last executing test programs: 3.017857233s ago: executing program 2 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b40)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000b80)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x5813}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000bc0)=0x1, 0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000c40)=[{&(0x7f0000000c80)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) (async) sendmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000c40)=[{&(0x7f0000000c80)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x4, 0xfd90, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x366, 0x10, &(0x7f0000000700), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r3, r4, 0x5, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r3, r4, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000cc0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xff}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xfff7}, {0xb, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x4, 0x20000000, 0x7, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}}, 0x44800) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x6e) (async) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x6e) sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x2, 0xe}, {0xf, 0xa}, {0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x2, 0xe}, {0xf, 0xa}, {0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) 2.402480249s ago: executing program 4 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x128}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="a10100001400add427323b47ff81004e22000d00ff0028925aa80020007b0009", 0x20}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010600000000000000003000000008000200", @ANYRES32=r10, @ANYBLOB="05003300707b592ea0dfae6dbd91c412736000ba63e7ee223b8f577ea7196528bceee04a118a2125ccd1634025c484fba21b00c7328b19ffbb50707cf03c368f1e0475b7bfbaef2f8ed112cda924e6d26c59ea12b0a4ab8d7e0edd23005f3d9f76f70f6c72a9732b61ed09844fb372983bb6f050435d1aa2685cfe4c1cda84628f3bfa98ac343dce7d497f4e807fdae001452792049f8a4ce870b985ad7f1863af5bfc6b4f77cfa7db7ca33717d7215febeb2bfc47b4d0b9f0b67692ed498ef6e7100008f8469c972f4b72e2b1d5de"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a00000008000100000000000800020011000000080003"], 0x2c}}, 0x0) r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80800) setsockopt$bt_BT_VOICE(r13, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r14, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.338393896s ago: executing program 3 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x2, 0x30}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x31, 0x9, 0x70bd27, 0x25dfdc00, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x84) 2.142981143s ago: executing program 2 (id=2177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000206010200000000000000043af4d65f2a9aad8959ec40000200000305000100070000000900020073797a31000000000500040003000000050005000300000011000300686173683a69702c706f727400002300"], 0x4c}}, 0x8080) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="88010000100001000000000000000000e00000020000000000000000000000000000014e240000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) r2 = accept4$inet_tcp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x800) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r4, 0x215eb000) r5 = socket$rds(0x15, 0x5, 0x0) recvmsg(r5, 0x0, 0x40004101) (async) recvmsg(r5, 0x0, 0x40004101) bind$rds(r5, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$rds(r5, 0x0, 0x0) (async) sendmsg$rds(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000600)={@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, {&(0x7f00000006c0)=""/225, 0xe1}, 0x0, 0x8}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000600)={@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, {&(0x7f00000006c0)=""/225, 0xe1}, 0x0, 0x8}, 0xa0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000004c0)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f00000002c0)={0x11, 0x86dd, r8}, 0x14) (async) sendto$packet(r3, &(0x7f0000000280)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f00000002c0)={0x11, 0x86dd, r8}, 0x14) pwrite64(r2, &(0x7f0000000080)="4443e6cb2cf5f15dbc585d415884627c482ebe8f27ca0fc409a8384213b10c6809c070e0222b88ec154ccef2572b51dc2c089ff78f52bf76843b0b9930dafb7e1c7d4c8612ef", 0x46, 0x5) (async) pwrite64(r2, &(0x7f0000000080)="4443e6cb2cf5f15dbc585d415884627c482ebe8f27ca0fc409a8384213b10c6809c070e0222b88ec154ccef2572b51dc2c089ff78f52bf76843b0b9930dafb7e1c7d4c8612ef", 0x46, 0x5) socket(0x2b, 0x1, 0x9) (async) socket(0x2b, 0x1, 0x9) 2.073851398s ago: executing program 3 (id=2178): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0xde9, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa7e, r2}, 0x38) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x5c}, {0x6}]}, 0x10) 1.861181131s ago: executing program 4 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 1.71318594s ago: executing program 4 (id=2182): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x12, 0x9, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000300)={'ip_vti0\x00', 0x100}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) close(0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 1.71104472s ago: executing program 3 (id=2184): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x80, 0xfffffffb, @vifc_lcl_addr=@private=0xa010100, @private=0xa010101}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)={0x2c, r4, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4000000000008000}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 1.679345631s ago: executing program 0 (id=2185): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000000) (async) close(0x3) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x3ff, 0x8, 0x2, 0x100}}]}, {0x43}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) (async) sendmmsg(r2, &(0x7f0000000100), 0x40000000000009f, 0x0) close(r1) 1.509171148s ago: executing program 4 (id=2187): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x33, 0x0, &(0x7f0000000540)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x600) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[], 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xf}}}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000140)={r7, 0x7}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4], 0x70}}, 0x1) 1.493143562s ago: executing program 0 (id=2188): r0 = socket$kcm(0x29, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10801, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0x3) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYRES32=r1], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 1.465521741s ago: executing program 3 (id=2189): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'gretap0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'P'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg(r3, &(0x7f0000000540), 0x4000000000000d2, 0x8048848) (async) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000001c0)={0xb0bd, 0x3f3d}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r15, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r16, &(0x7f0000000640), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000000740)='GPL\x00', 0x5, 0xfd95, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) recvmmsg(r15, &(0x7f0000000680), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 1.401065234s ago: executing program 1 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000080)='\x00', 0x10002, &(0x7f00000000c0)={@_ha_fsid={[0xfff80000, 0xc24a]}, {0x5, 0x80, 0x7, 0x2}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7fffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x14c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in=@remote, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x7fff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x0, 0xfffffffe}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x59, 0x2, {{'cbc(camellia)\x00'}, 0x88, "1a000b000000366a6a849a7390450024f3"}}]}, 0x14c}}, 0x44050) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) 1.317808481s ago: executing program 0 (id=2191): syz_emit_ethernet(0x1456, &(0x7f0000001640)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0xd, 0x6, "434ec3", 0x1420, 0x21, 0x0, @mcast2, @local, {[@srh={0x73, 0x6, 0x4, 0x4, 0x2, 0x68, 0xb68a, {@private0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}, @hopopts={0x3b, 0x34, '\x00', [@pad1, @generic={0x3, 0xe2, "ce13fd4d49ef95a1f1cf305ac319b145d7675ec94bb61e7e392196f0071ba74b34b0f189c53513a551ac4d2c74420c1c29e75769933a58ee247ea579b3270cd1f5ad5ae3918e017b4980833649003cdd199380beb8fa6e976a1620dd555a45e2241e22782676367638bfdcc9c0a8ee217e42b95746716e89bd1c786e5418635324618a35e6cabb4aa8a572d175fdb678daafd1a786043724872f0bf97c97c8b4d0cc452b42333a436c935a883dbf09348f5c2d10fec29ad4c9c6ee6aef2af2331ae42b0f0a493d2d6a9cba16b4c88f8b42944f8612c4aeae14763b35593b29aee5b4"}, @generic={0x4}, @generic={0x0, 0x10, "675076f0ef96a62364408cc35489b350"}, @ra={0x5, 0x2, 0x9ab3}, @generic={0x6, 0xa5, "06d5a73edb48523d5e32581cafd306fbf89813128f9d4437eaeea594d127f19c77656b803c6b0cc197b954ebccbcea6a4e87ed6ea54c723aee8a2013d40c21025cda6391413d24c288f0f0fde97560c40dd37afed1f6b41ff591f85d636f1a3705b3c63f2fdaeb805fea8b33e27390931f374b826314683958d67470ed710666aca7f724a71c4e4ab669f2d1b1250971e9f6818403f73742911bb26f352692441eca077e38"}]}, @dstopts={0x2, 0x2c, '\x00', [@generic={0x0, 0x3a, "280a91a8e4ae7288a209cb19703b0f8933bca61c3c8ae207fe8129a598ee4b4f0487db613b6be788980778b377bce5026c417fcae99e4a887f1c"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @generic={0x1, 0xf9, "e41c5ba8f3e26e4847dfd8483b4826cb31fb07dcb2690a77c46eb9eeca66fa7298ab83423c08b3957da7ffa0c467263a96dfb2af0b11b28784b9f27b0d33462f2cba41c80666684c1805c71712b2b4b45d1a0888878fbf4e3d8f002834aa470d1aaeb824ca25b5f0e1a57311f1473fbd310372bd40bfbdc5d3e9dff1f034e06f1f66752c81d702ef9be3463716b4b46853409fe9dd3a107a634f69377d9c3c6c0b7749573a25f26a9e5187027189ab31aedf1ad7995f0d5290414106cb27214f4c440be5d94c7f24d7bdddd400157c76b9e6d7cd8d0ec6eaddbae241424dbb19ccb3c237b440c06b06199c4a4c863cb08ccf14f07b4b43c460"}, @hao={0xc9, 0x10, @empty}]}, @hopopts={0x0, 0x4, '\x00', [@generic={0x3, 0x1c, "dfa0347fd4e600e15333231068a6140e62e64b014cecea2b92e74419"}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x11, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0xc3e, [0xffff, 0x3]}}, @ra={0x5, 0x2, 0x7f}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x38, {0x2, 0xc, 0x5f, 0x8, [0x8000000000000001, 0x9, 0x8, 0x0, 0x10e3, 0xffff]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @remote}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, "5ffd2a", 0x4, "0ffc20"}, "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"}}}}}}, 0x0) 812.73391ms ago: executing program 0 (id=2192): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3a, 0x301, 0x70bd2d, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4, 0xd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x2}}]}}]}, 0x44}}, 0x20000080) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x24}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7fffffff}, @in6={0xa, 0x4e22, 0x349, @mcast2, 0x1}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x41}, @in6={0xa, 0x4e21, 0x1539, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x38a14b73}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x7f}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0xe, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7fff}, @in={0x2, 0x4e20, @remote}], 0xe4) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) connect$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3a, 0x301, 0x70bd2d, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4, 0xd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x2}}]}}]}, 0x44}}, 0x20000080) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x24}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7fffffff}, @in6={0xa, 0x4e22, 0x349, @mcast2, 0x1}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x41}, @in6={0xa, 0x4e21, 0x1539, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x38a14b73}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x7f}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0xe, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7fff}, @in={0x2, 0x4e20, @remote}], 0xe4) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) 812.121919ms ago: executing program 4 (id=2193): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x2, 0x0, 0x0, 0x2, 0x8, 0xb}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x2, 0x0, 0x0, 0x2, 0x8, 0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000200000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000100), 0x4) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000003c0)={'security\x00', 0x0, [0x7, 0xff, 0x7f, 0x2, 0x10001]}, &(0x7f0000000440)=0x54) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640)) 811.623663ms ago: executing program 0 (id=2194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r4, &(0x7f00000001c0)=ANY=[], 0x6) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047452, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40094) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b00)=@newtaction={0x5c, 0x32, 0xffff, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x48, 0x1, [@m_mirred={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x26}, {0x15, 0x6, "ea7490804d539aa144cb50115c70b1f77d"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004040) socket$nl_route(0x10, 0x3, 0x0) 811.250006ms ago: executing program 2 (id=2195): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000640)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000680)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 773.228615ms ago: executing program 0 (id=2196): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfffff001, @mcast1, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001680)=r11, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 644.535096ms ago: executing program 2 (id=2197): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x49000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x8, 0x0, 0x1}, 0x48) socket(0x40000000015, 0x5, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10) sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) (async) sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000540)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000580)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000580)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000005c0)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000005c0)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000600)={@multicast2, @loopback, @empty}, 0xc) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000280)=""/76}, 0x20) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044fe0000a8001600050003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 643.934014ms ago: executing program 4 (id=2198): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x228, 0x206, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0xc, 0x1}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@remote, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x9, 0x5bce298bafab6e28, 0x6, 0x6, 0x5, 0x6], 0x4, 0x1}, {0x2, [0x4, 0x4536cc6ff13eb648, 0x7, 0x4, 0x0, 0x1], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) (async) splice(r2, 0x0, r1, 0x0, 0x9, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a", @ANYRES32], 0x48}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000340)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000380)={0x0, 0xffffffffffffff4a, &(0x7f00000003c0)={&(0x7f0000000400)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f00000007c0)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 'none\x00', 0x23, 0x7, 0x32}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xa079c84bd2c3e50f, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) 619.222053ms ago: executing program 1 (id=2199): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x15c, r5, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x12b, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @initial, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}]}, 0x15c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 530.684251ms ago: executing program 3 (id=2200): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x1d, r4}, 0x10, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400000004010000ff7f0000000000006a154dff6d47f38f12330ddd8d1090caee834897f7f1d24735c8b7b3759ab29f6fd8686ceb8179d73a6d54ca6afd30c7be25a0306e128297a2f6b3d9", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+60000, @ANYBLOB="0300006001000000020000c03d020000ec3bd68e31b3b265f39649ab9967500973655d16f126c255fba965b5ff591f3847998b6b69394c2b1f79ae99446a4dded625ba51868284a8c4ad24638cab90a9"], 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="330000001f00001c00", @ANYRES32=0x0, @ANYBLOB="00000000306200001c0012800e00010069703667726574617000000008000280040012000a0003003a712f0756b80000"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r8}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="01000000030000006400000000000000000000000000000000000000000000000000000000000000000000000000000002000000010000000200", 0x3a}], 0x1}}], 0x2, 0x0) 393.108469ms ago: executing program 1 (id=2201): r0 = socket(0x29, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e20, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10001}, {0xa, 0x4e22, 0x7ff, @private0, 0x32}, 0x1, {[0x0, 0x10001, 0x6, 0x6, 0x0, 0x8, 0x2, 0x2]}}, 0x5c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0xfffffffc}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000580)={'dummy0\x00', 0x1}) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f00000004c0)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) socketpair(0x1, 0x5, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) accept4(r6, &(0x7f0000000700)=@ieee802154={0x24, @long}, &(0x7f0000000780)=0x80, 0x80000) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2c, r5, 0x5971e06f9096d08d, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x4008804) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f0000000240)="bc866cb50cbc893dc6412f97c5ead705eef21641372a23a92463707e0db7dca79bd766835094191d83f31da3dcc03487cd5521") setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$EXT4_IOC_GET_TUNE_SB_PARAM(r0, 0x80e8662d, &(0x7f0000000040)) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0x2, 0x7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000280)) syz_emit_ethernet(0x1b9, &(0x7f0000000300)=ANY=[@ANYBLOB="05b1ff035660aaaaaaaaaabb86dd6a1c3fbf018306ff00000000000000000000ffff0a010102fe8000000000000000000000000000aa2909000000000000c20400000006c20403000000071800000002040a070000100000000000000600000000000000071800000000040402000500000000000000df000000000000000107000000000000000000000000000001000900650000004e204e23", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="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"], 0x0) 372.505372ms ago: executing program 2 (id=2202): unshare(0x2020000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getneightbl={0x14, 0x42, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x800, 0x3, 0x9, 0xfac5}, {0x2, 0x60, 0x4, 0x2}, {0x40, 0x5, 0x6, 0x4}, {0xd, 0x0, 0xd3, 0x80000000}, {0x1, 0x9, 0x6, 0x9}, {0x3, 0x11, 0xff, 0xfffffff5}, {0x4, 0x90, 0x2, 0x3ff}, {0x9714, 0x5, 0xb, 0x1}, {0x4, 0x1, 0x0, 0xffffffff}]}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') 328.138953ms ago: executing program 1 (id=2203): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/198, 0xc5}, {&(0x7f0000000900)=""/129, 0x81}, {&(0x7f0000001300)=""/4088, 0xff8}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002380)=""/37, 0xfffffffffffffd7e}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4099, 0x1003}, {&(0x7f0000000040)=""/56, 0x38}], 0x5}}], 0x7, 0x0, 0x0) 124.548873ms ago: executing program 1 (id=2204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000480)={0x8, 'veth0_to_hsr\x00', {'vlan0\x00'}, 0x401}) sendto$inet(r1, &(0x7f0000000400)='ABCDEFGH', 0x8, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0x14, &(0x7f0000001180)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ad0ff12345678620ae8ff15223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff1c0405b4620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 89.061732ms ago: executing program 2 (id=2205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@iv={0xa0, 0x117, 0x2, 0x8c, "5352e0796bfe0a8869762a0dc9a15009a4993a9f53836cabe491698e09d744899989eeff55c2eb21a29f48805a250f58d4c2f9d909edb3d8f94def655ea82f7d0dd62825792576699de258f21e0f24c76642e30c859cadacafc13c2bf98d0b32be5c524fbb34097f7d2d8a29f42b4db28766dabe26fb976db7123b4cd6bcffaea9d806d902961cc0d213e8de"}], 0xa0, 0x80}, 0x4004080) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000900)="efce26262f9664e339bcfe37d927424bbfc67f97fa792b31ce79d882", 0x1c}, {&(0x7f0000000e40)="60d14aca059bbf8092e33c1f448a8494843e4396027eb93cc9101958258f3b8fe4f02c24d0e1f09e46aa49a9ef56f4d035efe4655127eaf0bdf8c1bea810d81396634108e353e1ae75a777765c0f895b2fd09af907926181edfdcdea803f67443c67813b8f24c035ffd9c1097b725789d1313f2ebd87347abd0fa45e90be0d6aeb9cc7f7baa6d80145ab2d80942424de286d800343b95c6c041a4445e4b05e00dd075052d9da1af2a4328bbca2212e567c7060939b1e89588a052b2984901a7c36038c1f6f6e2f836f47d5169a7fba88ef7b94f6f456b4153c05804998045319b07591afa7055fe4d93dc0e1852ba3573a2f002108885de28fcba4e57c9a89883ce894d65a8e21097f62a2f7d68116ff96be5dd023582dd67437cb904376e7b6fccaa610efac0357c4f11423ff6a66f6ef1edfc5755870d9f8fbad226b5434fcfa9b1a67e4fa1135605d137210ff2c8cc951741defb1a47eab362d5a420b68056d5e4b56eac2dd4c9c3a9715c56fe11c7d640ee1b3222663b9bd324fac9ef9dce7e3466611656dace4274f8ced38749ef13693d40eff74ff4cb97c87cb6c20cc1aeb7ab918dc1f7cdb7d555bfe81d4dffb33670c4cc12fe912222e0ec27c65bde49cc67b7f44dc977ed46b1a2a8876e7dead50e66ac0b0041a334e5de1a78f2d74b62d36f0676144be0bb102ae7cb57079977dac05e23257cd1ef92678f08714ef6c75fa3972295a3021833ee4a586e2fd19f9cc94e66feaf92a1f01d6c1a89f58752175301e9df4ca2c5cb86a87b4e9b39d6507d4311eb52d8a9de2b2b61b83e6be4506f40cbd5312b5fae5fc939680bcc11bb1615e254203da35951c5f008d5e131b7ab9ae323762e75672e5c79fed44b0f54ed4a4fea65db692bca400ffc60daa88dec3a3c16d0d036721a6a16e2fcbcc49978efc562ba5a6e6f79cc64c0a01323e7628efadeaa7c330d99755c7509cb5e4814c795d0d7aa868d59b65c610477c6ef6300cf62fc3d42ca980190536ef24cb8303b3be9aa72233fcd938f36184a6a40b8d43c1f5b047b4e3820585b89bf4b971f04dd3665e035095b20c7d9277caea57871fd4d68958da9b47a74703854fff1119c3cbb4605b4a08cefe22bde58a38693ac369df31cf40ba80914a971aed6b16cbe434dafa4b75f5bdbda1645f444d0c0c3316f8f2ed6b220e550d55b2e7e04d8f51ee4c1eb69a777f861bd368519876408267a5a4a6d10b17335e974cbce43fd3e685a76e2d779ae9cc7d9cb8ebc1e5fad7fbc29772d991270bf7eee4ec6ffe36337cb968bb25d376da9e68cae6342e919f32b688b818f7f7c953155b76502e28cd6e5920d41e73e4005a34afe70ccf4429c6fa4711be2d457d824475555e2119576fb0edf623d8477af5ed1a368bdde87060a2c2f6ae20344dd6e497177ab30a02420eaf2dcf7f4fa2d2a0a315aed14d10c9aee4b35e4e1786ec79c6dfd63619b609e7f8b8669c17ad652ba04bcb7e55f55a4988cc76759044e6006a3571a329ebc88412802d226110bebe4e48235b7d2d28f2e5ab4d2371722e1afcdcf152ef3e8be316ec14e413956afdc228e119c0b8ac1f6ea2f57e1d066819ec611d2c5cb06c60cfc4a7a8cdbfd2b70c6e32155d71da50d3cae6e1219db630391df29517198d294d35558c48438eddac29f2630af3878f6e63a122660d5a5a2ae598958cb7e23590be4e3456f857b12877f109dd5b04d0407647033a83ee9fe4a435e07342cf24b0d9ce632e44438feefe3421c5dac47db35417c97ab6a9c1ba64cd19d93e9b0548a9ed4be78057d816d68ea3a2b8ecead1e00666d416f36e558897fa4baa1d44574c89fab4de9733f635d507420fe6cdbb2462e7b51de355506bcfce321490016cbcc84fad83a56aa60f41fee6ebe079ccc763af28e6c859b307b913a8519487f536400030ef05a5e4e6347872c315153cf1875c8b5a99f04cc13afadc8b6c0d7bb9aac37d3fc34da425ca57efc68f9d30107e28391757eca47784fef9924bd59b49bfa39fc2021575862affc92d118017b95763e2569841c48c7781b5f940a64608da20a882e1c3acc25cd817f35c87dc62ca6667b58fa36e0db6c5f0620272feb81030d0b71fa68aa68a30b86f0567968a6bf56e2632277b5dfc6b5542932d39d9278ea4181f73a8ee935fb80cf424bd61a0e5153a96b34f6704b67010110dbfef54ea662f4ba2556157db2411a56455167ace7737220c895457ee5eb2c0d3c3defdaa61ab0bfe8bdb48b73f93b752f71bddfd9c84683d8121c24b0029f990a69b46b352fa876c6f61d907237200793b548558871d69cb84bb1d4d2f7cab0dcda38d9e09f1863a3b184090f036d5f5d9f12e3a0863402e8315c8f442b74ba21e5d33e038f8d6a635c8d3012c22843180e96c3115cdddfef267d9193e5411286c2b9d6af94c535a6aa6a6373a6219af483b87f727109ccd25c9eeb88984542c4b830a9726396c9c11a0221436cbb2d63de49a32cd86e859c37d3ba1494698539ceb16b338fd03df516ec1075edcd10190dafb8d9cff73495940841f179a4285e20c95f6dd6cebbf2a4170e21174e1528406f28f6e54cf2f478b42cb1ef336553e2479a912bac6100abe761cc8232f7327dba877600a6dc56359f422f6db9800fbe566c47ef45c7f130fc56404ed13ca71ac021bca4569ddf5075c24b241b658c5c44e3a361f505f015ac2605d154a66322f8a43bced46d7a60ae773a4803841b1a240dbbeadcee73dc414aedf23301769820d5cc7015289adefdc7c52c0aa7a67c1e99d211b73c2e526df4cdd536a4d1af38729c5933ca01ca5a182c3a76f9468f2fe0537eb5d40f2f020de7e1822843dcaac43af7d261114959f1ca682a04d1ffd8839f5cf9b5ee0ee7c04cf5bc6af0cf44ff809d13fc86cc8ef76009f82180a6bfba3107dc31f0bb5199b1374211ee7ac72fcac6d105acce006614414e7df0b9536c2468dfa5ad5d1bbfb3a245bcddfa91ae7cf45e2426d0729cb5f5c51684d4f694d907f7e15b4f6b9ad2eeb0056619cca7cfe14a7ace618c6357516fad2bac597684b15e7be3e4de3803657a60c6e4093c571582cdab4584921121de90d4530daebefc7ebd2b2efc227065bd3305c8e9fdd6027eb4f09ff1015d7d9b4d7b3b0355f564e6ec1eb87f600ee533ae5cfec1971ba8ae7f87d02730ec9896137f1a892901b4ccd78b95c3592b9989c4885962d07697719e156bbe46395caba40e270aae53b85235cd9e797cb3e2bb321368c2f9e06d3ce8ec5ba07ba59e08432dbaa5f49455d2caa6f12002ad8194eca53926223b3ac4ae8e8fa6ea22068a06da1f1449836180922faeef43d2cf7ea25c4a5c704492fe7bed711730541d377f8b9f65d53e5d22533b12f0e88a8315ee24349dd054c03c9d8563816d0487070e262f793a8e9ead4d2ed57fad8aa56687ed9ad5405bd1a442e4a811801746cade431e7e9a67f386937982a751145419110e9eda83af65c8d4f2ba711b9039e5ccf15c3521ed2bda6fe5ece641502eba32583b5cbffa4bf2b63c948aba841a5abffaa1d2650900be9e8524062d12413ef93677beb4e7d62237383a0cfd912f1da4eeac672ebb4375f56a66b69c487c6e124c2f0cc71e68d0fd14bb563ea8ce9a61ae2202950b97996b3b4a407e50dc32d9e2663d425dc82fd484f1094c4d148aeb6bd5297990e11ec3dd909d8edbb42edde384e35f3165c2a1eb8990a9abfcd440a234ddebdd3e58dc7ac53164261088384ed08ee6724249b91fca0a50f282a49684d3feced830f22d58e70d42a45698f588fd5f33f16fa44a0b2f4b83eec923673130f709b93b8741a00067d5326d0398d8e4bcfb8eb627bd73ec2f5d46e96aadf60533a38ba74724245e45440a403f5bd6be03f51337a698c162504d92bfdbe5eeb1b1e17158c7e6ab0acc9e200e8b2193f3de398a8bce59e409b6275ee0d2134c44167db166934d56246c8d635e62236dd8aa4d212a0876856b681419d3b9d95d4f84f23c0554ffa5842b6523dc6ce7507fc91e4dba07214b628b3d06e6efb1e46b8f3ef71a9fab6a484a24e5d6e90334dea59011128f343f9bd6d6eb77682cf4ee23370783ab803054f6549c673ee7b9653ebe591a1735282b40e7022e53a5e2f4c5134c451ce0aa4fdcb7e2876f59cfbb062a099cef80acffc13f492e6d7304ad36d2a57201c3f8ea731e435d7b8fb19db13b9ca7a764b2c730bbe269ec9f283eb9eb48b11952c064c4a9e05cc79ee283d59873b844dc97b5bb59cb115e557b4fe89293b074c57e311fdaf30947b970b3f20dc315abbc9ecc9ae3d4fadcce30129e363d012f37ec8b5ada7b7801e0b226c7c5d38a4b85f7d74ffcb7492b637f930a87690b99ee637bacb832c4160214aa0f8f4e3ebb9184304eaf7f8e8c678932e4c22efc588c45419f9d8e45e02639a32077152941d7e57745eb54037bd7bf9c0d60e38707e99af6282f435999a45bf1b541afe880b04b96939f2336c8ed09cbfa3a55f275528f7899a1b33508361c103712db6c2991e1b39c29cc6d62db3ef924a70b2860bd114a8eace367fc40f7f7fc68487823ed4d99942f1b17ae1db48f899e79e5842239f42b56cc6a922b6fb7252c3d926a292cdab5b73c94f35c62d142adc975d59db394f85fb06406e742da83d9f2380a7ff4b9c4fe94267088ea77bdbb494a674bbcf691cd40e893a5b2ed0e1cfc54ce93241be8a1b3e615f7e5e5da437d2abe7fe44d2b5a4ce6a4f21183981dbf1f945b50b3c94f781ea9f4c3d69b70d81625569c40ce6ebe0aa0206b676c6f5dfd563c960b68ee8e50693c6a5010d1eda866a7fc41f4a949c626d9a059e92e8aebfd9d55030a4202fd32e6f3e0f3e146f4d83644670bb77b801e195cc2ea47f45d13c0b51aa5a098a2f6fc919b5f3e2d7b1783ea2bd871f0b570a7b9d48945b98a6c9048f8117a245b94f13f2b2f03fbe408543243ee30865a0f6772f34dd2a8812aac5d8adb2d752010851024da61714a831468f982984e9beec30778fb5c3aa8f6829d84d4418e1de71b8489ad395bf40bf36a67d8185c1fa632169ba35a62f0bf1a12fdb274272d77bbd46cd856ce05b78ef7f8b5c90e8b75087bbb7e4e0bb1f746259fa6f66bab4c10420a162bde33e5029c608ebc58bfc82ab8b5e45e9673c2b4132734a3698ac8e042f9ada9707d3532b7e0d5e45680411b533215f46c393e6e7f4c4ebbf26529a67caae1522a14ca5118f1cb4d16190f47910360422002866c6693168b3607f7a74c419519344ce9691244b823e678d9209fb21274577f42fd0b30073c757c8d2043b7356cccc1740786711754c3be0ff0e2e46cceec7ca443fac5d311674f3709337d2d93d52dd3aa24e72c9e627d562ca55747b5dd9aec64c7f5135f05b1772dbc2c1006849b6617cd1c21c7b97a6edf0370e1f5a17fd1499d0e96f3300a3d6ab1902a2d3fe722f91e3e448eeec958d773099915e9383ed459bdafe25df1d7e7d9ce6947b3d15faaeb1dff675a62929eead5e41863d8a3e9cc516f22e2d948a29276712da8fdcf8fbab4f4758", 0xf64}], 0x2) listen(r1, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r4 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xca, &(0x7f00000003c0)="040e0cf5022000ffffff", 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r6) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004084) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1100b738700018dcdf25820000000e0099000b0000002c000000a9343b0e01ec77c308e4f24cbb1101bb9b9dbdc3bfffdd1a46a8f6a77ad6230d7cb09e0b4a49f18c5c94ea44ed7dc832195a6a5eaa60519f9d619c46845dc075d1f6d969ebacc2b7b738aa12d633c9"], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3fdf33c9f7b986", 0x0, 0xcf26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 88.51357ms ago: executing program 3 (id=2206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0xe501, 0x3, 0x258, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x9, 0x0, &(0x7f0000000700)) sendmsg$NFT_BATCH(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="013d99", 0x3}], 0x1}}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) shutdown(r5, 0x1) setsockopt(r4, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r6 = socket$unix(0x1, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000005c0)={0xffff, 0x8000}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000280)={'pimreg\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2b, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61, 0x1081}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x810) write$tun(r3, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x300, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, 0x3, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xd}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x38}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40800) 0s ago: executing program 1 (id=2207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x8) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @local}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60040007001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50041001907f0eef"], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="100001"], 0x28}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.293'. [ 128.382366][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 128.820784][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 128.820817][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 128.820852][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 129.198493][ T7054] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.316201][ T7058] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 129.684356][ T7079] netlink: 'syz.0.309': attribute type 3 has an invalid length. [ 129.806321][ T7090] netlink: 'syz.0.309': attribute type 3 has an invalid length. [ 129.968223][ T7071] syz.4.308 (7071) used greatest stack depth: 17960 bytes left [ 130.241555][ T7117] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.402708][ T4952] Bluetooth: hci2: SCO packet too small [ 130.543435][ T7137] syzkaller1: entered promiscuous mode [ 130.543460][ T7137] syzkaller1: entered allmulticast mode [ 130.987660][ T7161] tipc: Started in network mode [ 130.987731][ T7161] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 130.988880][ T7161] tipc: Enabled bearer , priority 0 [ 131.582502][ T7191] netlink: 'syz.3.336': attribute type 32 has an invalid length. [ 131.630731][ T7193] __nla_validate_parse: 13 callbacks suppressed [ 131.630766][ T7193] netlink: 292 bytes leftover after parsing attributes in process `syz.0.337'. [ 131.630785][ T7193] netlink: 292 bytes leftover after parsing attributes in process `syz.0.337'. [ 131.760540][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.338'. [ 131.887625][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 131.893732][ T7208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.958905][ T7213] vcan0: tx address claim with dest, not broadcast [ 132.104044][ T7215] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 132.114999][ T5770] tipc: Node number set to 11578026 [ 132.160790][ T7218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.344'. [ 132.476891][ T7241] veth0: entered promiscuous mode [ 132.500531][ T7241] Set syz1 is full, maxelem 246 reached [ 132.513437][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.348'. [ 132.516160][ T7238] veth0: left promiscuous mode [ 133.029789][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029857][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.239037][ T7274] geneve2: entered promiscuous mode [ 133.252874][ T7278] netlink: 112 bytes leftover after parsing attributes in process `syz.3.354'. [ 133.505644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.849623][ T7305] openvswitch: netlink: IPv4 tunnel dst address is zero [ 133.962829][ T7314] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 133.997425][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'. [ 134.656909][ T7314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.680267][ T7303] netlink: 'syz.3.361': attribute type 3 has an invalid length. [ 134.758292][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 134.900630][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 135.034351][ T7343] bond2: entered promiscuous mode [ 135.072137][ T7345] macvlan4: entered promiscuous mode [ 135.072164][ T7345] macvlan4: entered allmulticast mode [ 135.074491][ T7345] bond2: (slave macvlan4): Opening slave failed [ 135.364308][ T6667] IPVS: starting estimator thread 0... [ 135.448567][ T7371] IPVS: using max 24 ests per chain, 57600 per kthread [ 135.540373][ T7378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.851278][ T7394] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 135.883329][ T7397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.909138][ T7397] xt_hashlimit: size too large, truncated to 1048576 [ 136.030358][ T7413] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.342917][ T7417] netlink: 'syz.2.389': attribute type 16 has an invalid length. [ 136.359038][ T7417] veth1_macvtap: entered allmulticast mode [ 136.493640][ T7397] xt_hashlimit: size too large, truncated to 1048576 [ 136.518569][ T4952] Bluetooth: hci1: unexpected event 0x0f length: 0 < 4 [ 136.774392][ T7429] bond0: entered promiscuous mode [ 136.774418][ T7429] bond_slave_0: entered promiscuous mode [ 136.774685][ T7429] bond_slave_1: entered promiscuous mode [ 136.803959][ T7429] batadv0: entered promiscuous mode [ 136.826994][ T7429] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 136.844135][ T7429] bond0: left promiscuous mode [ 136.844159][ T7429] bond_slave_0: left promiscuous mode [ 136.844397][ T7429] bond_slave_1: left promiscuous mode [ 136.875945][ T7429] batadv0: left promiscuous mode [ 136.936471][ T7430] netlink: 'syz.2.391': attribute type 18 has an invalid length. [ 136.936498][ T7430] __nla_validate_parse: 9 callbacks suppressed [ 136.936511][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 137.018958][ T7430] netlink: 'syz.2.391': attribute type 18 has an invalid length. [ 137.018984][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 137.126278][ T7435] 0ªî{X¹¦: left allmulticast mode [ 137.207492][ T6667] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.262024][ T7437] syzkaller0: entered promiscuous mode [ 137.262050][ T7437] syzkaller0: entered allmulticast mode [ 137.285087][ T1041] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.307049][ T6666] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.308119][ T1122] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.555431][ T7453] ip_tables: iptables: counters copy to user failed while replacing table [ 137.837609][ T7474] netlink: 'syz.4.402': attribute type 11 has an invalid length. [ 137.954750][ T7476] netlink: 'syz.2.404': attribute type 11 has an invalid length. [ 138.157464][ T7478] batman_adv: batadv0: Adding interface: syz_tun [ 138.157485][ T7478] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.157516][ T7478] batman_adv: batadv0: Interface activated: syz_tun [ 138.217068][ T7484] netlink: 80 bytes leftover after parsing attributes in process `syz.2.407'. [ 138.217102][ T7484] openvswitch: netlink: Missing key (keys=40, expected=100) [ 138.431029][ T7491] netlink: 284 bytes leftover after parsing attributes in process `syz.2.409'. [ 138.745025][ T7505] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.745500][ T7505] Cannot find add_set index 0 as target [ 138.830905][ T7502] netlink: 'syz.2.413': attribute type 29 has an invalid length. [ 139.091877][ T7516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.296796][ T7523] netlink: 104 bytes leftover after parsing attributes in process `syz.3.420'. [ 139.317305][ T7523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.605781][ T7532] netlink: 'syz.2.421': attribute type 4 has an invalid length. [ 139.984511][ T7552] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 139.988519][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 140.047017][ T7552] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 140.104675][ T7552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.427'. [ 140.189276][ T7560] ip_tables: iptables: counters copy to user failed while replacing table [ 140.284071][ T7570] block nbd1: NBD_DISCONNECT [ 140.340384][ T7571] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 140.761883][ T7590] ip_tables: iptables: counters copy to user failed while replacing table [ 140.784666][ T7585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.437'. [ 140.851576][ T7594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.438'. [ 140.922027][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 140.978336][ T7594] tipc: New replicast peer: 172.20.20.187 [ 140.980293][ T7594] tipc: Enabled bearer , priority 10 [ 141.797721][ T7630] : renamed from ip6gre0 (while UP) [ 142.058815][ T7640] __nla_validate_parse: 7 callbacks suppressed [ 142.058839][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 142.191277][ T7650] netlink: 'syz.2.455': attribute type 2 has an invalid length. [ 142.302957][ T7653] openvswitch: netlink: Duplicate or invalid key (type 0). [ 142.302999][ T7653] openvswitch: netlink: Actions may not be safe on all matching packets [ 142.551039][ T7679] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 142.581021][ T7676] netlink: 'syz.3.461': attribute type 7 has an invalid length. [ 142.620548][ T7682] bridge_slave_1: entered promiscuous mode [ 142.794723][ T7694] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 142.855032][ T7694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.874009][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 142.914563][ T7694] bond3: (slave bridge0): making interface the new active one [ 142.930338][ T7694] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 142.953986][ T7694] netlink: 'syz.4.466': attribute type 3 has an invalid length. [ 142.954011][ T7694] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 143.141370][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 143.200046][ T7710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.470'. [ 143.275120][ T7717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.280890][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 143.313690][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 143.572549][ T7731] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 143.573378][ T7731] syz_tun: entered promiscuous mode [ 143.609543][ T7731] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 143.609782][ T7732] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 143.609802][ T7732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.478'. [ 143.629625][ T1041] bond0: (slave bond_slave_0): interface is now down [ 143.629712][ T1041] bond0: (slave bond_slave_1): interface is now down [ 143.629754][ T1041] bond0: (slave syz_tun): interface is now down [ 143.667961][ T1041] bond0: (slave bond_slave_0): interface is now down [ 143.667988][ T1041] bond0: (slave bond_slave_1): interface is now down [ 143.668001][ T1041] bond0: (slave syz_tun): interface is now down [ 143.693435][ T6666] bond0: (slave bond_slave_0): interface is now down [ 143.693510][ T6666] bond0: (slave bond_slave_1): interface is now down [ 143.693559][ T6666] bond0: (slave syz_tun): interface is now down [ 143.761806][ T6666] bond0: now running without any active interface! [ 143.866214][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.479'. [ 143.888671][ T7737] IPv6: sit1: Disabled Multicast RS [ 144.099020][ T7749] netlink: 9720 bytes leftover after parsing attributes in process `syz.3.483'. [ 144.121328][ T7752] smc: smcd device lo applied user defined pnetid SYZ0 [ 144.243977][ T1041] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 144.244580][ T1041] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 144.244868][ T1041] bond0: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 144.288650][ T1041] bond0: active interface up! [ 144.422172][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.487'. [ 144.449234][ T7773] ip_tables: iptables: counters copy to user failed while replacing table [ 144.761341][ T7786] dvmrp0: entered allmulticast mode [ 144.856404][ T7791] netlink: 'syz.4.494': attribute type 3 has an invalid length. [ 144.859010][ T7790] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.934947][ T7799] ieee802154 phy0 wpan0: encryption failed: -90 [ 144.987703][ T7802] 8021q: VLANs not supported on sit0 [ 146.281144][ T4952] Bluetooth: hci3: unexpected cc 0x2060 length: 8 > 7 [ 146.598045][ T7886] geneve2: entered promiscuous mode [ 146.616135][ T1041] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 44714 - 0 [ 146.617166][ T42] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 44714 - 0 [ 146.617251][ T42] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 44714 - 0 [ 146.617288][ T42] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 44714 - 0 [ 146.830083][ T7902] xt_TCPMSS: Only works on TCP SYN packets [ 147.061661][ T7911] netlink: 'syz.3.525': attribute type 10 has an invalid length. [ 147.077147][ T7911] syz_tun: entered promiscuous mode [ 147.083406][ T7911] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 147.111066][ T7914] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 147.155972][ T7914] bond4: entered promiscuous mode [ 147.156405][ T7914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.210850][ T7914] bond4: (slave bridge1): making interface the new active one [ 147.210882][ T7914] bridge1: entered promiscuous mode [ 147.213501][ T7914] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 147.252942][ T7914] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 147.489113][ T7929] veth0: Caught tx_queue_len zero misconfig [ 147.564074][ T7935] __nla_validate_parse: 8 callbacks suppressed [ 147.564097][ T7935] netlink: 52 bytes leftover after parsing attributes in process `syz.4.532'. [ 148.232999][ T7962] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 148.333145][ T7968] netlink: zone id is out of range [ 148.333416][ T7968] netlink: get zone limit has 4 unknown bytes [ 148.450195][ T7977] netlink: 68 bytes leftover after parsing attributes in process `syz.3.543'. [ 148.497940][ T7981] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 148.531504][ T7981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.544179][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 148.544202][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 148.862145][ T7992] netlink: 144 bytes leftover after parsing attributes in process `syz.4.547'. [ 148.863240][ T7992] x_tables: unsorted entry at hook 2 [ 149.214249][ T8002] veth1_macvtap: left promiscuous mode [ 149.214281][ T8002] macsec0: entered allmulticast mode [ 149.523423][ T5754] hid-generic 0005:046D:8001.0001: item fetching failed at offset 0/1 [ 149.524578][ T5754] hid-generic 0005:046D:8001.0001: probe with driver hid-generic failed with error -22 [ 149.558379][ T8016] hsr0: entered allmulticast mode [ 149.558404][ T8016] hsr_slave_0: entered allmulticast mode [ 149.558423][ T8016] hsr_slave_1: entered allmulticast mode [ 149.564638][ T8016] hsr0: entered promiscuous mode [ 149.576055][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 149.576375][ T8016] hsr_slave_0: left promiscuous mode [ 149.604116][ T8016] hsr_slave_1: left promiscuous mode [ 149.642009][ T8016] hsr0 (unregistering): left allmulticast mode [ 149.642060][ T8016] hsr0 (unregistering): left promiscuous mode [ 150.059114][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 151.679274][ T7986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.935074][ T8040] macvlan0: entered promiscuous mode [ 151.962654][ T8040] netlink: 'syz.4.558': attribute type 2 has an invalid length. [ 152.238606][ T8062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.244479][ T8061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.438253][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 152.438579][ T8076] unsupported nlmsg_type 40 [ 152.898532][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 153.300351][ T8111] netlink: 236 bytes leftover after parsing attributes in process `syz.2.580'. [ 153.300384][ T8111] openvswitch: netlink: IP tunnel dst address not specified [ 153.888328][ T8133] netlink: 'syz.2.585': attribute type 32 has an invalid length. [ 153.888353][ T8133] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 154.019344][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 154.101916][ T8149] netlink: 76 bytes leftover after parsing attributes in process `syz.2.590'. [ 154.120500][ T8149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 154.180859][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 154.180960][ T8151] bond3: left allmulticast mode [ 154.181090][ T8151] bond3: left promiscuous mode [ 154.181401][ T8151] bridge0: port 4(bond3) entered disabled state [ 154.240186][ T8151] bond2: left allmulticast mode [ 154.245610][ T8151] bond2: left promiscuous mode [ 154.289741][ T8151] bridge0: port 3(bond2) entered disabled state [ 154.340071][ T8151] bridge_slave_1: left allmulticast mode [ 154.340105][ T8151] bridge_slave_1: left promiscuous mode [ 154.340374][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.381145][ T8158] netlink: 64 bytes leftover after parsing attributes in process `syz.3.592'. [ 154.411986][ T8151] bridge_slave_0: left allmulticast mode [ 154.412019][ T8151] bridge_slave_0: left promiscuous mode [ 154.412264][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.642405][ T8156] batadv_slave_0: Caught tx_queue_len zero misconfig [ 154.880532][ T8176] netlink: 'syz.3.595': attribute type 2 has an invalid length. [ 154.957978][ T8186] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 154.973206][ T8186] sctp: [Deprecated]: syz.0.597 (pid 8186) Use of int in max_burst socket option deprecated. [ 154.973206][ T8186] Use struct sctp_assoc_value instead [ 155.261310][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 155.291629][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 155.589810][ T8224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.349815][ T8271] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 156.731185][ T8289] netlink: 'syz.2.622': attribute type 12 has an invalid length. [ 156.767611][ T8289] bond5: option primary_reselect: invalid value (255) [ 156.772990][ T8289] bond5 (unregistering): Released all slaves [ 157.712477][ T8339] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 157.918217][ T8338] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 158.681337][ T8374] __nla_validate_parse: 8 callbacks suppressed [ 158.681361][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 158.681377][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 158.710368][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 158.710395][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 158.934299][ T8389] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 158.954961][ T8378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.969063][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 159.153177][ T8402] lo: entered promiscuous mode [ 159.170685][ T8402] tunl0: entered promiscuous mode [ 159.182718][ T8402] gre0: entered promiscuous mode [ 159.220437][ T8402] gretap0: entered promiscuous mode [ 159.240798][ T8402] erspan0: entered promiscuous mode [ 159.252845][ T8402] ip_vti0: entered promiscuous mode [ 159.316090][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 159.658952][ T8429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 159.875692][ T8443] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 159.931971][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.651'. [ 159.991644][ T8447] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.650'. [ 160.059521][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 160.115497][ T8452] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 160.148560][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.321257][ T8457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.323067][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.325774][ T8449] ip6erspan0: entered promiscuous mode [ 160.344878][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.352761][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.356808][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.357667][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.367870][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.368955][ T8457] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.493530][ T8471] veth0: entered promiscuous mode [ 161.260626][ T8511] bond3: entered promiscuous mode [ 161.260652][ T8511] bond3: entered allmulticast mode [ 161.311214][ T8466] veth0: left promiscuous mode [ 161.786701][ T8545] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 161.793579][ T8544] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 161.928523][ T8551] veth1_to_bond: Caught tx_queue_len zero misconfig [ 162.130337][ T8563] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 162.169600][ T8564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.304676][ T8572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.747800][ T4952] Bluetooth: hci3: command tx timeout [ 164.628693][ T8531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.178397][ T8614] TCP: TCP_TX_DELAY enabled [ 165.287384][ T8621] validate_nla: 26 callbacks suppressed [ 165.287410][ T8621] netlink: 'syz.1.695': attribute type 8 has an invalid length. [ 165.451698][ T8631] @0Ù: renamed from bond_slave_1 (while UP) [ 165.616419][ T8635] netlink: 'syz.3.699': attribute type 23 has an invalid length. [ 166.094822][ T8644] syzkaller0: entered promiscuous mode [ 166.094849][ T8644] syzkaller0: entered allmulticast mode [ 166.613640][ T8678] __nla_validate_parse: 8 callbacks suppressed [ 166.613691][ T8678] netlink: 44 bytes leftover after parsing attributes in process `syz.0.708'. [ 166.792168][ T8693] sctp: [Deprecated]: syz.3.712 (pid 8693) Use of int in maxseg socket option. [ 166.792168][ T8693] Use struct sctp_assoc_value instead [ 166.792830][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 166.809304][ T8694] sctp: [Deprecated]: syz.3.712 (pid 8694) Use of int in maxseg socket option. [ 166.809304][ T8694] Use struct sctp_assoc_value instead [ 166.821251][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 167.281035][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 167.319669][ T8704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.404723][ T8663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.562047][ T8713] sctp: [Deprecated]: syz.1.716 (pid 8713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.562047][ T8713] Use struct sctp_sack_info instead [ 169.686854][ T8715] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 169.757121][ T8723] netlink: 11 bytes leftover after parsing attributes in process `syz.3.718'. [ 169.788243][ T8728] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 169.788268][ T8728] netlink: 'syz.2.719': attribute type 4 has an invalid length. [ 169.788281][ T8728] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.719'. [ 170.126231][ T8742] openvswitch: netlink: IP tunnel dst address not specified [ 170.512483][ T8760] netlink: 92 bytes leftover after parsing attributes in process `syz.1.727'. [ 170.724785][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 170.856123][ T8776] netlink: 'syz.2.733': attribute type 7 has an invalid length. [ 170.856178][ T8776] netlink: 140 bytes leftover after parsing attributes in process `syz.2.733'. [ 171.053199][ T8780] dvmrp1: entered allmulticast mode [ 171.244300][ T8793] SET target dimension over the limit! [ 171.433520][ T8803] netlink: 164 bytes leftover after parsing attributes in process `syz.4.742'. [ 171.473692][ T8804] netlink: 'syz.0.743': attribute type 3 has an invalid length. [ 171.490139][ T8803] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.842226][ T8824] __nla_validate_parse: 1 callbacks suppressed [ 171.842252][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 172.041126][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'. [ 172.198895][ T8841] block nbd1: not configured, cannot reconfigure [ 172.603726][ T8872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.761'. [ 172.743169][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 172.820398][ T8883] netlink: 'syz.0.763': attribute type 11 has an invalid length. [ 172.820425][ T8883] netlink: 'syz.0.763': attribute type 4 has an invalid length. [ 172.820439][ T8883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.763'. [ 172.879361][ T8885] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 173.033064][ T8894] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 173.066464][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 173.133068][ T8892] bond4: (slave gretap1): making interface the new active one [ 173.133810][ T8892] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 173.186200][ T8889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.188596][ T8889] bond4: (slave bond5): Enslaving as a backup interface with an up link [ 173.515487][ T8923] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 173.543759][ T8924] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 173.710387][ T8924] Cannot find add_set index 34 as target [ 173.754665][ T5634] Bluetooth: hci1: Malformed Event: 0x2f [ 173.790641][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 173.790668][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.773'. [ 173.917534][ T8943] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 173.917560][ T8943] netlink: 228 bytes leftover after parsing attributes in process `syz.4.778'. [ 174.123088][ T8955] smc: smcd device lo erased user defined pnetid SYZ0 [ 174.599970][ T8984] xt_limit: Overflow, try lower: 536871034/0 [ 174.652316][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 174.976213][ T8861] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.977892][ T1122] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.977978][ T1122] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.240674][ T9009] netlink: 'syz.3.800': attribute type 30 has an invalid length. [ 175.244869][ T9008] sctp: [Deprecated]: syz.0.799 (pid 9008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.244869][ T9008] Use struct sctp_sack_info instead [ 175.341076][ T9009] bond2: option arp_missed_max: invalid value (0) [ 175.341118][ T9009] bond2: option arp_missed_max: allowed values 1 - 255 [ 175.366547][ T9009] bond2 (unregistering): Released all slaves [ 175.579991][ T9018] xfrm1: entered promiscuous mode [ 176.394298][ T9055] netlink: 'syz.2.814': attribute type 21 has an invalid length. [ 176.394379][ T9055] netlink: 'syz.2.814': attribute type 6 has an invalid length. [ 176.502179][ T9058] ip_tables: iptables: counters copy to user failed while replacing table [ 176.512037][ T9058] lo: entered promiscuous mode [ 176.531638][ T9058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.982550][ T9065] netlink: 'syz.3.817': attribute type 22 has an invalid length. [ 176.982571][ T9065] __nla_validate_parse: 36 callbacks suppressed [ 176.982581][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 177.083513][ T9065] netlink: 'syz.3.817': attribute type 22 has an invalid length. [ 177.083541][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 177.162947][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 177.162984][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 177.260267][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 177.260303][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 177.266916][ T8861] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.268803][ T1041] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.268936][ T1041] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.269055][ T1041] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.380723][ T9084] netlink: 9 bytes leftover after parsing attributes in process `syz.4.822'. [ 177.490311][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 177.506325][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.824'. [ 177.774896][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 178.272943][ T9133] ip_tables: iptables: counters copy to user failed while replacing table [ 178.364974][ T9138] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 178.951512][ T9168] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.435225][ T9198] ip_tables: iptables: counters copy to user failed while replacing table [ 179.459343][ T9201] v: renamed from vlan1 (while UP) [ 179.519011][ T9207] netlink: 'syz.4.852': attribute type 16 has an invalid length. [ 179.697507][ T9221] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 179.751228][ T9222] bridge2: entered allmulticast mode [ 180.412177][ T5770] hid-generic 0005:0458:8001.0002: item fetching failed at offset 0/1 [ 180.412867][ T5770] hid-generic 0005:0458:8001.0002: probe with driver hid-generic failed with error -22 [ 180.630515][ T9256] geneve3: entered promiscuous mode [ 180.630543][ T9256] geneve3: entered allmulticast mode [ 180.879211][ T9272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.880091][ T9272] bridge0: port 3(bond4) entered blocking state [ 180.880268][ T9272] bridge0: port 3(bond4) entered disabled state [ 180.880404][ T9272] bond4: entered allmulticast mode [ 180.883129][ T9272] bond4: entered promiscuous mode [ 180.883891][ T9272] bridge0: port 3(bond4) entered blocking state [ 180.884014][ T9272] bridge0: port 3(bond4) entered forwarding state [ 181.179546][ T42] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x4 [ 181.350894][ T9302] gretap0: entered promiscuous mode [ 181.379307][ T9302] 0ªî{X¹¦: renamed from gretap0 [ 181.385061][ T9302] 0ªî{X¹¦: left promiscuous mode [ 181.385087][ T9302] 0ªî{X¹¦: entered allmulticast mode [ 181.406890][ T9302] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 181.441301][ T9308] 0ªî{X¹¦: entered promiscuous mode [ 181.441328][ T9308] 0ªî{X¹¦: left allmulticast mode [ 181.448397][ T9313] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 181.468029][ T9313] 1ªî{X¹¦: left promiscuous mode [ 181.468340][ T9313] 1ªî{X¹¦: entered allmulticast mode [ 181.470528][ T9313] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 181.510290][ T42] bridge0: port 3(bond4) entered disabled state [ 182.048487][ T9340] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 182.082278][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab44800: rx timeout, send abort [ 182.084158][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ab44800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 182.190278][ T9340] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.204983][ T9350] __nla_validate_parse: 22 callbacks suppressed [ 182.205005][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 182.273680][ T9344] netlink: 100 bytes leftover after parsing attributes in process `syz.2.889'. [ 182.292529][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.889'. [ 182.332368][ T9340] bond6: (slave geneve3): making interface the new active one [ 182.344769][ T9340] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 182.390582][ T9359] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 182.408993][ T9359] bond5 (unregistering): Released all slaves [ 182.618355][ T9359] syzkaller0: entered promiscuous mode [ 182.618382][ T9359] syzkaller0: entered allmulticast mode [ 182.771373][ T9375] dvmrp1: entered allmulticast mode [ 182.772033][ T9378] netlink: 'syz.2.896': attribute type 22 has an invalid length. [ 182.772053][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 182.772988][ T9378] netlink: 'syz.2.896': attribute type 22 has an invalid length. [ 182.773005][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 182.789609][ T9388] netlink: 'syz.2.896': attribute type 22 has an invalid length. [ 182.789673][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 182.790453][ T9388] netlink: 'syz.2.896': attribute type 22 has an invalid length. [ 182.790496][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 182.883435][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 182.901929][ T9362] pim6reg1: entered promiscuous mode [ 182.901956][ T9362] pim6reg1: entered allmulticast mode [ 183.439637][ T9407] wireguard0: entered promiscuous mode [ 184.102743][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'. [ 184.102773][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'. [ 184.381567][ T9453] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 184.382881][ T9453] veth0_macvtap: left promiscuous mode [ 184.577093][ T9459] only policy match revision 0 supported [ 184.577110][ T9459] unable to load match [ 184.600845][ T5634] Bluetooth: hci4: link tx timeout [ 184.600867][ T5634] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.603552][ T5634] Bluetooth: hci4: link tx timeout [ 184.603573][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.604185][ T5634] Bluetooth: hci4: link tx timeout [ 184.604201][ T5634] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.604216][ T5634] Bluetooth: hci4: link tx timeout [ 184.604226][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.687745][ T9469] vlan4: entered allmulticast mode [ 184.687770][ T9469] gretap0: entered allmulticast mode [ 184.726095][ T9472] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 184.763883][ T9472] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 185.618479][ T9513] sctp: [Deprecated]: syz.1.928 (pid 9513) Use of int in max_burst socket option. [ 185.618479][ T9513] Use struct sctp_assoc_value instead [ 185.642551][ T9513] bond4: left allmulticast mode [ 185.643248][ T9513] bond4: left promiscuous mode [ 185.643626][ T9513] bridge0: port 3(bond4) entered disabled state [ 185.673126][ T9513] bridge_slave_1: left allmulticast mode [ 185.673157][ T9513] bridge_slave_1: left promiscuous mode [ 185.673410][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.711937][ T9513] bridge_slave_0: left allmulticast mode [ 185.711970][ T9513] bridge_slave_0: left promiscuous mode [ 185.712198][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.100874][ T9533] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.101079][ T9533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.101091][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 186.101120][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 186.250901][ T9538] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 186.260925][ T9538] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 186.627804][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 187.098789][ T9583] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 187.164232][ T9583] bond2: entered promiscuous mode [ 187.174309][ T9583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.286296][ T9587] ip6gre0: entered promiscuous mode [ 187.293961][ T9587] __nla_validate_parse: 7 callbacks suppressed [ 187.293983][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 187.294149][ T9583] bond2: entered allmulticast mode [ 187.347509][ T9583] bond2: (slave bridge1): making interface the new active one [ 187.347536][ T9583] bridge1: entered promiscuous mode [ 187.347719][ T9583] bridge1: entered allmulticast mode [ 187.349400][ T9583] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 187.417368][ T9595] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 187.417972][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 187.521502][ T9591] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 187.641680][ T9602] ip_tables: iptables: counters copy to user failed while replacing table [ 187.763786][ T9610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.763805][ T9610] IPv6: NLM_F_CREATE should be set when creating new route [ 187.763847][ T9610] IPv6: NLM_F_CREATE should be set when creating new route [ 187.763872][ T9610] IPv6: NLM_F_CREATE should be set when creating new route [ 188.092768][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 188.285626][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 188.380059][ T9642] tipc: Started in network mode [ 188.380093][ T9642] tipc: Node identity 090000000000000009, cluster identity 4711 [ 188.402122][ T9646] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 188.446251][ T9646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.581710][ T9653] syz_tun: entered allmulticast mode [ 188.706108][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 189.078528][ T9671] netlink: 'syz.3.976': attribute type 33 has an invalid length. [ 189.082722][ T9669] IPv6: sit2: Disabled Multicast RS [ 189.170582][ T4952] Bluetooth: hci4: ACL packet for unknown connection handle 3484 [ 189.319452][ T9680] macsec1: entered promiscuous mode [ 189.319480][ T9680] bridge0: entered promiscuous mode [ 189.319693][ T9680] macsec1: entered allmulticast mode [ 189.319709][ T9680] bridge0: entered allmulticast mode [ 189.321805][ T9680] bridge0: port 4(macsec1) entered blocking state [ 189.323600][ T9680] bridge0: port 4(macsec1) entered disabled state [ 189.388292][ T9680] bridge0: left allmulticast mode [ 189.420265][ T9686] ip_tables: iptables: counters copy to user failed while replacing table [ 189.463304][ T5770] bridge0: left promiscuous mode [ 189.506318][ T9687] netlink: 'syz.2.981': attribute type 7 has an invalid length. [ 189.681721][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 189.976786][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.991'. [ 190.191527][ T9723] lo: left promiscuous mode [ 190.256530][ T9723] syz_tun: left promiscuous mode [ 190.259024][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.259162][ T9723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.261125][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.261272][ T9723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.318039][ T9723] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 190.323041][ T9723] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 190.435256][ T9729] netlink: 'syz.0.995': attribute type 2 has an invalid length. [ 190.510667][ T9734] netlink: 'syz.3.996': attribute type 39 has an invalid length. [ 190.672992][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 190.961433][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 191.143656][ T9756] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1001'. [ 191.143693][ T9756] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1001'. [ 191.524575][ T9778] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 191.532900][ T9779] netlink: 'syz.0.1010': attribute type 1 has an invalid length. [ 191.704913][ T9784] Bluetooth: MGMT ver 1.23 [ 192.004951][ T9808] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 192.027260][ T9808] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.027290][ T9808] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 192.027469][ T9808] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 192.179085][ T9811] batman_adv: batadv0: Adding interface: syzkaller0 [ 192.179107][ T9811] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.179142][ T9811] batman_adv: batadv0: Interface activated: syzkaller0 [ 192.183898][ T9813] netlink: 'syz.3.1021': attribute type 3 has an invalid length. [ 192.184162][ T9813] netlink: 'syz.3.1021': attribute type 3 has an invalid length. [ 192.235666][ T9813] Illegal XDP return value 16128 on prog (id 282) dev syz_tun, expect packet loss! [ 192.267596][ T9810] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 192.303044][ T9810] batman_adv: batadv0: Removing interface: syzkaller0 [ 192.367665][ T9818] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 192.449305][ T9818] bond7: (slave bridge2): Enslaving as a backup interface with an up link [ 192.453229][ T9818] __nla_validate_parse: 7 callbacks suppressed [ 192.453251][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 192.484760][ T9818] 8021q: adding VLAN 0 to HW filter on device bond7 [ 192.500239][ T6668] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 192.605684][ T6668] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 192.908683][ T9849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1032'. [ 193.202545][ T9862] Dropped outbound packet type=d5b3 [ 193.218246][ T9869] Dropped outbound packet type=d5b3 [ 193.361852][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 193.453251][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1038'. [ 193.524835][ T9885] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 193.551246][ T9885] netlink: 5456 bytes leftover after parsing attributes in process `syz.3.1040'. [ 193.656258][ T9891] lo: Caught tx_queue_len zero misconfig [ 193.656653][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 193.660518][ T9887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.739686][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 193.739719][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 193.739810][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 193.868866][ T9901] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1044'. [ 193.868900][ T9901] netlink: 'syz.4.1044': attribute type 6 has an invalid length. [ 193.868914][ T9901] netlink: 'syz.4.1044': attribute type 5 has an invalid length. [ 194.238255][ T9917] tipc: Enabling of bearer rejected, failed to enable media [ 194.271708][ T9911] netlink: 'syz.3.1046': attribute type 8 has an invalid length. [ 194.398171][ T9921] tipc: MTU too low for tipc bearer [ 194.399515][ T9927] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.467861][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.467924][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.050162][ T9949] tipc: Enabled bearer , priority 10 [ 195.058589][ T9951] tipc: Enabling of bearer rejected, already enabled [ 195.308653][ T9964] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 195.629217][ T9977] ip6t_rt: address list match requested but addrnr is 0 [ 196.081381][T10002] bridge_slave_1: left allmulticast mode [ 196.081413][T10002] bridge_slave_1: left promiscuous mode [ 196.081693][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.107852][T10002] bridge_slave_0: left allmulticast mode [ 196.107890][T10002] bridge_slave_0: left promiscuous mode [ 196.108143][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.185882][ T9994] bridge0: port 1(syz_tun) entered blocking state [ 196.186003][ T9994] bridge0: port 1(syz_tun) entered disabled state [ 196.186174][ T9994] syz_tun: entered allmulticast mode [ 196.188713][ T9994] syz_tun: entered promiscuous mode [ 196.194872][ T9994] bridge0: port 1(syz_tun) entered blocking state [ 196.195447][ T9994] bridge0: port 1(syz_tun) entered forwarding state [ 196.450816][T10012] 8021q: VLANs not supported on lo [ 196.539249][T10017] netlink: 'syz.2.1077': attribute type 8 has an invalid length. [ 196.762096][T10030] 0: reclassify loop, rule prio 0, protocol 03 [ 197.389445][T10067] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 197.391462][T10067] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 197.554448][T10072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.554531][T10073] __nla_validate_parse: 17 callbacks suppressed [ 197.554547][T10073] netlink: 492 bytes leftover after parsing attributes in process `syz.3.1092'. [ 198.144883][T10106] tipc: Resetting bearer [ 198.175959][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 198.183488][ T6668] IPVS: starting estimator thread 0... [ 198.265532][T10115] IPVS: using max 28 ests per chain, 67200 per kthread [ 198.430751][T10126] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 198.430776][T10126] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1106'. [ 198.456122][T10126] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 198.583893][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 198.616608][T10130] tipc: Enabled bearer , priority 10 [ 198.634863][T10136] netlink: 'syz.0.1110': attribute type 83 has an invalid length. [ 198.671055][T10138] netlink: 'syz.1.1109': attribute type 2 has an invalid length. [ 198.703911][T10138] ip6tnl0: Caught tx_queue_len zero misconfig [ 198.779308][T10143] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 198.862712][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 198.888349][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 199.244492][T10167] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 199.283349][T10167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.420978][T10174] netlink: 'syz.1.1123': attribute type 2 has an invalid length. [ 199.522178][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'. [ 199.538467][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 199.538507][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1125'. [ 199.713003][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 199.762740][ T5757] tipc: Node number set to 150994944 [ 200.444802][T10229] ip6tnl0: Caught tx_queue_len zero misconfig [ 200.467996][T10235] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 200.814506][T10250] veth0_vlan: left promiscuous mode [ 200.814590][T10250] vlan0: entered promiscuous mode [ 200.814606][T10250] veth0_vlan: entered promiscuous mode [ 200.875778][T10250] team0: Port device vlan0 added [ 200.881671][T10199] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 200.953145][ T5634] block nbd1: Receive control failed (result -32) [ 200.953145][ T4952] block nbd1: Receive control failed (result -32) [ 201.099267][T10267] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 201.180665][T10267] 8021q: adding VLAN 0 to HW filter on device bond7 [ 201.232871][T10267] bond7: (slave geneve2): making interface the new active one [ 201.234692][T10267] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 201.629430][T10303] ip6t_rt: address list match requested but addrnr is 0 [ 201.960227][T10326] netlink: 'syz.0.1165': attribute type 10 has an invalid length. [ 201.973834][T10326] veth0_macvtap: left promiscuous mode [ 202.066150][ T5634] Bluetooth: hci3: command 0x0401 tx timeout [ 203.055065][T10396] xt_HMARK: spi-set and port-set can't be combined [ 203.065848][T10396] __nla_validate_parse: 8 callbacks suppressed [ 203.065871][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 203.263670][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 203.281234][T10401] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 203.332206][T10401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.380482][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 203.381536][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 203.419028][T10402] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 203.697626][T10432] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1192'. [ 203.841242][T10439] openvswitch: netlink: IP tunnel dst address not specified [ 203.842259][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 203.893017][T10440] bond8 (unregistering): Released all slaves [ 203.918320][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 203.920758][T10444] tunl0: Caught tx_queue_len zero misconfig [ 203.983986][T10446] bond8 (unregistering): Released all slaves [ 204.280095][T10471] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1202'. [ 204.333339][ T5770] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 204.333460][T10474] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1204'. [ 204.337439][T10465] macsec1: entered promiscuous mode [ 204.338714][T10465] macsec1: entered allmulticast mode [ 204.338779][T10465] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 204.352391][T10465] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 204.782955][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 205.003421][T10519] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 205.620551][T10554] xt_hashlimit: size too large, truncated to 1048576 [ 205.666457][T10558] netlink: 'syz.1.1225': attribute type 12 has an invalid length. [ 205.687560][T10560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.181726][T10573] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 206.430730][T10587] dvmrp1: entered allmulticast mode [ 206.633053][T10604] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 206.802772][T10613] netlink: 'syz.4.1241': attribute type 142 has an invalid length. [ 206.803709][T10613] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 207.185069][T10631] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.227593][T10637] xt_HMARK: spi-set and port-set can't be combined [ 207.242936][T10638] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.257796][T10632] bond8 (unregistering): Released all slaves [ 207.262606][T10635] x_tables: duplicate entry at hook 3 [ 207.490365][T10647] sock: sock_timestamping_bind_phc: sock not bind to device [ 207.512209][T10642] x_tables: ip_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 207.687022][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 0 < 9 [ 207.687061][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 207.844443][T10664] ipvlan0: entered promiscuous mode [ 208.075042][ T5634] Bluetooth: hci4: Malformed Event: 0x13 [ 208.524969][T10703] ip_tables: iptables: counters copy to user failed while replacing table [ 208.644625][T10703] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 208.644651][T10703] netlink: 'syz.1.1270': attribute type 2 has an invalid length. [ 208.644664][T10703] netlink: 'syz.1.1270': attribute type 3 has an invalid length. [ 208.644676][T10703] __nla_validate_parse: 9 callbacks suppressed [ 208.644688][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 208.907816][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 209.322121][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1277'. [ 209.322882][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 209.322913][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 209.361909][T10721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.362249][T10721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.412022][T10733] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1279'. [ 209.636771][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 209.662570][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 209.777639][T10721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.777681][T10721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.817678][T10747] tunl0: entered promiscuous mode [ 209.817701][T10747] tunl0: entered allmulticast mode [ 210.072223][T10721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.072265][T10721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.322045][T10721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.322088][T10721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.491669][T10758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1287'. [ 210.511380][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 210.547344][T10764] ipvlan2: entered allmulticast mode [ 210.547370][T10764] virt_wifi0: entered allmulticast mode [ 210.550724][T10764] batman_adv: batadv0: Adding interface: ipvlan2 [ 210.550749][T10764] batman_adv: batadv0: Interface activated: ipvlan2 [ 210.569896][T10758] netlink: 'syz.0.1287': attribute type 21 has an invalid length. [ 210.599668][T10765] ipvlan3: entered allmulticast mode [ 210.601222][T10765] batman_adv: batadv0: Adding interface: ipvlan3 [ 210.601240][T10765] batman_adv: The newly added mac address (ea:52:1f:ea:18:fb) already exists on: ipvlan2 [ 210.601255][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.601268][T10765] batman_adv: batadv0: Interface activated: ipvlan3 [ 210.603053][T10758] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 210.603074][T10758] netlink: 'syz.0.1287': attribute type 5 has an invalid length. [ 210.795882][ T6668] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.795922][ T6668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.808599][ T6668] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.808705][ T6668] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.859503][ T50] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.859540][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.906132][ T50] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.906200][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.159073][T10781] xt_TCPMSS: Only works on TCP SYN packets [ 211.617850][T10796] v: renamed from vlan1 (while UP) [ 211.694116][T10797] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 211.730629][T10797] bond8 (unregistering): Released all slaves [ 211.749946][T10802] Bluetooth: hci0: unsupported parameter 5135 [ 211.749972][T10802] Bluetooth: hci0: unsupported parameter 8192 [ 211.749990][T10802] Bluetooth: hci0: unsupported parameter 5135 [ 211.750003][T10802] Bluetooth: hci0: unsupported parameter 8192 [ 212.060447][T10814] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 212.277263][T10828] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.277304][T10828] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 44714 - 0 [ 212.558489][T10843] lo: left promiscuous mode [ 212.579158][T10843] tunl0: left promiscuous mode [ 212.582723][T10843] gre0: left promiscuous mode [ 212.659323][T10843] gretap0: left promiscuous mode [ 212.661800][T10843] erspan0: left promiscuous mode [ 212.664154][T10843] ip_vti0: left promiscuous mode [ 212.684516][T10843] ip6gre0: left promiscuous mode [ 212.694894][T10843] syz_tun: left promiscuous mode [ 212.781761][T10843] macvlan0: left promiscuous mode [ 212.798724][T10847] netlink: 'syz.3.1311': attribute type 9 has an invalid length. [ 212.800019][T10843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.801837][T10843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.851343][T10843] geneve2: left promiscuous mode [ 212.853734][T10843] ip6erspan0: left promiscuous mode [ 212.870967][T10843] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.884813][T10843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.922267][ T5754] team_slave_0: entered promiscuous mode [ 212.922312][ T5754] team_slave_1: entered promiscuous mode [ 212.997219][ T6668] bond7: (slave bridge2): link status up again after 0 ms [ 212.997258][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 213.090656][ T6668] bond7: (slave bridge2): link status definitely down, disabling slave [ 213.224852][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 213.327191][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 213.436668][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 213.568995][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 213.675328][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 213.786685][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 213.896727][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 214.025988][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 214.199144][T10913] __nla_validate_parse: 7 callbacks suppressed [ 214.199167][T10913] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1320'. [ 215.112934][T10949] netlink: 'syz.2.1325': attribute type 23 has an invalid length. [ 215.132930][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.299688][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1329'. [ 215.299863][T10954] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 215.355404][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 215.355430][T10957] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1328'. [ 215.355479][T10957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1328'. [ 215.358947][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1328'. [ 215.405313][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1328'. [ 215.450531][T10954] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.623422][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.623556][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.623673][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.623794][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.623953][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.624071][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.624209][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.624335][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.624461][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.624582][T10970] xt_HMARK: proto mask must be zero with L3 mode [ 215.820500][T10983] geneve3: entered promiscuous mode [ 215.820527][T10983] geneve3: entered allmulticast mode [ 215.827273][ T8861] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 215.846448][ T8861] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 215.847464][ T8861] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 215.847505][ T8861] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 215.851249][T10985] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 215.851382][T10985] syzkaller1: linktype set to 823 [ 215.928146][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1335'. [ 215.992448][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 216.046267][T10987] bond8: entered promiscuous mode [ 216.048213][T10987] 8021q: adding VLAN 0 to HW filter on device bond8 [ 216.122650][T10986] 8021q: adding VLAN 0 to HW filter on device bond8 [ 216.123104][T10986] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 216.137784][T10986] bond8: (slave sit1): Error -95 calling set_mac_address [ 216.153497][T11001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1338'. [ 216.451929][T11012] xt_ecn: cannot match TCP bits for non-tcp packets [ 216.908324][T11040] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 217.033640][ T5634] Bluetooth: hci3: command 0x0401 tx timeout [ 217.033684][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 217.033711][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 217.894820][T11100] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 218.077732][T11110] Cannot find add_set index 65532 as target [ 218.142650][T11119] net_ratelimit: 28 callbacks suppressed [ 218.142672][T11119] ip_tables: iptables: counters copy to user failed while replacing table [ 218.377519][T11122] ip_tables: iptables: counters copy to user failed while replacing table [ 218.689431][T11135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.019827][T11147] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 220.515261][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 220.577945][T11149] __nla_validate_parse: 166 callbacks suppressed [ 220.577967][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 220.631628][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 220.756748][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 220.852288][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 220.865475][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 220.872579][T11152] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1388'. [ 220.872626][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1388'. [ 220.960295][T11151] syzkaller1: entered promiscuous mode [ 220.960322][T11151] syzkaller1: entered allmulticast mode [ 221.004596][T11158] NFSD: Failed to start, no listeners configured. [ 221.067666][T11172] vti0: entered promiscuous mode [ 221.136073][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 221.248608][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 221.356545][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 221.363685][T11182] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1393'. [ 221.908747][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 222.303244][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 222.338397][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 222.429244][T11231] bridge4: entered allmulticast mode [ 222.653281][T11242] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 222.780350][T11242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.784128][T11242] bond4: (slave bond5): making interface the new active one [ 222.784653][T11242] bond4: (slave bond5): Enslaving as an active interface with an up link [ 222.812487][T11254] smc: removing ib device rxe0 [ 222.841015][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1414'. [ 222.873419][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1412'. [ 222.928461][T11254] smbdirect: ib_dev[rxe0] removed [ 223.256955][ T1122] net_ratelimit: 16 callbacks suppressed [ 223.256979][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 223.385635][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 223.535758][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 223.657606][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 223.777884][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 223.888867][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 223.995853][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 224.087787][T11294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.197817][T11298] xt_hashlimit: invalid interval [ 224.319410][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 224.475329][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 225.022710][T11320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.222594][T11320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.279911][T11320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.343128][T11320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.501729][T11338] netlink: 'syz.4.1438': attribute type 10 has an invalid length. [ 225.520788][T11320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.736805][T11342] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 225.777386][T11346] syzkaller0: entered promiscuous mode [ 225.777411][T11346] syzkaller0: entered allmulticast mode [ 225.804509][T11346] __nla_validate_parse: 5 callbacks suppressed [ 225.804531][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1442'. [ 225.864746][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1443'. [ 225.881886][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1442'. [ 226.050329][T11368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1447'. [ 226.062077][T11363] netlink: 'syz.2.1446': attribute type 7 has an invalid length. [ 226.092908][T11363] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1446'. [ 226.094081][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 226.494029][T11392] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1455'. [ 226.494059][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 226.566408][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1457'. [ 226.569861][T11395] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1457'. [ 227.411243][T11452] xt_l2tp: invalid flags combination: 0 [ 227.756305][T11470] netlink: 'syz.1.1476': attribute type 3 has an invalid length. [ 228.217498][T11484] vrf0: entered promiscuous mode [ 228.217527][T11484] vrf0: entered allmulticast mode [ 228.287325][ T13] net_ratelimit: 26 callbacks suppressed [ 228.287351][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 228.395367][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 228.505507][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 228.615601][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 228.725343][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 228.835661][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 228.946212][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 229.055606][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 229.165354][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 229.275580][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 233.355627][ T8861] net_ratelimit: 36 callbacks suppressed [ 233.355653][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 233.465653][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 233.575540][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 233.685467][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 233.795405][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 233.905752][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 234.015370][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 234.125419][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 234.235634][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 234.345372][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 238.415420][ T1122] net_ratelimit: 36 callbacks suppressed [ 238.415440][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 238.525465][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 238.635631][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 238.745448][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 238.855664][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 238.965477][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 239.075701][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 239.185770][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 239.295491][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 239.405580][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 243.485649][ T12] net_ratelimit: 37 callbacks suppressed [ 243.485673][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 243.595419][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 243.705636][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 243.815374][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 243.925637][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 244.035424][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 244.145446][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 244.255380][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 244.365676][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 244.475341][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 248.565737][ T13] net_ratelimit: 36 callbacks suppressed [ 248.565760][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 248.675360][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 248.785933][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 248.895357][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 249.005439][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 249.115336][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 249.225562][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 249.335403][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 249.445616][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 249.555420][ T1122] bond7: (slave bridge2): failed to get link speed/duplex [ 251.271827][T11501] __nla_validate_parse: 8 callbacks suppressed [ 251.271852][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 251.484777][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 251.599327][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 251.898166][T11536] netlink: 'syz.3.1495': attribute type 4 has an invalid length. [ 252.279298][T11556] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1501'. [ 252.303750][T11555] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 252.303840][T11555] gretap2: entered promiscuous mode [ 252.303857][T11555] gretap2: entered allmulticast mode [ 252.371484][ T4952] Bluetooth: hci2: unexpected cc 0x1003 length: 0 < 9 [ 252.371518][ T4952] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 252.776865][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 252.776949][T11579] bridge_slave_0: entered promiscuous mode [ 252.838908][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1509'. [ 252.838948][T11584] netlink: 'syz.0.1509': attribute type 7 has an invalid length. [ 252.838962][T11584] netlink: 'syz.0.1509': attribute type 8 has an invalid length. [ 252.838976][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 253.250501][T11615] syz_tun: left allmulticast mode [ 253.250528][T11615] syz_tun: left promiscuous mode [ 253.250785][T11615] bridge0: port 1(syz_tun) entered disabled state [ 253.266218][ T4952] Bluetooth: hci4: command 0x0405 tx timeout [ 253.606079][ T263] net_ratelimit: 33 callbacks suppressed [ 253.606102][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 253.735739][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 253.739719][T11642] hsr0: entered allmulticast mode [ 253.739745][T11642] hsr_slave_0: entered allmulticast mode [ 253.739764][T11642] hsr_slave_1: entered allmulticast mode [ 253.740525][T11642] hsr0: entered promiscuous mode [ 253.741289][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 253.741747][T11642] hsr_slave_0: left promiscuous mode [ 253.747921][T11642] hsr_slave_1: left promiscuous mode [ 253.821445][T11642] hsr0 (unregistering): left allmulticast mode [ 253.821493][T11642] hsr0 (unregistering): left promiscuous mode [ 253.887955][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 253.954688][T11653] smc: net device lo applied user defined pnetid SYZ0 [ 253.995895][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 254.056628][T11658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1529'. [ 254.098399][T11662] tipc: Can't bind to reserved service type 0 [ 254.112023][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 254.215370][ T8861] bond7: (slave bridge2): failed to get link speed/duplex [ 254.325885][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 254.423369][T11683] syzkaller1: entered promiscuous mode [ 254.423397][T11683] syzkaller1: entered allmulticast mode [ 254.457752][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 254.639156][T11695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.639197][T11695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.686471][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 254.801179][T11695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.801220][T11695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.875928][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 254.973818][T11695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.973870][T11695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.254031][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 255.321972][T11695] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 255.381207][T11695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.381249][T11695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.573540][T11732] syzkaller1: entered promiscuous mode [ 255.573564][T11732] syzkaller1: entered allmulticast mode [ 255.609092][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.609128][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.666482][ T1041] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.666521][ T1041] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.666593][ T1041] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.666620][ T1041] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.666657][ T1041] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.666683][ T1041] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.898637][ T263] IPVS: starting estimator thread 0... [ 255.917397][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.985586][T11749] IPVS: using max 26 ests per chain, 62400 per kthread [ 256.056363][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.057555][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.057757][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.057793][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.397386][T11772] __nla_validate_parse: 4 callbacks suppressed [ 256.397408][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 256.404955][T11756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1558'. [ 256.609870][T11774] nbd3: detected capacity change from 0 to 274877906944 [ 256.670712][T11690] block nbd64: NBD_DISCONNECT [ 256.703495][ T4952] block nbd3: Receive control failed (result -104) [ 257.007844][T11795] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 257.086091][T11795] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.125714][T11795] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1565'. [ 257.149384][T11690] udevd[11690]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 257.543366][T11815] veth0: entered promiscuous mode [ 257.560227][T11813] veth0: left promiscuous mode [ 257.564500][T11814] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1567'. [ 257.564534][T11814] nbd: illegal input index -8454144 [ 257.699110][T11817] batadv_slave_0: Caught tx_queue_len zero misconfig [ 257.736468][T11823] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 257.814127][T11823] bond7: option mode: invalid value (10) [ 257.827759][T11823] bond7 (unregistering): Released all slaves [ 258.243202][T11855] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 258.283701][T11855] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 258.378343][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 258.378375][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 258.378445][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 258.424459][T11862] gtp1: entered promiscuous mode [ 258.424484][T11862] gtp1: entered allmulticast mode [ 258.558607][T11867] netlink: 'syz.4.1579': attribute type 3 has an invalid length. [ 258.558644][T11867] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 258.675476][ T6666] net_ratelimit: 22 callbacks suppressed [ 258.675501][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 258.722257][T11875] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1580'. [ 258.722315][T11875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'. [ 258.722331][T11875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'. [ 258.776754][T11875] netlink: 'syz.1.1580': attribute type 11 has an invalid length. [ 258.827640][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 258.938886][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 259.045828][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 259.121162][T11887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.156197][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 259.191654][T11894] netlink: 'syz.2.1586': attribute type 3 has an invalid length. [ 259.268818][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 259.375883][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 259.485939][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 259.595973][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 259.862357][T11921] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 260.246374][T11936] netlink: 'syz.2.1603': attribute type 4 has an invalid length. [ 260.297621][T11939] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 260.348256][T11939] bond7: entered promiscuous mode [ 260.363691][T11939] macvlan2: entered promiscuous mode [ 260.363717][T11939] macvlan2: entered allmulticast mode [ 260.377882][T11939] bond7: (slave macvlan2): Opening slave failed [ 260.679001][T11963] netlink: 'syz.3.1610': attribute type 10 has an invalid length. [ 260.679621][T11963] syz_tun: entered promiscuous mode [ 260.735279][T11943] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 261.180956][T11987] team_slave_1: Caught tx_queue_len zero misconfig [ 261.183386][T11987] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 261.307282][T11992] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 261.374805][T11992] bond7: entered promiscuous mode [ 261.381877][T11992] 8021q: adding VLAN 0 to HW filter on device bond7 [ 261.654142][T12003] __nla_validate_parse: 13 callbacks suppressed [ 261.654166][T12003] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1622'. [ 261.880948][T12026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1626'. [ 261.998497][T12032] xt_hashlimit: size too large, truncated to 1048576 [ 262.051928][T12028] validate_nla: 1 callbacks suppressed [ 262.051951][T12028] netlink: 'syz.0.1629': attribute type 4 has an invalid length. [ 262.092588][T12028] netlink: 'syz.0.1629': attribute type 4 has an invalid length. [ 262.114415][T12028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1629'. [ 262.233698][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.421742][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 262.741720][T12059] pim6reg1: entered promiscuous mode [ 262.741746][T12059] pim6reg1: entered allmulticast mode [ 263.134423][T12082] bond8 (unregistering): Released all slaves [ 263.511435][T12099] bond9: option min_links: invalid value (18446744072390311948) [ 263.511465][T12099] bond9: option min_links: allowed values 0 - 2147483647 [ 263.535743][T12099] bond9 (unregistering): Released all slaves [ 263.587650][T12108] vlan3: entered allmulticast mode [ 263.587677][T12108] gretap0: entered allmulticast mode [ 263.624800][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 263.765631][ T6666] net_ratelimit: 32 callbacks suppressed [ 263.765655][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 263.873342][T12125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1656'. [ 263.873372][T12125] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1656'. [ 263.873389][T12125] netlink: 'syz.3.1656': attribute type 6 has an invalid length. [ 263.873402][T12125] netlink: 'syz.3.1656': attribute type 5 has an invalid length. [ 263.873416][T12125] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1656'. [ 263.876167][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 263.981451][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 263.981483][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 263.990358][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 264.027987][T12133] xt_hashlimit: size too large, truncated to 1048576 [ 264.096081][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 264.300808][T12148] netlink: 'syz.3.1664': attribute type 9 has an invalid length. [ 264.408464][T12141] batman_adv: batadv0: Interface deactivated: syz_tun [ 264.408492][T12141] batman_adv: batadv0: Removing interface: syz_tun [ 264.410979][T12141] bridge0: port 1(syz_tun) entered blocking state [ 264.411198][T12141] bridge0: port 1(syz_tun) entered disabled state [ 264.411328][T12141] syz_tun: entered allmulticast mode [ 264.439488][T12141] syz_tun: entered promiscuous mode [ 264.467766][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 264.491458][T12154] netlink: 'syz.0.1665': attribute type 2 has an invalid length. [ 264.577398][T12157] openvswitch: netlink: Duplicate or invalid key (type 0). [ 264.577439][T12157] openvswitch: netlink: Actions may not be safe on all matching packets [ 264.588409][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 264.640156][T12160] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 264.696246][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 264.807008][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 265.001350][T12172] wireguard0: entered promiscuous mode [ 265.146956][T12184] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 265.215055][T12185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.245580][T12222] tipc: Started in network mode [ 266.245615][T12222] tipc: Node identity a637b0801833, cluster identity 4711 [ 266.246103][T12222] tipc: Enabled bearer , priority 0 [ 266.401140][T12154] NFSD: Failed to start, no listeners configured. [ 267.260809][ T5644] tipc: Node number set to 3187978368 [ 267.987584][T12285] ip6gre1: entered allmulticast mode [ 267.994190][ T1119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.098414][T12282] netlink: 'syz.0.1694': attribute type 10 has an invalid length. [ 268.139662][T12282] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.158108][T12282] bond0: (slave team0): Enslaving as an active interface with an up link [ 268.363701][T12304] __nla_validate_parse: 12 callbacks suppressed [ 268.363725][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 268.403513][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 268.418710][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 268.443564][T12302] syzkaller0: entered promiscuous mode [ 268.443597][T12302] syzkaller0: entered allmulticast mode [ 268.504695][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 268.804642][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 268.804672][T12316] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1701'. [ 269.005682][ T50] net_ratelimit: 97 callbacks suppressed [ 269.005706][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 269.116987][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 269.117015][T12323] openvswitch: netlink: Invalid VLAN frame [ 269.127403][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 269.168843][T12323] ip_tables: iptables: counters copy to user failed while replacing table [ 269.226108][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 269.291952][T12329] gretap0: mtu less than device minimum [ 269.382678][T12332] syzkaller0: entered promiscuous mode [ 269.382702][T12332] syzkaller0: entered allmulticast mode [ 269.408014][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 269.447403][T12334] netlink: 'syz.0.1710': attribute type 64 has an invalid length. [ 269.447428][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 269.491256][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1709'. [ 269.524915][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 269.576319][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 269.705392][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 269.815732][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 269.958996][T12343] Cannot find set identified by id 65534 to match [ 269.959810][T12344] Cannot find set identified by id 65534 to match [ 270.000635][T12349] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.042434][T12347] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 270.309700][T12355] vxcan3: entered promiscuous mode [ 270.380269][T12368] netlink: 'syz.3.1722': attribute type 10 has an invalid length. [ 270.439342][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.459716][T12368] bond0: (slave team0): Enslaving as an active interface with an up link [ 270.805077][T12386] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 271.042524][T12400] 8021q: adding VLAN 0 to HW filter on device bond9 [ 271.121827][T12400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.124806][T12400] bond9: (slave bond0): making interface the new active one [ 271.138895][T12407] netlink: 'syz.4.1732': attribute type 4 has an invalid length. [ 271.156634][T12400] bond9: (slave bond0): Enslaving as an active interface with an up link [ 271.185359][T12415] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 271.370843][T12407] .`: renamed from bond0 (while UP) [ 272.385414][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.045426][ T6666] net_ratelimit: 32 callbacks suppressed [ 274.045452][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 274.155711][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 274.265414][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 274.375435][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 274.485402][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 274.595284][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 274.705651][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 274.815655][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 274.925552][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 275.035424][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 279.125765][ T263] net_ratelimit: 36 callbacks suppressed [ 279.125792][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 279.236289][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 279.345618][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 279.456043][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 279.565754][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 279.675957][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 279.785893][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 279.896118][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 280.005960][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 280.116001][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 280.865416][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.186059][ T6668] net_ratelimit: 36 callbacks suppressed [ 284.186084][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 284.295882][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 284.406271][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 284.515916][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 284.636043][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 284.745569][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 284.855970][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 284.965345][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 285.075963][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 285.185919][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 286.629115][ T1718] block nbd3: Possible stuck request ffff888028c17000: control (read@0,4096B). Runtime 30 seconds [ 289.255803][ T6666] net_ratelimit: 36 callbacks suppressed [ 289.255827][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 289.365770][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 289.475710][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 289.586240][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 289.695506][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 289.805750][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 289.915409][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 290.025680][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 290.135825][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 290.245317][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 294.315971][ T263] net_ratelimit: 36 callbacks suppressed [ 294.315996][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 294.425538][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 294.535691][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 294.645400][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 294.755631][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 294.865710][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 294.975720][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 295.085501][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 295.195410][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 295.305686][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 297.505398][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.053452][T12432] __nla_validate_parse: 14 callbacks suppressed [ 298.053476][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 298.099020][T12436] geneve5: entered promiscuous mode [ 298.103385][T12439] netlink: 'syz.4.1745': attribute type 1 has an invalid length. [ 298.140396][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 298.169807][T12446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1746'. [ 298.271728][T12446] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1746'. [ 298.274712][T12451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1746'. [ 298.275933][ T50] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 41602 - 0 [ 298.276216][ T50] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 41602 - 0 [ 298.276315][ T50] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 41602 - 0 [ 298.276421][ T50] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 41602 - 0 [ 298.301725][T12445] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1746'. [ 298.303644][T12451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1746'. [ 298.354560][T12452] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1745'. [ 298.961698][T12486] gre1: entered promiscuous mode [ 299.317665][T12506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1761'. [ 299.317977][T12506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1761'. [ 299.332044][T12506] tc_dump_action: action bad kind [ 299.356511][ T6666] net_ratelimit: 36 callbacks suppressed [ 299.356533][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 299.433440][T12511] netlink: 'syz.2.1765': attribute type 1 has an invalid length. [ 299.603372][T12519] bond8: (slave gretap0): making interface the new active one [ 299.603899][T12519] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 299.662751][T12512] tipc: Invalid UDP bearer configuration [ 299.662802][T12512] tipc: Enabling of bearer rejected, failed to enable media [ 299.681467][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 299.786496][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 299.897889][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 300.007788][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 300.119428][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 300.225623][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 300.295915][T12553] x_tables: duplicate underflow at hook 1 [ 300.336954][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 300.489024][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 300.595604][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 301.188601][T12594] bridge4: entered promiscuous mode [ 301.188671][T12594] bridge4: entered allmulticast mode [ 301.441694][T12609] vlan2: entered promiscuous mode [ 301.441721][T12609] hsr0: entered promiscuous mode [ 301.482864][ T5635] Bluetooth: hci1: connection err: -111 [ 301.499772][T12609] hsr_slave_0: left promiscuous mode [ 301.518358][T12609] hsr_slave_1: left promiscuous mode [ 301.969509][T12627] xt_hashlimit: size too large, truncated to 1048576 [ 302.438042][T12649] bond8: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 302.443365][T12649] bond8 (unregistering): Released all slaves [ 302.944685][T12670] netlink: 'syz.3.1806': attribute type 2 has an invalid length. [ 303.209625][T12680] __nla_validate_parse: 118 callbacks suppressed [ 303.209647][T12680] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1807'. [ 303.446709][T12691] netlink: 7680 bytes leftover after parsing attributes in process `syz.1.1811'. [ 303.454313][T12692] netlink: 7680 bytes leftover after parsing attributes in process `syz.1.1811'. [ 303.719677][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 303.719714][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1812'. [ 304.143775][T12730] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 304.154563][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1820'. [ 304.154669][T12731] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1820'. [ 304.188519][ T263] bond0: (slave bond_slave_0): interface is now down [ 304.188555][ T263] bond0: (slave bond_slave_1): interface is now down [ 304.188571][ T263] bond0: (slave syz_tun): interface is now down [ 304.188586][ T263] bond0: (slave team0): interface is now down [ 304.218006][ T263] bond0: (slave bond_slave_0): interface is now down [ 304.218055][ T263] bond0: (slave bond_slave_1): interface is now down [ 304.218096][ T263] bond0: (slave syz_tun): interface is now down [ 304.218129][ T263] bond0: (slave team0): interface is now down [ 304.246534][ T263] bond0: (slave bond_slave_0): interface is now down [ 304.246609][ T263] bond0: (slave bond_slave_1): interface is now down [ 304.246651][ T263] bond0: (slave syz_tun): interface is now down [ 304.246685][ T263] bond0: (slave team0): interface is now down [ 304.277958][ T263] bond0: (slave bond_slave_0): interface is now down [ 304.277982][ T263] bond0: (slave bond_slave_1): interface is now down [ 304.277997][ T263] bond0: (slave syz_tun): interface is now down [ 304.278011][ T263] bond0: (slave team0): interface is now down [ 304.371788][ T263] bond0: now running without any active interface! [ 304.379008][ T1119] net_ratelimit: 27 callbacks suppressed [ 304.379099][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 304.488032][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 304.596434][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 304.711286][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 304.742380][T12755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 304.794314][T12755] netlink: 'syz.3.1824': attribute type 1 has an invalid length. [ 304.794337][T12755] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1824'. [ 304.818420][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 304.927102][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 305.035249][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 305.150298][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 305.228637][T12771] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1829'. [ 305.259000][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 305.414324][T12775] netlink: 'syz.4.1830': attribute type 17 has an invalid length. [ 305.414349][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1830'. [ 305.442401][T12775] gretap0: entered promiscuous mode [ 305.453964][T12775] gretap0: left promiscuous mode [ 305.683527][T12791] ieee802154 phy1 wpan1: encryption failed: -90 [ 305.840505][T12803] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 306.532651][T12844] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 306.633302][T12851] SET target dimension over the limit! [ 307.038638][ T29] audit: type=1804 audit(1794443714.440:2): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1858" name="/newroot/368/cgroup.controllers" dev="tmpfs" ino=1902 res=1 errno=0 [ 307.039723][ T29] audit: type=1800 audit(1794443714.440:3): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1858" name="cgroup.controllers" dev="tmpfs" ino=1902 res=0 errno=-22 [ 307.042142][ T29] audit: type=1800 audit(1794443714.440:4): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1858" name="cgroup.controllers" dev="tmpfs" ino=1902 res=0 errno=-22 [ 307.173084][T12873] netlink: 'syz.0.1857': attribute type 19 has an invalid length. [ 307.183457][T12873] netlink: 'syz.0.1857': attribute type 19 has an invalid length. [ 307.243637][T12887] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 307.484214][T12894] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.240999][T12926] netlink: 'syz.4.1875': attribute type 10 has an invalid length. [ 308.256301][T12926] macvlan1: entered promiscuous mode [ 308.256327][T12926] macvlan1: entered allmulticast mode [ 308.316928][T12926] veth1_vlan: entered allmulticast mode [ 308.357051][T12926] .`: (slave macvlan1): Enslaving as an active interface with an up link [ 308.361106][T12933] __nla_validate_parse: 20 callbacks suppressed [ 308.361128][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 308.544492][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 308.552301][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 309.184160][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 309.415245][ T6666] net_ratelimit: 37 callbacks suppressed [ 309.415268][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 309.525271][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 309.637169][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 309.746456][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 309.899893][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 310.005530][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 310.116440][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 310.225545][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 310.346895][T13029] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 310.370040][T13030] syz_tun: Device is already in use. [ 310.376329][T13031] netlink: 'syz.3.1897': attribute type 10 has an invalid length. [ 310.576667][T13031] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.576698][T13031] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 310.576874][T13031] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 310.688070][T13007] syzkaller0: left allmulticast mode [ 310.695376][ T1119] bond7: (slave bridge2): failed to get link speed/duplex [ 310.800801][T13048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.804282][T13048] tipc: Enabling of bearer rejected, failed to enable media [ 311.073067][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1902'. [ 311.396676][T13077] netlink: 'syz.3.1907': attribute type 11 has an invalid length. [ 311.396702][T13077] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1907'. [ 311.401645][T13077] netlink: 'syz.3.1907': attribute type 13 has an invalid length. [ 312.566876][T13121] bond8: entered allmulticast mode [ 312.567374][T13121] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.703150][ T5296] veth0_vlan: left promiscuous mode [ 312.754633][ T5644] veth0_vlan: entered promiscuous mode [ 312.880978][T13137] netlink: 'syz.2.1923': attribute type 26 has an invalid length. [ 312.947642][T13143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1925'. [ 313.237290][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 313.237436][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 313.237517][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 314.256636][T13206] __nla_validate_parse: 1 callbacks suppressed [ 314.256657][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 314.376044][T13206] block nbd0: reconnected socket [ 314.376071][T13206] block nbd0: Unsupported socket: should be TCP or UNIX. [ 314.425334][ T5635] block nbd0: Receive control failed (result -32) [ 314.457372][T13217] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 314.457398][T13217] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 314.482676][ T6668] net_ratelimit: 33 callbacks suppressed [ 314.482699][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 314.585762][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 314.641102][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641130][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641145][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641159][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641172][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641186][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641199][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641213][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641227][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641241][T13227] tc action pedit unable to extract header offset for header type (0x5) [ 314.641268][T13227] 0: reclassify loop, rule prio 0, protocol 800 [ 314.701288][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 314.807118][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 314.880720][T13237] pimreg3: entered allmulticast mode [ 314.915560][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 315.012587][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 315.067869][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 315.068743][T13242] sctp: [Deprecated]: syz.0.1949 (pid 13242) Use of int in max_burst socket option. [ 315.068743][T13242] Use struct sctp_assoc_value instead [ 315.086029][T13241] sctp: [Deprecated]: syz.0.1949 (pid 13241) Use of int in max_burst socket option. [ 315.086029][T13241] Use struct sctp_assoc_value instead [ 315.138337][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 315.139157][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 315.139175][T13249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1951'. [ 315.255401][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 315.405749][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 315.491869][T13268] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1956'. [ 315.493984][T13268] gretap0: entered promiscuous mode [ 315.517067][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 315.544561][T13273] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1956'. [ 315.625451][T13268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1956'. [ 316.495318][T13273] 0ªî{X¹¦: renamed from gretap0 [ 316.499063][T13273] 0ªî{X¹¦: left promiscuous mode [ 316.501037][T13273] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.603299][T13302] xt_cgroup: invalid path, errno=-2 [ 316.672713][T13306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1965'. [ 316.716481][ T1718] block nbd3: Possible stuck request ffff888028c17000: control (read@0,4096B). Runtime 60 seconds [ 316.755037][ T5001] udevd[5001]: worker [11688] /devices/virtual/block/nbd3 is taking a long time [ 317.257451][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.257625][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.257754][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.257878][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.258001][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.258828][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.258957][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.259093][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.262645][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.262820][T13330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 317.352012][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.780100][T13362] bridge0: port 3(syz_tun) entered disabled state [ 317.821726][T13362] syz_tun (unregistering): left allmulticast mode [ 317.821758][T13362] syz_tun (unregistering): left promiscuous mode [ 317.821836][T13362] bridge0: port 3(syz_tun) entered disabled state [ 317.884734][T13360] veth0_to_bond: default FDB implementation only supports local addresses [ 318.430935][T13354] bond10: option lp_interval: invalid value (18446744073709551615) [ 318.430966][T13354] bond10: option lp_interval: allowed values 1 - 2147483647 [ 318.462098][T13354] bond10 (unregistering): Released all slaves [ 318.573877][T13388] gre0: Caught tx_queue_len zero misconfig [ 318.828950][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.829514][T13403] netlink: 'syz.3.1991': attribute type 6 has an invalid length. [ 318.853793][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.854127][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.854405][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.883705][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.884091][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.884378][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.884750][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 318.885019][T13402] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 319.137459][T13412] pim6reg1: entered promiscuous mode [ 319.137482][T13412] pim6reg1: entered allmulticast mode [ 319.518334][ T6666] net_ratelimit: 26 callbacks suppressed [ 319.518359][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 319.625850][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 319.681246][T13441] xt_hashlimit: size too large, truncated to 1048576 [ 319.723942][T13444] __nla_validate_parse: 10 callbacks suppressed [ 319.723963][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 319.724093][T13444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.954863][T13444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.007075][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 320.115316][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 320.228467][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 320.256794][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2008'. [ 320.336279][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 320.386452][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2009'. [ 320.402742][T13478] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2012'. [ 320.465624][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 320.529652][T13484] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2013'. [ 320.577426][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 320.687302][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 320.792019][T13498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2017'. [ 320.796418][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 320.840361][T13502] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2019'. [ 320.877595][T13504] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2019'. [ 321.009145][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2022'. [ 321.010139][T13512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2022'. [ 323.052727][T13602] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 323.081842][T13602] veth0_macvtap: entered promiscuous mode [ 323.110306][T13602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.111950][T13602] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 323.114188][T13602] geneve2: left promiscuous mode [ 323.149071][T13602] bridge2: left allmulticast mode [ 323.153476][T13602] bridge0: port 1(syz_tun) entered blocking state [ 323.153574][T13602] bridge0: port 1(syz_tun) entered forwarding state [ 323.209932][T13602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.225038][T13602] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.240783][T13602] bridge4: left allmulticast mode [ 323.412860][T13634] macvlan1: entered promiscuous mode [ 323.412886][T13634] macvlan1: entered allmulticast mode [ 323.453073][T13634] veth1_vlan: entered allmulticast mode [ 323.470639][T13634] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 324.607086][ T12] net_ratelimit: 33 callbacks suppressed [ 324.607110][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 324.754667][T13693] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 324.772112][T13693] bond8 (unregistering): Released all slaves [ 324.846561][T13704] nftables ruleset with unbound set [ 324.887930][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 324.995363][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 325.106158][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 325.220819][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 325.253530][T13717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.327476][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 325.355952][T13717] __nla_validate_parse: 80 callbacks suppressed [ 325.355977][T13717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2081'. [ 325.435380][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 325.537882][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 325.555476][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 325.654689][T13741] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 325.677976][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 325.749257][T13738] validate_nla: 33 callbacks suppressed [ 325.749280][T13738] netlink: 'syz.3.2086': attribute type 83 has an invalid length. [ 326.418644][T13784] IPVS: ip_vs_edit_dest(): server weight less than zero [ 326.480217][T13790] IPVS: ip_vs_edit_dest(): server weight less than zero [ 326.511032][T13782] bond0: option ad_select: unable to set because the bond device is up [ 326.578257][T13784] bond11: option min_links: invalid value (18446744073709551614) [ 326.578284][T13784] bond11: option min_links: allowed values 0 - 2147483647 [ 326.581918][T13784] bond11 (unregistering): Released all slaves [ 326.676240][T13788] bond0: option ad_select: unable to set because the bond device is up [ 326.742716][T13790] bond11: option min_links: invalid value (18446744073709551614) [ 326.742742][T13790] bond11: option min_links: allowed values 0 - 2147483647 [ 326.744287][T13790] bond11 (unregistering): Released all slaves [ 326.811447][T13800] tc_dump_action: action bad kind [ 326.985981][T13809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.991607][T13809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.053998][T13809] syz_tun: left promiscuous mode [ 327.168065][T13809] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 327.184432][T13809] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 327.201658][T13809] syzkaller0: left promiscuous mode [ 327.203164][T13809] bond2: left promiscuous mode [ 327.203185][T13809] bridge1: left promiscuous mode [ 327.228448][T13809] vti0: left promiscuous mode [ 327.276484][T13820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2104'. [ 327.368486][T13826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.502908][T13832] ip6erspan0: entered promiscuous mode [ 327.502934][T13832] ip6erspan0: entered allmulticast mode [ 327.540355][T13834] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 327.762410][T13848] xt_LOG: prefix is not null-terminated [ 327.980503][T13863] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2117'. [ 328.121040][T13867] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2119'. [ 328.802004][T13910] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 328.803886][T13910] x_tables: duplicate underflow at hook 1 [ 328.984556][T13922] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2137'. [ 329.097644][T13924] xt_hashlimit: size too large, truncated to 1048576 [ 329.157757][T13928] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 329.157784][T13928] netlink: 'syz.0.2139': attribute type 2 has an invalid length. [ 329.454739][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2142'. [ 329.510270][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.633243][T13950] netlink: 'syz.1.2146': attribute type 9 has an invalid length. [ 329.656349][ T1041] net_ratelimit: 30 callbacks suppressed [ 329.656371][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 329.729641][T13955] netlink: 'syz.3.2147': attribute type 3 has an invalid length. [ 329.748799][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 329.766333][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 329.875821][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 329.987102][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 330.078101][T13983] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 330.208661][T13983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.235982][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 330.252830][T13983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2154'. [ 330.356896][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 330.466247][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 330.471604][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 330.577539][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 330.686923][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 330.795524][ T263] bond7: (slave bridge2): failed to get link speed/duplex [ 330.823660][T14017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2162'. [ 330.889146][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'. [ 331.146247][T14028] bond9: option min_links: invalid value (18446744073709551614) [ 331.146276][T14028] bond9: option min_links: allowed values 0 - 2147483647 [ 331.151879][T14028] bond9 (unregistering): Released all slaves [ 331.346455][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807a74c000: rx timeout, send abort [ 331.371779][T14044] netlink: 'syz.4.2169': attribute type 19 has an invalid length. [ 331.409519][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 331.433469][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 331.562156][T14062] netlink: 'syz.0.2171': attribute type 10 has an invalid length. [ 331.879268][T14066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2173'. [ 331.962968][T14075] syzkaller1: entered promiscuous mode [ 331.962993][T14075] syzkaller1: entered allmulticast mode [ 331.994104][T14074] netlink: 'syz.1.2176': attribute type 4 has an invalid length. [ 331.994952][T14075] netlink: 'syz.1.2176': attribute type 4 has an invalid length. [ 332.063991][T14083] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2177'. [ 332.064311][T14083] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2177'. [ 332.249265][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 332.249644][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 332.659292][T14113] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.791676][T14117] vlan2: entered allmulticast mode [ 332.791700][T14117] gretap0: entered allmulticast mode [ 333.471220][T14154] Cannot find del_set index 2 as target [ 333.532313][T14160] netlink: 'syz.2.2197': attribute type 4 has an invalid length. [ 333.532614][T14160] netlink: 'syz.2.2197': attribute type 4 has an invalid length. [ 333.584428][T14160] netlink: 'syz.2.2197': attribute type 4 has an invalid length. [ 334.005012][T14186] [ 334.007443][T14186] ====================================================== [ 334.014507][T14186] WARNING: possible circular locking dependency detected [ 334.021587][T14186] syzkaller #0 Not tainted [ 334.026038][T14186] ------------------------------------------------------ [ 334.033099][T14186] syz.3.2206/14186 is trying to acquire lock: [ 334.039216][T14186] ffff88801d28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x539/0x6b0 [ 334.049754][T14186] [ 334.049754][T14186] but task is already holding lock: [ 334.057160][T14186] ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 334.066623][T14186] [ 334.066623][T14186] which lock already depends on the new lock. [ 334.066623][T14186] [ 334.077064][T14186] [ 334.077064][T14186] the existing dependency chain (in reverse order) is: [ 334.086112][T14186] [ 334.086112][T14186] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 334.094162][T14186] down_write+0x91/0x200 [ 334.098995][T14186] kernfs_add_one+0x41/0x510 [ 334.104150][T14186] kernfs_create_dir_ns+0x18c/0x220 [ 334.109924][T14186] internal_create_group+0x440/0x1180 [ 334.115867][T14186] cpuhp_invoke_callback+0x434/0x810 [ 334.121728][T14186] cpuhp_issue_call+0x3f0/0x750 [ 334.127158][T14186] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 334.133859][T14186] __cpuhp_setup_state+0x3f/0x60 [ 334.139375][T14186] do_one_initcall+0x250/0x870 [ 334.144864][T14186] do_initcall_level+0x10a/0x1a0 [ 334.150371][T14186] do_initcalls+0x59/0xa0 [ 334.155262][T14186] kernel_init_freeable+0x29d/0x3e0 [ 334.161027][T14186] kernel_init+0x22/0x1d0 [ 334.165911][T14186] ret_from_fork+0x514/0xb70 [ 334.171068][T14186] ret_from_fork_asm+0x1a/0x30 [ 334.176475][T14186] [ 334.176475][T14186] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 334.184341][T14186] [ 334.184341][T14186] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 334.192119][T14186] cpus_read_lock+0x3d/0x160 [ 334.197277][T14186] static_key_slow_inc+0x12/0x30 [ 334.202782][T14186] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 334.209065][T14186] nbd_genl_foreach_sock+0x265/0x450 [ 334.214924][T14186] nbd_genl_reconfigure+0xbbb/0x1040 [ 334.220780][T14186] genl_family_rcv_msg_doit+0x233/0x340 [ 334.226913][T14186] genl_rcv_msg+0x614/0x7a0 [ 334.231996][T14186] netlink_rcv_skb+0x226/0x4a0 [ 334.237348][T14186] genl_rcv+0x28/0x40 [ 334.241939][T14186] netlink_unicast+0x8ef/0xa80 [ 334.247274][T14186] netlink_sendmsg+0x7f0/0xb20 [ 334.252624][T14186] sock_sendmsg_nosec+0x14e/0x190 [ 334.258231][T14186] ____sys_sendmsg+0x49f/0x790 [ 334.263566][T14186] ___sys_sendmsg+0x2f7/0x3d0 [ 334.268801][T14186] __x64_sys_sendmsg+0x1b1/0x290 [ 334.274314][T14186] do_syscall_64+0x166/0x520 [ 334.279475][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.285927][T14186] [ 334.285927][T14186] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 334.293623][T14186] __mutex_lock+0x197/0x15a0 [ 334.298792][T14186] nbd_queue_rq+0x373/0xff0 [ 334.303859][T14186] blk_mq_dispatch_rq_list+0x499/0x1990 [ 334.309988][T14186] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 334.316892][T14186] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 334.323492][T14186] blk_mq_run_work_fn+0x167/0x2f0 [ 334.329081][T14186] process_scheduled_works+0xc3d/0x1630 [ 334.335194][T14186] worker_thread+0xa47/0xfb0 [ 334.340362][T14186] kthread+0x38b/0x480 [ 334.344998][T14186] ret_from_fork+0x514/0xb70 [ 334.350155][T14186] ret_from_fork_asm+0x1a/0x30 [ 334.355486][T14186] [ 334.355486][T14186] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 334.362732][T14186] __mutex_lock+0x197/0x15a0 [ 334.367888][T14186] nbd_queue_rq+0xc1/0xff0 [ 334.372873][T14186] blk_mq_dispatch_rq_list+0x499/0x1990 [ 334.378989][T14186] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 334.385929][T14186] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 334.392473][T14186] blk_mq_run_work_fn+0x167/0x2f0 [ 334.398053][T14186] process_scheduled_works+0xc3d/0x1630 [ 334.404178][T14186] worker_thread+0xa47/0xfb0 [ 334.409366][T14186] kthread+0x38b/0x480 [ 334.414001][T14186] ret_from_fork+0x514/0xb70 [ 334.419157][T14186] ret_from_fork_asm+0x1a/0x30 [ 334.424504][T14186] [ 334.424504][T14186] -> #4 (set->srcu){.+.+}-{0:0}: [ 334.431763][T14186] __synchronize_srcu+0xca/0x2f0 [ 334.437278][T14186] elevator_switch+0x1e8/0x7b0 [ 334.442631][T14186] elevator_change+0x2fa/0x480 [ 334.447969][T14186] elevator_set_default+0x375/0x440 [ 334.453735][T14186] blk_register_queue+0x404/0x4f0 [ 334.459318][T14186] __add_disk+0x6b8/0xdb0 [ 334.464213][T14186] add_disk_fwnode+0x100/0x3a0 [ 334.469536][T14186] nbd_dev_add+0x733/0xb60 [ 334.474511][T14186] nbd_init+0x168/0x1f0 [ 334.479226][T14186] do_one_initcall+0x250/0x870 [ 334.484560][T14186] do_initcall_level+0x10a/0x1a0 [ 334.490057][T14186] do_initcalls+0x59/0xa0 [ 334.494992][T14186] kernel_init_freeable+0x29d/0x3e0 [ 334.500746][T14186] kernel_init+0x22/0x1d0 [ 334.505626][T14186] ret_from_fork+0x514/0xb70 [ 334.510778][T14186] ret_from_fork_asm+0x1a/0x30 [ 334.516107][T14186] [ 334.516107][T14186] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 334.523959][T14186] __mutex_lock+0x197/0x15a0 [ 334.529128][T14186] elevator_change+0x1af/0x480 [ 334.534528][T14186] elevator_set_none+0xb5/0x140 [ 334.539948][T14186] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 334.546310][T14186] nbd_start_device+0x189/0xb30 [ 334.551757][T14186] nbd_genl_connect+0x167d/0x1cd0 [ 334.557338][T14186] genl_family_rcv_msg_doit+0x233/0x340 [ 334.563440][T14186] genl_rcv_msg+0x614/0x7a0 [ 334.568516][T14186] netlink_rcv_skb+0x226/0x4a0 [ 334.573857][T14186] genl_rcv+0x28/0x40 [ 334.575650][ T5635] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 334.585180][T14186] netlink_unicast+0x8ef/0xa80 [ 334.590530][T14186] netlink_sendmsg+0x7f0/0xb20 [ 334.595883][T14186] sock_sendmsg_nosec+0x14e/0x190 [ 334.601537][T14186] ____sys_sendmsg+0x49f/0x790 [ 334.606865][T14186] ___sys_sendmsg+0x2f7/0x3d0 [ 334.612101][T14186] __x64_sys_sendmsg+0x1b1/0x290 [ 334.617589][T14186] do_syscall_64+0x166/0x520 [ 334.622759][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.629210][T14186] [ 334.629210][T14186] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 334.637959][T14186] blk_alloc_queue+0x544/0x690 [ 334.643307][T14186] __blk_mq_alloc_disk+0x194/0x390 [ 334.648992][T14186] nbd_dev_add+0x494/0xb60 [ 334.653976][T14186] nbd_init+0x168/0x1f0 [ 334.658681][T14186] do_one_initcall+0x250/0x870 [ 334.664008][T14186] do_initcall_level+0x10a/0x1a0 [ 334.669504][T14186] do_initcalls+0x59/0xa0 [ 334.674403][T14186] kernel_init_freeable+0x29d/0x3e0 [ 334.677850][ T6668] net_ratelimit: 29 callbacks suppressed [ 334.677911][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 334.692973][T14186] kernel_init+0x22/0x1d0 [ 334.697908][T14186] ret_from_fork+0x514/0xb70 [ 334.703059][T14186] ret_from_fork_asm+0x1a/0x30 [ 334.708390][T14186] [ 334.708390][T14186] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 334.715652][T14186] fs_reclaim_acquire+0x71/0x100 [ 334.721163][T14186] kmem_cache_alloc_noprof+0x5f/0x600 [ 334.727103][T14186] __kernfs_iattrs+0xdd/0x380 [ 334.732350][T14186] kernfs_iop_setattr+0xe6/0x3f0 [ 334.737851][T14186] notify_change+0xbba/0xea0 [ 334.742991][T14186] do_truncate+0x1c2/0x250 [ 334.747971][T14186] path_openat+0x18a6/0x20f0 [ 334.753131][T14186] do_file_open+0x23e/0x4a0 [ 334.758201][T14186] do_sys_openat2+0x115/0x200 [ 334.763447][T14186] __x64_sys_openat+0x138/0x170 [ 334.768856][T14186] do_syscall_64+0x166/0x520 [ 334.774013][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.780456][T14186] [ 334.780456][T14186] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 334.787098][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 334.796125][T14186] __lock_acquire+0x164c/0x2de0 [ 334.801539][T14186] lock_acquire+0x115/0x350 [ 334.806604][T14186] down_write+0x91/0x200 [ 334.811403][T14186] kernfs_link_sibling+0x539/0x6b0 [ 334.817063][T14186] kernfs_add_one+0x30a/0x510 [ 334.822311][T14186] __kernfs_create_file+0x22b/0x2e0 [ 334.828070][T14186] sysfs_add_file_mode_ns+0x237/0x300 [ 334.834008][T14186] sysfs_create_file_ns+0x12b/0x1b0 [ 334.839774][T14186] idletimer_tg_checkentry+0x3f7/0x810 [ 334.845797][T14186] xt_check_target+0x619/0xca0 [ 334.851133][T14186] translate_table+0x17a1/0x1f70 [ 334.856632][T14186] do_ipt_set_ctl+0xa53/0xe20 [ 334.861900][T14186] nf_setsockopt+0x26f/0x290 [ 334.867062][T14186] do_sock_setsockopt+0x17c/0x1b0 [ 334.872650][T14186] __x64_sys_setsockopt+0x13d/0x1b0 [ 334.878415][T14186] do_syscall_64+0x166/0x520 [ 334.883572][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.890019][T14186] [ 334.890019][T14186] other info that might help us debug this: [ 334.890019][T14186] [ 334.896252][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 334.907408][T14186] Chain exists of: [ 334.907408][T14186] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 334.907408][T14186] [ 334.921880][T14186] Possible unsafe locking scenario: [ 334.921880][T14186] [ 334.929371][T14186] CPU0 CPU1 [ 334.934785][T14186] ---- ---- [ 334.940233][T14186] lock(&root->kernfs_rwsem); [ 334.945044][T14186] lock(cpuhp_state_mutex); [ 334.952273][T14186] lock(&root->kernfs_rwsem); [ 334.959601][T14186] lock(&root->kernfs_iattr_rwsem); [ 334.965003][T14186] [ 334.965003][T14186] *** DEADLOCK *** [ 334.965003][T14186] [ 334.973179][T14186] locks held by syz.3.2206/14186: 2, last CPU#0: [ 334.979548][T14186] #0: ffffffff91735460 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry+0x63/0x810 [ 334.989453][T14186] #1: ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 334.999334][T14186] [ 334.999334][T14186] stack backtrace: [ 335.005274][T14186] CPU: 0 UID: 0 PID: 14186 Comm: syz.3.2206 Not tainted syzkaller #0 PREEMPT(full) [ 335.007998][ T1041] bond7: (slave bridge2): failed to get link speed/duplex [ 335.021804][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 335.031916][T14186] Call Trace: [ 335.035233][T14186] [ 335.038204][T14186] dump_stack_lvl+0xe8/0x150 [ 335.042866][T14186] print_circular_bug+0x2e2/0x300 [ 335.047960][T14186] check_noncircular+0x12f/0x150 [ 335.052947][T14186] __lock_acquire+0x164c/0x2de0 [ 335.057891][T14186] ? __lock_acquire+0x747/0x2de0 [ 335.062886][T14186] lock_acquire+0x115/0x350 [ 335.067439][T14186] ? kernfs_link_sibling+0x539/0x6b0 [ 335.072781][T14186] down_write+0x91/0x200 [ 335.077068][T14186] ? kernfs_link_sibling+0x539/0x6b0 [ 335.082446][T14186] ? __pfx_down_write+0x10/0x10 [ 335.087341][T14186] ? kernfs_root+0x1c/0x230 [ 335.091880][T14186] ? kernfs_root+0x1c/0x230 [ 335.096419][T14186] ? kernfs_root+0x1c/0x230 [ 335.100966][T14186] ? kernfs_root+0x1ea/0x230 [ 335.105627][T14186] kernfs_link_sibling+0x539/0x6b0 [ 335.110812][T14186] kernfs_add_one+0x30a/0x510 [ 335.115454][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 335.122836][T14186] __kernfs_create_file+0x22b/0x2e0 [ 335.128086][T14186] sysfs_add_file_mode_ns+0x237/0x300 [ 335.133513][T14186] sysfs_create_file_ns+0x12b/0x1b0 [ 335.138747][T14186] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 335.145432][T14186] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 335.151215][T14186] ? kstrdup+0x81/0x100 [ 335.155445][T14186] idletimer_tg_checkentry+0x3f7/0x810 [ 335.160953][T14186] xt_check_target+0x619/0xca0 [ 335.165771][T14186] ? __pfx_xt_check_target+0x10/0x10 [ 335.171131][T14186] ? pcpu_alloc_noprof+0x1036/0x1900 [ 335.176470][T14186] ? xt_find_target+0x20f/0x260 [ 335.181367][T14186] translate_table+0x17a1/0x1f70 [ 335.186376][T14186] ? __pfx_translate_table+0x10/0x10 [ 335.191711][T14186] ? lock_acquire+0x115/0x350 [ 335.196438][T14186] ? __might_fault+0xaf/0x130 [ 335.201199][T14186] ? _copy_from_user+0x94/0xb0 [ 335.206011][T14186] do_ipt_set_ctl+0xa53/0xe20 [ 335.210778][T14186] ? rcu_is_watching+0x16/0xb0 [ 335.215599][T14186] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 335.220854][T14186] ? __mutex_unlock_slowpath+0x731/0x900 [ 335.226585][T14186] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.227515][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 335.239755][T14186] nf_setsockopt+0x26f/0x290 [ 335.244394][T14186] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 335.250332][T14186] do_sock_setsockopt+0x17c/0x1b0 [ 335.255398][T14186] __x64_sys_setsockopt+0x13d/0x1b0 [ 335.260633][T14186] do_syscall_64+0x166/0x520 [ 335.265269][T14186] ? trace_irq_disable+0x3b/0x140 [ 335.270337][T14186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.270934][ T6666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.271464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.276897][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.300681][T14186] ? clear_bhb_loop+0x70/0xc0 [ 335.305401][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.311348][T14186] RIP: 0033:0x7fe2c45a8fd9 [ 335.315820][T14186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.335467][T14186] RSP: 002b:00007fe2c553f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 335.337368][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 335.351047][T14186] RAX: ffffffffffffffda RBX: 00007fe2c4825fa0 RCX: 00007fe2c45a8fd9 [ 335.359054][T14186] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 335.367076][T14186] RBP: 00007fe2c4637fed R08: 00000000000002b8 R09: 0000000000000000 [ 335.375085][T14186] R10: 0000200000001840 R11: 0000000000000246 R12: 0000000000000000 [ 335.383102][T14186] R13: 00007fe2c4826038 R14: 00007fe2c4825fa0 R15: 00007fff82556af8 [ 335.391119][T14186] [ 339.685632][ T50] net_ratelimit: 52 callbacks suppressed [ 339.685656][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.735454][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 339.845275][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 339.955447][ T6668] bond7: (slave bridge2): failed to get link speed/duplex [ 340.065619][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 340.175355][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 340.285626][ T6666] bond7: (slave bridge2): failed to get link speed/duplex [ 340.395279][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 340.505552][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 340.615293][ T6666] bond7: (slave bridge2): failed to get link speed/duplex