last executing test programs: 2.219973009s ago: executing program 0 (id=2743): r0 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) 2.060205468s ago: executing program 0 (id=2746): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32], 0x60}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0x2015, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32], 0x60}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0x2015, 0x8, 0x0, 0x0}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) 2.059337617s ago: executing program 2 (id=2747): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x840) 1.953261722s ago: executing program 0 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001a00)={0x18, r1, 0x802d21512708ad7b, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4040034) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000040)=""/228, &(0x7f0000000140)=0xe4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020400", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "2f8703", 0x0, 0x3a, 0x0, @private2, @empty, [], "8763be05bdbf976f"}}}}}}}, 0x0) r3 = socket$inet(0x2, 0x4, 0x4079f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000040)=0x71) r4 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r4, &(0x7f000001ef40)=[{{0x0, 0x0, &(0x7f000001c980)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f000001ca40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) close(r6) 1.868965359s ago: executing program 2 (id=2752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.710565966s ago: executing program 2 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.594214217s ago: executing program 2 (id=2758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="07ef28bd7000fbdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r2) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x18, 0x1412, 0x0, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="680200000005010300000000000000000a000007540201000200000000000000070127000800090073797a3100000000000000000000000000000000000000000000000000000000c57e58d672c6eb27c787d0d81b9c49670b392202306a4d9859e9fbef6e47e75cfd18556893297bb96f8db3bea4ec5f41dbb2b4c21898fc9d36304ec4a629554f0200ea050100000081000000fcff000102000000030000000200090001000000c3ae000002002cf101000000030000000900000202000000800000000a00090000000000060000000300030003000000000000000000080002000000100000000400fbff00000000001000000600400002000000ba00000007000300020000009290000004000600030000000200000030f4090001000000080000000d000600000000002800000007000002010000000100000002000d0000000000ffffffff0100020000000000f2ffffffa30a020002000000280200000900ff7f02000000ff0f00000300000301000000080000000100c69c000000000000f00f080001ff01000000050000003400080003000000050000000900040001000000ff7f00000400010003000000ff0300009f1848c10700fbff030000004b6effff060000000200000007000000ff070500020000000f000000000801000100000005000000010009000100000002000000fa170400010000000e0000000400060001000000ff0f00000700050003000000010000000300090003000000030000000f00060001000000610a00005500080002000000000000003800efd1030000000600000004000000000000000100000010000001000000000e000000ff0f01000200000002000000"], 0x268}, 0x1, 0x0, 0x0, 0x20008845}, 0x4008004) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x4, 0x4) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6010104000240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e1f", @ANYRESDEC=0x0, @ANYRES32=0x41424344, @ANYRESHEX], 0x0) 1.496324693s ago: executing program 4 (id=2759): r0 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x28, 0x3, 0xfffffffffffffffe, 0x41584fc00e997fc4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x24, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x80003}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100000, 0x1, 0xfffffffffffffff5, 0x8, 0x572}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) ioctl$FITHAW(r5, 0xc0045878) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)="083b0000fdb29a09add7be2d19", 0xd}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 1.281908794s ago: executing program 4 (id=2762): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000b40)={{0x3, @null}, [@default, @default, @default, @netrom, @bcast, @netrom, @rose]}, &(0x7f0000000bc0)=0x48) r6 = accept$ax25(r5, &(0x7f0000001000)={{0x3, @null}, [@default, @rose, @default, @bcast, @default, @netrom, @default, @bcast]}, &(0x7f0000000b00)=0x48) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000d80)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r7 = socket(0x10, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r3, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32=r4], 0x1c}}, 0x24044080) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="958bba6cda1f57a4bf03e06d0ee0147f4213fb1d31a73a901938420b16cf271ab5544e6498a51900826c", 0x2a}, {&(0x7f0000000040)="943398fe87", 0x5}], 0x2}}], 0x1, 0x0) r11 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x4048005}, {0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="41fabdaad48470367d11751fb3770aaf8e10f62a0e3eaf2bc46fd13e94966d0ea4bebc9a9979b2e6b11f2210b4c577", 0x2f}, {&(0x7f0000000940)="65512bf08c63b9b41feb19546bb6e862c7d98249fcf249738d588a761505d87ac7b7568a01cb2bad0a51779dd235e03f3108f01c505566f90c6cabe20b2ad88054b82a4e61f665c94781c3e03a32b3581d87dadc85dc1b64fef7fe5ea549ea8dd44fbf6a253294ca37ef5c7a1c6ecf05c5ff645fcd66acfa770f1cf1a3c46af5809d6145efb071ee7909e34ad0812cc38be0b26547369a3e2b91033787112e0d887b176273b69703ddebc9a8369d4554528d710c9e216f35495d1e9cf026801f23e6d9cc87a3ca8442c60955fddf8344e97fe66c020ae7408d0daa59", 0xdc}, {&(0x7f0000000f00)="1e5ab10ee98a13dad9d949b83db1a3e8814daa190583ebfd5c35f49722ec390c7cf75d8df7cbc7e0da599218c782897ad594e4555efe2b18ff3dd7aa7556b02d7344b97c6beb77e6e24400293c37a41613704621ecbe04d8d667ec4e079d165897a84210603e54f84034820262addb38a1217dcdc1f21e203990b1579a575a028a88c8e11e48eb20643859ac63f5ac2e9c551e558505b6137fe339d9746f680979fcb2822561f8b9372aa0e29e9e490544717c30e6a242d835a9b7b4a142c5461cfed0959bb58bd83ad82bad1455c18b9133355986bdfed5ee1c431a78a42012f0", 0xe1}, {&(0x7f0000000d00)="dc551f5fef16b58b78911230d6a2dbc3b7e81a7ed38875a84bee2f8b76afda6f8ced61e13644be95dcb0ccc19c56837f09790c9a13c7fe62b37d99f5583d0b4862fadb06cef9dbdb552a4b4414cfbd503304df90f8d2c4f8f9692ee3c09c4a2ee42f7f8557e0d0db94a597aaea1e193eeca169895c01f77833eb", 0x7a}], 0x4, &(0x7f0000000c00)=[@assoc={0x18}], 0x18, 0x200408c1}], 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, r9, 0x150}}, 0x20}}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100ffffffff01d079cdaa06ee0b0c0006800800060000000000"], 0x20}}, 0x4000000) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11400}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cbd7000fedbdf251000000030000780080001000000010008000200010000000c0003001bdfa99dab1e6ff422becd71bf481a5e00000000080002000100000008000100c40000001000022c02c8ff7b800c00038008000200fcffffff240005800800010100696200001000000065746800080001"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000012040280"], 0x3c}}, 0x0) 1.281361497s ago: executing program 3 (id=2763): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}], {0x14}}, 0x80}}, 0x800) 1.236428195s ago: executing program 1 (id=2764): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r4, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x18c, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0xbc, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6, {0xad, 0x3, 0x1ff, 0x3}}, @challenge={0x10, 0x1, 0x10}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x3, 0x20}}, @preq={0x82, 0x83, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x7, 0x17, 0x7, @device_b, 0x10001, @value=@broadcast, 0x10000000, 0x7, 0x9, [{{}, @device_a, 0xb55}, {{0x0, 0x0, 0x1}, @device_a, 0x3e}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0xa}, {{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0x8000}, {{}, @device_b, 0x309}, {{0x1}, @device_a, 0x9a}]}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x74, 0x84, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x17}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bc2340c7f838"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff7e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x40, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, "af6ca12e56b6b48b858a5b69c802dc3567161106cc32d0b770af7075842ac69863d7fec4cae86b735cbf594626aec2a3a38fc871768028ab"}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r10, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="04975697413104474cdfb598", 0xc}, {&(0x7f0000000240)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfe9}], 0x3, 0x0, 0x0, 0x805}, 0x0) r11 = socket$kcm(0x21, 0x2, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfd, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @mcast2, 0xfffffff6}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 1.184989494s ago: executing program 4 (id=2765): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe0c1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0xd2, &(0x7f00000000c0)="bc06c8a0a5fe5c7a60b716b41fcb2cb96a0474c8400fe2e3d17474653528f08aac28ec642357acc21bb87fac794f9f8b4e3608495aa19b33049adfc0ab0e90ce49c5905470f1aaf5af24eae46601e22f542f5b0a18fb6193b25db995d0237dc62328f46b60895942fac5a0b5727665fe619b3db7385df74e8f0a4869c64865a890107e22ef5069fdf93ed22d732518ea3426e245dca2c499398c3fc82fb5aace44225db5c18224ab8252a40601d39c92fd8635c0387e55dee8d1d1549921cb29549e81f15f7642428f28c21ac174844d7223", 0xc2, 0x0, &(0x7f00000001c0)="6116f789b1dc2c43949d462f5237c9265101cd595683da6f4f4d134ed7d57b90dfc99ca5d865b7bb0810c1ebf829a6260d751667e92415f27a54c70a45619ef71fb90882cdf4f8f3c015ef105925f607c61a7a955dafce297351ff3fc5a0532e831cd540fa74e57870543d57d928cb2780143ca0e76e57c58902bcd56a61a11bef3eb02bc5299e9ad27140ff56d9cef9625666673a030dc9ce10265bbd622f8354cd07c2995027babb7b52a65babf4ae77e9f4e2b6f013f9d597cdd0bff5842c5e9b"}) 1.130142769s ago: executing program 3 (id=2766): r0 = socket$inet6(0xa, 0x5, 0x9) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0xfb, "c1d08431761654de80922efcda23dff6c2e40dafd23906a98891ca710f3d6c35606e2e7ac3675173427411bb880039e8a72fbea322f1e8e7dc40cd8f4eebdf947835b38105c8fb1b481a6c6e5d5f18e79a6e20a5af59b0461f777c7385f5d945fc676d6efae9c7c086e46d9a6d37c9c8f060b99907ddc84529958103860c6ed82f72870825b3c5c1d70e83e9fb3bb44dbc5bd923f132718de06ad412407fef9e4032bab238315b89d9546d5c597551d75096d38096b3875d59653ea5d2fca52e6c9f6cb2b74eff521438e97f1d2719c363c0905c0ab3068c5307b622e8afc2e5fb1c61c2b58012ec7992509daa7c895f5e84f7a0b89d00c2d769ea"}, &(0x7f0000000140)=0x11f) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x87, 0xa, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x10, [0x7, 0x2, 0x5, 0x1]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x60) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000200)=@full={0xb, @dev, @rose, 0x0, [@bcast, @remote, @bcast, @null, @null, @rose]}, &(0x7f0000000240)=0x40, 0x80800) r2 = accept4$rose(r1, 0x0, &(0x7f0000000280), 0x80800) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000002c0)=0x53d) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0xffff, 0x9, 0x8, 0x81, 0x613, 0x8, 0x9, 0x9, r4}, 0x20) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r5 = accept4(r0, &(0x7f00000004c0)=@tipc, &(0x7f0000000540)=0x80, 0x81000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000580)={r4, 0x400, 0x8, [0xa0, 0x3, 0x3, 0x81, 0x820, 0x5, 0x86ce, 0x7fff]}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000005c0)={0x3, 0x1, 0x1, 0x3, 0x2, 0x64d}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffc01}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000740), 0x4) sendmsg(r2, &(0x7f0000001ac0)={&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x2, 0x4}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)="3c5cd5aa86b6f0d54d110d4902d416ef3ceddf2db0cf36368b61e2bdc429b877dc9c2169cd4a09ac8dc247340dccdf2c06ca92b712b2f2c3f7716820e5551611da8e7248acaad75f8b518c77fce43d40b4ff56247198f60aca3d7ac1a0531f4910165dd768d5f58a1ee8eb1d23d0b8f2667ba41626f321529741db3e108b61ae5e728b9588ed1ba6fec77624631dbdbe248cbaac907076e435eff1507033e4575b59bf909d918950e7a9d6a57c8394bf029234342a4618ec51858fd96ca0c88baff89f3b6c81a4146e45be0225a0a51e7d96732dc480360592905d8bbc94b4a36dd6301f06f51db8", 0xe8}], 0x1, &(0x7f0000000940)=[{0x28, 0x109, 0x3, "ce91e3d963a38e37ba2788d2e94d3c201235a0"}, {0xb8, 0x1ee, 0x200, "bfe19cabf284d98c05b6aa5985e50426cd3581570179e87b4918d4ddcb6ed19e5cf3bcf4049c53862a3e8285bcf3950f17f5f74e7f876ef3c38c8f066e8a0d505cbfd54e20674779c4f708f173f68465b937a92c2754f50aa3391fff8205e867184eb7ec6e12d7dda99c8f455ec8972ba927b2cd49a80f9f28669041800ea6bd549bd2340170d18ff2137e853b7725d39f6d3f7e0ca5bfa2cb4d77c427125d9a7b1f59"}, {0x20, 0xff, 0x6, "d789cbab96fa63461607bc"}, {0x58, 0x0, 0xfff, "9c3f9214bb18dd50bea53a9715a9969285dca2a79b1700dca02bfa5c110b8e1688d4a69bd2517e4942608c3788f6b98e7db80decff2511fa8c8b2c0d9b4abed4aea1793e"}, {0x1010, 0xd, 0x8, "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"}], 0x1168}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000001b00), &(0x7f0000001b40)=0x30) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000001b80)={'nat\x00', 0x0, 0x0, 0x0, [0xffff, 0x1, 0x2, 0x7ff, 0x100000000, 0x1]}, &(0x7f0000001c00)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001c40)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x166d, 0x1, 0xd, 0x2, 0x4}, &(0x7f0000001d00)=0x98) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000001d40)={r4, 0x2c, "e964f550575b1e0120a6db0d717e775400ad26ed403eb264dd21dcdcd48d632d6484f45455965ceb77fdbd35"}, &(0x7f0000001d80)=0x34) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e00), r5) getpeername$packet(r5, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001e80)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x50, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002000), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000002180)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002140)={&(0x7f0000002040)={0xf4, r10, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) 1.120775355s ago: executing program 1 (id=2767): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0117000101000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 1.012450133s ago: executing program 4 (id=2768): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 889.515247ms ago: executing program 3 (id=2769): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000012c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400d016d4715bb9920f000000000000010000000000aee93394e2012ea03aa680434c9500120000000000"], 0x0, 0x3f}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400d016d4715bb9920f000000000000010000000000aee93394e2012ea03aa680434c9500120000000000"], 0x0, 0x3f}, 0x28) 887.431066ms ago: executing program 0 (id=2770): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c060000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYRES16=r0, @ANYBLOB="786491422462612b0d22726fc0949cb93cc46cad69bdece1d75d268a8d46e757002acb13740dd6c21b04c17c37eaf0d7145f32c0c65243acb19ec0a960e76a63098aa6ee02ff05db6aad558775f6ec7e9ce8ca15790bd72f79ad4ad5b536f568ef041d4a2bf116d08e775ae7456acba53109f882fd1bcf8a310d4937abea95f1640100000035e62632e5259d6e5cb5cd5698e8267866685446b1717471", @ANYBLOB="00000000000000000000000000000000a30a00ecc32fe57f343e96ffffffff005c170bdac32de2207a0cb061d244ff00000000000000000100000000000000000000000000000000000000000000000000000000000000180000000000030000000000002000"/112, @ANYRES16=r3, @ANYRES16=r1, @ANYRESHEX=r4], 0xb8}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/229, 0xe5}], 0x1}, 0x10101) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/83, 0x53}], 0x1}, 0x7}], 0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r9, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="1c55b6558352befc4fa92d8da3e5365fa0b259fba4f34d2b358aa5c472d1cfef616b812ab8e8b6ef54aa008c7df3e04aebde2c9e74a9f3e9aa5e69b4c61d9b449640000eff42368d4b432fc52e884749a03e8ad22eba67eac9f94f91192e674c7bca205c593207a689c5aeaa059058b4464015607c000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 886.891497ms ago: executing program 4 (id=2771): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtclass={0x5c, 0x28, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0x0, 0x9}, {0xa, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xff, 0xbd}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe0}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @tclass_kind_options=@c_prio={0x9}]}, 0x5c}}, 0x4c080) 809.85102ms ago: executing program 1 (id=2772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x10000, 0x1000, 0x3, 0x7}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) 787.940849ms ago: executing program 4 (id=2773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1}, 0x1}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a80"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 456.730748ms ago: executing program 1 (id=2774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x727}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff886f}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20048030}, 0x20000004) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r2, 0x310, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}]}]}, 0x50}}, 0x44801) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xf6, 0x8, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x4, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0xaf, 0x8, {{0x17, 0x4, 0x3, 0x2, 0x5c, 0x65, 0x0, 0x22, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0xf, 0x65, [@local, @remote, @local]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x2f, 0x1, [{0x1, 0xb, "1ea1a40391b9837418"}, {0x2, 0xa, "a46daeda2d44d32d"}, {0x2, 0x7, "ed43e48f1f"}, {0x5, 0x9, "f43e4bb2d5ea09"}, {0x5, 0x4, "2e9f"}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x884}, 0x400804c) syz_emit_ethernet(0x119, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0xeb2bc91ff22574a8, 'E', '6uU', 0x8917, "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"}}}}}, &(0x7f00000009c0)={0x0, 0x1, [0x526, 0x6ba, 0x126, 0x2d9]}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x8, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x3, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0xc}]}, {0x0, [0x2e, 0x61, 0x30, 0x2e, 0x61]}}, &(0x7f0000000d40)=""/213, 0x2b, 0xd5, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000f80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xc, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0xf, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, [@generic={0x5, 0x4, 0x3, 0x0, 0x8}, @generic={0x40, 0x2, 0x7, 0x3, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}]}, &(0x7f0000001240)='GPL\x00', 0x2d6, 0xea, &(0x7f0000001280)=""/234, 0x40f00, 0x18, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x1, 0xa, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000013c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001400)=[{0x0, 0x2, 0x5, 0x8}], 0x10, 0x5}, 0x94) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r5, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x13, 0x14, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf20}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c80)='GPL\x00', 0x100, 0x2c, &(0x7f0000000cc0)=""/44, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x7, r10, 0x8, &(0x7f0000000e80)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r11, r12, 0x5, &(0x7f0000001580)=[r13], &(0x7f00000015c0)=[{0x4, 0x5, 0x2, 0x9}, {0x3, 0x4, 0x3, 0x2}, {0x2, 0x5, 0x5, 0xc}, {0x5, 0x4, 0x10, 0x3}, {0x3, 0x4, 0xd, 0x8}], 0x10, 0x7}, 0x94) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000001740), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, r14, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x42}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r15 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r15, 0x65, 0x5, &(0x7f0000001840), &(0x7f0000001880)=0x4) r16 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r16, 0x0, 0xcf, &(0x7f00000018c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000001900)) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20060000) 372.557094ms ago: executing program 3 (id=2775): r0 = socket(0x10, 0x3, 0x800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0xfedb, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4, [{0xd, 0x5}]}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x10003}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8cd9}}, @union={0xe, 0x0, 0x0, 0x5, 0x1, 0x7d6, [{0x0, 0x0, 0x400}]}]}}, 0x0, 0x52}, 0x20) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xee}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) 371.33505ms ago: executing program 2 (id=2776): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="e3a222d9ea29a90a8e09584a2e9d5ccc71", 0x11}], 0x1}}], 0x1, 0x800) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 326.759231ms ago: executing program 3 (id=2777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x25}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4080, 0xff0}], 0x4}, 0x8}], 0x3, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='=', 0x1}], 0x1}, 0x0) 258.841172ms ago: executing program 3 (id=2778): r0 = socket(0x10, 0x80002, 0x0) close(0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xbee, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r2, 0x0) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) (async) socket$unix(0x1, 0x5, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="92d9c21b010300", 0x94}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES8=r2, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x40040080) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924b8b, 0x0) accept(r0, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 180.259915ms ago: executing program 1 (id=2779): socket$inet6(0x10, 0x2, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000440)={@random="8b44c1531c44", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0xa, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000440), 0x0, 0x10) socket$inet6(0x10, 0x2, 0x6) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) syz_emit_ethernet(0x66, &(0x7f0000000440)={@random="8b44c1531c44", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0xa, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000440), 0x0, 0x10) (async) 179.507093ms ago: executing program 0 (id=2780): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x7ff, 0xfffd, 0x1, 0x3}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6e, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x7ff, 0xfffd, 0x1, 0x3}, 0x1c) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6e, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}], 0x1, 0x0) (async) 179.23345ms ago: executing program 2 (id=2781): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000801200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000100)={0x0, 0x7, 0x6}) 66.377266ms ago: executing program 0 (id=2782): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x4e, @rand_addr=' \x01\x00', 0x3}}, [0x5, 0x5, 0x0, 0x9d5, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x9, 0x101, 0x4, 0x61f1406e, 0x6, 0x9, 0x1]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x3}, 0x8) close(r3) socket$can_j1939(0x1d, 0x2, 0x7) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x4e, @rand_addr=' \x01\x00', 0x3}}, [0x5, 0x5, 0x0, 0x9d5, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x9, 0x101, 0x4, 0x61f1406e, 0x6, 0x9, 0x1]}, &(0x7f0000000100)=0x100) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x3}, 0x8) (async) close(r3) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) (async) 0s ago: executing program 1 (id=2783): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='nicvf0\x00') 0s ago: executing program 2 (id=2786): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r0, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) kernel console output (not intermixed with test programs): tributes in process `syz.3.764'. [ 241.824892][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 241.860628][ T8639] netlink: 'syz.4.767': attribute type 4 has an invalid length. [ 241.876626][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.760'. [ 241.894673][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.760'. [ 241.914286][ T8639] netlink: 'syz.4.767': attribute type 4 has an invalid length. [ 241.952589][ T8619] ip6gretap0: entered promiscuous mode [ 241.959787][ T8619] batadv_slave_1: entered promiscuous mode [ 241.974378][ T8619] debugfs: 'hsr1' already exists in 'hsr' [ 241.983229][ T8619] Cannot create hsr debugfs directory [ 242.005619][ T8639] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.767'. [ 242.060691][ T8647] tipc: Enabled bearer , priority 0 [ 242.068926][ T8645] tipc: Enabling of bearer rejected, already enabled [ 242.096456][ T8645] syzkaller0: MTU too low for tipc bearer [ 242.107742][ T8645] tipc: Disabling bearer [ 242.221423][ T8656] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 242.465430][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 242.514943][ T8683] sctp: [Deprecated]: syz.1.778 (pid 8683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.514943][ T8683] Use struct sctp_sack_info instead [ 242.611354][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.780'. [ 242.633791][ T8688] syzkaller0: entered promiscuous mode [ 242.662554][ T8688] syzkaller0: entered allmulticast mode [ 242.704619][ T8688] macvlan0: mtu less than device minimum [ 242.775918][ T8701] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 243.200396][ T8712] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 243.215613][ T8712] netlink: 244 bytes leftover after parsing attributes in process `syz.2.787'. [ 243.583078][ T56] block nbd1: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 150 seconds [ 243.594288][ T56] block nbd1: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 150 seconds [ 243.605549][ T56] block nbd1: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 150 seconds [ 243.616883][ T56] block nbd1: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 150 seconds [ 243.781042][ T8703] infiniband syz2: set down [ 243.791101][ T8703] infiniband syz2: added bond_slave_0 [ 243.798894][ T8747] netlink: 'syz.1.796': attribute type 8 has an invalid length. [ 243.808335][ T8703] syz2: rxe_create_cq: returned err = -12 [ 243.814481][ T8703] infiniband syz2: Couldn't create ib_mad CQ [ 243.822000][ T8703] infiniband syz2: Couldn't open port 1 [ 243.915449][ T8703] RDS/IB: syz2: added [ 243.925499][ T8703] smc: adding ib device syz2 with port count 1 [ 243.936343][ T8703] smc: ib device syz2 port 1 has pnetid [ 243.960779][ T8752] netlink: 88 bytes leftover after parsing attributes in process `syz.0.797'. [ 243.992794][ T8757] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 244.006623][ T8757] netlink: 244 bytes leftover after parsing attributes in process `syz.2.799'. [ 244.011807][ T8752] openvswitch: netlink: Missing key (keys=40, expected=100) [ 244.338638][ T8775] tipc: Enabled bearer , priority 0 [ 244.368187][ T8775] syzkaller0: entered promiscuous mode [ 244.373695][ T8775] syzkaller0: entered allmulticast mode [ 244.399706][ T8775] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 244.464947][ T8783] netlink: 244 bytes leftover after parsing attributes in process `syz.0.806'. [ 244.512813][ T8775] tipc: Resetting bearer [ 244.536880][ T8774] tipc: Resetting bearer [ 244.574959][ T8774] tipc: Disabling bearer [ 244.811077][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.857049][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.857507][ T8803] netlink: 'syz.0.811': attribute type 3 has an invalid length. [ 244.876354][ T8799] pim6reg1: entered promiscuous mode [ 244.881836][ T8799] pim6reg1: entered allmulticast mode [ 246.457112][ T8876] netlink: 'syz.4.827': attribute type 21 has an invalid length. [ 246.551874][ T8878] bond1: entered allmulticast mode [ 246.558558][ T8878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.567061][ T8878] bridge0: port 3(bond1) entered blocking state [ 246.573730][ T8878] bridge0: port 3(bond1) entered disabled state [ 246.581556][ T8883] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 246.584252][ T8878] bond1: entered promiscuous mode [ 246.595091][ T8878] bridge0: port 3(bond1) entered blocking state [ 246.601528][ T8878] bridge0: port 3(bond1) entered forwarding state [ 246.777987][ T8899] __nla_validate_parse: 7 callbacks suppressed [ 246.778004][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.837'. [ 246.807551][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.837'. [ 246.819658][ T8897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.836'. [ 247.008117][ T8901] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.016717][ T5872] IPVS: starting estimator thread 0... [ 247.113272][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 247.137319][ T8914] IPVS: using max 33 ests per chain, 79200 per kthread [ 247.291098][ T8926] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20001 [ 247.451307][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'. [ 247.526580][ T2982] bridge0: port 3(bond1) entered disabled state [ 247.782641][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'. [ 247.792242][ T8956] netlink: 'syz.4.857': attribute type 23 has an invalid length. [ 248.051447][ T8970] netlink: 'syz.1.862': attribute type 10 has an invalid length. [ 248.105107][ T8970] team0: Port device dummy0 removed [ 248.121813][ T8970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.141079][ T8982] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 248.214219][ T2982] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 248.216512][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 248.277631][ T8983] bond2: (slave gretap1): making interface the new active one [ 248.296230][ T8983] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 248.427377][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 248.533905][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 248.632862][ T9018] netlink: 'syz.3.875': attribute type 33 has an invalid length. [ 248.640971][ T9018] netlink: 152 bytes leftover after parsing attributes in process `syz.3.875'. [ 248.697396][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.743871][ T9023] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 249.112229][ T9044] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 249.527358][ T30] audit: type=1800 audit(1756727896.557:2): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.879" name="memory.events" dev="tmpfs" ino=947 res=0 errno=0 [ 249.839406][ T9081] netlink: 'syz.1.890': attribute type 10 has an invalid length. [ 249.904506][ T9081] batman_adv: batadv0: Adding interface: team0 [ 249.924234][ T9081] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.977503][ T9081] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 250.010298][ T9099] syzkaller0: entered promiscuous mode [ 250.015809][ T9099] syzkaller0: entered allmulticast mode [ 250.411429][ T9130] netlink: 'syz.0.905': attribute type 5 has an invalid length. [ 250.425458][ T9131] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 250.493563][ T9131] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 250.515110][ T9136] dvmrp0: entered allmulticast mode [ 250.674008][ T9149] netlink: 'syz.4.911': attribute type 11 has an invalid length. [ 250.820374][ T9165] netlink: 'syz.2.914': attribute type 15 has an invalid length. [ 250.972768][ T9170] syzkaller1: entered promiscuous mode [ 250.981153][ T9170] syzkaller1: entered allmulticast mode [ 251.116586][ T9184] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 251.141437][ T9184] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 251.155612][ T9184] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 251.165196][ T9184] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 251.176214][ T9184] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 251.555767][ T9201] syzkaller1: entered promiscuous mode [ 251.567717][ T9201] syzkaller1: entered allmulticast mode [ 252.318504][ T9246] __nla_validate_parse: 46 callbacks suppressed [ 252.318523][ T9246] netlink: 212392 bytes leftover after parsing attributes in process `syz.2.941'. [ 252.388379][ T9248] netlink: 52 bytes leftover after parsing attributes in process `syz.4.943'. [ 252.414372][ T9250] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20002 [ 252.930428][ T9290] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 253.034171][ T9295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.126429][ T9305] tipc: New replicast peer: 255.255.255.255 [ 253.135490][ T9305] tipc: Enabled bearer , priority 10 [ 253.539793][ T9321] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 253.627147][ T9327] rdma_op ffff8880324f99f0 conn xmit_rdma 0000000000000000 [ 253.932239][ T9341] validate_nla: 62 callbacks suppressed [ 253.932257][ T9341] netlink: 'syz.4.971': attribute type 2 has an invalid length. [ 253.970977][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 253.988483][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.970'. [ 254.005611][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.970'. [ 254.021496][ T9344] tipc: Enabled bearer , priority 0 [ 254.038215][ T9344] syzkaller0: entered promiscuous mode [ 254.050260][ T9344] syzkaller0: entered allmulticast mode [ 254.086509][ T9344] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 254.196275][ T9344] tipc: Resetting bearer [ 254.209911][ T9359] netlink: 'syz.3.977': attribute type 4 has an invalid length. [ 254.293433][ T9370] netlink: 'syz.3.977': attribute type 35 has an invalid length. [ 254.461103][ T9343] tipc: Resetting bearer [ 254.501833][ T9343] tipc: Disabling bearer [ 254.513352][ T9370] lo: left promiscuous mode [ 254.518158][ T9370] tunl0: left promiscuous mode [ 254.562761][ T9370] vlan2: left promiscuous mode [ 254.682252][ T9379] veth5: entered allmulticast mode [ 254.904118][ T9395] openvswitch: netlink: IP tunnel dst address not specified [ 254.986180][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 255.006710][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 255.016936][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 255.032310][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 255.418737][ T9418] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.764999][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.943220][ T9453] Bluetooth: MGMT ver 1.23 [ 256.029824][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1014'. [ 256.793750][ T9480] ..@ÿ: renamed from bond_slave_0 (while UP) [ 256.808756][ T9483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.821335][ T9483] batadv_slave_0: entered promiscuous mode [ 257.405258][ T9514] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 257.603816][ T9514] __nla_validate_parse: 1 callbacks suppressed [ 257.603834][ T9514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1042'. [ 257.654163][ T9520] bond2: (slave geneve2): making interface the new active one [ 257.688647][ T9520] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 257.718064][ T9523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 257.742432][ T9523] netem: change failed [ 257.754937][ T9144] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 257.773055][ T9514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.783587][ T9144] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 257.795841][ T9144] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 257.836848][ T9144] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 257.962689][ T9534] smc: net device bond0 applied user defined pnetid SYZ0 [ 258.010210][ T9539] smc: net device erspan0 erased user defined pnetid SYZ0 [ 258.038844][ T9539] smc: net device bond0 erased user defined pnetid SYZ0 [ 258.251311][ T9547] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1053'. [ 258.298853][ T8672] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.788461][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 259.822983][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 259.829655][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.837522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.845519][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.853387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.861339][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.869213][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.877127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.885027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.892971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.900843][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.908806][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.916626][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.924616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.932480][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.940474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.948323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.956312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.964184][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.972142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.980019][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.988013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 259.995840][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.003905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.011866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.019871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.027721][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.035825][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.043725][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.051687][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.059564][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.067500][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.075329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.083312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.091183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.099132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.106955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.114917][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.122778][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.130736][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.138577][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.146488][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.154375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.162334][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.170219][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.178203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.186058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.194067][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.201933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.209910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.217849][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.225756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.233628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.241559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.249450][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.257395][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.265217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.273185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.281048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.288987][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.296805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.304851][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.312708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.320679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.328524][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.336958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.344842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.352794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.360744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.368761][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.376589][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.384563][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.392411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.400357][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.408206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.416116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.424086][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.432145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.440018][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.447978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.455975][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.463946][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.471812][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.479775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.487621][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.495528][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.503390][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.511348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.519202][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.527072][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.534914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.543003][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.550871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.558816][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.566739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.574684][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.582551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.590528][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.598377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.606291][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.614182][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.622927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.630870][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.638824][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.646643][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.654605][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.662461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.670596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.678434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.686359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.694232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.702179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.710057][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.717994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.725831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.733784][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.741966][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.749907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.757932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.765818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.773656][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.781609][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.789921][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.797855][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.805663][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.815107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.822969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.830959][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.838816][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.846715][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.854580][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.862505][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.870369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.878315][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.886143][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.894181][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.902040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.909984][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.917907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.925835][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.933692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.941610][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.949507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.957446][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.965269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.973200][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.981034][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.988963][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.996863][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.004789][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.012675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.020661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.028510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.036432][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.044387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.055310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.063178][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.071106][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.078939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.086859][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.094718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.102631][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.110470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.118384][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.126206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.134124][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.141963][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.149912][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.157760][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.165651][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.173545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.181503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.189376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.197520][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.205358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.213337][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.221183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.229098][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.236905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.244841][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.252675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.260681][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.268512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.276366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.284204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.293532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.301402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.309310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.317115][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.325057][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.332911][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.340880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.348748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.356775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.364641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.372619][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.380446][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.388464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.396278][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.404224][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.412056][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.419989][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.427833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.435695][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.443669][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.451569][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.459447][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.467376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.475191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.483161][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.491009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.498971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.506788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.514732][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.522567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.530476][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.538304][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.546159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.553983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.561923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.569789][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.577750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.585554][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.593466][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.601323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.609326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.617155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.625092][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.632958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.640899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.648757][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.656781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.664636][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.672525][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.680354][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.688285][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.696094][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.704008][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.711844][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.719778][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.727608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.735448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.743270][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.751197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.759211][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.767069][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.774910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.782856][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.790726][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.798767][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.806583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.814497][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.822347][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.922711][ T9619] vlan2: entered promiscuous mode [ 261.928183][ T9619] vlan2: entered allmulticast mode [ 261.933321][ T9619] hsr_slave_1: entered allmulticast mode [ 261.987071][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 262.366746][ T9657] nbd: must specify at least one socket [ 262.509276][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1103'. [ 263.006135][ T9644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.234907][ T9691] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1113'. [ 263.267570][ T9691] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1113'. [ 263.573794][ T9708] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1115'. [ 263.590696][ T9709] tc_dump_action: action bad kind [ 264.057363][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.065761][ T9746] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 264.344788][ T9765] netlink: 'syz.4.1133': attribute type 10 has an invalid length. [ 264.489080][ T9772] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 264.611086][ T9777] veth0: entered promiscuous mode [ 264.629336][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'. [ 264.742909][ T9780] tipc: Enabled bearer , priority 0 [ 264.768339][ T9780] syzkaller0: entered promiscuous mode [ 264.773917][ T9780] syzkaller0: entered allmulticast mode [ 264.845752][ T9780] tipc: Resetting bearer [ 264.890748][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1142'. [ 265.091657][ T9810] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 265.092886][ T9813] netlink: 'syz.3.1148': attribute type 11 has an invalid length. [ 265.104444][ T9811] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 265.108931][ T9813] netlink: 'syz.3.1148': attribute type 11 has an invalid length. [ 265.120060][ T9143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.128167][ T9813] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1148'. [ 265.138613][ T9143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.275274][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1150'. [ 265.485701][ T9779] tipc: Resetting bearer [ 265.532392][ T9779] tipc: Disabling bearer [ 266.274521][ T9857] syzkaller0: entered promiscuous mode [ 266.319721][ T9857] syzkaller0: entered allmulticast mode [ 266.326876][ T9863] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 266.353490][ T9863] syzkaller0: Linktype set failed because interface is up [ 266.397619][ T8669] syzkaller0: tun_net_xmit 48 [ 266.702178][ T9888] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 266.787681][ T9892] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.987647][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 268.210940][ T9898] pim6reg1: entered promiscuous mode [ 268.216419][ T9898] pim6reg1: entered allmulticast mode [ 268.522638][ T9918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1172'. [ 268.558925][ T9918] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 268.585854][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 268.640051][ T9918] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 268.711088][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'. [ 268.722001][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 269.321370][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'. [ 269.361176][ T9965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1180'. [ 269.384573][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 269.438210][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 269.447126][ T9963] netlink: 'syz.4.1181': attribute type 12 has an invalid length. [ 269.510830][ T9963] netlink: 'syz.4.1181': attribute type 11 has an invalid length. [ 269.526021][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 269.547021][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 269.583791][ T9974] openvswitch: netlink: IPv6 tunnel dst address is zero [ 269.593218][ T9971] netlink: 'syz.2.1182': attribute type 18 has an invalid length. [ 269.911497][ T9990] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 270.419406][T10012] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 270.441520][T10012] netlink: 'syz.2.1195': attribute type 4 has an invalid length. [ 270.487341][T10014] sctp: [Deprecated]: syz.4.1194 (pid 10014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.487341][T10014] Use struct sctp_sack_info instead [ 270.973172][T10040] vlan1: left allmulticast mode [ 270.995798][T10040] veth0_vlan: left allmulticast mode [ 271.539284][T10060] netlink: 'syz.1.1211': attribute type 4 has an invalid length. [ 271.893953][T10085] tipc: Enabling of bearer rejected, already enabled [ 271.977329][T10086] netlink: 'syz.2.1219': attribute type 11 has an invalid length. [ 271.986682][T10090] netlink: 'syz.2.1219': attribute type 11 has an invalid length. [ 272.458908][T10114] bond0: entered promiscuous mode [ 272.464072][T10114] bond_slave_0: entered promiscuous mode [ 272.470398][T10114] bond_slave_1: entered promiscuous mode [ 272.481475][T10114] bond0: left promiscuous mode [ 272.486383][T10114] bond_slave_0: left promiscuous mode [ 272.492844][T10114] bond_slave_1: left promiscuous mode [ 272.509539][T10107] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 273.363002][T10174] netlink: 'syz.4.1245': attribute type 14 has an invalid length. [ 273.393378][T10174] netlink: 'syz.4.1245': attribute type 14 has an invalid length. [ 273.665287][ T56] block nbd1: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 180 seconds [ 273.676420][ T56] block nbd1: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 180 seconds [ 273.690081][ T56] block nbd1: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 180 seconds [ 273.701399][ T56] block nbd1: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 180 seconds [ 273.731872][T10194] tipc: Enabled bearer , priority 0 [ 273.740265][ T5864] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 273.746641][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.798774][T10190] tipc: Disabling bearer [ 273.816267][T10181] __nla_validate_parse: 19 callbacks suppressed [ 273.816284][T10181] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1248'. [ 273.962712][T10205] netlink: 'syz.1.1257': attribute type 12 has an invalid length. [ 274.445523][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 274.453364][T10233] ksmbd: Unknown IPC event: 3, ignore. [ 274.563414][T10231] tipc: Enabled bearer , priority 0 [ 274.586903][T10238] syzkaller0: entered promiscuous mode [ 274.620507][T10238] syzkaller0: entered allmulticast mode [ 274.636614][T10235] tipc: Enabled bearer , priority 0 [ 274.754046][T10235] syzkaller0: entered promiscuous mode [ 274.760253][T10235] syzkaller0: entered allmulticast mode [ 274.776924][T10249] tipc: Resetting bearer [ 275.617975][ T5963] tipc: Node number set to 2993093776 [ 275.750957][ T5945] tipc: Node number set to 692591380 [ 276.385940][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 276.410246][T10230] tipc: Resetting bearer [ 276.423244][T10230] tipc: Disabling bearer [ 276.446385][T10245] tipc: Resetting bearer [ 276.466189][T10234] tipc: Resetting bearer [ 276.495954][T10234] tipc: Disabling bearer [ 276.613750][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1276'. [ 276.641542][T10271] bridge0: port 1(veth7) entered blocking state [ 276.652184][T10271] bridge0: port 1(veth7) entered disabled state [ 276.666803][T10271] veth7: entered allmulticast mode [ 276.671472][T10283] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 276.674844][T10271] veth7: entered promiscuous mode [ 276.684213][T10283] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1278'. [ 276.699357][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 276.711476][T10275] bridge0: port 2(veth0_to_bond) entered blocking state [ 276.719470][T10275] bridge0: port 2(veth0_to_bond) entered disabled state [ 276.726886][T10275] veth0_to_bond: entered allmulticast mode [ 276.735969][T10275] veth0_to_bond: entered promiscuous mode [ 277.160989][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 277.188428][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 277.189549][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 277.207462][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1287'. [ 277.253085][T10311] geneve3: entered promiscuous mode [ 277.278520][T10311] geneve3: entered allmulticast mode [ 277.662103][T10335] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 278.022677][T10357] netlink: 'syz.3.1304': attribute type 39 has an invalid length. [ 278.301325][T10368] netlink: 'syz.0.1309': attribute type 14 has an invalid length. [ 278.828583][T10407] tipc: Enabled bearer , priority 0 [ 278.847030][T10407] syzkaller0: entered promiscuous mode [ 278.854108][T10407] syzkaller0: entered allmulticast mode [ 278.871336][T10407] syzkaller0: mtu less than device minimum [ 279.328457][T10428] __nla_validate_parse: 7 callbacks suppressed [ 279.328473][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'. [ 279.374700][T10428] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 279.432520][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'. [ 279.450388][T10428] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 279.465077][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'. [ 279.481515][T10428] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 279.616455][T10405] tipc: Resetting bearer [ 279.695283][T10405] tipc: Disabling bearer [ 279.738537][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 279.777598][T10450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1333'. [ 280.319344][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 280.351515][T10482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1341'. [ 280.367226][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 280.418643][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 280.449787][T10479] veth0_to_bridge: entered promiscuous mode [ 280.476053][T10478] veth0_to_bridge: left promiscuous mode [ 280.660969][T10497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 280.676723][T10497] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 280.685679][T10497] gretap1: entered promiscuous mode [ 280.695292][T10497] gretap1: entered allmulticast mode [ 280.900723][T10509] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1349'. [ 280.994167][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 281.169950][T10521] pim6reg: entered allmulticast mode [ 281.225405][T10527] pim6reg: left allmulticast mode [ 281.272287][T10529] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 281.565840][T10521] macvtap1: entered promiscuous mode [ 281.582678][T10521] vlan0: entered promiscuous mode [ 281.598851][T10521] macvtap1: entered allmulticast mode [ 281.613578][T10546] openvswitch: netlink: Message has 5 unknown bytes. [ 281.614588][T10521] vlan0: entered allmulticast mode [ 281.641913][T10521] veth0_vlan: entered allmulticast mode [ 281.745093][T10535] bridge_slave_1: left allmulticast mode [ 281.783827][T10535] bridge_slave_1: left promiscuous mode [ 281.794186][T10535] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.818747][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 281.826369][T10535] bridge_slave_0: left allmulticast mode [ 281.832591][T10535] bridge_slave_0: left promiscuous mode [ 281.839622][T10535] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.952969][T10550] tipc: Enabled bearer , priority 10 [ 281.960020][T10551] tipc: Enabling of bearer rejected, already enabled [ 282.081205][T10562] team0: Device gtp0 is of different type [ 282.583328][T10587] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 282.618410][T10587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.866589][T10605] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 282.943752][T10611] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 282.955923][T10611] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 282.984003][T10612] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 282.995639][T10612] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 283.069594][ T5963] tipc: Node number set to 2895704470 [ 283.336627][T10643] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 283.355072][T10643] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 283.582145][T10656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.623742][T10660] tipc: New replicast peer: 255.255.255.255 [ 283.636704][T10660] tipc: Enabled bearer , priority 10 [ 284.071218][T10676] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 284.137853][T10676] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 284.560015][T10703] __nla_validate_parse: 23 callbacks suppressed [ 284.560034][T10703] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1404'. [ 284.580681][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1402'. [ 284.661392][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 285.008801][T10721] netlink: 'syz.4.1409': attribute type 10 has an invalid length. [ 285.036269][T10722] netlink: 'syz.2.1408': attribute type 1 has an invalid length. [ 285.080340][T10721] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 285.132800][T10728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1410'. [ 285.142131][T10726] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 285.353552][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 285.397484][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 285.501345][T10743] syzkaller0: entered promiscuous mode [ 285.510011][T10743] syzkaller0: entered allmulticast mode [ 285.519376][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 285.526196][T10741] tipc: Enabled bearer , priority 0 [ 285.547575][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1417'. [ 285.956928][T10740] tipc: Resetting bearer [ 285.993306][T10767] netlink: 'syz.3.1421': attribute type 21 has an invalid length. [ 286.127987][T10740] tipc: Disabling bearer [ 286.142309][T10767] netlink: 'syz.3.1421': attribute type 6 has an invalid length. [ 286.172059][T10767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1421'. [ 286.657712][T10796] : entered promiscuous mode [ 286.841817][T10806] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 286.878776][T10806] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1431'. [ 286.924579][T10809] vlan4: entered promiscuous mode [ 286.944453][T10809] bridge0: entered promiscuous mode [ 287.140770][T10765] tipc: can't start tipc receive workqueue [ 288.038588][T10860] netlink: 'syz.3.1446': attribute type 33 has an invalid length. [ 288.063224][T10856] tipc: New replicast peer: 255.255.255.255 [ 288.076558][T10856] tipc: Enabled bearer , priority 10 [ 288.399431][T10889] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 288.481147][T10872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.510807][T10896] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 288.528312][T10896] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 288.554695][T10896] batman_adv: batadv0: Removing interface: wlan1 [ 288.760828][T10912] netlink: 'syz.1.1464': attribute type 33 has an invalid length. [ 289.314734][T10946] sctp: [Deprecated]: syz.0.1477 (pid 10946) Use of int in maxseg socket option. [ 289.314734][T10946] Use struct sctp_assoc_value instead [ 289.654128][T10970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.796586][T10973] team0: Port device team_slave_1 removed [ 289.805528][T10984] netlink: 'syz.4.1487': attribute type 4 has an invalid length. [ 289.854472][T10981] netlink: 'syz.4.1487': attribute type 4 has an invalid length. [ 289.886975][T10988] __nla_validate_parse: 10 callbacks suppressed [ 289.886992][T10988] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1488'. [ 289.907223][T10988] netlink: 'syz.2.1488': attribute type 10 has an invalid length. [ 290.237858][T11005] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 290.262045][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.331885][T11012] vxcan1: tx address claim with different name [ 290.439554][ T9143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.684525][T11015] syzkaller1: entered promiscuous mode [ 290.705757][T11015] syzkaller1: entered allmulticast mode [ 291.383401][T11050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.386814][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 291.445903][T11055] block nbd3: not configured, cannot reconfigure [ 291.451465][T11052] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1502'. [ 291.518572][T11055] openvswitch: netlink: IP tunnel dst address not specified [ 291.538066][T11055] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1505'. [ 291.596908][T11060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1507'. [ 291.648272][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1507'. [ 291.710208][T11069] vlan3: entered promiscuous mode [ 291.720820][T11069] bridge0: entered promiscuous mode [ 291.805971][T11060] openvswitch: netlink: Missing key (keys=40, expected=100) [ 291.964132][T11081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1514'. [ 292.208683][T11093] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1517'. [ 292.264175][T11077] team0 (unregistering): Port device team_slave_0 removed [ 292.283418][T11077] team0 (unregistering): Port device team_slave_1 removed [ 292.304657][T11077] team0 (unregistering): Port device dummy0 removed [ 292.335977][T11089] IPVS: Error connecting to the multicast addr [ 292.544889][T11107] netlink: 'syz.3.1519': attribute type 1 has an invalid length. [ 292.558746][T11105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.579327][T11107] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1519'. [ 292.596649][T11105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1520'. [ 293.256151][T11144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.324766][T11146] tipc: Enabled bearer , priority 0 [ 293.342492][T11146] tipc: Resetting bearer [ 293.382761][T11150] netlink: 'syz.0.1536': attribute type 2 has an invalid length. [ 293.399217][T11151] sock: sock_timestamping_bind_phc: sock not bind to device [ 293.408485][T11143] tipc: Disabling bearer [ 293.444969][T11155] netlink: 'syz.0.1536': attribute type 2 has an invalid length. [ 293.493792][T11158] : entered promiscuous mode [ 294.361689][T11201] netlink: 'syz.0.1551': attribute type 16 has an invalid length. [ 294.771841][T11222] syz_tun: entered allmulticast mode [ 294.811098][T11221] syz_tun: left allmulticast mode [ 294.939498][T11232] __nla_validate_parse: 10 callbacks suppressed [ 294.939517][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 295.021596][T11241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1568'. [ 295.128247][T11248] delete_channel: no stack [ 295.350114][T11263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.428871][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.447038][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1579'. [ 295.469574][T11270] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 295.478788][T11270] netlink: 'syz.2.1579': attribute type 3 has an invalid length. [ 295.487812][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 295.588290][T11275] ip6gretap0: entered promiscuous mode [ 295.616582][T11275] ip6gretap0: left promiscuous mode [ 295.800216][T11288] syzkaller0: entered allmulticast mode [ 297.510935][T11316] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 297.531813][T11316] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1590'. [ 297.567705][T11316] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 297.688950][T11329] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 297.745807][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1594'. [ 297.801063][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'. [ 297.819663][T11335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.843391][T11329] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 297.843693][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1598'. [ 297.909396][T11339] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 298.050093][T11339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.059620][T11339] bond1: (slave bond2): making interface the new active one [ 298.069301][T11339] bond1: (slave bond2): Enslaving as an active interface with an up link [ 298.088468][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1598'. [ 298.106220][T11359] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 298.127053][T11339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.150788][T11349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.577731][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'. [ 298.639071][T11386] 8021q: VLANs not supported on ip_vti0 [ 299.157654][T11414] delete_channel: no stack [ 300.312422][T11477] __nla_validate_parse: 4 callbacks suppressed [ 300.312442][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 300.611565][T11493] tipc: Enabling of bearer rejected, already enabled [ 300.762472][T11511] netlink: 'syz.0.1638': attribute type 2 has an invalid length. [ 300.770396][T11511] netlink: 'syz.0.1638': attribute type 5 has an invalid length. [ 300.964871][T11520] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 301.192017][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1649'. [ 301.219643][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 301.440589][T11500] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 301.508046][T11546] netlink: 'syz.2.1652': attribute type 4 has an invalid length. [ 301.648899][T11555] netlink: 'syz.1.1655': attribute type 2 has an invalid length. [ 301.949404][T11574] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1660'. [ 301.962650][T11579] netlink: 'syz.0.1662': attribute type 29 has an invalid length. [ 301.979332][T11575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.986617][T11575] IPv6: NLM_F_CREATE should be set when creating new route [ 301.987389][T11579] netlink: 'syz.0.1662': attribute type 29 has an invalid length. [ 302.049267][T11582] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1662'. [ 302.071361][T11582] unsupported nla_type 58 [ 302.396873][T11606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1671'. [ 302.433292][T11606] sit0: entered promiscuous mode [ 302.453148][T11606] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 302.470044][T11606] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1671'. [ 302.528783][T11621] netlink: 'syz.4.1672': attribute type 23 has an invalid length. [ 302.797481][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1677'. [ 302.854131][T11637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 302.863890][T11637] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 302.873004][T11637] netlink: 'syz.1.1677': attribute type 2 has an invalid length. [ 302.880927][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 302.942298][T11642] bond4: entered promiscuous mode [ 302.956038][T11642] bond4: entered allmulticast mode [ 302.962295][T11642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.972078][T11637] tunl0: entered allmulticast mode [ 302.991991][T11647] ip_vti0: mtu less than device minimum [ 303.011881][T11651] syzkaller1: entered promiscuous mode [ 303.042600][T11651] syzkaller1: entered allmulticast mode [ 303.373956][T11673] bridge0: port 1(veth0_to_bridge) entered blocking state [ 303.414265][T11673] bridge0: port 1(veth0_to_bridge) entered disabled state [ 303.426829][T11673] veth0_to_bridge: entered allmulticast mode [ 303.445232][T11673] veth0_to_bridge: entered promiscuous mode [ 303.740939][ T56] block nbd1: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 210 seconds [ 303.752174][ T56] block nbd1: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 210 seconds [ 303.763617][ T56] block nbd1: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 210 seconds [ 303.774932][ T56] block nbd1: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 210 seconds [ 304.023938][T11711] tipc: Enabling not permitted [ 304.059954][T11711] tipc: Enabling of bearer rejected, failed to enable media [ 304.269390][T11724] netem: invalid attributes len -24 [ 304.274626][T11724] netem: change failed [ 304.786186][T11744] pim6reg: entered allmulticast mode [ 305.133576][T11767] tipc: Enabled bearer , priority 0 [ 305.154073][T11767] tipc: Disabling bearer [ 305.263550][T11773] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 305.707795][T11794] __nla_validate_parse: 10 callbacks suppressed [ 305.707813][T11794] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1722'. [ 305.830641][T11798] bond4: entered promiscuous mode [ 305.851538][T11798] bond4: entered allmulticast mode [ 305.871909][T11798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.115923][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1728'. [ 306.141020][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1728'. [ 306.249788][T11828] validate_nla: 5 callbacks suppressed [ 306.249806][T11828] netlink: 'syz.4.1731': attribute type 10 has an invalid length. [ 306.269438][T11834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1733'. [ 306.308250][T11835] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1733'. [ 306.373399][T11828] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 306.486363][T11846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1737'. [ 306.493345][T11842] tipc: Enabling of bearer rejected, already enabled [ 306.714672][T11857] Bluetooth: MGMT ver 1.23 [ 307.301652][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 307.330252][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.583572][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 307.615156][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 307.659095][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 307.724952][T11914] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 307.941224][T11918] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.951381][T11918] bond5: (slave bond6): making interface the new active one [ 307.959596][T11918] bond5: (slave bond6): Enslaving as an active interface with an up link [ 307.976180][T11922] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.989101][T11922] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 308.589043][T11972] netlink: 'syz.0.1776': attribute type 16 has an invalid length. [ 308.614094][T11972] netlink: 'syz.0.1776': attribute type 17 has an invalid length. [ 308.741325][T11972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.780910][ T8121] Bluetooth: hci2: command 0x0406 tx timeout [ 308.787307][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 308.892060][T11983] netlink: 'syz.1.1781': attribute type 18 has an invalid length. [ 309.827357][T12033] netlink: 'syz.3.1797': attribute type 10 has an invalid length. [ 309.903018][T12033] batman_adv: batadv0: Adding interface: team0 [ 309.921307][T12033] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.951230][T12033] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 310.327336][T12057] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 310.405376][T12066] netlink: 'syz.4.1809': attribute type 33 has an invalid length. [ 310.614107][T12072] tipc: Enabled bearer , priority 0 [ 310.758125][T12072] syzkaller0: entered promiscuous mode [ 310.763693][T12072] syzkaller0: entered allmulticast mode [ 310.806218][T12079] tipc: Enabling of bearer rejected, already enabled [ 310.846743][T12079] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 310.913867][T12095] __nla_validate_parse: 10 callbacks suppressed [ 310.913884][T12095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1817'. [ 310.968263][T12102] netlink: zone id is out of range [ 310.977087][T12102] netlink: zone id is out of range [ 311.002075][T12104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1819'. [ 311.012055][T12104] unsupported nlmsg_type 40 [ 311.019012][T12102] netlink: zone id is out of range [ 311.024155][T12102] netlink: zone id is out of range [ 311.031161][T12071] tipc: Resetting bearer [ 311.037034][T12102] netlink: zone id is out of range [ 311.043221][T12102] netlink: zone id is out of range [ 311.060498][T12102] netlink: zone id is out of range [ 311.078359][T12102] netlink: zone id is out of range [ 311.083515][T12102] netlink: zone id is out of range [ 311.122173][ T1227] IPVS: starting estimator thread 0... [ 311.218009][T12110] IPVS: using max 29 ests per chain, 69600 per kthread [ 311.556211][T12126] netlink: 'syz.1.1824': attribute type 1 has an invalid length. [ 311.632727][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 311.687109][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 311.694152][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 312.782537][T12071] tipc: Disabling bearer [ 313.073224][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 313.073379][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 313.234160][T12145] netlink: 'syz.2.1832': attribute type 16 has an invalid length. [ 313.300557][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 313.314982][T12157] sctp: [Deprecated]: syz.1.1836 (pid 12157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.314982][T12157] Use struct sctp_sack_info instead [ 313.381168][T12157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1836'. [ 313.430610][T12166] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 313.514934][T12171] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 313.534520][T12171] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 313.602080][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1838'. [ 313.634050][T12175] netlink: 'syz.1.1840': attribute type 7 has an invalid length. [ 313.863582][T12186] netlink: 'syz.3.1844': attribute type 10 has an invalid length. [ 313.876944][T12186] batman_adv: batadv0: Removing interface: team0 [ 313.943634][T12186] bridge0: port 1(team0) entered blocking state [ 313.952792][T12186] bridge0: port 1(team0) entered disabled state [ 313.970999][T12186] team0: entered allmulticast mode [ 313.990857][T12186] team_slave_0: entered allmulticast mode [ 314.009329][T12186] team0: entered promiscuous mode [ 314.015218][T12186] team_slave_0: entered promiscuous mode [ 314.319559][T12203] net_ratelimit: 17 callbacks suppressed [ 314.319659][T12203] openvswitch: netlink: Unknown key attributes 2 [ 314.449678][T12217] gtp1: entered promiscuous mode [ 314.454673][T12217] gtp1: entered allmulticast mode [ 314.873106][T12245] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 314.883723][T12245] netlink: 'syz.1.1861': attribute type 2 has an invalid length. [ 314.895316][T12245] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 315.135633][T12255] openvswitch: netlink: Tunnel attr 2048 out of range max 16 [ 315.136631][T12256] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 315.386396][T12263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 315.413478][T12263] bond4: (slave bond5): making interface the new active one [ 315.428707][T12263] bond4: (slave bond5): Enslaving as an active interface with an up link [ 315.472958][T12264] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 315.474384][T12274] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 315.581121][T12280] bond4: entered promiscuous mode [ 315.598126][T12280] bond5: entered promiscuous mode [ 315.603398][T12280] bond4: entered allmulticast mode [ 315.610773][T12280] bond5: entered allmulticast mode [ 315.629573][T12280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.654802][T12281] syzkaller1: entered promiscuous mode [ 315.660614][T12281] syzkaller1: entered allmulticast mode [ 315.713645][T12287] syzkaller1: left promiscuous mode [ 315.723738][T12287] syzkaller1: left allmulticast mode [ 315.921674][T12313] xt_HMARK: spi-set and port-set can't be combined [ 315.932960][T12301] bond3: entered promiscuous mode [ 315.938314][T12301] bond3: entered allmulticast mode [ 315.943976][T12301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.972921][T12301] __nla_validate_parse: 10 callbacks suppressed [ 315.972938][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1873'. [ 316.045289][T12318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1879'. [ 316.165642][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 316.208014][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'. [ 316.459457][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1888'. [ 316.642670][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 316.687994][T12366] validate_nla: 7 callbacks suppressed [ 316.688014][T12366] netlink: 'syz.0.1893': attribute type 16 has an invalid length. [ 316.735512][T12366] netlink: 'syz.0.1893': attribute type 17 has an invalid length. [ 316.764692][T12366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.924323][T12377] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1898'. [ 317.041097][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 317.056869][T12386] netlink: 'syz.4.1902': attribute type 5 has an invalid length. [ 317.066083][T12386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1902'. [ 317.087101][T12386] geneve3: entered promiscuous mode [ 317.094006][T12386] geneve3: entered allmulticast mode [ 317.107003][ T8669] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 317.118108][ T8669] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 317.152415][ T8669] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 317.174601][ T8669] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 317.192034][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.271209][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 317.734574][T12428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.044456][T12444] veth1_macvtap: left promiscuous mode [ 318.414497][T12470] C: renamed from lo (while UP) [ 318.539930][T12487] syz2: rxe_newlink: already configured on bond_slave_0 [ 319.371429][T12510] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.423124][T12510] tipc: Enabled bearer , priority 0 [ 319.431400][T12510] syzkaller0: entered promiscuous mode [ 319.436883][T12510] syzkaller0: entered allmulticast mode [ 319.464368][T12510] tipc: Resetting bearer [ 319.486270][T12509] tipc: Resetting bearer [ 319.524210][T12509] tipc: Disabling bearer [ 319.660141][T12533] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 319.680724][T12533] bond0: (slave gre0): Error -95 calling set_mac_address [ 319.691025][T12533] netlink: 'syz.3.1943': attribute type 1 has an invalid length. [ 319.724073][T12539] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 319.885998][T12544] netlink: 'syz.3.1946': attribute type 21 has an invalid length. [ 319.886212][T12539] netlink: 'syz.0.1945': attribute type 4 has an invalid length. [ 320.377341][T12535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.395834][T12535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.825684][T12535] vlan0: left allmulticast mode [ 320.831496][T12535] veth0_vlan: left allmulticast mode [ 320.836809][T12535] vlan0: left promiscuous mode [ 320.966168][T12563] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 320.979610][ T8669] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.984979][T12563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.001204][ T8669] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.026403][ T8669] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.061166][ T8669] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.093869][ T8669] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.125765][ T8669] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.151994][ T9145] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.173150][ T8669] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.196882][ T8669] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.211606][ T8669] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.239937][ T8669] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.270738][ T8669] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.291893][ T8669] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.311276][T12585] netlink: 'syz.3.1955': attribute type 21 has an invalid length. [ 321.336872][T12588] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 321.340849][T12585] __nla_validate_parse: 8 callbacks suppressed [ 321.340864][T12585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1955'. [ 321.376064][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 321.442761][T12588] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 321.455341][T12592] tipc: Enabling of bearer rejected, failed to enable media [ 321.455388][T12596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1958'. [ 321.564432][T12588] veth3: entered promiscuous mode [ 321.583700][T12588] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 321.920241][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1964'. [ 321.930883][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1964'. [ 322.117053][T12633] syzkaller0: entered allmulticast mode [ 322.130375][T12633] tipc: Enabled bearer , priority 0 [ 322.153739][T12632] tipc: Disabling bearer [ 322.176455][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 322.193820][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 322.203436][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 322.291389][T12635] macvtap1: entered promiscuous mode [ 322.315990][T12635] vlan0: entered promiscuous mode [ 322.328140][T12635] macvtap1: entered allmulticast mode [ 322.333758][T12635] vlan0: entered allmulticast mode [ 322.339356][T12635] veth0_vlan: entered allmulticast mode [ 322.403714][T12649] netlink: 'syz.1.1973': attribute type 75 has an invalid length. [ 322.502484][T12653] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 322.525005][T12653] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 323.136333][T12681] netlink: 'syz.4.1984': attribute type 17 has an invalid length. [ 323.167638][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1984'. [ 323.177014][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 323.203963][T12681] gretap0: entered promiscuous mode [ 323.217439][T12681] gretap0: left promiscuous mode [ 323.424642][T12698] team0: left allmulticast mode [ 323.439798][T12698] team_slave_0: left allmulticast mode [ 323.466313][T12698] team0: left promiscuous mode [ 323.473060][T12698] team_slave_0: left promiscuous mode [ 323.484982][T12698] bridge0: port 1(team0) entered disabled state [ 323.515220][T12698] bridge_slave_1: left allmulticast mode [ 323.522117][T12698] bridge_slave_1: left promiscuous mode [ 323.528262][T12698] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.780780][T12710] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 323.883619][T12723] netlink: 'syz.0.1997': attribute type 4 has an invalid length. [ 324.200847][T12739] syzkaller0: entered promiscuous mode [ 324.206511][T12739] syzkaller0: entered allmulticast mode [ 324.510489][T12758] Bluetooth: MGMT ver 1.23 [ 325.418639][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.900511][ T30] audit: type=1107 audit(1756727972.947:3): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 326.395995][T12785] kthread_run failed with err -4 [ 326.577822][T12810] __nla_validate_parse: 8 callbacks suppressed [ 326.577841][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2017'. [ 326.625937][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2017'. [ 326.635420][T12812] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 326.647017][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 326.662284][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'. [ 326.699878][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 326.735328][T12814] gtp0: entered promiscuous mode [ 326.757279][T12814] gtp0: entered allmulticast mode [ 327.401451][T12850] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2029'. [ 327.630303][T12864] tipc: Enabling of bearer rejected, failed to enable media [ 327.700904][T12866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.749968][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 327.882047][T12866] bond0: (slave syz_tun): Releasing backup interface [ 327.962165][T12880] tipc: Enabling of bearer rejected, already enabled [ 327.982091][T12880] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 328.129940][T12888] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2037'. [ 328.228664][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 328.424634][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 328.440146][T12899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.441516][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 328.922180][T12925] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 328.930743][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.072234][T12935] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 329.268911][T12940] netlink: 'syz.3.2056': attribute type 25 has an invalid length. [ 329.471430][T12949] netlink: 'syz.3.2060': attribute type 7 has an invalid length. [ 329.638731][T12966] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 329.661792][T12969] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 330.195582][T12995] netlink: 'syz.4.2073': attribute type 8 has an invalid length. [ 330.333218][T12998] tipc: Enabled bearer , priority 0 [ 330.362534][T12998] syzkaller0: entered promiscuous mode [ 330.383408][T12998] syzkaller0: entered allmulticast mode [ 330.425890][T12998] tipc: Resetting bearer [ 330.480676][T12997] tipc: Resetting bearer [ 330.543852][T12997] tipc: Disabling bearer [ 330.637338][T13013] netlink: 'syz.2.2078': attribute type 10 has an invalid length. [ 330.719944][T13015] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 330.740980][T13015] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 331.230997][T13052] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 331.717963][T13091] __nla_validate_parse: 13 callbacks suppressed [ 331.717982][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 331.914636][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2105'. [ 332.019599][T13101] bond0: (slave rose0): Enslaving as an active interface with an up link [ 332.109278][T13120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2109'. [ 332.198499][T13122] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2109'. [ 332.702294][T13157] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2115'. [ 332.977618][T13168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2118'. [ 333.069059][T13176] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2119'. [ 333.313169][T13185] syzkaller0: entered allmulticast mode [ 333.595821][T13203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2131'. [ 333.609722][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 333.671245][T13203] bond0: (slave syz_tun): Releasing backup interface [ 333.825585][ T56] block nbd1: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 240 seconds [ 333.837973][ T56] block nbd1: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 240 seconds [ 333.849108][ T56] block nbd1: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 240 seconds [ 333.860210][ T56] block nbd1: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 240 seconds [ 334.083829][T13226] block nbd0: reconnected socket [ 334.099272][T13226] nbd: socks must be embedded in a SOCK_ITEM attr [ 334.115024][T13226] validate_nla: 5 callbacks suppressed [ 334.115041][T13226] netlink: 'syz.2.2137': attribute type 21 has an invalid length. [ 334.157938][ T5867] block nbd0: Receive control failed (result -32) [ 334.255732][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'. [ 334.310598][T13241] netlink: 'syz.1.2143': attribute type 10 has an invalid length. [ 334.424013][T13234] bond0: (slave bridge_slave_1): Releasing backup interface [ 334.457344][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 334.500611][T13235] tc_dump_action: action bad kind [ 334.835599][T13271] netlink: 'syz.1.2152': attribute type 1 has an invalid length. [ 337.053158][T13329] syzkaller1: entered promiscuous mode [ 337.081602][T13329] syzkaller1: entered allmulticast mode [ 337.128261][T13336] __nla_validate_parse: 4 callbacks suppressed [ 337.128279][T13336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2172'. [ 337.389302][T13347] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 337.418425][T13359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2181'. [ 337.682564][T13376] openvswitch: netlink: EtherType 0 is less than min 600 [ 337.693839][T13376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2183'. [ 337.705208][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 337.722437][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 337.736942][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 337.780659][T13378] syzkaller0: entered promiscuous mode [ 337.786400][T13378] syzkaller0: entered allmulticast mode [ 337.796273][T13378] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 337.841684][T13377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.928664][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 338.026188][T13387] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 338.090764][T13387] team0: Device veth0_vlan failed to register rx_handler [ 338.165820][T13368] netlink: 'syz.0.2184': attribute type 4 has an invalid length. [ 338.184724][T13391] netlink: 'syz.1.2192': attribute type 1 has an invalid length. [ 338.201076][T13391] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2192'. [ 338.215320][T13368] netlink: 'syz.0.2184': attribute type 4 has an invalid length. [ 338.502467][T13413] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.811892][T13429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2202'. [ 338.833378][T13433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.887911][T13437] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2205'. [ 338.912871][T13437] netlink: zone id is out of range [ 338.919365][T13437] netlink: zone id is out of range [ 338.925316][T13437] netlink: zone id is out of range [ 338.934975][T13437] netlink: get zone limit has 8 unknown bytes [ 339.946002][T13504] sctp: [Deprecated]: syz.1.2221 (pid 13504) Use of int in max_burst socket option deprecated. [ 339.946002][T13504] Use struct sctp_assoc_value instead [ 340.128550][T13522] lo: entered allmulticast mode [ 340.141424][T13522] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 340.360188][T13522] lo: left allmulticast mode [ 341.125259][T13570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.626059][T13587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 342.733438][T13593] tipc: Can't bind to reserved service type 2 [ 343.001440][T13622] FAULT_INJECTION: forcing a failure. [ 343.001440][T13622] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 343.026514][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.2.2256 Not tainted syzkaller #0 PREEMPT(full) [ 343.026541][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.026563][T13622] Call Trace: [ 343.026571][T13622] [ 343.026579][T13622] dump_stack_lvl+0x189/0x250 [ 343.026615][T13622] ? __pfx____ratelimit+0x10/0x10 [ 343.026639][T13622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.026658][T13622] ? __pfx__printk+0x10/0x10 [ 343.026680][T13622] ? __might_fault+0xb0/0x130 [ 343.026714][T13622] should_fail_ex+0x414/0x560 [ 343.026740][T13622] _copy_from_iter+0x1de/0x1790 [ 343.026758][T13622] ? skb_set_owner_w+0x25b/0x3a0 [ 343.026781][T13622] ? sock_alloc_send_pskb+0x875/0x990 [ 343.026806][T13622] ? __pfx__copy_from_iter+0x10/0x10 [ 343.026833][T13622] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 343.026861][T13622] skb_copy_datagram_from_iter+0xf5/0x720 [ 343.026883][T13622] ? dev_get_by_index+0x22/0x2e0 [ 343.026902][T13622] ? skb_put+0x11b/0x210 [ 343.026924][T13622] packet_sendmsg+0x3797/0x5080 [ 343.026953][T13622] ? aa_pivotroot+0x1130/0x13c0 [ 343.026995][T13622] ? __pfx___might_resched+0x10/0x10 [ 343.027011][T13622] ? __lock_acquire+0xab9/0xd20 [ 343.027048][T13622] ? __pfx_packet_sendmsg+0x10/0x10 [ 343.027065][T13622] ? aa_sk_perm+0x81e/0x950 [ 343.027093][T13622] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 343.027118][T13622] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.027138][T13622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.027154][T13622] ? __pfx_packet_sendmsg+0x10/0x10 [ 343.027172][T13622] __sock_sendmsg+0x219/0x270 [ 343.027194][T13622] __sys_sendto+0x3bd/0x520 [ 343.027211][T13622] ? __pfx___sys_sendto+0x10/0x10 [ 343.027224][T13622] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 343.027260][T13622] ? __fget_files+0x3a0/0x420 [ 343.027292][T13622] ? ksys_write+0x22a/0x250 [ 343.027315][T13622] ? __pfx_ksys_write+0x10/0x10 [ 343.027333][T13622] ? rcu_is_watching+0x15/0xb0 [ 343.027353][T13622] __x64_sys_sendto+0xde/0x100 [ 343.027374][T13622] do_syscall_64+0xfa/0x3b0 [ 343.027388][T13622] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.027409][T13622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.027426][T13622] ? clear_bhb_loop+0x60/0xb0 [ 343.027444][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.027460][T13622] RIP: 0033:0x7f709558ebe9 [ 343.027484][T13622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.027499][T13622] RSP: 002b:00007f709648f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.027518][T13622] RAX: ffffffffffffffda RBX: 00007f70957c5fa0 RCX: 00007f709558ebe9 [ 343.027531][T13622] RDX: 000000000000ff88 RSI: 0000200000000180 RDI: 0000000000000004 [ 343.027542][T13622] RBP: 00007f709648f090 R08: 0000200000000140 R09: 0000000000000014 [ 343.027554][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.027563][T13622] R13: 00007f70957c6038 R14: 00007f70957c5fa0 R15: 00007ffed9702e48 [ 343.027589][T13622] [ 343.333247][T13626] __nla_validate_parse: 14 callbacks suppressed [ 343.333266][T13626] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2258'. [ 343.352700][T13621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.025835][T13686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.037821][T13687] syzkaller0: entered promiscuous mode [ 345.045587][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2282'. [ 345.054551][T13687] syzkaller0: entered allmulticast mode [ 345.220335][T13699] IPVS: set_ctl: invalid protocol: 138 0.0.0.0:0 [ 345.227882][T13700] IPVS: set_ctl: invalid protocol: 138 0.0.0.0:0 [ 345.235276][T13699] IPVS: set_ctl: invalid protocol: 34061 51.164.43.134:61578 [ 345.424024][T13719] netlink: 'syz.4.2289': attribute type 6 has an invalid length. [ 345.432177][T13719] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2289'. [ 345.454955][T13721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2286'. [ 345.665709][T13736] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 345.675328][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2292'. [ 345.680085][T13738] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 345.698516][T13736] netlink: 'syz.0.2295': attribute type 2 has an invalid length. [ 345.738961][T13743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2291'. [ 345.835838][T13738] bond8: entered promiscuous mode [ 345.857720][T13738] bond8: entered allmulticast mode [ 345.868468][T13738] 8021q: adding VLAN 0 to HW filter on device bond8 [ 346.602290][T13784] netlink: 'syz.1.2306': attribute type 1 has an invalid length. [ 346.666504][T13789] geneve3: entered promiscuous mode [ 346.672215][T13790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2306'. [ 346.682800][T13789] geneve3: entered allmulticast mode [ 346.691629][ T7662] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 19999 - 0 [ 346.742271][ T7662] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 346.763849][ T7662] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 346.790939][ T7662] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 347.079962][T13804] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2312'. [ 347.091912][T13804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2312'. [ 347.103622][T13804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2312'. [ 347.183937][T13815] geneve4: entered promiscuous mode [ 347.184742][T13817] FAULT_INJECTION: forcing a failure. [ 347.184742][T13817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.196663][T13815] geneve4: entered allmulticast mode [ 347.203329][T13817] CPU: 0 UID: 0 PID: 13817 Comm: syz.0.2317 Not tainted syzkaller #0 PREEMPT(full) [ 347.203352][T13817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.203363][T13817] Call Trace: [ 347.203370][T13817] [ 347.203377][T13817] dump_stack_lvl+0x189/0x250 [ 347.203402][T13817] ? __pfx____ratelimit+0x10/0x10 [ 347.203424][T13817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.203443][T13817] ? __pfx__printk+0x10/0x10 [ 347.203464][T13817] ? __might_fault+0xb0/0x130 [ 347.203495][T13817] should_fail_ex+0x414/0x560 [ 347.203521][T13817] _copy_from_user+0x2d/0xb0 [ 347.203540][T13817] ___sys_sendmsg+0x158/0x2a0 [ 347.203561][T13817] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.203613][T13817] ? __fget_files+0x2a/0x420 [ 347.203634][T13817] ? __fget_files+0x3a0/0x420 [ 347.203665][T13817] __x64_sys_sendmsg+0x19b/0x260 [ 347.203685][T13817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.203712][T13817] ? __pfx_ksys_write+0x10/0x10 [ 347.203729][T13817] ? rcu_is_watching+0x15/0xb0 [ 347.203750][T13817] ? do_syscall_64+0xbe/0x3b0 [ 347.203769][T13817] do_syscall_64+0xfa/0x3b0 [ 347.203783][T13817] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.203803][T13817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.203819][T13817] ? clear_bhb_loop+0x60/0xb0 [ 347.203838][T13817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.203853][T13817] RIP: 0033:0x7fa98a78ebe9 [ 347.203868][T13817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.203882][T13817] RSP: 002b:00007fa98b683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.203900][T13817] RAX: ffffffffffffffda RBX: 00007fa98a9c5fa0 RCX: 00007fa98a78ebe9 [ 347.203913][T13817] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 347.203931][T13817] RBP: 00007fa98b683090 R08: 0000000000000000 R09: 0000000000000000 [ 347.203942][T13817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.203951][T13817] R13: 00007fa98a9c6038 R14: 00007fa98a9c5fa0 R15: 00007ffe6b57b1d8 [ 347.203979][T13817] [ 347.452457][ T9143] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 347.465304][ T9143] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 347.494995][ T9143] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 347.536280][ T9143] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 347.666054][T13829] team0: Device vti0 is of different type [ 347.784712][T13834] team0: Device vti0 is of different type [ 348.044364][T13842] netlink: 'syz.1.2326': attribute type 83 has an invalid length. [ 348.104141][T13846] FAULT_INJECTION: forcing a failure. [ 348.104141][T13846] name failslab, interval 1, probability 0, space 0, times 1 [ 348.139163][T13846] CPU: 0 UID: 0 PID: 13846 Comm: syz.2.2328 Not tainted syzkaller #0 PREEMPT(full) [ 348.139188][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.139198][T13846] Call Trace: [ 348.139213][T13846] [ 348.139221][T13846] dump_stack_lvl+0x189/0x250 [ 348.139246][T13846] ? __pfx____ratelimit+0x10/0x10 [ 348.139268][T13846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.139287][T13846] ? __pfx__printk+0x10/0x10 [ 348.139314][T13846] ? __pfx___might_resched+0x10/0x10 [ 348.139334][T13846] should_fail_ex+0x414/0x560 [ 348.139361][T13846] should_failslab+0xa8/0x100 [ 348.139385][T13846] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 348.139407][T13846] ? __alloc_skb+0x112/0x2d0 [ 348.139427][T13846] __alloc_skb+0x112/0x2d0 [ 348.139447][T13846] netlink_sendmsg+0x5c6/0xb30 [ 348.139472][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.139490][T13846] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.139509][T13846] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.139526][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.139543][T13846] __sock_sendmsg+0x219/0x270 [ 348.139567][T13846] ____sys_sendmsg+0x505/0x830 [ 348.139591][T13846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.139619][T13846] ? import_iovec+0x74/0xa0 [ 348.139641][T13846] ___sys_sendmsg+0x21f/0x2a0 [ 348.139662][T13846] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.139714][T13846] ? __fget_files+0x2a/0x420 [ 348.139734][T13846] ? __fget_files+0x3a0/0x420 [ 348.139767][T13846] __x64_sys_sendmsg+0x19b/0x260 [ 348.139787][T13846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.139814][T13846] ? __pfx_ksys_write+0x10/0x10 [ 348.139833][T13846] ? rcu_is_watching+0x15/0xb0 [ 348.139854][T13846] ? do_syscall_64+0xbe/0x3b0 [ 348.139874][T13846] do_syscall_64+0xfa/0x3b0 [ 348.139888][T13846] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.139909][T13846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.139925][T13846] ? clear_bhb_loop+0x60/0xb0 [ 348.139945][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.139959][T13846] RIP: 0033:0x7f709558ebe9 [ 348.139974][T13846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.139986][T13846] RSP: 002b:00007f709648f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.140002][T13846] RAX: ffffffffffffffda RBX: 00007f70957c5fa0 RCX: 00007f709558ebe9 [ 348.140013][T13846] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 348.140024][T13846] RBP: 00007f709648f090 R08: 0000000000000000 R09: 0000000000000000 [ 348.140033][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.140043][T13846] R13: 00007f70957c6038 R14: 00007f70957c5fa0 R15: 00007ffed9702e48 [ 348.140071][T13846] [ 348.432153][T13850] __nla_validate_parse: 3 callbacks suppressed [ 348.432171][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2332'. [ 348.511719][T13859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2330'. [ 348.512132][T13858] netlink: 'syz.1.2333': attribute type 1 has an invalid length. [ 348.574845][T13858] netlink: 'syz.1.2333': attribute type 2 has an invalid length. [ 348.632407][T13858] netlink: 'syz.1.2333': attribute type 1 has an invalid length. [ 348.864679][T13888] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2337'. [ 349.111032][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 349.466517][T13878] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 349.502639][T13878] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 349.918256][T13938] FAULT_INJECTION: forcing a failure. [ 349.918256][T13938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.953134][T13938] CPU: 0 UID: 0 PID: 13938 Comm: syz.0.2355 Not tainted syzkaller #0 PREEMPT(full) [ 349.953157][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.953167][T13938] Call Trace: [ 349.953174][T13938] [ 349.953182][T13938] dump_stack_lvl+0x189/0x250 [ 349.953206][T13938] ? __pfx____ratelimit+0x10/0x10 [ 349.953228][T13938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.953247][T13938] ? __pfx__printk+0x10/0x10 [ 349.953268][T13938] ? __might_fault+0xb0/0x130 [ 349.953300][T13938] should_fail_ex+0x414/0x560 [ 349.953326][T13938] _copy_from_iter+0x1de/0x1790 [ 349.953352][T13938] ? rcu_is_watching+0x15/0xb0 [ 349.953371][T13938] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 349.953393][T13938] ? __pfx__copy_from_iter+0x10/0x10 [ 349.953412][T13938] ? __build_skb_around+0x257/0x3e0 [ 349.953439][T13938] ? netlink_sendmsg+0x642/0xb30 [ 349.953451][T13938] ? skb_put+0x11b/0x210 [ 349.953482][T13938] netlink_sendmsg+0x6b2/0xb30 [ 349.953508][T13938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.953527][T13938] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.953546][T13938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.953562][T13938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.953578][T13938] __sock_sendmsg+0x219/0x270 [ 349.953601][T13938] ____sys_sendmsg+0x505/0x830 [ 349.953624][T13938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.953651][T13938] ? import_iovec+0x74/0xa0 [ 349.953672][T13938] ___sys_sendmsg+0x21f/0x2a0 [ 349.953693][T13938] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.953747][T13938] ? __fget_files+0x2a/0x420 [ 349.953768][T13938] ? __fget_files+0x3a0/0x420 [ 349.953798][T13938] __x64_sys_sendmsg+0x19b/0x260 [ 349.953819][T13938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.953847][T13938] ? __pfx_ksys_write+0x10/0x10 [ 349.953865][T13938] ? rcu_is_watching+0x15/0xb0 [ 349.953887][T13938] ? do_syscall_64+0xbe/0x3b0 [ 349.953907][T13938] do_syscall_64+0xfa/0x3b0 [ 349.953921][T13938] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.953943][T13938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.953959][T13938] ? clear_bhb_loop+0x60/0xb0 [ 349.953979][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.953995][T13938] RIP: 0033:0x7fa98a78ebe9 [ 349.954011][T13938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.954026][T13938] RSP: 002b:00007fa98b683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.954054][T13938] RAX: ffffffffffffffda RBX: 00007fa98a9c5fa0 RCX: 00007fa98a78ebe9 [ 349.954067][T13938] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 349.954078][T13938] RBP: 00007fa98b683090 R08: 0000000000000000 R09: 0000000000000000 [ 349.954088][T13938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.954099][T13938] R13: 00007fa98a9c6038 R14: 00007fa98a9c5fa0 R15: 00007ffe6b57b1d8 [ 349.954127][T13938] [ 350.484100][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2362'. [ 350.495394][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2362'. [ 350.512741][T13958] gretap0: entered promiscuous mode [ 350.519989][T13958] batadv_slave_1: entered promiscuous mode [ 350.527263][T13958] batadv_slave_1: left promiscuous mode [ 350.533849][T13958] gretap0: left promiscuous mode [ 350.629517][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2365'. [ 350.653220][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 350.667522][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2365'. [ 350.678714][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 350.701116][T13975] 8021q: VLANs not supported on wg2 [ 350.833140][T13978] syzkaller0: entered promiscuous mode [ 350.840560][T13978] syzkaller0: entered allmulticast mode [ 352.380378][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.904585][T14036] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 352.917990][T14036] netlink: zone id is out of range [ 352.929905][T14036] netlink: zone id is out of range [ 352.947886][T14036] netlink: get zone limit has 8 unknown bytes [ 352.989339][T14038] validate_nla: 3 callbacks suppressed [ 352.989377][T14038] netlink: 'syz.3.2381': attribute type 1 has an invalid length. [ 353.021100][ T9144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.703974][T14087] netlink: 'syz.0.2400': attribute type 1 has an invalid length. [ 353.770685][T14092] __nla_validate_parse: 6 callbacks suppressed [ 353.770702][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 353.992730][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 354.040850][T14112] tipc: Enabled bearer , priority 10 [ 354.134923][T14117] netlink: ct family unspecified [ 354.147328][T14117] openvswitch: netlink: Actions may not be safe on all matching packets [ 354.180429][T14119] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2410'. [ 354.403072][T14132] netlink: 'syz.4.2416': attribute type 10 has an invalid length. [ 354.557703][T14138] syzkaller1: entered promiscuous mode [ 354.563310][T14138] syzkaller1: entered allmulticast mode [ 354.589480][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 354.947018][T14164] syzkaller1: entered promiscuous mode [ 354.971657][T14164] syzkaller1: entered allmulticast mode [ 355.357842][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.512523][T14190] netlink: 'syz.3.2431': attribute type 11 has an invalid length. [ 355.524678][T14190] netlink: 'syz.3.2431': attribute type 11 has an invalid length. [ 355.535749][T14190] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2431'. [ 355.675189][T14195] tipc: Enabling of bearer rejected, failed to enable media [ 355.988249][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2439'. [ 356.133387][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 356.201206][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 356.262922][T14230] netlink: 'syz.3.2443': attribute type 3 has an invalid length. [ 356.273210][T14230] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2443'. [ 356.484890][T14246] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2446'. [ 356.810369][T14264] tipc: Enabled bearer , priority 0 [ 356.829973][T14267] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 356.844624][T14264] syzkaller0: entered promiscuous mode [ 356.850958][T14264] syzkaller0: entered allmulticast mode [ 356.915975][T14264] tipc: Resetting bearer [ 356.935538][T14264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.943959][T14264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.993424][T14263] tipc: Resetting bearer [ 357.055514][T14263] tipc: Disabling bearer [ 357.194102][T14284] rdma_op ffff88806aa3d1f0 conn xmit_rdma 0000000000000000 [ 357.214177][T14288] netlink: 'syz.1.2460': attribute type 4 has an invalid length. [ 357.266484][T14291] netlink: 'syz.1.2460': attribute type 4 has an invalid length. [ 357.456396][T14304] netlink: 'syz.3.2466': attribute type 2 has an invalid length. [ 357.492811][T14304] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 357.545362][T14312] 8021q: VLANs not supported on wg0 [ 357.634026][T14318] IPv6: sit2: Disabled Multicast RS [ 357.646851][T14318] sit2: entered allmulticast mode [ 358.011665][T14339] netlink: 'syz.3.2478': attribute type 4 has an invalid length. [ 358.280734][T14365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 358.357075][T14370] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 358.364140][T14370] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 358.740789][T14394] tipc: Enabled bearer , priority 0 [ 358.750612][T14394] syzkaller0: entered promiscuous mode [ 358.756171][T14394] syzkaller0: entered allmulticast mode [ 358.783500][T14394] tipc: Resetting bearer [ 358.793555][T14393] tipc: Resetting bearer [ 358.813679][T14393] tipc: Disabling bearer [ 358.922529][T14404] netlink: 'syz.2.2501': attribute type 1 has an invalid length. [ 358.934829][T14404] __nla_validate_parse: 49 callbacks suppressed [ 358.934847][T14404] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2501'. [ 358.955418][T14407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2500'. [ 358.976793][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 358.988767][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 359.008953][T14409] erspan0: entered promiscuous mode [ 359.016240][T14409] erspan0: left promiscuous mode [ 359.093540][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 359.223306][T14420] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2505'. [ 359.228658][T14419] pim6reg527: entered allmulticast mode [ 359.310254][T14422] netlink: 'syz.3.2505': attribute type 33 has an invalid length. [ 359.318236][T14422] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2505'. [ 359.411578][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'. [ 359.474627][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2510'. [ 359.541813][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 359.964177][T14463] netlink: 'syz.1.2521': attribute type 3 has an invalid length. [ 360.263928][T14486] netlink: 'syz.2.2533': attribute type 29 has an invalid length. [ 360.577046][T14505] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.789148][T14523] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 360.821831][T14528] tipc: Enabled bearer , priority 0 [ 360.839713][T14528] syzkaller0: entered promiscuous mode [ 360.845454][T14528] syzkaller0: entered allmulticast mode [ 360.861282][T14530] netlink: 'syz.2.2543': attribute type 3 has an invalid length. [ 360.911083][T14528] tipc: Resetting bearer [ 360.929614][T14528] netlink: 'syz.0.2542': attribute type 4 has an invalid length. [ 360.946401][T14527] tipc: Resetting bearer [ 361.050138][T14527] tipc: Disabling bearer [ 361.494035][T14568] macsec1: entered promiscuous mode [ 361.499609][T14568] bridge0: entered promiscuous mode [ 361.505892][T14568] bridge0: port 2(macsec1) entered blocking state [ 361.512754][T14568] bridge0: port 2(macsec1) entered disabled state [ 361.519591][T14568] macsec1: entered allmulticast mode [ 361.525097][T14568] bridge0: entered allmulticast mode [ 361.535048][T14568] macsec1: left allmulticast mode [ 361.543783][T14568] bridge0: left allmulticast mode [ 361.557262][T14568] bridge0: left promiscuous mode [ 361.813731][T14576] netlink: 'syz.1.2556': attribute type 4 has an invalid length. [ 362.739074][T14624] netlink: 'syz.0.2571': attribute type 3 has an invalid length. [ 362.762885][T14626] netlink: 'syz.2.2574': attribute type 6 has an invalid length. [ 362.840197][T14629] syzkaller0: entered allmulticast mode [ 363.236388][T14657] team0: Device vti0 is up. Set it down before adding it as a team port [ 363.257378][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.349560][T14667] 8021q: adding VLAN 0 to HW filter on device bond7 [ 363.798439][T14702] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 363.824033][T14702] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 363.898628][ T56] block nbd1: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 270 seconds [ 363.909906][ T56] block nbd1: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 270 seconds [ 363.921184][ T56] block nbd1: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 270 seconds [ 363.932478][ T56] block nbd1: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 270 seconds [ 365.343346][T14728] __nla_validate_parse: 18 callbacks suppressed [ 365.343376][T14728] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2603'. [ 365.383556][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 365.735032][T14769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.751958][T14771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2610'. [ 365.796773][T14773] block nbd2: Unsupported socket: shutdown callout must be supported. [ 365.908035][T14779] macvlan3: entered allmulticast mode [ 365.920368][T14779] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 366.193186][T14791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2617'. [ 366.213027][ T9143] tipc: Subscription rejected, illegal request [ 366.542262][T14809] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.578491][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 366.589625][T14809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.797030][T14827] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 366.898702][T14835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.234071][T14852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.248482][T14870] syz.2.2638 (14870) used greatest stack depth: 18648 bytes left [ 367.258717][T14853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.285546][T14857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.466759][T14884] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2639'. [ 367.494363][T14882] validate_nla: 1 callbacks suppressed [ 367.494380][T14882] netlink: 'syz.1.2641': attribute type 10 has an invalid length. [ 367.544013][T14882] veth0_vlan: entered allmulticast mode [ 367.696264][T14882] veth0_vlan: left promiscuous mode [ 367.710598][T14882] veth0_vlan: entered promiscuous mode [ 367.755699][T14882] team0: Device veth0_vlan failed to register rx_handler [ 367.806732][T14892] netlink: 'syz.4.2645': attribute type 1 has an invalid length. [ 367.868994][T14894] netlink: 'syz.0.2646': attribute type 21 has an invalid length. [ 367.948438][T14894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2646'. [ 368.091976][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2644'. [ 368.103700][T14903] syzkaller0: entered promiscuous mode [ 368.128555][T14903] syzkaller0: entered allmulticast mode [ 368.167610][T14896] tipc: Enabled bearer , priority 0 [ 368.190202][T14900] syzkaller1: entered promiscuous mode [ 368.198241][T14900] syzkaller1: entered allmulticast mode [ 368.205846][T14896] syzkaller0: entered promiscuous mode [ 368.227838][T14896] syzkaller0: entered allmulticast mode [ 368.237653][T14900] netlink: 'syz.4.2647': attribute type 11 has an invalid length. [ 368.245779][T14900] netlink: 'syz.4.2647': attribute type 4 has an invalid length. [ 368.266368][T14900] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2647'. [ 368.439667][T14895] tipc: Resetting bearer [ 368.503292][T14895] tipc: Disabling bearer [ 368.570399][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2655'. [ 368.812707][T14951] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 369.231448][T14992] netlink: 'syz.0.2670': attribute type 7 has an invalid length. [ 369.879801][T15026] hsr0 speed is unknown, defaulting to 1000 [ 369.899065][T15026] hsr0 speed is unknown, defaulting to 1000 [ 369.921862][T15026] hsr0 speed is unknown, defaulting to 1000 [ 369.933521][T15029] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 369.956673][T15026] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 370.005981][T15026] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 370.152313][T15039] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20000 [ 370.159731][T12555] IPVS: starting estimator thread 0... [ 370.197738][T15026] hsr0 speed is unknown, defaulting to 1000 [ 370.213331][T15026] hsr0 speed is unknown, defaulting to 1000 [ 370.243268][T15026] hsr0 speed is unknown, defaulting to 1000 [ 370.257335][T15040] IPVS: using max 37 ests per chain, 88800 per kthread [ 370.265925][T15026] hsr0 speed is unknown, defaulting to 1000 [ 370.333325][T15026] hsr0 speed is unknown, defaulting to 1000 [ 370.542455][T15062] xt_HMARK: proto mask must be zero with L3 mode [ 370.874061][T15072] __nla_validate_parse: 7 callbacks suppressed [ 370.874080][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2692'. [ 371.036795][T15081] syzkaller1: entered promiscuous mode [ 371.044588][T15081] syzkaller1: entered allmulticast mode [ 371.158258][T15093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2699'. [ 371.350673][T15102] netlink: 'syz.0.2703': attribute type 15 has an invalid length. [ 371.378626][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 371.433483][T15102] netlink: 'syz.0.2703': attribute type 15 has an invalid length. [ 371.469674][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 371.874867][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.021143][T15134] syzkaller0: entered promiscuous mode [ 372.026656][T15134] syzkaller0: entered allmulticast mode [ 372.049865][T15141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.431452][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 372.665009][T15184] netlink: 'syz.4.2725': attribute type 6 has an invalid length. [ 372.681264][T15184] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 372.702659][T15184] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2725'. [ 372.875286][T15198] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20004 [ 373.482578][T15241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2746'. [ 373.525240][T15241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2746'. [ 373.594164][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2748'. [ 374.049973][T15277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2757'. [ 374.092700][T15279] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.135595][T15283] IPVS: Unknown mcast interface: veth0_to_bridge [ 374.256911][T15289] netlink: 'syz.4.2762': attribute type 33 has an invalid length. [ 374.273637][T15289] lo: entered promiscuous mode [ 374.580824][T15303] netlink: 'syz.1.2767': attribute type 2 has an invalid length. [ 374.703160][T15307] GUP no longer grows the stack in syz.0.2770 (15307): 200000003000-20000000a000 (200000001000) [ 374.754111][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.0.2770 Not tainted syzkaller #0 PREEMPT(full) [ 374.754138][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.754154][T15307] Call Trace: [ 374.754163][T15307] [ 374.754171][T15307] dump_stack_lvl+0x189/0x250 [ 374.754201][T15307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.754222][T15307] ? __pfx__printk+0x10/0x10 [ 374.754243][T15307] ? find_vma+0xe7/0x160 [ 374.754265][T15307] ? __lock_acquire+0xab9/0xd20 [ 374.754302][T15307] __get_user_pages+0x24d0/0x2ce0 [ 374.754325][T15307] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 374.754375][T15307] ? rcu_is_watching+0x15/0xb0 [ 374.754399][T15307] __gup_longterm_locked+0xde9/0x1660 [ 374.754435][T15307] ? sanity_check_pinned_pages+0x123a/0x1300 [ 374.754466][T15307] gup_fast_fallback+0x1e6a/0x2010 [ 374.754523][T15307] ? __pfx_gup_fast_fallback+0x10/0x10 [ 374.754542][T15307] ? stack_trace_save+0x9c/0xe0 [ 374.754561][T15307] ? __pfx_stack_trace_save+0x10/0x10 [ 374.754593][T15307] ? pin_user_pages_fast+0x4d/0xb0 [ 374.754616][T15307] iov_iter_extract_pages+0x35a/0x5e0 [ 374.754647][T15307] extract_iter_to_sg+0xe46/0x24e0 [ 374.754686][T15307] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 374.754724][T15307] ? __asan_memset+0x22/0x50 [ 374.754744][T15307] af_alg_get_rsgl+0x436/0x810 [ 374.754784][T15307] aead_recvmsg+0x4cc/0x13f0 [ 374.754824][T15307] ? __pfx_aead_recvmsg+0x10/0x10 [ 374.754857][T15307] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 374.754876][T15307] ? __pfx_aead_recvmsg+0x10/0x10 [ 374.754899][T15307] sock_recvmsg_nosec+0x186/0x1c0 [ 374.754926][T15307] ____sys_recvmsg+0x3aa/0x460 [ 374.754962][T15307] ? __pfx_____sys_recvmsg+0x10/0x10 [ 374.754998][T15307] ? import_iovec+0x74/0xa0 [ 374.755021][T15307] ___sys_recvmsg+0x1b5/0x510 [ 374.755047][T15307] ? __pfx____sys_recvmsg+0x10/0x10 [ 374.755096][T15307] ? __might_fault+0xb0/0x130 [ 374.755125][T15307] do_recvmmsg+0x307/0x770 [ 374.755152][T15307] ? __pfx_do_recvmmsg+0x10/0x10 [ 374.755166][T15307] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 374.755204][T15307] ? __pfx_do_futex+0x10/0x10 [ 374.755244][T15307] __x64_sys_recvmmsg+0x190/0x240 [ 374.755267][T15307] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 374.755284][T15307] ? rcu_is_watching+0x15/0xb0 [ 374.755308][T15307] ? do_syscall_64+0xbe/0x3b0 [ 374.755329][T15307] do_syscall_64+0xfa/0x3b0 [ 374.755343][T15307] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.755365][T15307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.755383][T15307] ? clear_bhb_loop+0x60/0xb0 [ 374.755405][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.755428][T15307] RIP: 0033:0x7fa98a78ebe9 [ 374.755447][T15307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.755462][T15307] RSP: 002b:00007fa98b683038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 374.755482][T15307] RAX: ffffffffffffffda RBX: 00007fa98a9c5fa0 RCX: 00007fa98a78ebe9 [ 374.755496][T15307] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008 [ 374.755508][T15307] RBP: 00007fa98a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 374.755519][T15307] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 374.755530][T15307] R13: 00007fa98a9c6038 R14: 00007fa98a9c5fa0 R15: 00007ffe6b57b1d8 [ 374.755563][T15307] [ 375.292805][T15329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.679079][T15360] netlink: 'syz.0.2785': attribute type 32 has an invalid length. [ 375.697567][T15360] (unnamed net_device) (uninitialized): option coupled_control: invalid value (122) [ 375.885650][T15371] __nla_validate_parse: 11 callbacks suppressed [ 375.885668][T15371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2787'. [ 375.940454][T15362] [ 375.942814][T15362] ====================================================== [ 375.949830][T15362] WARNING: possible circular locking dependency detected [ 375.956958][T15362] syzkaller #0 Not tainted [ 375.961389][T15362] ------------------------------------------------------ [ 375.968392][T15362] syz.2.2786/15362 is trying to acquire lock: [ 375.974438][T15362] ffff888143f2f1d8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 375.983824][T15362] [ 375.983824][T15362] but task is already holding lock: [ 375.991173][T15362] ffff888143f2ec98 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 376.001795][T15362] [ 376.001795][T15362] which lock already depends on the new lock. [ 376.001795][T15362] [ 376.012297][T15362] [ 376.012297][T15362] the existing dependency chain (in reverse order) is: [ 376.021312][T15362] [ 376.021312][T15362] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 376.030011][T15362] lock_acquire+0x120/0x360 [ 376.035121][T15362] blk_alloc_queue+0x538/0x620 [ 376.040544][T15362] __blk_mq_alloc_disk+0x15c/0x340 [ 376.046176][T15362] nbd_dev_add+0x46c/0xae0 [ 376.051120][T15362] nbd_init+0x168/0x1f0 [ 376.055789][T15362] do_one_initcall+0x233/0x820 [ 376.061075][T15362] do_initcall_level+0x104/0x190 [ 376.066528][T15362] do_initcalls+0x59/0xa0 [ 376.071370][T15362] kernel_init_freeable+0x334/0x4b0 [ 376.077162][T15362] kernel_init+0x1d/0x1d0 [ 376.082002][T15362] ret_from_fork+0x3f9/0x770 [ 376.087101][T15362] ret_from_fork_asm+0x1a/0x30 [ 376.092377][T15362] [ 376.092377][T15362] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 376.099576][T15362] lock_acquire+0x120/0x360 [ 376.104676][T15362] fs_reclaim_acquire+0x72/0x100 [ 376.110154][T15362] __kmalloc_cache_node_noprof+0x44/0x3d0 [ 376.116392][T15362] create_worker+0x112/0x720 [ 376.121588][T15362] workqueue_prepare_cpu+0xe4/0x170 [ 376.127300][T15362] cpuhp_invoke_callback+0x442/0x860 [ 376.133098][T15362] _cpu_up+0x2c9/0x580 [ 376.137677][T15362] cpu_up+0x1d2/0x220 [ 376.142170][T15362] cpuhp_bringup_mask+0xb2/0x1a0 [ 376.147620][T15362] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 376.153964][T15362] bringup_nonboot_cpus+0x17/0x30 [ 376.159497][T15362] smp_init+0x32/0x110 [ 376.164070][T15362] kernel_init_freeable+0x316/0x4b0 [ 376.170070][T15362] kernel_init+0x1d/0x1d0 [ 376.174926][T15362] ret_from_fork+0x3f9/0x770 [ 376.180056][T15362] ret_from_fork_asm+0x1a/0x30 [ 376.185344][T15362] [ 376.185344][T15362] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 376.193075][T15362] lock_acquire+0x120/0x360 [ 376.198103][T15362] cpus_read_lock+0x42/0x160 [ 376.203210][T15362] static_key_slow_inc+0x12/0x30 [ 376.208657][T15362] nbd_genl_reconfigure+0xf24/0x1870 [ 376.214456][T15362] genl_family_rcv_msg_doit+0x212/0x300 [ 376.220506][T15362] genl_rcv_msg+0x60e/0x790 [ 376.225528][T15362] netlink_rcv_skb+0x208/0x470 [ 376.230801][T15362] genl_rcv+0x28/0x40 [ 376.235291][T15362] netlink_unicast+0x82f/0x9e0 [ 376.240820][T15362] netlink_sendmsg+0x805/0xb30 [ 376.246086][T15362] __sock_sendmsg+0x219/0x270 [ 376.251266][T15362] ____sys_sendmsg+0x505/0x830 [ 376.256536][T15362] ___sys_sendmsg+0x21f/0x2a0 [ 376.261718][T15362] __x64_sys_sendmsg+0x19b/0x260 [ 376.267163][T15362] do_syscall_64+0xfa/0x3b0 [ 376.272171][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.278743][T15362] [ 376.278743][T15362] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 376.286373][T15362] lock_acquire+0x120/0x360 [ 376.291396][T15362] __mutex_lock+0x187/0x1350 [ 376.296506][T15362] nbd_queue_rq+0x257/0xf10 [ 376.301659][T15362] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 376.307731][T15362] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 376.314579][T15362] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 376.321066][T15362] blk_mq_run_hw_queue+0x348/0x4f0 [ 376.326683][T15362] blk_mq_dispatch_list+0xd0c/0xe00 [ 376.332387][T15362] blk_mq_flush_plug_list+0x469/0x550 [ 376.338277][T15362] __blk_flush_plug+0x3d3/0x4b0 [ 376.343654][T15362] __submit_bio+0x2d3/0x5a0 [ 376.348661][T15362] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 376.354802][T15362] block_read_full_folio+0x599/0x830 [ 376.360627][T15362] filemap_read_folio+0x114/0x380 [ 376.366155][T15362] do_read_cache_folio+0x350/0x590 [ 376.371769][T15362] read_part_sector+0xb6/0x2b0 [ 376.377038][T15362] adfspart_check_ICS+0xa4/0xa50 [ 376.382483][T15362] bdev_disk_changed+0x75f/0x14b0 [ 376.388014][T15362] blkdev_get_whole+0x380/0x510 [ 376.393373][T15362] bdev_open+0x31e/0xd30 [ 376.398162][T15362] blkdev_open+0x3a8/0x510 [ 376.403083][T15362] do_dentry_open+0x950/0x13f0 [ 376.408352][T15362] vfs_open+0x3b/0x340 [ 376.412924][T15362] path_openat+0x2ee5/0x3830 [ 376.418020][T15362] do_filp_open+0x1fa/0x410 [ 376.423028][T15362] do_sys_openat2+0x121/0x1c0 [ 376.428207][T15362] __x64_sys_openat+0x138/0x170 [ 376.433560][T15362] do_syscall_64+0xfa/0x3b0 [ 376.438573][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.444978][T15362] [ 376.444978][T15362] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 376.452186][T15362] lock_acquire+0x120/0x360 [ 376.457213][T15362] __mutex_lock+0x187/0x1350 [ 376.462317][T15362] nbd_queue_rq+0xc8/0xf10 [ 376.467243][T15362] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 376.473296][T15362] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 376.480219][T15362] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 376.486707][T15362] blk_mq_run_hw_queue+0x348/0x4f0 [ 376.492326][T15362] blk_mq_dispatch_list+0xd0c/0xe00 [ 376.498035][T15362] blk_mq_flush_plug_list+0x469/0x550 [ 376.503916][T15362] __blk_flush_plug+0x3d3/0x4b0 [ 376.509277][T15362] __submit_bio+0x2d3/0x5a0 [ 376.514284][T15362] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 376.520422][T15362] block_read_full_folio+0x599/0x830 [ 376.526231][T15362] filemap_read_folio+0x114/0x380 [ 376.531757][T15362] do_read_cache_folio+0x350/0x590 [ 376.537377][T15362] read_part_sector+0xb6/0x2b0 [ 376.542655][T15362] adfspart_check_ICS+0xa4/0xa50 [ 376.548121][T15362] bdev_disk_changed+0x75f/0x14b0 [ 376.553653][T15362] blkdev_get_whole+0x380/0x510 [ 376.559012][T15362] bdev_open+0x31e/0xd30 [ 376.563776][T15362] blkdev_open+0x3a8/0x510 [ 376.568954][T15362] do_dentry_open+0x950/0x13f0 [ 376.574222][T15362] vfs_open+0x3b/0x340 [ 376.578792][T15362] path_openat+0x2ee5/0x3830 [ 376.583888][T15362] do_filp_open+0x1fa/0x410 [ 376.588896][T15362] do_sys_openat2+0x121/0x1c0 [ 376.594075][T15362] __x64_sys_openat+0x138/0x170 [ 376.599437][T15362] do_syscall_64+0xfa/0x3b0 [ 376.604458][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.610859][T15362] [ 376.610859][T15362] -> #1 (set->srcu){.+.+}-{0:0}: [ 376.618078][T15362] lock_sync+0xba/0x160 [ 376.622750][T15362] __synchronize_srcu+0x96/0x3a0 [ 376.628201][T15362] elevator_switch+0x12b/0x640 [ 376.633565][T15362] elevator_change+0x2d4/0x450 [ 376.638833][T15362] elevator_set_default+0x186/0x260 [ 376.644541][T15362] blk_register_queue+0x34e/0x3f0 [ 376.650068][T15362] __add_disk+0x677/0xd50 [ 376.654912][T15362] add_disk_fwnode+0xfc/0x480 [ 376.660205][T15362] nbd_dev_add+0x717/0xae0 [ 376.665143][T15362] nbd_init+0x168/0x1f0 [ 376.669814][T15362] do_one_initcall+0x233/0x820 [ 376.675085][T15362] do_initcall_level+0x104/0x190 [ 376.680525][T15362] do_initcalls+0x59/0xa0 [ 376.685355][T15362] kernel_init_freeable+0x334/0x4b0 [ 376.691064][T15362] kernel_init+0x1d/0x1d0 [ 376.696174][T15362] ret_from_fork+0x3f9/0x770 [ 376.701278][T15362] ret_from_fork_asm+0x1a/0x30 [ 376.706570][T15362] [ 376.706570][T15362] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 376.714805][T15362] validate_chain+0xb9b/0x2140 [ 376.720078][T15362] __lock_acquire+0xab9/0xd20 [ 376.725359][T15362] lock_acquire+0x120/0x360 [ 376.730383][T15362] __mutex_lock+0x187/0x1350 [ 376.735496][T15362] elevator_change+0x19b/0x450 [ 376.740789][T15362] elevator_set_none+0x42/0xb0 [ 376.746088][T15362] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 376.752416][T15362] nbd_start_device+0x17f/0xb10 [ 376.757794][T15362] nbd_genl_connect+0x135b/0x18f0 [ 376.763325][T15362] genl_family_rcv_msg_doit+0x212/0x300 [ 376.769401][T15362] genl_rcv_msg+0x60e/0x790 [ 376.774405][T15362] netlink_rcv_skb+0x208/0x470 [ 376.779687][T15362] genl_rcv+0x28/0x40 [ 376.784190][T15362] netlink_unicast+0x82f/0x9e0 [ 376.789475][T15362] netlink_sendmsg+0x805/0xb30 [ 376.794755][T15362] __sock_sendmsg+0x219/0x270 [ 376.799957][T15362] ____sys_sendmsg+0x505/0x830 [ 376.805232][T15362] ___sys_sendmsg+0x21f/0x2a0 [ 376.810423][T15362] __x64_sys_sendmsg+0x19b/0x260 [ 376.815880][T15362] do_syscall_64+0xfa/0x3b0 [ 376.820897][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.827296][T15362] [ 376.827296][T15362] other info that might help us debug this: [ 376.827296][T15362] [ 376.837530][T15362] Chain exists of: [ 376.837530][T15362] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 376.837530][T15362] [ 376.851257][T15362] Possible unsafe locking scenario: [ 376.851257][T15362] [ 376.858950][T15362] CPU0 CPU1 [ 376.864382][T15362] ---- ---- [ 376.869728][T15362] lock(&q->q_usage_counter(io)#51); [ 376.875091][T15362] lock(fs_reclaim); [ 376.881599][T15362] lock(&q->q_usage_counter(io)#51); [ 376.889480][T15362] lock(&q->elevator_lock); [ 376.894055][T15362] [ 376.894055][T15362] *** DEADLOCK *** [ 376.894055][T15362] [ 376.902176][T15362] 6 locks held by syz.2.2786/15362: [ 376.907354][T15362] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.915551][T15362] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 376.924515][T15362] #2: ffff888024fb9188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 376.935908][T15362] #3: ffff888024fb90d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 376.947426][T15362] #4: ffff888143f2ec98 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 376.958181][T15362] #5: ffff888143f2ecd0 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 376.969062][T15362] [ 376.969062][T15362] stack backtrace: [ 376.974953][T15362] CPU: 0 UID: 0 PID: 15362 Comm: syz.2.2786 Not tainted syzkaller #0 PREEMPT(full) [ 376.974974][T15362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.974984][T15362] Call Trace: [ 376.974992][T15362] [ 376.975000][T15362] dump_stack_lvl+0x189/0x250 [ 376.975021][T15362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.975037][T15362] ? __pfx__printk+0x10/0x10 [ 376.975055][T15362] ? print_lock_name+0xde/0x100 [ 376.975072][T15362] print_circular_bug+0x2ee/0x310 [ 376.975089][T15362] check_noncircular+0x134/0x160 [ 376.975105][T15362] validate_chain+0xb9b/0x2140 [ 376.975126][T15362] __lock_acquire+0xab9/0xd20 [ 376.975145][T15362] ? elevator_change+0x19b/0x450 [ 376.975162][T15362] lock_acquire+0x120/0x360 [ 376.975179][T15362] ? elevator_change+0x19b/0x450 [ 376.975200][T15362] __mutex_lock+0x187/0x1350 [ 376.975219][T15362] ? elevator_change+0x19b/0x450 [ 376.975236][T15362] ? xa_find_after+0xae/0x430 [ 376.975252][T15362] ? xa_find_after+0x402/0x430 [ 376.975264][T15362] ? elevator_change+0x19b/0x450 [ 376.975280][T15362] ? xa_find_after+0xae/0x430 [ 376.975294][T15362] ? __pfx___mutex_lock+0x10/0x10 [ 376.975317][T15362] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 376.975340][T15362] elevator_change+0x19b/0x450 [ 376.975356][T15362] ? elevator_set_none+0x37/0xb0 [ 376.975375][T15362] elevator_set_none+0x42/0xb0 [ 376.975392][T15362] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 376.975412][T15362] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 376.975432][T15362] ? sysfs_add_file_mode_ns+0x259/0x300 [ 376.975453][T15362] nbd_start_device+0x17f/0xb10 [ 376.975475][T15362] ? device_create_file+0xf4/0x1c0 [ 376.975489][T15362] nbd_genl_connect+0x135b/0x18f0 [ 376.975509][T15362] ? __pfx_nbd_genl_connect+0x10/0x10 [ 376.975531][T15362] ? __nla_parse+0x40/0x60 [ 376.975551][T15362] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 376.975571][T15362] genl_family_rcv_msg_doit+0x212/0x300 [ 376.975589][T15362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.975609][T15362] ? stack_trace_save+0x9c/0xe0 [ 376.975633][T15362] genl_rcv_msg+0x60e/0x790 [ 376.975650][T15362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.975663][T15362] ? __pfx_nbd_genl_connect+0x10/0x10 [ 376.975685][T15362] netlink_rcv_skb+0x208/0x470 [ 376.975703][T15362] ? __lock_acquire+0xab9/0xd20 [ 376.975720][T15362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.975735][T15362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.975762][T15362] ? down_read+0x1ad/0x2e0 [ 376.975776][T15362] genl_rcv+0x28/0x40 [ 376.975789][T15362] netlink_unicast+0x82f/0x9e0 [ 376.975809][T15362] ? __pfx_netlink_unicast+0x10/0x10 [ 376.975825][T15362] ? netlink_sendmsg+0x642/0xb30 [ 376.975837][T15362] ? skb_put+0x11b/0x210 [ 376.975850][T15362] netlink_sendmsg+0x805/0xb30 [ 376.975865][T15362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.975879][T15362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.975892][T15362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.975906][T15362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.975918][T15362] __sock_sendmsg+0x219/0x270 [ 376.975935][T15362] ____sys_sendmsg+0x505/0x830 [ 376.975951][T15362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.975968][T15362] ? import_iovec+0x74/0xa0 [ 376.975983][T15362] ___sys_sendmsg+0x21f/0x2a0 [ 376.975997][T15362] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.976023][T15362] ? __fget_files+0x2a/0x420 [ 376.976040][T15362] ? __fget_files+0x3a0/0x420 [ 376.976061][T15362] __x64_sys_sendmsg+0x19b/0x260 [ 376.976075][T15362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.976093][T15362] ? rcu_is_watching+0x15/0xb0 [ 376.976107][T15362] ? do_syscall_64+0xbe/0x3b0 [ 376.976120][T15362] do_syscall_64+0xfa/0x3b0 [ 376.976132][T15362] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.976148][T15362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.976162][T15362] ? clear_bhb_loop+0x60/0xb0 [ 376.976176][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.976190][T15362] RIP: 0033:0x7f709558ebe9 [ 376.976204][T15362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.976216][T15362] RSP: 002b:00007f709648f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.976231][T15362] RAX: ffffffffffffffda RBX: 00007f70957c5fa0 RCX: 00007f709558ebe9 [ 376.976242][T15362] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 376.976251][T15362] RBP: 00007f7095611e19 R08: 0000000000000000 R09: 0000000000000000 [ 376.976260][T15362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.976268][T15362] R13: 00007f70957c6038 R14: 00007f70957c5fa0 R15: 00007ffed9702e48 [ 376.976283][T15362] [ 377.554964][T15362] nbd2: detected capacity change from 0 to 127 [ 377.562587][ T6021] block nbd2: Send control failed (result -32) [ 377.562739][ T5867] block nbd2: Receive control failed (result -32) [ 377.570675][ T6021] block nbd2: Request send failed, requeueing [ 377.582021][ T5864] block nbd2: Receive control failed (result -32) [ 377.582231][ T6021] block nbd2: Send control failed (result -32) [ 377.594706][ T6021] block nbd2: Request send failed, requeueing [ 377.601318][ T6021] block nbd2: Dead connection, failed to find a fallback [ 377.608540][ T56] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.617659][ T56] Buffer I/O error on dev nbd2, logical block 1, async page read [ 377.625434][ T56] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.634922][ T56] Buffer I/O error on dev nbd2, logical block 0, async page read [ 377.659125][ T6021] block nbd2: shutting down sockets [ 377.664448][ T6021] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.709166][ T6021] Buffer I/O error on dev nbd2, logical block 2, async page read [ 377.737320][ T6021] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.753254][ T6021] Buffer I/O error on dev nbd2, logical block 3, async page read [ 377.761378][ T6021] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.771256][ T6021] Buffer I/O error on dev nbd2, logical block 0, async page read [ 377.781452][ T6021] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.790552][ T6021] Buffer I/O error on dev nbd2, logical block 1, async page read [ 377.799162][ T6021] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.826241][ T6021] Buffer I/O error on dev nbd2, logical block 2, async page read [ 377.834217][ T6021] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.843684][ T6021] Buffer I/O error on dev nbd2, logical block 3, async page read [ 377.851667][ T6021] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.860824][ T6021] Buffer I/O error on dev nbd2, logical block 0, async page read [ 377.868964][ T6021] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.878280][ T6021] Buffer I/O error on dev nbd2, logical block 1, async page read [ 377.888415][ T6021] ldm_validate_partition_table(): Disk read failed. [ 377.896496][ T6021] Dev nbd2: unable to read RDB block 0 [ 377.905316][ T6021] nbd2: unable to read partition table [ 377.916016][ T6021] ldm_validate_partition_table(): Disk read failed. [ 377.938760][ T6021] Dev nbd2: unable to read RDB block 0 [ 377.945518][ T6021] nbd2: unable to read partition table [ 378.232909][ T8672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.245270][ T8672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 378.320916][ T8672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.332168][ T8672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 378.391413][ T8672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.401988][ T8672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 378.437470][ T8672] bond0: (slave netdevsim0): Releasing backup interface [ 378.445324][ T8672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.456283][ T8672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 378.523972][ T8672] veth0_to_bond: left allmulticast mode [ 378.530281][ T8672] veth0_to_bond: left promiscuous mode [ 378.535938][ T8672] bridge0: port 2(veth0_to_bond) entered disabled state [ 378.544434][ T8672] veth7: left allmulticast mode [ 378.550199][ T8672] veth7: left promiscuous mode [ 378.555124][ T8672] bridge0: port 1(veth7) entered disabled state [ 378.619742][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652938][ T8672] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 378.661213][ T8672] bond0 (unregistering): (slave geneve1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:41 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 378.916847][ T8672] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 378.926772][ T8672] bond0 (unregistering): Released all slaves [ 378.935427][ T8672] bond1 (unregistering): Released all slaves [ 378.945068][ T8672] bond2 (unregistering): Released all slaves [ 379.034799][ T8672] bond3 (unregistering): Released all slaves [ 379.117650][ T8672] bond4 (unregistering): Released all slaves [ 379.126862][ T8672] bond5 (unregistering): (slave bond6): Releasing backup interface [ 379.135388][ T8672] bond5 (unregistering): Released all slaves [ 379.224989][ T8672] bond6 (unregistering): Released all slaves [ 379.316803][ T8672] bond7 (unregistering): Released all slaves [ 379.399228][ T8672] bond8 (unregistering): Released all slaves [ 379.459175][ T8672] : left promiscuous mode [ 379.502901][ T8672] tipc: Disabling bearer [ 379.508572][ T8672] tipc: Disabling bearer [ 379.514574][ T8672] tipc: Left network mode [ 379.806472][ T8672] hsr_slave_0: left promiscuous mode [ 379.815032][ T8672] hsr_slave_1: left promiscuous mode [ 379.833421][ T8672] veth1_macvtap: left promiscuous mode [ 379.841144][ T8672] veth0_macvtap: left promiscuous mode [ 379.848613][ T8672] veth1_vlan: left promiscuous mode [ 379.853856][ T8672] veth0_vlan: left promiscuous mode [ 380.050565][ T8677] smc: removing ib device syz2 [ 380.408984][ T8672] IPVS: stop unused estimator thread 0... [ 380.791316][ T8672] veth0_to_bridge: left allmulticast mode [ 380.797375][ T8672] veth0_to_bridge: left promiscuous mode [ 380.803115][ T8672] bridge0: port 1(veth0_to_bridge) entered disabled state [ 380.830842][ T8672] ip6gretap0 (unregistering): left promiscuous mode [ 380.920119][ T8672] dvmrp0 (unregistering): left allmulticast mode [ 380.936920][ T8672] bond2 (unregistering): (slave geneve2): Releasing active interface [ 381.006430][ T8672] bond1 (unregistering): (slave bridge1): Releasing active interface [ 381.230443][ T8672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.240303][ T8672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.249710][ T8672] bond0 (unregistering): Released all slaves [ 381.260283][ T8672] bond1 (unregistering): Released all slaves [ 381.348375][ T8672] bond2 (unregistering): Released all slaves [ 381.432505][ T8672] bond3 (unregistering): Released all slaves [ 381.441201][ T8672] bond4 (unregistering): Released all slaves [ 381.502726][ T8672] tipc: Disabling bearer [ 381.508178][ T8672] tipc: Left network mode [ 381.708138][ T8672] batadv_slave_1: left promiscuous mode [ 381.716025][ T8672] hsr_slave_0: left promiscuous mode [ 381.721753][ T8672] hsr_slave_1: left promiscuous mode [ 381.727703][ T8672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.735197][ T8672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.744190][ T8672] pim6reg527 (unregistering): left allmulticast mode [ 384.377594][ T9144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.707250][ T5235] udevd[5235]: worker [6224] /devices/virtual/block/nbd1 timeout; kill it [ 384.716186][ T5235] udevd[5235]: seq 11575 '/devices/virtual/block/nbd1' killed