b/0x18f0 [ 419.322891][T22254] genl_family_rcv_msg_doit+0x215/0x300 [ 419.328942][T22254] genl_rcv_msg+0x60e/0x790 [ 419.333977][T22254] netlink_rcv_skb+0x208/0x470 [ 419.339254][T22254] genl_rcv+0x28/0x40 [ 419.343758][T22254] netlink_unicast+0x82f/0x9e0 [ 419.349052][T22254] netlink_sendmsg+0x805/0xb30 [ 419.354345][T22254] __sock_sendmsg+0x21c/0x270 [ 419.359530][T22254] ____sys_sendmsg+0x505/0x820 [ 419.364808][T22254] ___sys_sendmsg+0x21f/0x2a0 [ 419.369992][T22254] __x64_sys_sendmsg+0x19b/0x260 [ 419.375440][T22254] do_syscall_64+0xfa/0xf80 [ 419.380474][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.386870][T22254] [ 419.386870][T22254] other info that might help us debug this: [ 419.386870][T22254] [ 419.397077][T22254] Chain exists of: [ 419.397077][T22254] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 419.397077][T22254] [ 419.410804][T22254] Possible unsafe locking scenario: [ 419.410804][T22254] [ 419.418243][T22254] CPU0 CPU1 [ 419.423612][T22254] ---- ---- [ 419.428968][T22254] lock(&q->q_usage_counter(io)#59); [ 419.434375][T22254] lock(fs_reclaim); [ 419.440865][T22254] lock(&q->q_usage_counter(io)#59); [ 419.448747][T22254] lock(&q->elevator_lock); [ 419.453338][T22254] [ 419.453338][T22254] *** DEADLOCK *** [ 419.453338][T22254] [ 419.461701][T22254] 6 locks held by syz.3.4602/22254: [ 419.466890][T22254] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 419.475176][T22254] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 419.484304][T22254] #2: ffff88802551b1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 419.495691][T22254] #3: ffff88802551b0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 419.506638][T22254] #4: ffff888025449448 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 419.517243][T22254] #5: ffff888025449480 (&q->q_usage_counter(queue)#43){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 419.528106][T22254] [ 419.528106][T22254] stack backtrace: [ 419.533976][T22254] CPU: 0 UID: 0 PID: 22254 Comm: syz.3.4602 Not tainted syzkaller #0 PREEMPT(full) [ 419.533994][T22254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.534003][T22254] Call Trace: [ 419.534010][T22254] [ 419.534017][T22254] dump_stack_lvl+0x189/0x250 [ 419.534035][T22254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.534049][T22254] ? __pfx__printk+0x10/0x10 [ 419.534065][T22254] ? print_lock_name+0xde/0x100 [ 419.534083][T22254] print_circular_bug+0x2e2/0x300 [ 419.534100][T22254] check_noncircular+0x12e/0x150 [ 419.534117][T22254] __lock_acquire+0x15a6/0x2cf0 [ 419.534138][T22254] ? elevator_change+0x1e5/0x4c0 [ 419.534150][T22254] lock_acquire+0x117/0x340 [ 419.534161][T22254] ? elevator_change+0x1e5/0x4c0 [ 419.534177][T22254] __mutex_lock+0x187/0x1350 [ 419.534194][T22254] ? elevator_change+0x1e5/0x4c0 [ 419.534207][T22254] ? xa_find_after+0xae/0x430 [ 419.534225][T22254] ? xa_find_after+0x402/0x430 [ 419.534241][T22254] ? elevator_change+0x1e5/0x4c0 [ 419.534251][T22254] ? xa_find_after+0xae/0x430 [ 419.534269][T22254] ? __pfx___mutex_lock+0x10/0x10 [ 419.534286][T22254] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 419.534304][T22254] elevator_change+0x1e5/0x4c0 [ 419.534318][T22254] elevator_set_none+0x42/0xb0 [ 419.534331][T22254] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 419.534353][T22254] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 419.534374][T22254] ? sysfs_add_file_mode_ns+0x259/0x300 [ 419.534391][T22254] nbd_start_device+0x17f/0xb10 [ 419.534409][T22254] ? device_create_file+0xf4/0x1b0 [ 419.534433][T22254] nbd_genl_connect+0x135b/0x18f0 [ 419.534451][T22254] ? __pfx_nbd_genl_connect+0x10/0x10 [ 419.534468][T22254] ? rcu_is_watching+0x15/0xb0 [ 419.534484][T22254] ? __nla_parse+0x40/0x60 [ 419.534501][T22254] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 419.534521][T22254] genl_family_rcv_msg_doit+0x215/0x300 [ 419.534540][T22254] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.534559][T22254] ? __lock_acquire+0x6b6/0x2cf0 [ 419.534574][T22254] genl_rcv_msg+0x60e/0x790 [ 419.534590][T22254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.534605][T22254] ? __pfx_nbd_genl_connect+0x10/0x10 [ 419.534624][T22254] netlink_rcv_skb+0x208/0x470 [ 419.534637][T22254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.534652][T22254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.534669][T22254] ? down_read+0x274/0x2e0 [ 419.534686][T22254] ? genl_rcv+0xd/0x40 [ 419.534700][T22254] genl_rcv+0x28/0x40 [ 419.534714][T22254] netlink_unicast+0x82f/0x9e0 [ 419.534734][T22254] ? __pfx_netlink_unicast+0x10/0x10 [ 419.534751][T22254] ? netlink_sendmsg+0x642/0xb30 [ 419.534762][T22254] ? skb_put+0x11b/0x210 [ 419.534780][T22254] netlink_sendmsg+0x805/0xb30 [ 419.534796][T22254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.534809][T22254] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.534822][T22254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.534839][T22254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.534851][T22254] __sock_sendmsg+0x21c/0x270 [ 419.534867][T22254] ____sys_sendmsg+0x505/0x820 [ 419.534886][T22254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.534907][T22254] ? import_iovec+0x74/0xa0 [ 419.534925][T22254] ___sys_sendmsg+0x21f/0x2a0 [ 419.534943][T22254] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.534963][T22254] ? futex_wake+0x4b2/0x560 [ 419.534986][T22254] ? __fget_files+0x2a/0x420 [ 419.534997][T22254] ? __fget_files+0x3a0/0x420 [ 419.535012][T22254] __x64_sys_sendmsg+0x19b/0x260 [ 419.535030][T22254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.535053][T22254] ? do_syscall_64+0xbe/0xf80 [ 419.535070][T22254] do_syscall_64+0xfa/0xf80 [ 419.535085][T22254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.535098][T22254] ? clear_bhb_loop+0x60/0xb0 [ 419.535112][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.535124][T22254] RIP: 0033:0x7f944078f749 [ 419.535137][T22254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.535149][T22254] RSP: 002b:00007f9441613038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.535163][T22254] RAX: ffffffffffffffda RBX: 00007f94409e5fa0 RCX: 00007f944078f749 [ 419.535173][T22254] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 419.535181][T22254] RBP: 00007f9440813f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.535189][T22254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.535197][T22254] R13: 00007f94409e6038 R14: 00007f94409e5fa0 R15: 00007fff364aa7d8 [ 419.535212][T22254] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 419.990327][ T5155] Bluetooth: hci0: command tx timeout [ 420.003780][T22271] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.4606'. [ 420.013172][T22271] openvswitch: netlink: Message has 6 unknown bytes. [ 420.233068][ T5843] block nbd10: Receive control failed (result -32) [ 420.233279][ T5155] block nbd10: Receive control failed (result -32) [ 420.240358][ T5843] block nbd10: Receive control failed (result -32) [ 420.246987][ T5155] block nbd10: Receive control failed (result -32) [ 420.260794][ T6253] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.278002][T22267] netlink: 'syz.0.4605': attribute type 1 has an invalid length. [ 420.285758][T22267] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4605'. [ 420.498182][ T6253] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.600973][ T6253] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.658637][ T6253] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.723877][ T6253] ve: left allmulticast mode [ 420.728780][ T6253] bridge0: port 3(ve) entered disabled state [ 420.735779][ T6253] bridge_slave_1: left allmulticast mode [ 420.741568][ T6253] bridge_slave_1: left promiscuous mode [ 420.748281][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.756368][ T6253] bridge_slave_0: left allmulticast mode [ 420.763341][ T6253] bridge_slave_0: left promiscuous mode [ 420.769487][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.862634][ T6253] bond3 (unregistering): (slave gretap1): Releasing active interface [ 420.870895][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 420.870912][ C1] lec:lec_tx_timeout: lec0 [ 421.008715][ T6253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.017675][ T6253] bond_slave_0: left allmulticast mode [ 421.024392][ T6253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.035650][ T6253] bond_slave_1: left allmulticast mode [ 421.042858][ T6253] bond0 (unregistering): Released all slaves [ 421.051570][ T6253] bond1 (unregistering): Released all slaves [ 421.060674][ T6253] bond2 (unregistering): Released all slaves [ 421.154381][ T6253] bond3 (unregistering): Released all slaves [ 421.163262][ T6253] bond4 (unregistering): Released all slaves [ 421.254416][ T6253] bond5 (unregistering): Released all slaves [ 421.338931][ T6253] bond6 (unregistering): Released all slaves [ 421.427085][ T6253] bond7 (unregistering): (slave veth3): Releasing active interface [ 421.436026][ T6253] bond7 (unregistering): Released all slaves [ 421.476575][ T6253] tipc: Left network mode [ 421.508341][ T6253] IPVS: stopping master sync thread 21084 ... [ 421.735075][ T6253] hsr_slave_0: left promiscuous mode [ 421.745406][ T6253] hsr_slave_1: left promiscuous mode [ 421.764035][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.777025][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.784921][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.792704][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.802513][ T6253] veth1_macvtap: left promiscuous mode [ 421.808095][ T6253] veth0_macvtap: left promiscuous mode [ 421.813600][ T6253] veth1_vlan: left promiscuous mode [ 421.965001][ T6253] team0 (unregistering): Port device team_slave_1 removed [ 421.990776][ T6253] team0 (unregistering): Port device C removed