last executing test programs: 2.504539006s ago: executing program 2 (id=7798): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000080374000614000600697036677265300000000000000000000800070000000000"], 0x30}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)=0x730) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x4000000) 2.280922231s ago: executing program 0 (id=7805): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001200"], 0x1c}], 0x1}, 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff4a233ce0a170000c030000c005000000f6ffffff49fd0000"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b0009", 0x29}], 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r4, 0x402) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x3d, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000680)=""/86, 0x57}], 0x2}, 0x10000) (async) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200809078722a0ca410590700001e020000"], 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r8, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r8, 0x1}, 0x8) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) 2.024003774s ago: executing program 4 (id=7807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x4, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2004c004}, 0x20000804) 1.99153608s ago: executing program 0 (id=7808): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x44814}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002600090122bd20b6b2a515886679000008000300470000"], 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r4) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x800) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0x97, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x48}}, 0x0) getsockopt$sock_int(r3, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r8 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000063015a0000000005eb62f800"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYRESOCT=r12, @ANYRES32=r12, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 1.897461392s ago: executing program 2 (id=7810): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r2 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) (async) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x40, 0x0, 0xb, 0x6}, {0x5, 0x8, 0x2, 0xffffffff}, {0x66c, 0x8, 0xc, 0x7}]}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000440)={r1, &(0x7f0000000040)='@@-\x00', 0x2, &(0x7f0000000240)={@_ha_fsid={[0x4, 0x8]}, {0x0, 0x1, 0x8, 0x3}}, 0x2f5, &(0x7f00000003c0), &(0x7f0000000400)}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) 1.809451942s ago: executing program 4 (id=7811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r3, &(0x7f00000001c0)="6d0e7ee42ba82d84b06328bbcbd762c5b4afbf07cc3b10dd6a3c5bdf839d08eedae4546ede7bfb739c6c9e7b3e2ca2b41b204628a4aaf551023af7545dee75e7bc93c257fc3aee32bae54ef8740597", 0x4f, 0x0, &(0x7f0000000240)={0x11, 0x1c7d749a61b8cd98, r4, 0x1, 0x2, 0x6, @remote}, 0x14) (async) sendto$packet(r3, &(0x7f00000001c0)="6d0e7ee42ba82d84b06328bbcbd762c5b4afbf07cc3b10dd6a3c5bdf839d08eedae4546ede7bfb739c6c9e7b3e2ca2b41b204628a4aaf551023af7545dee75e7bc93c257fc3aee32bae54ef8740597", 0x4f, 0x0, &(0x7f0000000240)={0x11, 0x1c7d749a61b8cd98, r4, 0x1, 0x2, 0x6, @remote}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="659b3dfadf0103b9ee5a113c6ebf7421af49"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {0xf, 0x2}, {0x15, 0xfff1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008084) 1.653791138s ago: executing program 0 (id=7812): syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c08004721002400670004030800000003000217059078ffffffff"], 0x0) 1.653402095s ago: executing program 2 (id=7813): socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'pim6reg1\x00', @ifru_names='bond_slave_1\x00'}) 1.577311061s ago: executing program 1 (id=7814): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.507974747s ago: executing program 0 (id=7815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket(0x10, 0x3, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r4, @ANYRES32=r1], 0xfdef) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 1.433212331s ago: executing program 2 (id=7817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b4", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x44044091) 1.240454678s ago: executing program 3 (id=7818): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.233323469s ago: executing program 4 (id=7819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x14}}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@remote, @dev={0xac, 0x14, 0x14, 0x12}}, 0x8) 1.219980806s ago: executing program 2 (id=7820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200001}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TIPC_NL_PUBL_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r5, 0xd, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x4050004) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r5, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "4da851411803c6befc19be6b58"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38) 1.149361391s ago: executing program 1 (id=7821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f00000600ad"], 0x1c}}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) 1.089792773s ago: executing program 3 (id=7822): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25ffdbfe, {0x0, 0x0, 0x0, r3, 0x0, 0x1a001}}, 0x20}}, 0xc004) 1.056754177s ago: executing program 0 (id=7823): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) (async) shutdown(r0, 0x1) (async) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @sack_perm], 0x6) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) 1.055132555s ago: executing program 2 (id=7824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x70bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x3, 0x9, {{0x1d, 0x4, 0x1, 0xb, 0x74, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x2f, [@empty]}, @generic={0x44, 0x9, "a3d603e5db19bc"}, @timestamp_addr={0x44, 0xc, 0xcb, 0x1, 0x9, [{@local, 0x8}]}, @cipso={0x86, 0x3c, 0x3, [{0x0, 0x4, 'Lk'}, {0x0, 0x5, "68a169"}, {0x7, 0x8, "aa81c2ec5eb1"}, {0x2, 0x4, "22c6"}, {0x0, 0xe, "218cfbd4f45e1b3eefc00f32"}, {0x6, 0x5, "5c9efd"}, {0x1, 0xe, "f4a0363fac381cfd5aec1658"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r8 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000040)={0x80, {{0x2, 0x4e23, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x7, 0x0, 0x3ff, {{0x12, 0x4, 0x1, 0x39, 0x48, 0x66, 0x0, 0x4, 0x4, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0xa, [{@loopback, 0x3ff}, {@private=0xa010101, 0x8}]}, @ssrr={0x89, 0x17, 0x90, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102]}, @generic={0x82, 0x7, "a0bb91e1fb"}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@updsa={0x134, 0x1a, 0x200, 0x70bd2c, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x11, r9, r10}, {@in6=@mcast1, 0x4d3, 0x6c}, @in=@multicast2, {0x8000000000000000, 0x1, 0xfffffffffffffffe, 0x1, 0x1000, 0x5, 0x9, 0x9}, {0x8, 0xffffffffffffffff, 0xca2, 0xe055}, {0x8000, 0x7ff, 0x8}, 0x70bd2b, 0x3506, 0xa, 0x1, 0x7, 0x10}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x4d6}, 0x2, @in=@local, 0x34ff, 0x3, 0x0, 0x6, 0x80000000, 0x7, 0x200}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40001}, 0x40020) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x2, 0x4e21, 0xce, 0x0, 0x80, 0x0, 0x2b, r7, r10}, {0x40, 0xffffffff, 0xe, 0x1, 0x35, 0x98, 0x7, 0x100}, {0x53bd, 0x10000, 0x3, 0x5764}, 0x80, 0x6e6bbf, 0x0, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x3501, 0x0, 0x2, 0x8, 0xdb3, 0x7, 0x800}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) 964.277967ms ago: executing program 4 (id=7825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 962.622204ms ago: executing program 1 (id=7826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x100, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfaf}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x126c8e02}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdfa3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x893f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x8000001) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010841000000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000014002b80080020000300000008001100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 932.596858ms ago: executing program 3 (id=7827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r1 = accept$alg(r0, 0x0, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) (rerun: 32) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2}, 0x18) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb92", 0x6a}], 0x5}], 0x1, 0x4814) (async) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000680)=""/246, 0xf6}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_msg}, 0x94) 835.508931ms ago: executing program 0 (id=7828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r2, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ef, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0xb2a5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 668.87053ms ago: executing program 1 (id=7829): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 547.185542ms ago: executing program 4 (id=7830): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@private=0xa010100, @multicast2, r1}, 0xc) sendto$llc(0xffffffffffffffff, &(0x7f0000000100)="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", 0x1000, 0x50, &(0x7f0000001100)={0x1a, 0x30b, 0x9, 0xd, 0x5, 0x8, @random="e8a60617827b"}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002680)={{r0, &(0x7f0000001140)=')}\'\x00', 0x905000, &(0x7f0000001180)={@align, {0x0, 0xfff, 0x9}}, 0x6, &(0x7f00000011c0)={@_ha_fsid}, &(0x7f0000001200)=0x6}, 0x5, &(0x7f00000025c0)=[{0x3, 0x8772, &(0x7f0000001240)='/$&(/^*%\x00', &(0x7f0000001280)="c674b8b08d56536d8eb7f74d5782a1569a41c76d6e78919658743c82330445be2d0bd0527302ebbb5ad8991d7b2ac84e721c5adaead548b484454d2868eae3fa83217adbd619bd01f6a463e7aeb9229c99a65ea7918b1d0e8b9db617d2965daa", 0x60}, {0x3, 0x9, &(0x7f0000001300)='.\x00', &(0x7f0000001340)="7fa0b1504b50fd8baa5d41cba948a2573e46a6012a375db481f41e1c413ee98bb2fc22f840e15adfcd180d1d61a8471a4a233d8d222bb36fea96dbaef83344d47bc54409646f95ee18b34bf0845e0d5bad1ed8de67cfcdf72208df8b6ebf918a7c00af04c89eea544f80e1adc36ac87e6f71d5cc71040908cc355bc0b7acfbf6d74e852be358c8a58de8f4bd017365aa7aa9ae5419df0992cca6cd1646abadce6e0046", 0xa3, 0x12}, {0x3, 0x6, &(0x7f0000001400)='!.:-\x00', &(0x7f0000001440)="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", 0x1000}, {0x1, 0x4, &(0x7f0000002440)='[\x00', &(0x7f0000002480)="e5231420283aacc546f243a95fbab21dd3262461e97800f8604fb9b679a05492d8d051cee03ef7c4337f87aec3ce0f36e84b92f8f7c0384dbde06cd1b4d46ed0ca44458baa1b4ac29371f056af1ecf600160d160636b5b4df335fbf6bbbbdb07de40b64771cd02b5ada580f8d9205b9ff96e64726ca5defe94011c5cd212fc63b9572e17770507390cfce5ab2513c6876ad026afd47853594d", 0x99, 0x12}, {0x2, 0xd, &(0x7f0000002540)='*,+%\x00', &(0x7f0000002580), 0x0, 0x2}]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002780)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000002900)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000028c0)={&(0x7f00000027c0)={0xc4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004}, 0x5) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000002940)) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000002980)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000029c0)={{{@in=@local, @in6=@mcast1, 0x4e23, 0x400, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x16, 0x0, 0xee00}, {0x4, 0x2, 0x7f, 0x40, 0x80000000, 0x89, 0x3, 0x5}, {0x7e, 0x3, 0x7fff, 0xfffffffffffffff5}, 0x80000000, 0x6e6bbb, 0x2, 0x1, 0x3, 0x2}, {{@in6=@remote, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x3500, 0x2, 0x0, 0x0, 0x5, 0x81}}, 0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ac0)=@base={0x15, 0x5, 0x8, 0x2, 0x10, r2, 0x5, '\x00', r1, r2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x3, 0x13, &(0x7f0000002b40)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}], &(0x7f0000002c00)='syzkaller\x00', 0x10, 0x97, &(0x7f0000002c40)=""/151, 0x41100, 0x35, '\x00', r1, @fallback=0xe, r2, 0x8, &(0x7f0000002d00)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000002d40)=[r2], &(0x7f0000002d80)=[{0x2, 0x1, 0x5, 0xb}, {0x5, 0x1, 0x1, 0x6}, {0x2, 0x3, 0x0, 0xb}, {0x3, 0x1, 0x7, 0x5}, {0x4, 0x2, 0x6, 0x7}], 0x10, 0x2978}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000002ec0)={0x3, 0xd5, "319b353dede9cfdcc91bc7c4de4d0bf8918e094c4d9c6f21988844dd7f47899151f53b1e696991c2c06539d861168819ff12587310e310399007d3bccddf36a01a21f0e77bea42e1b402171338922a594479ba5b09d5c8251d136476baa5e1e8f9f77f98bdbf2182852555fdf9aa42ecf7631518223b24bc87f7c14f7fc37f4d7f82d6cbd7eefe3007886822344826b454d6ef163c0334d1561be0a697a646d3bc0737ca5b79be9a94f03819d56506e66199a2e3149c2dd5edd08e7043d4c9af39b8bbabaf8b310bbbf46670262ebbbb3960f294b0"}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000002fc0)={0x1, 0x4, 0x6}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004100)={r5, &(0x7f0000003000)="85f8adb94ad126facf7d96709db11377e0706de254c8313f8a38fcaecda2120dea01c65e130e9d6779257db713c6dbf0aa1c33d392b603a73d80798cc0a280cc958edc2ef743747033b09a654f8ab215843f71e41008816847b5d81d2fa3cbf5f80d7677ba8f02c61638229b5eb4b5f4c417ac96de57c786463f2acf1d98889fbc9fd6ef39a19923e642cc6efb4bfd5d2884a6162cd670ac1af9e56f279f1a6f0c2fc845b079af4845c1e776b81e8e9e97679612f947ec4267b546532a946e6c3d197f3310112c08233f71d5fe6e5c", &(0x7f0000003100)=""/4096}, 0x20) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004180), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000041c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000006600)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x802200}, 0xc, &(0x7f00000065c0)={&(0x7f0000004200)={0x23a8, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*,+%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*,+%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*,+%\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'\\)-@*,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+%!-:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "48070130d8e1d8e6d0436819d8577abb13de435d2460f6ed66451f42aa9a727ed3d62308c2fed078b03438392549223ce07bdb18a4af866a11285974f755100d7c33f5e46f239f87827b143518472d74cc058a53267630"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "1021c426a699635d67315bb3952bc12c99ac0fcb5d9c3f8a2cb288fd33ed1c3a54554e1e7607e8710a4401ab196194d65c6b027ad1c199380cd3850e4d2a50bf028ac13ee135ee3d9978fa6b7da47a8ee0a12a1bb56c7cccd343e731639bba23cd794370b5a01917267f94886f5fc11f30a289fc"}, @ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "04ce4b62ed5a5377f9cba87512"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "c5a60e46bf766a064c8af0e4abdde0e9e7ef8076fae637ef13ff7ebdf1a99dd156cccb9fb8c6ebb3020aa054ddd67558b86ccf93785ac1178687042aa8774d34f7b98f1663115b54ed0fdca57ace3180372adcc632778351"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x23a8}, 0x1, 0x0, 0x0, 0x24000000}, 0xc040) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000006700)={&(0x7f0000006640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x20, 0x3fa, 0x1, 0x70bd25, 0x25dfdbfc, {0x1, 0x7ee2a14ab2727d96, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x11) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000006740)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}}, 0x3, 0x6, 0x695f, 0x3, 0x4}, &(0x7f0000006800)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000006840)=@assoc_value={r9, 0x7}, &(0x7f0000006880)=0x8) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000006b40)={&(0x7f00000068c0), 0xc, &(0x7f0000006b00)={&(0x7f0000006900)={0x1f8, 0x1, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}}}]}, @CTA_TUPLE_REPLY={0xc4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x5}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x8}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x6c}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0xff}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x10}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1, 0x81}}]}}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000006b80)=0x102102, 0x4) sendto$inet6(r2, &(0x7f0000006bc0)="7b45dc116a7595a17c0c830cca0f1f0c8ee6e1bb661636c98ef77accb702fdd6674f5130966d5d0603e0eeacefc2cd4533609f9ae9651fe353896984098c7cd25186062036ea1d2ab3cf63e2c719ff3e961bbaf9ffe702eaa0e6167dfa3fc00a5389fe02c332c46fa3272cbf54db99fbafaa86f686c08e5091de758817811fd7598632de5ec1", 0x86, 0x4000, 0x0, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000006c80), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000006cc0)) connect$can_j1939(r2, &(0x7f0000006d00)={0x1d, r3, 0x2, {0x1, 0xff, 0x2}, 0xfd}, 0x18) 539.062714ms ago: executing program 1 (id=7831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000206197900000000000000000000000005000100070000000900020073797a30000000001400078005001500fc00000008001240000000000d000300686173683a6e65740000000005000500020000000500040000000000050001000700000016000300686173683a6e65742c706f72742c6e6574"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x130, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4e}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x3, 0x4, 0x0, {0xffffffff, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x8, 0x7e}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x2, 0x3, 0x0, {0x8000, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x1}, 0x8, 0xa0, 0x6}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac09, 0xfac03, 0xfac13]}, @NL80211_ATTR_PMK={0x44, 0xfe, "d5cfe136b683b021ea06129fffe592c30231f922d6b707e1ba49c8cc5090fb0e6e009699d3f376292279ff69ad8eaf76e33a3da522d58dbf2d1c2c52c8bd66f3"}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac05, 0xfac01, 0xfac03, 0xfac12]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x3c, 0xfe, "b3f8a95f613f646745447bf1ddffe8b004c574fcd2d77b762c43a05eb703e8ea54a04e4aa1b7e095c48854696924b7635142208b88a566dc"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}]]}, 0x130}, 0x1, 0x0, 0x0, 0x2000800}, 0x5) 522.312761ms ago: executing program 3 (id=7832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, &(0x7f00000000c0)=""/205, 0xcd, 0x40000001, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 396.347281ms ago: executing program 1 (id=7833): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x19}}, 0x14}}, 0x80) r4 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001340)=ANY=[@ANYBLOB='\b'], 0xffeb}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = epoll_create1(0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0xe4ee7000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001004c9f504a0adcd723994a5166d78f1e0800"], 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4020) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000e649b467fca5780d0a01010000000000000000010000040900010073797a01000000000900020073797a32000000000800044000000001"], 0x34}, 0x1, 0x0, 0x0, 0x44000010}, 0x4008081) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f728028de700"}) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c000180080001407f0000010c000280080001407ffd000108000a4000000001"], 0x4c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) socket$inet_sctp(0x2, 0x1, 0x84) bind$nfc_llcp(r1, &(0x7f0000000440)={0x27, r12, 0xffffffffffffffff, 0x1, 0x8, 0x8, "9be0d4fdc085c6d91cdae5fa9f2629c809fdb8c8fc5922a1768bae8ee287989853f7ecfc413ef4be7aaf4b1147e3da198b32626fc8877e6c03647ab2965e18", 0x2d}, 0x60) close(r0) 280.653133ms ago: executing program 3 (id=7834): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="9e81f14b18cfc90ab9b4f814316f92a68fb6fadd81edf4bf904fcfdb0732126c15e34ce40e9ba2332b057ff8198ae87bd27aedc7aed748d2e32bfab3e6be499c7d5e0b1e13a0e5efcf7c619fba276e7c7ad94fff9d83c346878cea994938522676d7a8981b5e1b62cf7c05ddac29d6683de74d12d1c713c36ad449476a565d5d84545dee7bd58bfc1c17776d82adbd39faf88de2c72a3ad053e6f4090d9e5b2fc7bbc511fcdccdb0d8b00fa30977e959676838c5f0c05446710346680eda21e36df6944d5cafc40777505cf112ff198875bf95758ec031e55105e0765e759b5d2277b2"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f00000023c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x4044804) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000031c989442d87ac2e52e2450001000800000000000000050000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094) r11 = getpid() sendmsg$unix(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x1, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r6, r6], &(0x7f0000000680)=[{0x4, 0x4, 0x3, 0xa}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r13, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x4d, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xda, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24000080}, 0x8001) 186.406906ms ago: executing program 3 (id=7835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=7836): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f0000000080)='#{][\x00', 0x1, &(0x7f0000000100)={@_ha_fsid={[0x4, 0x3]}, {0xa, 0x0, 0x80000000, 0x3}}, 0x3eea, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x6}, {[0x1, 0x7ff, 0x5, 0x1fffe]}, 0x9a, 0x34, &(0x7f0000000200)=""/52}) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3}, 0x20) ppoll(&(0x7f00000004c0)=[{r0, 0x5120}, {r1, 0x10}, {r0}, {r2, 0x1004}, {r0, 0x4000}, {r0, 0x404b}, {r0, 0x4}], 0x7, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000600)={[0x9]}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@empty, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in=@loopback, 0x4d4, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0xfffffffffffffffc, 0x0, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd01, 0x3500, 0x2, 0x4, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010100}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x0, @in6=@local}}]}, 0x170}}, 0x24008800) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 700.295787][T28273] veth0_vlan: entered promiscuous mode [ 700.328563][T28273] veth1_vlan: entered promiscuous mode [ 700.406302][T28781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6074'. [ 700.528177][T28781] bond7: Invalid ad_actor_system MAC address. [ 700.558182][T28781] bond7: option ad_actor_system: invalid value (1) [ 700.579644][T28781] bond7 (unregistering): Released all slaves [ 700.660722][T28273] veth0_macvtap: entered promiscuous mode [ 700.692785][ T8459] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.715900][ T8459] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.767150][T28273] veth1_macvtap: entered promiscuous mode [ 700.821130][T28273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.867973][T28273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.916961][T28793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6076'. [ 701.044279][ T8459] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.090365][ T8459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.164623][T17071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.189987][T17071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.230427][ T8459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.242740][ T8456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.256622][ T8459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.310868][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.321297][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.580589][T28822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6083'. [ 701.590024][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 702.178953][T28847] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 702.241722][T28847] sit1: left promiscuous mode [ 702.466159][T28863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.499975][T28864] syzkaller0: entered promiscuous mode [ 702.513517][T28864] syzkaller0: entered allmulticast mode [ 702.639374][T28869] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 702.969773][T28884] validate_nla: 1 callbacks suppressed [ 702.969793][T28884] netlink: 'syz.1.6107': attribute type 1 has an invalid length. [ 703.018486][T28886] netlink: 'syz.2.6108': attribute type 3 has an invalid length. [ 703.038983][T28883] gretap1: entered promiscuous mode [ 703.057878][T28883] gretap1: entered allmulticast mode [ 703.299462][T28887] 8021q: adding VLAN 0 to HW filter on device bond14 [ 703.344834][T28887] bond0: (slave bond14): making interface the new active one [ 703.384870][T28887] bond0: (slave bond14): Enslaving as an active interface with an up link [ 703.436919][T28889] bond0: (slave gretap3): Enslaving as a backup interface with an up link [ 703.457892][T28896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.785555][T28931] tipc: Enabling of bearer rejected, failed to enable media [ 703.834693][T28931] __nla_validate_parse: 10 callbacks suppressed [ 703.834714][T28931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6120'. [ 703.930295][T28931] bond15: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 703.941861][T28941] netlink: 'syz.4.6124': attribute type 2 has an invalid length. [ 703.958339][T28931] bond15 (unregistering): Released all slaves [ 704.052278][T28948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6126'. [ 704.090826][T28948] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6126'. [ 704.131910][T28948] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6126'. [ 704.225818][T28954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6128'. [ 704.354678][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6128'. [ 704.417505][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.427787][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.456127][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.477622][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.487214][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.721562][T28976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.789465][T28980] vlan2: entered promiscuous mode [ 704.816805][T28980] bridge0: entered promiscuous mode [ 704.836033][T28980] vlan2: entered allmulticast mode [ 704.844149][T28980] bridge0: entered allmulticast mode [ 705.489275][T28970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.831185][ T8456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.039512][ T8456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.197303][T29033] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 706.458664][ T8456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.559628][T28961] C speed is unknown, defaulting to 1000 [ 706.594191][T19394] Bluetooth: hci0: command tx timeout [ 706.868259][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6145'. [ 706.911751][T29059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 707.190671][T29072] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6150'. [ 707.216877][T29072] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6150'. [ 707.246311][T29072] netlink: 'syz.4.6150': attribute type 5 has an invalid length. [ 707.298138][T29072] netlink: 'syz.4.6150': attribute type 6 has an invalid length. [ 707.318843][T29072] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6150'. [ 707.389948][T29077] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 707.521538][T28961] lo speed is unknown, defaulting to 1000 [ 707.601712][T29082] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 707.739808][ T8456] bridge_slave_1: left allmulticast mode [ 707.762532][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.799006][ T8456] bridge_slave_0: left allmulticast mode [ 707.806015][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.958824][T29099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.567889][ T8456] bond3 (unregistering): (slave ipip0): Releasing backup interface [ 708.644916][ T8456] bond2 (unregistering): (slave geneve3): Releasing active interface [ 708.673292][T19394] Bluetooth: hci0: command tx timeout [ 708.823821][ T8456] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 708.918142][ T8456] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 708.935290][ T8456] bridge5 (unregistering): left promiscuous mode [ 708.979338][ T8456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.013416][ T8456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.035995][ T8456] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 709.055571][ T8456] bond0 (unregistering): Released all slaves [ 709.076943][ T8456] bond1 (unregistering): (slave veth3): Releasing active interface [ 709.094776][ T8456] bond1 (unregistering): Released all slaves [ 709.149086][ T8456] bond2 (unregistering): Released all slaves [ 709.181167][ T8456] bond3 (unregistering): Released all slaves [ 709.259807][ T8456] bond4 (unregistering): Released all slaves [ 709.299743][ T8456] bond5 (unregistering): Released all slaves [ 709.326066][ T8456] bond6 (unregistering): Released all slaves [ 709.515106][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 709.816982][ T8456] tipc: Disabling bearer [ 709.844854][ T8456] tipc: Left network mode [ 710.269894][T29147] __nla_validate_parse: 8 callbacks suppressed [ 710.269916][T29147] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6169'. [ 710.335899][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 710.378594][T29159] syzkaller1: entered allmulticast mode [ 710.441320][T29163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6167'. [ 710.496106][T29159] tap0: tun_chr_ioctl cmd 1074025676 [ 710.501723][T29159] tap0: owner set to 0 [ 710.763442][T19394] Bluetooth: hci0: command tx timeout [ 710.787198][T29105] syz.4.6158 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 710.788757][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'. [ 710.828743][T29105] CPU: 1 UID: 0 PID: 29105 Comm: syz.4.6158 Not tainted syzkaller #0 PREEMPT(full) [ 710.828773][T29105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.828787][T29105] Call Trace: [ 710.828796][T29105] [ 710.828806][T29105] dump_stack_lvl+0xe8/0x150 [ 710.828846][T29105] dump_header+0xd3/0x4b0 [ 710.828922][T29105] oom_kill_process+0x3ab/0x970 [ 710.828964][T29105] out_of_memory+0x1064/0x1480 [ 710.828987][T29105] ? try_charge_memcg+0xbca/0x1590 [ 710.829034][T29105] ? __pfx_out_of_memory+0x10/0x10 [ 710.829055][T29105] ? do_raw_spin_unlock+0xf5/0x210 [ 710.829106][T29105] try_charge_memcg+0xc74/0x1590 [ 710.829158][T29105] ? __pfx_try_charge_memcg+0x10/0x10 [ 710.829189][T29105] ? percpu_ref_tryget+0x15/0x180 [ 710.829247][T29105] ? charge_memcg+0x20/0x2b0 [ 710.829284][T29105] charge_memcg+0x19c/0x2b0 [ 710.829317][T29105] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 710.829349][T29105] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 710.829386][T29105] swap_cache_alloc_folio+0x4de/0x990 [ 710.829433][T29105] swap_cache_read_folio+0x44/0x120 [ 710.829463][T29105] swap_cluster_readahead+0x3a0/0x640 [ 710.829497][T29105] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 710.829539][T29105] ? get_vma_policy+0x27b/0x3c0 [ 710.829586][T29105] swapin_readahead+0x19a/0xc10 [ 710.829617][T29105] ? swap_table_get+0x1e/0x260 [ 710.829643][T29105] ? swap_table_get+0x1e/0x260 [ 710.829669][T29105] ? __pfx_swapin_readahead+0x10/0x10 [ 710.829698][T29105] ? swap_table_get+0x1e/0x260 [ 710.829720][T29105] ? swap_table_get+0x1e/0x260 [ 710.829739][T29105] ? swap_table_get+0x1e/0x260 [ 710.829767][T29105] ? swap_table_get+0x216/0x260 [ 710.829794][T29105] ? swap_cache_get_folio+0x2e7/0x2f0 [ 710.829828][T29105] do_swap_page+0x455/0x5060 [ 710.829877][T29105] ? __pte_offset_map+0x29/0x240 [ 710.829911][T29105] ? __lock_acquire+0x683/0x2cf0 [ 710.829943][T29105] ? do_swap_page+0x124/0x5060 [ 710.829968][T29105] ? __pfx_do_swap_page+0x10/0x10 [ 710.829990][T29105] ? __pte_offset_map+0x1ae/0x240 [ 710.830020][T29105] ? pte_offset_map_rw_nolock+0xea/0x160 [ 710.830051][T29105] handle_mm_fault+0x124c/0x3080 [ 710.830094][T29105] ? handle_mm_fault+0xec/0x3080 [ 710.830132][T29105] ? __pfx_handle_mm_fault+0x10/0x10 [ 710.830155][T29105] ? lock_vma_under_rcu+0x45a/0x500 [ 710.830199][T29105] ? task_work_run+0x21f/0x270 [ 710.830249][T29105] do_user_addr_fault+0xa4d/0x1340 [ 710.830304][T29105] ? trace_page_fault_user+0x84/0x1e0 [ 710.830342][T29105] exc_page_fault+0x6a/0xc0 [ 710.830433][T29105] asm_exc_page_fault+0x26/0x30 [ 710.830455][T29105] RIP: 0033:0x7f74c379e021 [ 710.830478][T29105] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 710.830498][T29105] RSP: 002b:00007ffd9346df88 EFLAGS: 00010217 [ 710.830518][T29105] RAX: 0000000000000000 RBX: 00007f74c3a27da0 RCX: 00007f74c379e019 [ 710.830534][T29105] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 710.830547][T29105] RBP: 00007f74c3a27da0 R08: 0000000000000006 R09: 0000000000000000 [ 710.830570][T29105] R10: 00007f74c3a27cb0 R11: 0000000000000246 R12: 00000000000ad0f2 [ 710.830585][T29105] R13: 00007f74c3a2618c R14: 00000000000aceab R15: 00007f74c3a26180 [ 710.830624][T29105] [ 711.206462][T29105] memory: usage 307200kB, limit 307200kB, failcnt 640 [ 711.213919][T29105] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 711.222492][T29105] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 711.230588][T29105] Memory cgroup stats for /syz4: [ 711.234376][T29105] cache 4096 [ 711.243927][T29105] rss 0 [ 711.246820][T29105] rss_huge 0 [ 711.250083][T29105] shmem 0 [ 711.253740][T29105] mapped_file 0 [ 711.257259][T29105] dirty 0 [ 711.260225][T29105] writeback 0 [ 711.264225][T29105] workingset_refault_anon 10 [ 711.270648][T29105] workingset_refault_file 79 [ 711.276278][T29105] swap 184320 [ 711.279611][T29105] swapcached 253952 [ 711.284140][T29105] pgpgin 87644 [ 711.287594][T29105] pgpgout 87636 [ 711.291082][T29105] pgfault 193012 [ 711.295420][T29105] pgmajfault 9 [ 711.298833][T29105] inactive_anon 28672 [ 711.303579][T29105] active_anon 0 [ 711.307105][T29105] inactive_file 0 [ 711.310771][T29105] active_file 4096 [ 711.315730][T29105] unevictable 0 [ 711.319230][T29105] hierarchical_memory_limit 314572800 [ 711.325578][T29105] hierarchical_memsw_limit 9223372036854771712 [ 711.333354][T29105] total_cache 4096 [ 711.337123][T29105] total_rss 0 [ 711.340439][T29105] total_rss_huge 0 [ 711.344953][T29105] total_shmem 0 [ 711.348474][T29105] total_mapped_file 0 [ 711.353241][T29105] total_dirty 0 [ 711.356737][T29105] total_writeback 0 [ 711.360572][T29105] total_workingset_refault_anon 10 [ 711.366435][T29105] total_workingset_refault_file 79 [ 711.371595][T29105] total_swap 184320 [ 711.373177][T29171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'. [ 711.377227][T29105] total_swapcached 253952 [ 711.389471][T29105] total_pgpgin 87654 [ 711.394162][T29105] total_pgpgout 87646 [ 711.398182][T29105] total_pgfault 193032 [ 711.402777][T29105] total_pgmajfault 9 [ 711.406708][T29105] total_inactive_anon 28672 [ 711.411247][T29105] total_active_anon 0 [ 711.415920][T29105] total_inactive_file 0 [ 711.420121][T29105] total_active_file 4096 [ 711.425131][T29105] total_unevictable 0 [ 711.429155][T29105] anon_cost 0 [ 711.433204][T29105] file_cost 0 [ 711.437298][T29105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6158,pid=29105,uid=0 [ 711.465244][T29105] Memory cgroup out of memory: Killed process 29105 (syz.4.6158) total-vm:102444kB, anon-rss:1248kB, file-rss:22956kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 712.109410][T29187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.741626][T29222] netlink: 'syz.1.6181': attribute type 1 has an invalid length. [ 712.832846][T19394] Bluetooth: hci0: command tx timeout [ 712.876871][T29222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6181'. [ 712.890998][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 712.964562][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6181'. [ 713.137284][T29222] 8021q: adding VLAN 0 to HW filter on device bond15 [ 713.164738][T29227] netlink: 'syz.4.6182': attribute type 21 has an invalid length. [ 713.176146][T29227] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6182'. [ 713.195640][T29232] bridge5: entered promiscuous mode [ 713.214644][T29232] bond15: (slave bridge5): making interface the new active one [ 713.224563][T29232] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 713.321586][T29227] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6182'. [ 713.390199][T28961] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.410515][T28961] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.421686][T28961] bridge_slave_0: entered allmulticast mode [ 713.442907][T28961] bridge_slave_0: entered promiscuous mode [ 713.471466][T28961] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.494533][T28961] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.503943][T29249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.521014][T28961] bridge_slave_1: entered allmulticast mode [ 713.528646][T29249] netlink: 'syz.1.6188': attribute type 4 has an invalid length. [ 713.540243][T28961] bridge_slave_1: entered promiscuous mode [ 713.554952][T29249] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6188'. [ 713.770580][T29249] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 713.799158][T29249] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 713.884408][T28961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.969092][T28961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.377913][T29285] netlink: 'syz.0.6194': attribute type 1 has an invalid length. [ 714.384286][T28961] team0: Port device team_slave_0 added [ 714.453942][T28961] team0: Port device team_slave_1 added [ 714.800231][T29302] openvswitch: netlink: IP tunnel dst address not specified [ 714.847457][T29302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.876845][T28961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.901987][T28961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.998852][T28961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.045991][T29301] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 715.337403][T28961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.371057][T28961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.416417][T28961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.465374][ T8456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.485230][ T8456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.789830][ T8456] team0 (unregistering): Port device team_slave_1 removed [ 715.817185][ T8456] team0 (unregistering): Port device team_slave_0 removed [ 716.059570][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 716.250734][T28961] hsr_slave_0: entered promiscuous mode [ 716.257964][T28961] hsr_slave_1: entered promiscuous mode [ 716.274008][T28961] debugfs: 'hsr0' already exists in 'hsr' [ 716.279917][T28961] Cannot create hsr debugfs directory [ 716.344755][T29336] tipc: Enabling of bearer rejected, failed to enable media [ 716.475651][T29348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.485633][T29347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.654015][T29351] __nla_validate_parse: 4 callbacks suppressed [ 716.654038][T29351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6208'. [ 716.800875][T29351] netlink: 'syz.2.6208': attribute type 9 has an invalid length. [ 716.874301][ T8456] IPVS: stop unused estimator thread 0... [ 717.009774][T29361] syzkaller0: entered promiscuous mode [ 717.030655][T29361] syzkaller0: entered allmulticast mode [ 717.542781][T29395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6218'. [ 717.738110][T29401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6220'. [ 718.188645][T29421] tipc: MTU too low for tipc bearer [ 718.202134][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6226'. [ 718.214453][T29421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6226'. [ 718.248888][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6226'. [ 718.389004][T29428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.699494][T29410] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6221'. [ 718.872476][T28961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.908760][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.929240][T28961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 718.956610][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.984581][T28961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 719.013987][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.037339][T28961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 719.109010][T28961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.410997][T28961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.518291][T28961] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.564051][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.571296][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.664153][T29483] netlink: 'syz.0.6234': attribute type 1 has an invalid length. [ 719.678916][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.686167][ T8456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.795533][T29486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6238'. [ 719.906106][T29483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 719.918827][T29493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6238'. [ 720.034017][T29472] bond1: (slave veth3): Enslaving as an active interface with a down link [ 720.353866][T29516] netlink: 'syz.4.6243': attribute type 58 has an invalid length. [ 720.364524][T29520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6245'. [ 720.724576][T29520] bond17: option mode: invalid value (10) [ 720.774045][T29520] bond17 (unregistering): Released all slaves [ 721.173754][T29554] netlink: 'syz.1.6250': attribute type 1 has an invalid length. [ 722.083377][T29600] netlink: 'syz.0.6260': attribute type 1 has an invalid length. [ 722.296293][T29604] macvtap0: entered allmulticast mode [ 722.346714][T29605] macvtap1: entered allmulticast mode [ 722.536161][T29615] netlink: 'syz.0.6261': attribute type 10 has an invalid length. [ 722.544991][T29615] __nla_validate_parse: 2 callbacks suppressed [ 722.545010][T29615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6261'. [ 722.566600][T29615] team0: entered allmulticast mode [ 722.575058][T29615] team_slave_0: entered allmulticast mode [ 722.581032][T29615] team_slave_1: entered allmulticast mode [ 722.589352][T29615] bridge0: port 3(team0) entered blocking state [ 722.638223][T29615] bridge0: port 3(team0) entered disabled state [ 722.649016][T29615] team0: entered promiscuous mode [ 722.654955][T29615] team_slave_0: entered promiscuous mode [ 722.661056][T29615] team_slave_1: entered promiscuous mode [ 722.669028][T29615] bridge0: port 3(team0) entered blocking state [ 722.675531][T29615] bridge0: port 3(team0) entered forwarding state [ 722.729934][T28961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.001349][T29641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6266'. [ 723.198801][T28961] veth0_vlan: entered promiscuous mode [ 723.251262][T28961] veth1_vlan: entered promiscuous mode [ 723.377091][T28961] veth0_macvtap: entered promiscuous mode [ 723.416502][T28961] veth1_macvtap: entered promiscuous mode [ 723.510454][T28961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.558477][T28961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.623040][T17077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.645929][T17077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.707293][ T8459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.737131][ T8459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.956703][T29678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 723.981658][T29673] netlink: 1240 bytes leftover after parsing attributes in process `syz.2.6271'. [ 726.263448][T29655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.466053][T17058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.484854][T17058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.520574][T29692] syzkaller0: entered promiscuous mode [ 726.543464][T29692] syzkaller0: entered allmulticast mode [ 726.646719][T17058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.667142][T17058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.456206][T29736] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 727.524374][T29736] bond13 (unregistering): Released all slaves [ 727.537789][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.557513][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.568855][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.579539][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.594445][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.895647][T29760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6289'. [ 727.987654][T29760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6289'. [ 728.048284][T29762] vcan1: entered promiscuous mode [ 728.058133][T29762] vcan1: entered allmulticast mode [ 728.076499][T29770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6292'. [ 728.119530][T29769] netlink: 'syz.3.6291': attribute type 1 has an invalid length. [ 728.207362][T29769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6291'. [ 729.026339][T29817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6302'. [ 729.146071][T29743] C speed is unknown, defaulting to 1000 [ 729.378354][T29836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6309'. [ 729.379261][T29835] sctp: [Deprecated]: syz.4.6308 (pid 29835) Use of int in max_burst socket option. [ 729.379261][T29835] Use struct sctp_assoc_value instead [ 729.456087][T29835] netlink: 'syz.4.6308': attribute type 3 has an invalid length. [ 729.655626][T29743] lo speed is unknown, defaulting to 1000 [ 729.711949][T19394] Bluetooth: hci2: command tx timeout [ 729.947361][T29855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.989160][T29855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.029630][T29858] netlink: 'syz.0.6317': attribute type 1 has an invalid length. [ 730.107551][T29856] erspan0: entered promiscuous mode [ 730.132696][T29856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6316'. [ 730.267019][ T5747] IPVS: starting estimator thread 0... [ 730.362060][T29871] IPVS: using max 28 ests per chain, 67200 per kthread [ 730.393780][T29867] bridge3: entered promiscuous mode [ 730.438127][T29867] bond3: (slave bridge3): making interface the new active one [ 730.473415][T29867] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 730.567878][T29881] netlink: 'syz.2.6318': attribute type 2 has an invalid length. [ 730.638928][T29862] netlink: 'syz.2.6318': attribute type 2 has an invalid length. [ 730.689956][T29862] netlink: 67 bytes leftover after parsing attributes in process `syz.2.6318'. [ 730.988220][T29743] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.999666][T29743] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.007767][T29743] bridge_slave_0: entered allmulticast mode [ 731.016259][T29743] bridge_slave_0: entered promiscuous mode [ 731.026581][T29743] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.042630][T29743] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.051031][T29743] bridge_slave_1: entered allmulticast mode [ 731.059977][T29743] bridge_slave_1: entered promiscuous mode [ 731.090057][T29902] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 731.113874][T29904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6327'. [ 731.145677][T29743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.160246][T29743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.259005][T29911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6330'. [ 731.287327][T29909] syz.0.6329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 731.307097][T29743] team0: Port device team_slave_0 added [ 731.323987][T29909] CPU: 0 UID: 0 PID: 29909 Comm: syz.0.6329 Not tainted syzkaller #0 PREEMPT(full) [ 731.324017][T29909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.324031][T29909] Call Trace: [ 731.324041][T29909] [ 731.324053][T29909] dump_stack_lvl+0xe8/0x150 [ 731.324099][T29909] warn_alloc+0x24c/0x270 [ 731.324133][T29909] ? stack_depot_save_flags+0x33/0x800 [ 731.324195][T29909] ? __pfx_warn_alloc+0x10/0x10 [ 731.324228][T29909] ? kasan_save_track+0x3e/0x80 [ 731.324263][T29909] ? __kasan_kmalloc+0x93/0xb0 [ 731.324295][T29909] ? xsk_setsockopt+0x52a/0x960 [ 731.324429][T29909] ? do_sock_setsockopt+0x17c/0x1b0 [ 731.324485][T29909] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 731.324507][T29909] ? do_syscall_64+0x174/0x580 [ 731.324534][T29909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.324570][T29909] __vmalloc_node_range_noprof+0x12c/0x1730 [ 731.324629][T29909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 731.324657][T29909] ? __kasan_kmalloc+0x93/0xb0 [ 731.324683][T29909] ? __kmalloc_cache_noprof+0x32d/0x660 [ 731.324708][T29909] ? __kmalloc_cache_noprof+0x150/0x660 [ 731.324735][T29909] vmalloc_user_noprof+0xad/0xe0 [ 731.324759][T29909] ? xskq_create+0xbf/0x170 [ 731.324805][T29909] xskq_create+0xbf/0x170 [ 731.324827][T29909] xsk_init_queue+0x8a/0xe0 [ 731.324850][T29909] xsk_setsockopt+0x52a/0x960 [ 731.324884][T29909] ? __fget_files+0x2a/0x420 [ 731.324914][T29909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 731.324945][T29909] ? __pfx_aa_sk_perm+0x10/0x10 [ 731.325014][T29909] ? aa_sock_opt_perm+0xff/0x1a0 [ 731.325037][T29909] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 731.325067][T29909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 731.325097][T29909] do_sock_setsockopt+0x17c/0x1b0 [ 731.325121][T29909] __x64_sys_setsockopt+0x13d/0x1b0 [ 731.325143][T29909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.325163][T29909] do_syscall_64+0x174/0x580 [ 731.325183][T29909] ? trace_irq_disable+0x3b/0x140 [ 731.325208][T29909] ? clear_bhb_loop+0x40/0x90 [ 731.325230][T29909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.325248][T29909] RIP: 0033:0x7f70e539e019 [ 731.325267][T29909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.325284][T29909] RSP: 002b:00007f70e62f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 731.325305][T29909] RAX: ffffffffffffffda RBX: 00007f70e5625fa0 RCX: 00007f70e539e019 [ 731.325318][T29909] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 731.325330][T29909] RBP: 00007f70e543500c R08: 0000000000000004 R09: 0000000000000000 [ 731.325342][T29909] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.325353][T29909] R13: 00007f70e5626038 R14: 00007f70e5625fa0 R15: 00007ffdc57b9778 [ 731.325383][T29909] [ 731.325395][T29909] Mem-Info: [ 731.387369][T29743] team0: Port device team_slave_1 added [ 731.460327][T29909] active_anon:6193 inactive_anon:5 isolated_anon:0 [ 731.460327][T29909] active_file:18 inactive_file:43342 isolated_file:0 [ 731.460327][T29909] unevictable:768 dirty:73 writeback:0 [ 731.460327][T29909] slab_reclaimable:13237 slab_unreclaimable:131653 [ 731.460327][T29909] mapped:29481 shmem:1294 pagetables:1336 [ 731.460327][T29909] sec_pagetables:0 bounce:0 [ 731.460327][T29909] kernel_misc_reclaimable:0 [ 731.460327][T29909] free:1276229 free_pcp:14260 free_cma:0 [ 731.465958][T29913] x_tables: duplicate underflow at hook 1 [ 731.767416][T29909] Node 0 active_anon:22872kB inactive_anon:20kB active_file:72kB inactive_file:173168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117724kB dirty:288kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17152kB pagetables:4988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 731.803517][T19394] Bluetooth: hci2: command tx timeout [ 731.822824][T29909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 731.894756][T29743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.901772][T29743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.910489][ T30] audit: type=1107 audit(1785471066.293:32): pid=29917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='WÿË#P~j=˜¹GžwÓ™ëüÒ1$Á$qCd×ÑSŒ—ý\ [ 731.910489][ T30] gä/I@˜š,úP?umÖÒ…e\ÚÞU”bÐ8~Œ…b¶RÀxÕÔÁYÜ4¡-œãl³^y(' [ 731.962736][T29909] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.998188][T29909] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 732.014658][T29909] Node 0 DMA32 free:1143292kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22872kB inactive_anon:20kB active_file:72kB inactive_file:173168kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2548572kB mlocked:0kB bounce:0kB free_pcp:57964kB local_pcp:30204kB free_cma:0kB [ 732.030522][T29743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.082618][T29909] lowmem_reserve[]: 0 0 0 0 0 [ 732.096315][T29743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.106672][T29743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.123698][T29909] Node 0 [ 732.136597][T29743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.165940][T29909] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.253523][T29909] lowmem_reserve[]: 0 0 0 0 0 [ 732.258490][T29909] Node 1 Normal free:3947548kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.316742][T29909] lowmem_reserve[]: 0 0 0 0 0 [ 732.330533][T29743] hsr_slave_0: entered promiscuous mode [ 732.350122][T29909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 732.369889][T29743] hsr_slave_1: entered promiscuous mode [ 732.385195][T29743] debugfs: 'hsr0' already exists in 'hsr' [ 732.401273][T29743] Cannot create hsr debugfs directory [ 732.418861][T29909] Node 0 DMA32: 2487*4kB (UM) 655*8kB (UM) 125*16kB (UM) 48*32kB (UE) 123*64kB (UME) 69*128kB (UM) 40*256kB (UME) 20*512kB (U) 13*1024kB (U) 6*2048kB (U) 261*4096kB (UM) = 1150564kB [ 732.459451][T29935] netlink: 'syz.4.6338': attribute type 15 has an invalid length. [ 732.481883][T29909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 732.503042][T29909] Node 1 Normal: 1*4kB (U) 7*8kB (UM) 10*16kB (UM) 8*32kB (UM) 3*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947548kB [ 732.540937][T29909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.568356][T29909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 732.598911][T29909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.621501][T29909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 732.660325][T29909] 44650 total pagecache pages [ 732.680967][T29909] 0 pages in swap cache [ 732.693195][T29909] Free swap = 124996kB [ 732.702982][T29909] Total swap = 124996kB [ 732.712112][T29909] 2097051 pages RAM [ 732.721301][T29909] 0 pages HighMem/MovableOnly [ 732.732685][T29909] 428228 pages reserved [ 732.746451][T29909] 0 pages cma reserved [ 732.967378][T29960] __nla_validate_parse: 3 callbacks suppressed [ 732.967398][T29960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6347'. [ 733.044135][T29961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6346'. [ 733.081668][T29963] netlink: 444 bytes leftover after parsing attributes in process `syz.2.6347'. [ 733.317456][T29977] netlink: 'syz.4.6350': attribute type 11 has an invalid length. [ 733.326032][T29979] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 733.329773][T29966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.363552][T29978] netlink: 'syz.4.6350': attribute type 11 has an invalid length. [ 733.376732][T29978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6350'. [ 733.397803][T29977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6350'. [ 733.872182][T19394] Bluetooth: hci2: command tx timeout [ 734.058868][T30016] gretap1: left promiscuous mode [ 734.087480][T30016] vlan2: left promiscuous mode [ 734.100234][T30016] bridge0: left promiscuous mode [ 734.144630][T30016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 734.173977][T30016] bond2: entered allmulticast mode [ 734.195548][T30016] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 734.229360][T30016] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 734.265584][T30016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 734.298719][T30016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 734.320811][T30016] bridge3: left promiscuous mode [ 734.355551][T17068] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 734.384060][T17068] bond1: (slave veth3): making interface the new active one [ 734.431119][T17068] bond1: active interface up! [ 734.569638][T30028] bridge0: port 3(ipvlan2) entered blocking state [ 734.580678][T30028] bridge0: port 3(ipvlan2) entered disabled state [ 734.590788][T30028] ipvlan2: entered allmulticast mode [ 734.605376][T30028] bridge0: entered allmulticast mode [ 734.624529][T30028] ipvlan2: left allmulticast mode [ 734.634131][T30029] netlink: 'syz.3.6363': attribute type 1 has an invalid length. [ 734.643600][T30028] bridge0: left allmulticast mode [ 734.796296][T29743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 734.816426][T29743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.828272][T29743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 734.845469][T29743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.859312][T29743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 734.875939][T29743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.895689][T29743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 734.951533][T29743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.056519][T30039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6367'. [ 735.376975][T29743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.457402][T29743] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.514754][T17058] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.521987][T17058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.555655][T30084] netlink: 'syz.3.6379': attribute type 1 has an invalid length. [ 735.607658][T30084] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6379'. [ 735.622683][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.629890][ T8456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.793825][T30092] syzkaller1: entered promiscuous mode [ 735.809819][T30092] syzkaller1: entered allmulticast mode [ 735.952471][T19394] Bluetooth: hci2: command tx timeout [ 736.018514][T30106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6385'. [ 736.122120][T30113] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6385'. [ 736.520362][T30131] netlink: 'syz.2.6390': attribute type 1 has an invalid length. [ 736.693254][T30131] 8021q: adding VLAN 0 to HW filter on device bond13 [ 736.831641][T30131] bond13: (slave veth11): Enslaving as an active interface with a down link [ 736.983857][T30145] netlink: 'syz.0.6391': attribute type 1 has an invalid length. [ 736.997307][T30124] C speed is unknown, defaulting to 1000 [ 737.122396][T29743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.276854][T30151] syzkaller0: entered promiscuous mode [ 737.295318][T30151] syzkaller0: entered allmulticast mode [ 737.398440][T29743] veth0_vlan: entered promiscuous mode [ 737.426106][T30158] bridge_slave_0: left allmulticast mode [ 737.432432][T30158] bridge_slave_0: left promiscuous mode [ 737.440214][T30158] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.458073][T30158] bridge_slave_1: left allmulticast mode [ 737.490280][T30158] bridge_slave_1: left promiscuous mode [ 737.502434][T30158] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.534122][T30158] bond0: (slave bond_slave_0): Releasing backup interface [ 737.551045][T30158] bond0: (slave bond_slave_1): Releasing backup interface [ 737.589985][T30158] team0: Port device team_slave_0 removed [ 737.603610][T30158] team0: Port device team_slave_1 removed [ 737.610360][T30158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.618961][T30158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.629003][T30158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 737.679168][T30124] lo speed is unknown, defaulting to 1000 [ 737.681439][T29743] veth1_vlan: entered promiscuous mode [ 737.708718][T30161] IPv6: addrconf: prefix option has invalid lifetime [ 737.715578][T30161] IPv6: addrconf: prefix option has invalid lifetime [ 737.742651][T30161] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6396'. [ 737.987352][T30170] __nla_validate_parse: 2 callbacks suppressed [ 737.987375][T30170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6399'. [ 738.117518][T29743] veth0_macvtap: entered promiscuous mode [ 738.155708][T29743] veth1_macvtap: entered promiscuous mode [ 738.204659][T30174] netlink: 'syz.4.6401': attribute type 21 has an invalid length. [ 738.229814][T29743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.255488][T30176] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 738.270568][T29743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.284387][T30176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6402'. [ 738.416446][T17063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.472507][T17058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.680310][T17063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.692670][T17058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.716287][T17063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.735377][T17058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.851298][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.875794][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.013493][T30193] netlink: 'syz.2.6407': attribute type 10 has an invalid length. [ 739.123603][T30197] netlink: 'syz.4.6408': attribute type 18 has an invalid length. [ 739.244145][T17063] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.282158][ T8459] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.316862][ T8459] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.364480][T17058] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.587846][T30221] hsr0: entered allmulticast mode [ 739.593293][T30221] hsr_slave_0: entered allmulticast mode [ 739.600640][T30221] hsr_slave_1: entered allmulticast mode [ 739.964157][T30239] bond8: entered allmulticast mode [ 739.982157][T30239] ip6gre2: entered allmulticast mode [ 740.110556][T30242] bond8: left allmulticast mode [ 740.124846][T30242] ip6gre2: left allmulticast mode [ 740.313933][T30255] netlink: 'syz.0.6425': attribute type 1 has an invalid length. [ 740.406464][T30262] Cannot find set identified by id 3 to match [ 740.548017][T30267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6428'. [ 740.612938][T30234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6419'. [ 740.625212][T30271] hsr_slave_0: left promiscuous mode [ 740.635530][T30271] hsr_slave_1: left promiscuous mode [ 740.660948][T30234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.686360][T30234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.026093][T30282] netlink: 'syz.0.6434': attribute type 1 has an invalid length. [ 741.070144][T30285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6432'. [ 741.181728][T30288] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 741.207379][T30288] bond6 (unregistering): Released all slaves [ 741.291724][T30299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6434'. [ 741.341248][T30282] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 741.368837][T30282] bond6 (unregistering): Released all slaves [ 741.401392][T30290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.418934][T30293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6436'. [ 741.432702][T30293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6436'. [ 741.460632][T30293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6436'. [ 741.613038][T30303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6437'. [ 741.837742][T30315] syzkaller1: entered promiscuous mode [ 741.857957][T30315] syzkaller1: entered allmulticast mode [ 742.029697][T30323] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 742.705413][T30358] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 742.777513][T30370] netlink: 'syz.0.6455': attribute type 1 has an invalid length. [ 742.856199][T30370] bond6: entered promiscuous mode [ 742.863674][T30370] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.035717][T30370] macvtap2: entered allmulticast mode [ 743.056738][T30383] macvtap3: entered allmulticast mode [ 743.108513][T30386] bond6: (slave bridge4): making interface the new active one [ 743.119120][T30386] bridge4: entered promiscuous mode [ 743.134062][T30386] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 743.250132][T30395] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 743.259594][T30395] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 743.483598][T30404] __nla_validate_parse: 6 callbacks suppressed [ 743.483620][T30404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6464'. [ 743.508613][T30405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6463'. [ 743.577918][T30406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6463'. [ 743.590998][T30405] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6463'. [ 743.596392][T30378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.630076][T30405] netlink: 29 bytes leftover after parsing attributes in process `syz.2.6463'. [ 743.670495][T30402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6463'. [ 743.736001][T30408] netlink: 'syz.0.6465': attribute type 6 has an invalid length. [ 743.767097][T30411] netlink: 'syz.0.6465': attribute type 6 has an invalid length. [ 743.846090][T30414] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 744.044933][T30393] C speed is unknown, defaulting to 1000 [ 744.470764][T30456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6475'. [ 744.608603][T30463] IPVS: length: 28 != 8 [ 744.635401][T30468] netlink: 'syz.2.6479': attribute type 7 has an invalid length. [ 744.655863][T30393] lo speed is unknown, defaulting to 1000 [ 744.677791][T30468] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6479'. [ 744.833561][T30479] netlink: 'syz.1.6480': attribute type 2 has an invalid length. [ 744.995512][T30494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6482'. [ 745.574171][T30517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6489'. [ 746.379761][T30572] netlink: 'syz.3.6498': attribute type 4 has an invalid length. [ 746.379937][T30573] netlink: 'syz.3.6498': attribute type 4 has an invalid length. [ 746.485210][T30580] netlink: 'syz.4.6500': attribute type 1 has an invalid length. [ 746.534247][T30580] bond1: (slave gretap1): making interface the new active one [ 746.545075][T30580] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 748.937974][T30542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.164100][T30598] __nla_validate_parse: 2 callbacks suppressed [ 749.164119][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6505'. [ 749.184806][T30599] netlink: 'syz.4.6504': attribute type 1 has an invalid length. [ 749.195587][T30599] netlink: 'syz.4.6504': attribute type 2 has an invalid length. [ 749.218960][T30598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6505'. [ 749.249836][T30600] ip6gre1: entered allmulticast mode [ 749.266430][T17063] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 749.318337][T30600] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.345182][T30600] bridge_slave_0 (unregistering): left allmulticast mode [ 749.370283][T30600] bridge_slave_0 (unregistering): left promiscuous mode [ 749.393179][T30600] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.776610][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.790762][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 749.802375][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.814017][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 749.828563][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.121303][T30626] openvswitch: netlink: Flow actions attr not present in new flow. [ 750.169016][T30626] netlink: 'syz.4.6515': attribute type 2 has an invalid length. [ 750.403644][T30642] vlan2: entered allmulticast mode [ 750.421373][T30642] bond0: entered allmulticast mode [ 750.442279][T30642] bond_slave_0: entered allmulticast mode [ 750.456797][T30642] bond_slave_1: entered allmulticast mode [ 750.477910][ T30] audit: type=1804 audit(1785471084.863:33): pid=30649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6518" name="/newroot/97/cgroup.controllers" dev="tmpfs" ino=515 res=1 errno=0 [ 750.554724][ T30] audit: type=1800 audit(1785471084.863:34): pid=30649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6518" name="cgroup.controllers" dev="tmpfs" ino=515 res=0 errno=0 [ 750.685744][T30662] netlink: 592 bytes leftover after parsing attributes in process `syz.4.6522'. [ 750.799135][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6523'. [ 750.822414][T30656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.838984][T30656] bond_slave_0: left allmulticast mode [ 750.848747][T30656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.862462][T30656] bond_slave_1: left allmulticast mode [ 750.870055][T30656] bond0 (unregistering): Released all slaves [ 751.014835][T30674] x_tables: unsorted underflow at hook 4 [ 751.952747][T19394] Bluetooth: hci1: command tx timeout [ 753.392009][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 753.532758][T30671] syzkaller0: entered promiscuous mode [ 753.543789][T30671] syzkaller0: entered allmulticast mode [ 753.739182][T30686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6527'. [ 753.887118][T30696] bridge_slave_0: invalid flags given to default FDB implementation [ 753.960928][T30613] C speed is unknown, defaulting to 1000 [ 754.037229][T19394] Bluetooth: hci1: command tx timeout [ 754.077448][T30703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6533'. [ 754.349509][T30710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 754.375893][T30613] lo speed is unknown, defaulting to 1000 [ 754.827056][T30740] netlink: 'syz.1.6543': attribute type 4 has an invalid length. [ 754.869467][T30741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6544'. [ 754.888569][T30742] tipc: Enabling of bearer rejected, failed to enable media [ 754.901723][T30613] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.922007][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.942873][T30613] bridge_slave_0: entered allmulticast mode [ 754.962944][T30613] bridge_slave_0: entered promiscuous mode [ 754.995314][T30743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6542'. [ 755.020223][T30613] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.054593][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.066406][T30613] bridge_slave_1: entered allmulticast mode [ 755.082250][T30613] bridge_slave_1: entered promiscuous mode [ 755.182966][T30613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.221367][T30613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.349856][T30613] team0: Port device team_slave_0 added [ 755.391151][T30613] team0: Port device team_slave_1 added [ 755.480601][T30771] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6553'. [ 755.496463][T30771] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6553'. [ 755.509160][T30771] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6553'. [ 755.521315][T30613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.542809][T30613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.610721][T30613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.648629][T30762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6550'. [ 755.685818][T30613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.699710][T30778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6554'. [ 755.714510][T30613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.796240][T30613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.910334][T30789] xt_hashlimit: size too large, truncated to 1048576 [ 755.965367][T30613] hsr_slave_0: entered promiscuous mode [ 755.974006][T30613] hsr_slave_1: entered promiscuous mode [ 755.985216][T30613] debugfs: 'hsr0' already exists in 'hsr' [ 755.995421][T30613] Cannot create hsr debugfs directory [ 756.055900][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6558'. [ 756.114841][T19394] Bluetooth: hci1: command tx timeout [ 756.316136][T30804] ip6gre2: entered allmulticast mode [ 756.500628][T30613] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.550719][T30613] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.740722][T30848] netlink: 'syz.3.6572': attribute type 1 has an invalid length. [ 756.751390][T30613] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.761759][T30613] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.990250][T30613] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.002344][T30613] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.096588][T30613] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.124798][T30613] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.197303][T30863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6576'. [ 758.192397][T19394] Bluetooth: hci1: command tx timeout [ 759.471909][T30833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.579636][T30613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 759.642921][T30613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.678314][T30613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 759.698690][T30613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.719094][T30613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 759.744224][T30613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.788287][T30613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 759.818024][T30613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.836855][T30878] syzkaller0: entered promiscuous mode [ 759.898210][T30880] syzkaller0: entered promiscuous mode [ 759.913290][T30880] syzkaller0: entered allmulticast mode [ 759.946682][T30904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.029816][T30907] netlink: 'syz.0.6585': attribute type 26 has an invalid length. [ 760.403194][T30911] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.410972][T30911] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.518353][T30911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.536264][T30911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.564047][T30911] hsr0: left allmulticast mode [ 760.568882][T30911] hsr_slave_0: left allmulticast mode [ 760.575333][T30911] hsr_slave_1: left allmulticast mode [ 760.734112][ T8462] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.777832][ T8459] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.873225][T17077] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.887884][T30613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.943739][T30613] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.977580][T17068] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.984861][T17068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.045033][T17058] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.052463][T17058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.096897][T30945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6597'. [ 761.241459][T30956] netlink: 'syz.1.6601': attribute type 28 has an invalid length. [ 761.244585][T17077] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.288843][T30956] netlink: 'syz.1.6601': attribute type 3 has an invalid length. [ 761.318357][T30956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6601'. [ 761.632066][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.719326][T30984] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6609'. [ 761.729744][T30982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6608'. [ 761.999562][T30995] syzkaller0: entered promiscuous mode [ 762.017133][T30995] syzkaller0: entered allmulticast mode [ 762.053417][T30995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6613'. [ 762.447115][T30613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.613932][T30613] veth0_vlan: entered promiscuous mode [ 762.656675][T30613] veth1_vlan: entered promiscuous mode [ 762.808141][T30613] veth0_macvtap: entered promiscuous mode [ 762.859255][T30613] veth1_macvtap: entered promiscuous mode [ 762.944409][T30613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.997626][T30613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.154977][T17063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.196066][T17063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.223175][T17068] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.275380][T17068] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.362815][T17068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.388024][T17068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.463222][T17077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.495926][T17077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.547050][T31023] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6619'. [ 763.816226][T31057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6623'. [ 764.709005][T31100] netlink: 'syz.2.6632': attribute type 10 has an invalid length. [ 764.739575][T31099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6633'. [ 764.763445][T31099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6633'. [ 765.349297][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6636'. [ 765.766440][T31120] syzkaller1: entered promiscuous mode [ 765.788946][T31120] syzkaller1: entered allmulticast mode [ 765.893279][T31132] atomic_op ffff888037161198 conn xmit_atomic 0000000000000000 [ 766.183396][T31147] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 766.210959][T31148] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 766.435751][T31156] __nla_validate_parse: 33 callbacks suppressed [ 766.435773][T31156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6650'. [ 766.560987][T31164] netlink: 'syz.0.6652': attribute type 1 has an invalid length. [ 766.581542][T31164] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6652'. [ 766.750301][ T9921] IPVS: starting estimator thread 0... [ 766.759737][T31172] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 766.785844][T31175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6656'. [ 766.827839][T31172] IPVS: set_ctl: invalid protocol: 27 0.0.0.0:0 [ 766.862725][T31173] IPVS: using max 24 ests per chain, 57600 per kthread [ 767.127409][T31188] xt_hashlimit: size too large, truncated to 1048576 [ 767.541057][T31204] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 767.749265][T31213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6666'. [ 768.078918][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6669'. [ 768.550173][T31240] xt_l2tp: unknown flags: 10 [ 768.575552][T31241] xt_l2tp: unknown flags: 10 [ 768.855691][T31251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6678'. [ 768.877529][T31249] xt_hashlimit: size too large, truncated to 1048576 [ 769.073676][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6677'. [ 769.130253][T31262] netlink: 'syz.1.6680': attribute type 32 has an invalid length. [ 769.140002][T31267] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6682'. [ 769.164086][T31262] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6680'. [ 769.529209][T31280] xt_ecn: cannot match TCP bits for non-tcp packets [ 769.987621][T31305] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6693'. [ 770.005368][T31309] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 770.114438][T31313] bridge1: entered promiscuous mode [ 770.437093][T31333] SET target dimension over the limit! [ 770.736227][T31345] batadv_slave_0: entered promiscuous mode [ 770.765398][T31344] batadv_slave_0: left promiscuous mode [ 770.921408][T31355] syzkaller0: entered promiscuous mode [ 770.947674][T31355] syzkaller0: entered allmulticast mode [ 770.998171][T31355] tipc: Started in network mode [ 771.010725][T31355] tipc: Node identity 1a5199052141, cluster identity 4711 [ 771.029156][T31355] tipc: Enabled bearer , priority 0 [ 771.040199][T31359] netlink: 'syz.1.6713': attribute type 1 has an invalid length. [ 771.064427][T31351] tipc: Resetting bearer [ 771.157224][T31351] tipc: Disabling bearer [ 771.238508][T31359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 771.334548][T31369] bond2: (slave geneve2): making interface the new active one [ 771.355795][T31374] ip6t_REJECT: ECHOREPLY is not supported [ 771.375484][T31369] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 771.430859][T31380] ip6t_REJECT: ECHOREPLY is not supported [ 771.457734][T31375] syzkaller0: entered promiscuous mode [ 771.485245][T31375] syzkaller0: entered allmulticast mode [ 772.163355][T31420] __nla_validate_parse: 35 callbacks suppressed [ 772.163375][T31420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6727'. [ 772.183745][T31419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6727'. [ 772.195145][T31419] bridge0: port 3(team0) entered disabled state [ 772.205458][T31419] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.213241][T31419] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.276099][T31424] Cannot find del_set index 4 as target [ 772.308223][T31425] Cannot find del_set index 4 as target [ 772.523864][T31432] tipc: Enabled bearer , priority 0 [ 772.549444][T31440] netlink: 'syz.0.6735': attribute type 8 has an invalid length. [ 772.572734][T31440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6735'. [ 772.704006][T31432] syzkaller0: entered promiscuous mode [ 772.716101][T31432] syzkaller0: entered allmulticast mode [ 772.739373][T31432] tipc: Resetting bearer [ 772.776806][T31443] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 773.089769][T17063] tipc: Resetting bearer [ 773.114994][T31431] tipc: Resetting bearer [ 773.684579][T31487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6747'. [ 773.700678][T31492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6747'. [ 776.749198][T31431] tipc: Disabling bearer [ 776.760045][ T5638] tipc: Node number set to 990943493 [ 776.787914][T31487] macsec1: entered promiscuous mode [ 776.812468][T31487] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 776.826809][T31487] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 777.063792][T31512] netlink: 'syz.4.6752': attribute type 2 has an invalid length. [ 777.076547][T31512] netlink: 'syz.4.6752': attribute type 11 has an invalid length. [ 777.085962][T31512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6752'. [ 777.225925][T31521] No such timeout policy "syz0" [ 777.281617][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.321211][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.354616][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.379599][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.397307][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.413551][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.454241][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.490653][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.539374][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.577820][T31524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 777.632124][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.659532][T31542] syzkaller0: entered promiscuous mode [ 777.675247][T31542] syzkaller0: entered allmulticast mode [ 778.012080][T31561] netlink: 'syz.3.6767': attribute type 4 has an invalid length. [ 778.035283][T31561] netlink: 'syz.3.6767': attribute type 4 has an invalid length. [ 778.298149][T31579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6770'. [ 778.370827][T31579] netlink: 'syz.0.6770': attribute type 4 has an invalid length. [ 778.435120][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6772'. [ 778.455566][T31587] xt_hashlimit: size too large, truncated to 1048576 [ 778.485108][T31584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6772'. [ 778.527523][T31590] netlink: 'syz.4.6773': attribute type 2 has an invalid length. [ 778.615602][T31594] netlink: 'syz.4.6773': attribute type 2 has an invalid length. [ 778.661126][T31594] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.6773'. [ 778.670483][T31596] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 778.779538][T31600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6776'. [ 779.405894][T31625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6786'. [ 779.527162][T31634] tipc: Started in network mode [ 779.551181][T31634] tipc: Node identity 8ed0ba2b3bc, cluster identity 4711 [ 779.578620][T31634] tipc: Enabled bearer , priority 0 [ 779.596032][T31638] syzkaller0: entered promiscuous mode [ 779.609507][T31638] syzkaller0: entered allmulticast mode [ 779.617088][T31637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6790'. [ 779.637745][T31637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6790'. [ 779.653725][T31637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 779.663943][T31633] tipc: Resetting bearer [ 779.711657][T31642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6791'. [ 779.736431][T31633] tipc: Disabling bearer [ 780.039283][T31657] netlink: 'syz.4.6795': attribute type 2 has an invalid length. [ 780.086976][T31660] netlink: 'syz.4.6795': attribute type 2 has an invalid length. [ 780.741149][T31680] netlink: 'syz.0.6803': attribute type 13 has an invalid length. [ 780.774204][T31680] gretap0: refused to change device tx_queue_len [ 780.788360][T31680] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 781.024301][T31696] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 781.109324][T31698] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 781.188389][T31701] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 781.224531][T31701] bond3 (unregistering): Released all slaves [ 781.440910][T31719] IPVS: Unknown mcast interface: vcan0 [ 781.550554][T31723] mac80211_hwsim hwsim68 ÿ: renamed from wlan1 (while UP) [ 782.128825][T31762] tipc: Enabling of bearer rejected, failed to enable media [ 782.153871][T31762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 782.473017][T31780] veth3: entered promiscuous mode [ 782.959854][T31808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.392943][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 783.575744][T31844] __nla_validate_parse: 15 callbacks suppressed [ 783.575766][T31844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6856'. [ 783.597719][T31844] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6856'. [ 783.609889][T31844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6856'. [ 783.677221][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6858'. [ 784.191609][T31884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6870'. [ 784.218614][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 784.242065][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 784.251747][T31886] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 784.265705][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 784.278145][T31884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6870'. [ 784.377444][T31894] pimreg3: entered allmulticast mode [ 784.474174][T31905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6873'. [ 784.964770][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058b28800: rx timeout, send abort [ 784.980231][T31926] validate_nla: 5 callbacks suppressed [ 784.980249][T31926] netlink: 'syz.3.6881': attribute type 1 has an invalid length. [ 785.001493][T31927] netlink: 'syz.3.6881': attribute type 1 has an invalid length. [ 785.474581][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059c1e800: rx timeout, send abort [ 785.483378][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058b28800: abort rx timeout. Force session deactivation [ 785.983012][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059c1e800: abort rx timeout. Force session deactivation [ 787.935813][T31946] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 787.964920][T31947] xt_NFQUEUE: number of total queues is 0 [ 788.490152][T31977] syzkaller0: entered allmulticast mode [ 788.650065][T31987] gre2: entered promiscuous mode [ 788.898874][T32000] pim6reg: entered allmulticast mode [ 788.918059][T32008] __nla_validate_parse: 4 callbacks suppressed [ 788.918078][T32008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6898'. [ 789.056785][T32007] syzkaller0: entered allmulticast mode [ 789.077335][T32003] tipc: Started in network mode [ 789.103600][T32003] tipc: Node identity e66b9ecfb0ef, cluster identity 4711 [ 789.129373][T32003] tipc: Enabled bearer , priority 0 [ 789.167665][T32017] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 789.187043][T32016] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 789.792148][T31997] tipc: Resetting bearer [ 789.888352][T31997] tipc: Disabling bearer [ 790.018268][T31998] C speed is unknown, defaulting to 1000 [ 790.148058][T32054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6910'. [ 790.160932][T32054] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 790.307675][T32056] can: request_module (can-proto-0) failed. [ 790.394558][T32062] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6913'. [ 790.452921][T31998] lo speed is unknown, defaulting to 1000 [ 790.462922][T32020] rdma_rxe: rxe_newlink: failed to add lo [ 791.115525][T32092] lo: entered promiscuous mode [ 791.135888][T32092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.187232][T32093] openvswitch: netlink: IP tunnel dst address not specified [ 791.209118][T32093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.439977][T32101] syzkaller0: entered promiscuous mode [ 791.457793][T32101] syzkaller0: entered allmulticast mode [ 791.697248][T32121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6931'. [ 791.718445][T32121] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6931'. [ 791.759759][T32121] vlan2: entered allmulticast mode [ 791.783875][T32121] gretap0: entered allmulticast mode [ 792.325724][T32159] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6940'. [ 792.395773][T32162] erspan0: left promiscuous mode [ 792.407000][T32159] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6940'. [ 792.707598][T32162] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 792.729454][T32162] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 792.750476][T32159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6940'. [ 792.764577][T32160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6940'. [ 792.953428][T32193] netlink: 'syz.1.6946': attribute type 30 has an invalid length. [ 793.054771][T32193] bond3: option arp_missed_max: invalid value (0) [ 793.063335][T32193] bond3: option arp_missed_max: allowed values 1 - 255 [ 793.085727][T32193] bond3 (unregistering): Released all slaves [ 793.092854][T32195] openvswitch: netlink: IP tunnel dst address not specified [ 793.105526][T32203] netlink: 'syz.3.6949': attribute type 9 has an invalid length. [ 793.387206][T32214] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6954'. [ 793.676870][T32235] netlink: 'syz.4.6957': attribute type 1 has an invalid length. [ 793.870109][T32235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 793.944713][T32252] pim6reg: entered allmulticast mode [ 794.301610][T32269] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 794.424972][T32278] netlink: 'syz.1.6971': attribute type 1 has an invalid length. [ 794.503259][T32288] __nla_validate_parse: 1 callbacks suppressed [ 794.503279][T32288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6971'. [ 794.866822][T32312] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 794.975567][T32317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6982'. [ 795.004603][T32318] netlink: 'syz.0.6981': attribute type 1 has an invalid length. [ 795.049230][T32318] 8021q: adding VLAN 0 to HW filter on device bond7 [ 795.083052][T32321] bond7: (slave gretap2): making interface the new active one [ 795.093178][T32321] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 795.110558][T32318] netlink: 'syz.0.6981': attribute type 1 has an invalid length. [ 795.119545][T32318] netlink: 'syz.0.6981': attribute type 2 has an invalid length. [ 795.343201][T32340] netlink: get zone limit has 4 unknown bytes [ 795.511308][T32347] bond1: Removing last ns target with arp_interval on [ 795.615223][T32352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6990'. [ 795.726235][T32352] netlink: 'syz.2.6990': attribute type 1 has an invalid length. [ 795.750571][T32352] netlink: 'syz.2.6990': attribute type 3 has an invalid length. [ 795.773843][T32352] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6990'. [ 795.785984][T32355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6991'. [ 795.963758][T32359] nbd: must specify a device to reconfigure [ 796.005123][T32366] netlink: 'syz.2.6994': attribute type 27 has an invalid length. [ 796.134604][T32370] syzkaller1: entered promiscuous mode [ 796.154341][T32370] syzkaller1: entered allmulticast mode [ 796.328331][T32374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6996'. [ 796.721451][T32399] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 796.829319][T32403] syzkaller0: entered promiscuous mode [ 796.852544][T32403] syzkaller0: entered allmulticast mode [ 797.018558][T32417] syzkaller0: entered promiscuous mode [ 797.025052][T32417] syzkaller0: entered allmulticast mode [ 797.453728][T32426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 797.659053][T32431] bond2: (slave veth9): Enslaving as an active interface with a down link [ 797.707017][T32432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 797.715708][T32432] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 798.997625][T32345] Set syz1 is full, maxelem 65536 reached [ 799.053593][T32439] netlink: zone id is out of range [ 799.058800][T32439] netlink: zone id is out of range [ 799.066825][T32439] netlink: zone id is out of range [ 799.074354][T32439] netlink: zone id is out of range [ 799.079645][T32439] netlink: zone id is out of range [ 799.085561][T32439] netlink: zone id is out of range [ 799.091412][T32439] netlink: zone id is out of range [ 799.098931][T32439] netlink: zone id is out of range [ 799.106052][T32439] netlink: zone id is out of range [ 799.706397][T32403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.186522][T32466] veth0: entered promiscuous mode [ 800.230963][T32466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7016'. [ 800.254770][T32466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7016'. [ 800.376818][T32492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7016'. [ 800.713254][T32498] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 800.832068][T19394] Bluetooth: hci3: command 0x0406 tx timeout [ 800.886649][T32511] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7024'. [ 800.903066][T32465] veth0: left promiscuous mode [ 800.916138][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7022'. [ 800.943184][T32514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7023'. [ 800.952711][T32514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7023'. [ 801.006659][T32501] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 801.650672][T32539] syzkaller0: entered promiscuous mode [ 801.687284][T32539] syzkaller0: entered allmulticast mode [ 801.750690][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7029'. [ 801.937382][T32555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 801.969482][T32553] validate_nla: 1 callbacks suppressed [ 801.969504][T32553] netlink: 'syz.4.7032': attribute type 2 has an invalid length. [ 802.263689][T32565] netlink: 'syz.4.7037': attribute type 28 has an invalid length. [ 802.274059][ T5285] veth0_vlan: left promiscuous mode [ 802.293065][T32565] netlink: 'syz.4.7037': attribute type 3 has an invalid length. [ 802.322920][T32565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7037'. [ 802.335594][ T9919] veth0_vlan: entered promiscuous mode [ 802.602295][ T57] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 802.628738][T32577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.661097][ T57] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 803.268734][T32629] tipc: Enabling of bearer rejected, failed to enable media [ 803.442501][T17058] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.479830][T17058] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.522591][T17058] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.565418][T17058] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.393988][T32682] net_ratelimit: 498 callbacks suppressed [ 804.394009][T32682] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 804.593311][T32694] netlink: 'syz.3.7065': attribute type 178 has an invalid length. [ 804.978664][T32715] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 805.088245][T32722] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 805.646102][T32762] syzkaller0: entered promiscuous mode [ 805.676523][T32762] syzkaller0: entered allmulticast mode [ 805.781017][ T301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.840356][ T309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 806.185003][ T326] __nla_validate_parse: 12 callbacks suppressed [ 806.185024][ T326] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7094'. [ 806.357017][ T332] geneve3: entered promiscuous mode [ 806.452787][ T331] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 806.495963][ T331] bond4 (unregistering): Released all slaves [ 806.796478][ T368] syzkaller0: entered promiscuous mode [ 806.805718][ T368] syzkaller0: entered allmulticast mode [ 806.846480][ T371] netlink: 'syz.4.7108': attribute type 13 has an invalid length. [ 806.856322][ T371] veth1_macvtap: left promiscuous mode [ 806.866277][ T371] macsec0: entered allmulticast mode [ 806.990292][ T378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7110'. [ 807.090022][ T384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7112'. [ 807.206831][ T338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.554714][ T405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7114'. [ 807.590774][ T57] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 807.656832][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.670205][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.680661][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.689957][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.699016][ T414] netlink: 'syz.4.7119': attribute type 10 has an invalid length. [ 807.708710][ T414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7119'. [ 807.720922][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.733197][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.754349][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.766741][ T414] team0: Port device geneve1 added [ 807.775523][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.806478][ T412] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 807.830240][ T420] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7123'. [ 807.848822][ T420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7123'. [ 807.913151][ T424] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7122'. [ 808.017010][ T430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7124'. [ 808.026983][ T430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7124'. [ 808.248416][ T394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.352003][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.488221][ T435] erspan0: entered promiscuous mode [ 808.501929][ T435] erspan0: entered allmulticast mode [ 809.415801][ T497] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20001 [ 809.961382][ T534] xt_nat: multiple ranges no longer supported [ 810.408488][ T554] syzkaller0: entered promiscuous mode [ 810.427753][ T554] syzkaller0: entered allmulticast mode [ 810.930133][ T575] netlink: 'syz.2.7165': attribute type 1 has an invalid length. [ 811.083463][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 811.385050][ T597] __nla_validate_parse: 9 callbacks suppressed [ 811.385070][ T597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7171'. [ 811.407351][ T597] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7171'. [ 811.701006][ T607] netlink: 'syz.3.7175': attribute type 10 has an invalid length. [ 812.165750][ T637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.215054][ T649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7183'. [ 812.248286][ T649] bridge5: entered promiscuous mode [ 812.258099][ T649] bridge5: entered allmulticast mode [ 812.477426][ T663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7188'. [ 812.697798][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7185'. [ 812.910848][ T679] bond0: Error: Cannot enslave bond to itself. [ 813.031525][ T684] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7192'. [ 813.045310][ T682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.074611][ T684] netlink: 'syz.4.7192': attribute type 9 has an invalid length. [ 813.134992][ T689] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7192'. [ 813.200051][ T689] netlink: 'syz.4.7192': attribute type 9 has an invalid length. [ 813.341498][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7196'. [ 813.477712][ T704] syzkaller0: entered promiscuous mode [ 813.506531][ T704] syzkaller0: entered allmulticast mode [ 813.668126][ T713] sctp: [Deprecated]: syz.0.7201 (pid 713) Use of int in max_burst socket option deprecated. [ 813.668126][ T713] Use struct sctp_assoc_value instead [ 814.207834][ T736] netlink: 'syz.2.7207': attribute type 23 has an invalid length. [ 814.975824][ T767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7212'. [ 814.997280][ T771] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7217'. [ 815.360756][ T786] syzkaller0: entered promiscuous mode [ 815.375833][ T786] syzkaller0: entered allmulticast mode [ 816.527763][ T845] net_ratelimit: 24 callbacks suppressed [ 816.527784][ T845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.644188][ T850] __nla_validate_parse: 5 callbacks suppressed [ 816.644210][ T850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7231'. [ 816.667610][ T853] openvswitch: netlink: IP tunnel dst address not specified [ 816.705343][ T853] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 816.890928][ T858] netlink: 'syz.4.7234': attribute type 1 has an invalid length. [ 816.922991][ T858] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7234'. [ 816.943459][ T858] netlink: 'syz.4.7234': attribute type 1 has an invalid length. [ 817.336672][ T875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 817.364159][ T875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 817.415068][ T875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 817.467433][ T884] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7238'. [ 817.548509][ T875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 817.673169][ T875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 818.377488][ T931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7250'. [ 818.646769][T17071] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.677900][T17071] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.696995][T17071] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.714041][T17071] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.726285][ T913] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 822.180179][ T937] syzkaller1: entered promiscuous mode [ 822.187358][ T937] syzkaller1: entered allmulticast mode [ 822.375371][ T976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7254'. [ 822.397120][T17074] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.428685][T17074] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.477150][ T981] lo: entered promiscuous mode [ 822.502296][ T981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.544623][ T986] xt_hashlimit: size too large, truncated to 1048576 [ 822.597446][T17074] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.611610][T17074] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.816264][ T1002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7262'. [ 822.847533][ T1002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7262'. [ 822.908585][ T1002] erspan0: entered promiscuous mode [ 822.919882][ T1002] gretap0: entered promiscuous mode [ 822.934240][ T1002] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 822.952169][ T1002] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 823.110678][ T1019] SET target dimension over the limit! [ 825.653205][ T988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.960760][ T1044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7269'. [ 826.183088][ T1055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7274'. [ 826.501616][ T1076] Bluetooth: MGMT ver 1.23 [ 826.525855][ T1075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7278'. [ 826.604716][ T1082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7279'. [ 826.657691][ T1084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7279'. [ 827.568031][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7284'. [ 827.588604][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7284'. [ 827.605483][ T1111] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7283'. [ 827.637661][ T1117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7284'. [ 827.823888][ T1125] netlink: 'syz.1.7287': attribute type 1 has an invalid length. [ 827.982371][ T1135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7290'. [ 828.028931][ T1125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 828.050712][ T1135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7290'. [ 828.665204][ T1159] netlink: 'syz.3.7295': attribute type 58 has an invalid length. [ 828.702376][ T1159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7295'. [ 829.057471][ T1178] tipc: Enabling not permitted [ 829.089831][ T1178] tipc: Enabling of bearer rejected, failed to enable media [ 829.638573][ T1201] syzkaller0: entered promiscuous mode [ 829.658523][ T1201] syzkaller0: entered allmulticast mode [ 829.797171][ T1207] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 829.861167][ T1210] netlink: 'syz.0.7306': attribute type 21 has an invalid length. [ 829.912652][ T1210] IPv6: NLM_F_CREATE should be specified when creating new route [ 829.931495][ T1210] netlink: 'syz.0.7306': attribute type 1 has an invalid length. [ 830.160815][ T1219] netlink: 'syz.3.7308': attribute type 1 has an invalid length. [ 830.377128][ T1219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 830.466192][ T1219] bond2: (slave geneve2): making interface the new active one [ 830.477951][ T1219] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 830.543574][T17071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.584343][T17071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.642538][T17074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.675942][ T1239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7314'. [ 830.689591][T17074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.919267][ T1238] syzkaller1: entered promiscuous mode [ 830.960118][ T1238] syzkaller1: entered allmulticast mode [ 831.748393][ T1284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7324'. [ 831.900678][ T1286] xfrm1: entered allmulticast mode [ 832.081557][ T1300] netlink: 'syz.4.7327': attribute type 4 has an invalid length. [ 832.127917][ T1300] netlink: 'syz.4.7327': attribute type 4 has an invalid length. [ 832.334927][ T1311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7328'. [ 832.641397][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7331'. [ 832.662376][ T1325] netlink: 'syz.0.7332': attribute type 9 has an invalid length. [ 832.726454][ T1327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7331'. [ 832.896295][ T1324] sctp: [Deprecated]: syz.3.7331 (pid 1324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 832.896295][ T1324] Use struct sctp_sack_info instead [ 832.954441][ T1336] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.7334'. [ 832.958581][ T1335] syzkaller1: entered promiscuous mode [ 833.011178][ T1335] syzkaller1: entered allmulticast mode [ 833.600154][ T1359] bond3: option min_links: invalid value (18446744073709551614) [ 833.657679][ T1359] bond3: option min_links: allowed values 0 - 2147483647 [ 833.682128][ T1359] bond3 (unregistering): Released all slaves [ 834.530887][ T1424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7349'. [ 834.951265][ T1427] bridge: RTM_NEWNEIGH with invalid ether address [ 835.079159][T17982] IPVS: starting estimator thread 0... [ 835.203261][ T1441] IPVS: using max 28 ests per chain, 67200 per kthread [ 835.427390][ T1449] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 836.363371][ T1494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7368'. [ 836.401136][ T1494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7368'. [ 836.503681][ T1499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.533111][ T1497] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7369'. [ 836.777597][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7376'. [ 836.788054][ T1515] netlink: 'syz.1.7376': attribute type 6 has an invalid length. [ 836.798669][ T1515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7376'. [ 836.900723][ T1511] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.943147][ T1525] openvswitch: netlink: Tunnel attr 36 out of range max 16 [ 837.019648][ T1525] lo: left promiscuous mode [ 837.190567][ T5638] IPVS: starting estimator thread 0... [ 837.206658][ T1525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 837.233283][ T8444] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.257891][ T8444] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.280768][ T1534] IPVS: lc: FWM 3 0x00000003 - no destination available [ 837.313814][ T8444] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.328729][ T1536] IPVS: using max 25 ests per chain, 60000 per kthread [ 837.351543][ T8444] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.503235][ T1521] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7378'. [ 837.665529][ T1552] h: entered promiscuous mode [ 837.689289][ T1552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7383'. [ 837.893429][ T1567] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7385'. [ 837.945952][ T1570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7385'. [ 837.995482][ T1511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.224979][ T1511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.243649][ T1586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7390'. [ 838.463087][ T1511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.580721][ T1602] syzkaller1: entered promiscuous mode [ 838.615692][ T1602] syzkaller1: entered allmulticast mode [ 838.748980][ T1621] IPVS: sh: FWM 3 0x00000003 - no destination available [ 838.935237][ T8444] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.083538][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.143350][ T8444] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.160412][ T8444] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.636272][ T1670] lo: left promiscuous mode [ 839.673912][ T1673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7408'. [ 839.740444][ T1673] nbd: must specify an index to disconnect [ 839.840941][ T1670] macsec0: left allmulticast mode [ 839.859249][ T1670] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 840.020825][ T1680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7409'. [ 840.729472][ T1731] netlink: 'syz.1.7419': attribute type 25 has an invalid length. [ 840.843041][ T5628] Bluetooth: hci1: command 0x0405 tx timeout [ 841.300696][ T1751] syzkaller0: entered promiscuous mode [ 841.326792][ T1751] syzkaller0: entered allmulticast mode [ 841.340830][ T1763] netlink: 'syz.0.7429': attribute type 12 has an invalid length. [ 841.661927][ T1779] xt_cgroup: invalid path, errno=-2 [ 844.640422][ T1791] netlink: 'syz.0.7437': attribute type 9 has an invalid length. [ 844.649323][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7437'. [ 844.675958][ T1791] netlink: 'syz.0.7437': attribute type 9 has an invalid length. [ 844.687194][ T57] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.696438][ T57] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.706212][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7437'. [ 844.718047][ T57] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.729988][ T57] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.987893][ T1808] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7441'. [ 845.127839][ T1815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7444'. [ 845.244933][ T1817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7443'. [ 845.320242][ T1824] IPVS: Unknown mcast interface: pimreg [ 845.494944][ T1840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7450'. [ 845.563811][ T1841] hsr_slave_0: left promiscuous mode [ 845.599695][ T1841] hsr_slave_1: left promiscuous mode [ 845.717850][ T1852] syzkaller0: entered promiscuous mode [ 845.723895][ T1852] syzkaller0: entered allmulticast mode [ 845.775152][ T1852] Bluetooth: MGMT ver 1.23 [ 846.038239][ T1868] netlink: 'syz.1.7455': attribute type 23 has an invalid length. [ 846.146660][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7459'. [ 846.202836][ T1873] netlink: 'syz.0.7460': attribute type 1 has an invalid length. [ 846.311637][ T1873] 8021q: adding VLAN 0 to HW filter on device bond8 [ 846.561323][ T1893] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20001 [ 847.776812][ T1968] netlink: 170676 bytes leftover after parsing attributes in process `syz.4.7488'. [ 847.788561][ T1968] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 847.800717][ T1968] openvswitch: netlink: Message has 512 unknown bytes. [ 847.944084][ T1975] dvmrp0: entered allmulticast mode [ 848.246657][ T1997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7496'. [ 848.320714][ T1997] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 848.365695][ T1997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 848.448664][ T1997] bond5 (unregistering): Released all slaves [ 848.769684][ T2018] netlink: 'syz.3.7500': attribute type 2 has an invalid length. [ 848.905142][ T2029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7504'. [ 849.545813][ T2069] netlink: 'syz.0.7510': attribute type 10 has an invalid length. [ 849.822868][ T2084] x_tables: duplicate underflow at hook 1 [ 849.846880][ T2087] netlink: 'syz.3.7516': attribute type 2 has an invalid length. [ 849.874942][ T2087] __nla_validate_parse: 2 callbacks suppressed [ 849.874963][ T2087] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7516'. [ 849.923060][ T2099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 849.963644][ T2084] xt_CT: No such helper "snmp_trap" [ 849.981641][ T2086] xt_CT: No such helper "snmp_trap" [ 850.159634][ T2108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7519'. [ 850.314390][ T2112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7520'. [ 850.334419][ T2112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7520'. [ 850.346005][ T2112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7520'. [ 850.591601][ T2123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7523'. [ 852.052366][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 854.875703][ T2136] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7527'. [ 854.929984][ T2137] tipc: Started in network mode [ 854.949028][ T2137] tipc: Node identity 7e9683cf491a, cluster identity 4711 [ 854.973022][ T2137] tipc: Enabled bearer , priority 0 [ 854.987807][ T2142] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 855.032392][ T2141] bond6 (unregistering): Released all slaves [ 855.083326][ T2148] netlink: 'syz.3.7530': attribute type 34 has an invalid length. [ 855.093758][ T2148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7530'. [ 855.202684][ T2144] syzkaller0: entered promiscuous mode [ 855.208636][ T2144] syzkaller0: entered allmulticast mode [ 855.215798][ T2144] tipc: Resetting bearer [ 855.279573][ T2135] tipc: Resetting bearer [ 855.415001][ T2160] block nbd0: Unsupported socket: should be TCP or UNIX. [ 855.448030][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7533'. [ 859.305403][ T2135] tipc: Disabling bearer [ 859.338034][ T2172] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.424215][T17982] tipc: Node number set to 931955663 [ 860.048153][ T2223] ip6t_rpfilter: unknown options [ 860.066050][ T2225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7557'. [ 860.188779][ T2232] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7560'. [ 860.255121][ T2236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7562'. [ 860.265804][ T2236] xt_cgroup: xt_cgroup: no path or classid specified [ 860.479203][ T2242] netlink: 'syz.4.7565': attribute type 10 has an invalid length. [ 860.488256][ T2242] syz_tun: entered promiscuous mode [ 860.498958][ T2242] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 860.715654][ T2223] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 860.915965][ T2252] netlink: 'syz.4.7567': attribute type 17 has an invalid length. [ 860.960196][ T2252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7567'. [ 860.988045][ T2252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7567'. [ 861.320078][ T2264] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 861.339876][ T2265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7572'. [ 861.355217][ T2264] TCP: TCP_TX_DELAY enabled [ 861.363930][ T2267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7574'. [ 861.375993][ T2264] netlink: 'syz.0.7573': attribute type 1 has an invalid length. [ 861.395416][ T2264] netlink: 208 bytes leftover after parsing attributes in process `syz.0.7573'. [ 861.580804][ T2275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7576'. [ 861.620435][ T2275] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 861.637844][ T2277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7578'. [ 861.699925][ T2280] syzkaller0: entered promiscuous mode [ 861.711116][ T2280] syzkaller0: entered allmulticast mode [ 861.822355][ T2285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7580'. [ 861.980579][ T2294] dvmrp8: entered allmulticast mode [ 862.158959][ T2302] netlink: 'syz.2.7586': attribute type 1 has an invalid length. [ 862.258065][ T2304] syzkaller0: entered promiscuous mode [ 862.270506][ T2304] syzkaller0: entered allmulticast mode [ 862.756097][ T2334] netlink: 'syz.2.7595': attribute type 3 has an invalid length. [ 864.269298][ T2411] netlink: 'syz.0.7615': attribute type 13 has an invalid length. [ 864.305889][ T2413] netlink: 'syz.0.7615': attribute type 13 has an invalid length. [ 864.521566][ T2430] netlink: 'syz.4.7617': attribute type 1 has an invalid length. [ 864.881425][ T2444] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 864.913699][ T2444] bond4 (unregistering): Released all slaves [ 865.101251][ T2462] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 865.184652][ T2409] C speed is unknown, defaulting to 1000 [ 865.665221][ T2493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 865.674351][ T2487] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 865.712933][ T2487] syzkaller1: linktype set to 823 [ 865.740741][ T2487] netlink: 'syz.0.7634': attribute type 1 has an invalid length. [ 865.848990][ T2487] 8021q: adding VLAN 0 to HW filter on device bond9 [ 865.957411][ T2510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 866.202952][ T2525] __nla_validate_parse: 13 callbacks suppressed [ 866.202975][ T2525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7644'. [ 866.295389][ T2533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7645'. [ 866.328372][ T2412] C speed is unknown, defaulting to 1000 [ 866.351413][ T2409] lo speed is unknown, defaulting to 1000 [ 866.375899][ T2532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7646'. [ 866.486471][ T2535] veth0_to_bridge: entered promiscuous mode [ 866.600610][ T2534] veth0_to_bridge: left promiscuous mode [ 866.609509][ T2544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7650'. [ 866.630079][ T2548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7650'. [ 866.661401][ T2544] netlink: 'syz.4.7650': attribute type 7 has an invalid length. [ 866.693065][ T2544] netlink: 'syz.4.7650': attribute type 8 has an invalid length. [ 866.707022][ T2544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7650'. [ 866.788691][ T2552] netlink: 'syz.0.7651': attribute type 10 has an invalid length. [ 866.905440][ T2564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.138994][ T2575] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.7656'. [ 867.243590][ T2580] SET target dimension over the limit! [ 867.259152][ T2412] lo speed is unknown, defaulting to 1000 [ 867.348204][ T2582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7659'. [ 867.402323][ T2592] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 867.458061][ T2582] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 870.273927][ T2596] lo: entered promiscuous mode [ 870.302368][ T2596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.433991][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 870.728972][ T2633] netlink: 'syz.1.7669': attribute type 32 has an invalid length. [ 870.800569][ T2633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7669'. [ 870.838732][ T2635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7670'. [ 871.021188][ T2633] bond6: option coupled_control: invalid value (68) [ 871.056238][ T2633] bond6 (unregistering): Released all slaves [ 871.870394][ T2679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7679'. [ 871.899939][ T2679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7679'. [ 871.995987][ T2681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7680'. [ 872.136798][ T2681] 8021q: adding VLAN 0 to HW filter on device bond11 [ 872.217770][ T2681] bond11 (unregistering): Released all slaves [ 872.418904][ T2711] syzkaller1: entered promiscuous mode [ 872.434454][ T2711] syzkaller1: entered allmulticast mode [ 872.671305][ T2731] netlink: 'syz.2.7693': attribute type 1 has an invalid length. [ 872.793827][ T2731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 872.835327][ T2736] bond3: (slave geneve2): making interface the new active one [ 872.847308][ T2736] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 872.867075][ T2749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7696'. [ 873.070108][ T2760] syzkaller0: entered promiscuous mode [ 873.102856][ T2760] syzkaller0: entered allmulticast mode [ 873.164941][ T2760] tipc: Enabled bearer , priority 0 [ 873.187803][ T2759] tipc: Resetting bearer [ 873.334803][ T2759] tipc: Disabling bearer [ 873.543395][ T2792] netlink: 'syz.3.7704': attribute type 1 has an invalid length. [ 873.588167][ T2800] netlink: 'syz.2.7708': attribute type 1 has an invalid length. [ 873.607962][ T2793] bond4 (unregistering): Released all slaves [ 873.645706][ T2792] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 873.646406][ T2802] veth1_to_team: Caught tx_queue_len zero misconfig [ 873.723499][ T2800] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 873.887837][ T2816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7710'. [ 874.226693][ T2839] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7716'. [ 874.256000][ T2839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7716'. [ 874.327178][ T2857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.839849][ T2897] netlink: 'syz.1.7727': attribute type 1 has an invalid length. [ 874.872837][ T2900] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 874.883269][ T2897] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7727'. [ 874.946941][ T2897] nbd1: detected capacity change from 0 to 127 [ 874.999226][ T1593] block nbd1: Dead connection, failed to find a fallback [ 875.007562][ T1593] block nbd1: shutting down sockets [ 875.018646][ T1593] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.035212][ T1593] Buffer I/O error on dev nbd1, logical block 0, async page read [ 875.045125][ T1593] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 875.056398][ T1593] Buffer I/O error on dev nbd1, logical block 1, async page read [ 875.065599][ T1593] Buffer I/O error on dev nbd1, logical block 2, async page read [ 875.075067][ T1593] Buffer I/O error on dev nbd1, logical block 3, async page read [ 875.086787][ T1593] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.097447][ T1593] Buffer I/O error on dev nbd1, logical block 0, async page read [ 875.106554][ T1593] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 875.117481][ T1593] Buffer I/O error on dev nbd1, logical block 1, async page read [ 875.126436][ T1593] Buffer I/O error on dev nbd1, logical block 2, async page read [ 875.135413][ T1593] Buffer I/O error on dev nbd1, logical block 3, async page read [ 875.145071][ T1593] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 875.156166][ T1593] Buffer I/O error on dev nbd1, logical block 0, async page read [ 875.165240][ T1593] Buffer I/O error on dev nbd1, logical block 1, async page read [ 875.174589][ T1593] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.187047][ T1593] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 875.197786][ T1593] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 875.209071][ T1593] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 875.219714][ T1593] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.231184][ T2907] ldm_validate_partition_table(): Disk read failed. [ 875.245739][ T2907] Dev nbd1: unable to read RDB block 0 [ 875.256475][ T2907] nbd1: unable to read partition table [ 875.298615][ T2907] ldm_validate_partition_table(): Disk read failed. [ 875.344943][ T2907] Dev nbd1: unable to read RDB block 0 [ 875.395682][ T2907] nbd1: unable to read partition table [ 875.415086][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7735'. [ 875.460937][ T2919] syzkaller1: entered promiscuous mode [ 875.468359][ T2919] syzkaller1: entered allmulticast mode [ 875.478113][ T2919] openvswitch: netlink: Tunnel attr 9487 out of range max 16 [ 875.550965][ T2923] netlink: 'syz.0.7740': attribute type 1 has an invalid length. [ 875.572742][ T2917] dvmrp0: left allmulticast mode [ 875.638558][ T2925] block nbd0: Unsupported socket: should be TCP or UNIX. [ 875.897079][ T2923] bond11: entered promiscuous mode [ 875.910184][ T2923] 8021q: adding VLAN 0 to HW filter on device bond11 [ 875.940404][ T2924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7740'. [ 875.988594][ T2932] bond11: (slave bridge6): making interface the new active one [ 875.997570][ T2932] bridge6: entered promiscuous mode [ 876.006048][ T2932] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 876.207435][ T2948] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 876.301021][ T2946] vlan3: entered allmulticast mode [ 876.320356][ T2946] bond0: entered allmulticast mode [ 876.344488][ T2946] syz_tun: entered allmulticast mode [ 876.543306][ T2973] nbd: couldn't find a device at index 67108864 [ 876.764022][ T2985] xt_hashlimit: max too large, truncated to 1048576 [ 876.781540][ T2985] No such timeout policy "syz1" [ 876.790365][ T2983] syzkaller0: entered promiscuous mode [ 876.828077][ T2989] netlink: 'syz.1.7760': attribute type 12 has an invalid length. [ 876.979361][ T2989] bond6: option primary_reselect: invalid value (255) [ 877.025722][ T2989] bond6 (unregistering): Released all slaves [ 877.037430][ T2997] netlink: 'syz.0.7763': attribute type 1 has an invalid length. [ 877.095995][ T2997] __nla_validate_parse: 1 callbacks suppressed [ 877.096011][ T2997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7763'. [ 877.137900][ T3000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7762'. [ 877.326490][ T3008] netlink: 'syz.0.7764': attribute type 1 has an invalid length. [ 877.471133][ T3008] bond12: entered promiscuous mode [ 877.511424][ T3008] 8021q: adding VLAN 0 to HW filter on device bond12 [ 877.635007][ T3008] 8021q: adding VLAN 0 to HW filter on device bond12 [ 877.642506][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.658233][ T3008] bond12: (slave ipip0): The slave device specified does not support setting the MAC address [ 877.680897][ T3025] IPv6: NLM_F_CREATE should be specified when creating new route [ 877.693511][ T3008] bond12: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 877.710101][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.728765][ T3008] bond12: (slave ipip0): making interface the new active one [ 877.738099][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.750598][ T3008] ipip0: entered promiscuous mode [ 877.766943][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.777021][ T3008] bond12: (slave ipip0): Enslaving as an active interface with an up link [ 877.787604][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.796831][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.809814][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.818521][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.826982][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.837073][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 877.845732][ T3025] netlink: 'syz.3.7770': attribute type 21 has an invalid length. [ 878.425475][ T3068] xt_cgroup: path and classid specified [ 878.480626][ T3074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7782'. [ 878.480709][ T3076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7782'. [ 878.550854][ T3074] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7782'. [ 878.596128][ T3076] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7782'. [ 878.680562][ T3074] veth11: entered promiscuous mode [ 878.765070][ T3076] veth13: entered promiscuous mode [ 879.172870][ T3104] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 879.196224][ T3104] bond13: option packets_per_slave: allowed values 0 - 65535 [ 879.245328][ T3104] bond13 (unregistering): Released all slaves [ 879.359415][ T3120] sch_fq: defrate 0 ignored. [ 879.500524][ T3127] openvswitch: netlink: Missing valid actions attribute. [ 879.508765][ T3127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.784602][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7805'. [ 880.069435][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7808'. [ 880.095439][ T8456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.116743][ T8456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.130497][ T3162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7808'. [ 880.143206][ T3162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7808'. [ 880.181116][ T3162] geneve2: entered promiscuous mode [ 880.201128][ T3162] geneve2: entered allmulticast mode [ 880.223585][T17068] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 880.252128][T17068] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 880.312176][T17068] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 880.345227][T17061] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 880.561224][ T3173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 880.599299][ T3173] bond7: (slave bond8): making interface the new active one [ 880.633415][ T3173] bond7: (slave bond8): Enslaving as an active interface with an up link [ 880.666353][ T3197] xt_TPROXY: Can be used only with -p tcp or -p udp [ 881.120496][ T3229] bond9: option coupled_control: invalid value (192) [ 881.130564][ T3229] bond9 (unregistering): Released all slaves [ 881.833906][ T3221] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.841663][ T3221] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.886783][ T3221] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 882.003140][ T3259] [ 882.005565][ T3259] ====================================================== [ 882.012735][ T3259] WARNING: possible circular locking dependency detected [ 882.019893][ T3259] syzkaller #0 Not tainted [ 882.024382][ T3259] ------------------------------------------------------ [ 882.031491][ T3259] syz.3.7835/3259 is trying to acquire lock: [ 882.037502][ T3259] ffff888028267498 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 882.046543][ T3259] [ 882.046543][ T3259] but task is already holding lock: [ 882.054298][ T3259] ffff88802af70588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 882.064470][ T3259] [ 882.064470][ T3259] which lock already depends on the new lock. [ 882.064470][ T3259] [ 882.074992][ T3259] [ 882.074992][ T3259] the existing dependency chain (in reverse order) is: [ 882.084034][ T3259] [ 882.084034][ T3259] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 882.092118][ T3259] __mutex_lock+0x19d/0x1550 [ 882.097295][ T3259] elevator_change+0x1af/0x480 [ 882.103162][ T3259] elevator_set_none+0xb5/0x140 [ 882.108853][ T3259] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 882.115294][ T3259] nbd_start_device+0x189/0xb30 [ 882.120821][ T3259] nbd_genl_connect+0x1597/0x1c10 [ 882.126493][ T3259] genl_family_rcv_msg_doit+0x233/0x340 [ 882.132908][ T3259] genl_rcv_msg+0x614/0x7a0 [ 882.140439][ T3259] netlink_rcv_skb+0x226/0x4a0 [ 882.147167][ T3259] genl_rcv+0x28/0x40 [ 882.151848][ T3259] netlink_unicast+0x7bb/0x940 [ 882.157169][ T3259] netlink_sendmsg+0x813/0xb40 [ 882.162591][ T3259] sock_sendmsg_nosec+0x13a/0x180 [ 882.168561][ T3259] ____sys_sendmsg+0x54e/0x850 [ 882.174066][ T3259] ___sys_sendmsg+0x2a5/0x360 [ 882.179308][ T3259] __x64_sys_sendmsg+0x1b1/0x290 [ 882.184788][ T3259] do_syscall_64+0x174/0x580 [ 882.189956][ T3259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.196401][ T3259] [ 882.196401][ T3259] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 882.205147][ T3259] blk_alloc_queue+0x544/0x690 [ 882.211240][ T3259] __blk_mq_alloc_disk+0x194/0x390 [ 882.217011][ T3259] nbd_dev_add+0x494/0xb60 [ 882.221999][ T3259] nbd_init+0x15f/0x1e0 [ 882.226864][ T3259] do_one_initcall+0x250/0x870 [ 882.232199][ T3259] do_initcall_level+0x10a/0x1a0 [ 882.237847][ T3259] do_initcalls+0x59/0xa0 [ 882.242752][ T3259] kernel_init_freeable+0x29d/0x3e0 [ 882.248515][ T3259] kernel_init+0x1d/0x1d0 [ 882.253426][ T3259] ret_from_fork+0x514/0xb70 [ 882.258711][ T3259] ret_from_fork_asm+0x1a/0x30 [ 882.264198][ T3259] [ 882.264198][ T3259] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 882.272101][ T3259] fs_reclaim_acquire+0x71/0x100 [ 882.277808][ T3259] __kmalloc_cache_node_noprof+0x66/0x630 [ 882.284100][ T3259] create_worker+0x112/0x7b0 [ 882.289281][ T3259] workqueue_prepare_cpu+0xe4/0x170 [ 882.295057][ T3259] cpuhp_invoke_callback+0x434/0x810 [ 882.300935][ T3259] _cpu_up+0x2ce/0x5b0 [ 882.305652][ T3259] cpu_up+0x1d2/0x220 [ 882.310292][ T3259] cpuhp_bringup_mask+0xb2/0x1a0 [ 882.315912][ T3259] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 882.322374][ T3259] bringup_nonboot_cpus+0x17/0x30 [ 882.328151][ T3259] smp_init+0x32/0x110 [ 882.332864][ T3259] kernel_init_freeable+0x27f/0x3e0 [ 882.338631][ T3259] kernel_init+0x1d/0x1d0 [ 882.343523][ T3259] ret_from_fork+0x514/0xb70 [ 882.348688][ T3259] ret_from_fork_asm+0x1a/0x30 [ 882.354004][ T3259] [ 882.354004][ T3259] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 882.361780][ T3259] cpus_read_lock+0x42/0x160 [ 882.366944][ T3259] static_key_slow_inc+0x12/0x30 [ 882.372573][ T3259] nbd_genl_reconfigure+0x1301/0x1e80 [ 882.378692][ T3259] genl_family_rcv_msg_doit+0x233/0x340 [ 882.384806][ T3259] genl_rcv_msg+0x614/0x7a0 [ 882.389967][ T3259] netlink_rcv_skb+0x226/0x4a0 [ 882.395410][ T3259] genl_rcv+0x28/0x40 [ 882.400194][ T3259] netlink_unicast+0x7bb/0x940 [ 882.405820][ T3259] netlink_sendmsg+0x813/0xb40 [ 882.411157][ T3259] sock_sendmsg_nosec+0x13a/0x180 [ 882.416744][ T3259] ____sys_sendmsg+0x54e/0x850 [ 882.422334][ T3259] ___sys_sendmsg+0x2a5/0x360 [ 882.427614][ T3259] __x64_sys_sendmsg+0x1b1/0x290 [ 882.433124][ T3259] do_syscall_64+0x174/0x580 [ 882.438389][ T3259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.444850][ T3259] [ 882.444850][ T3259] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 882.452551][ T3259] __mutex_lock+0x19d/0x1550 [ 882.457728][ T3259] nbd_queue_rq+0x373/0x1150 [ 882.463153][ T3259] blk_mq_dispatch_rq_list+0x499/0x1990 [ 882.469449][ T3259] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 882.476541][ T3259] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 882.483204][ T3259] blk_mq_run_work_fn+0x16c/0x300 [ 882.488881][ T3259] process_scheduled_works+0xa8e/0x14e0 [ 882.494978][ T3259] worker_thread+0xa47/0xfb0 [ 882.500129][ T3259] kthread+0x388/0x470 [ 882.504748][ T3259] ret_from_fork+0x514/0xb70 [ 882.509887][ T3259] ret_from_fork_asm+0x1a/0x30 [ 882.515208][ T3259] [ 882.515208][ T3259] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 882.524326][ T3259] __mutex_lock+0x19d/0x1550 [ 882.529488][ T3259] nbd_queue_rq+0xc1/0x1150 [ 882.534791][ T3259] blk_mq_dispatch_rq_list+0x499/0x1990 [ 882.541773][ T3259] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 882.549711][ T3259] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 882.556270][ T3259] blk_mq_run_work_fn+0x16c/0x300 [ 882.561859][ T3259] process_scheduled_works+0xa8e/0x14e0 [ 882.568129][ T3259] worker_thread+0xa47/0xfb0 [ 882.573267][ T3259] kthread+0x388/0x470 [ 882.577988][ T3259] ret_from_fork+0x514/0xb70 [ 882.583576][ T3259] ret_from_fork_asm+0x1a/0x30 [ 882.588937][ T3259] [ 882.588937][ T3259] -> #0 (set->srcu){.+.+}-{0:0}: [ 882.596115][ T3259] __lock_acquire+0x1520/0x2cf0 [ 882.601529][ T3259] lock_sync+0x9d/0x120 [ 882.606244][ T3259] __synchronize_srcu+0xc9/0x2f0 [ 882.611753][ T3259] elevator_switch+0x1e8/0x7b0 [ 882.617103][ T3259] elevator_change+0x2fa/0x480 [ 882.622530][ T3259] elevator_set_default+0x375/0x440 [ 882.628548][ T3259] blk_register_queue+0x3f3/0x4e0 [ 882.634200][ T3259] __add_disk+0x6cb/0xe30 [ 882.639072][ T3259] add_disk_fwnode+0x100/0x3a0 [ 882.645693][ T3259] nbd_dev_add+0x733/0xb60 [ 882.650679][ T3259] nbd_genl_connect+0x992/0x1c10 [ 882.656174][ T3259] genl_family_rcv_msg_doit+0x233/0x340 [ 882.662467][ T3259] genl_rcv_msg+0x614/0x7a0 [ 882.667533][ T3259] netlink_rcv_skb+0x226/0x4a0 [ 882.672864][ T3259] genl_rcv+0x28/0x40 [ 882.677432][ T3259] netlink_unicast+0x7bb/0x940 [ 882.683368][ T3259] netlink_sendmsg+0x813/0xb40 [ 882.689114][ T3259] sock_sendmsg_nosec+0x13a/0x180 [ 882.694697][ T3259] ____sys_sendmsg+0x54e/0x850 [ 882.700185][ T3259] ___sys_sendmsg+0x2a5/0x360 [ 882.705408][ T3259] __x64_sys_sendmsg+0x1b1/0x290 [ 882.711064][ T3259] do_syscall_64+0x174/0x580 [ 882.716197][ T3259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.722664][ T3259] [ 882.722664][ T3259] other info that might help us debug this: [ 882.722664][ T3259] [ 882.733007][ T3259] Chain exists of: [ 882.733007][ T3259] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 882.733007][ T3259] [ 882.746740][ T3259] Possible unsafe locking scenario: [ 882.746740][ T3259] [ 882.754400][ T3259] CPU0 CPU1 [ 882.760005][ T3259] ---- ---- [ 882.765392][ T3259] lock(&q->elevator_lock); [ 882.770011][ T3259] lock(&q->q_usage_counter(io)#51); [ 882.777930][ T3259] lock(&q->elevator_lock); [ 882.785187][ T3259] sync(set->srcu); [ 882.789373][ T3259] [ 882.789373][ T3259] *** DEADLOCK *** [ 882.789373][ T3259] [ 882.797633][ T3259] 6 locks held by syz.3.7835/3259: [ 882.803477][ T3259] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 882.812078][ T3259] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 882.822334][ T3259] #2: ffff8880513de9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 882.833018][ T3259] #3: ffff88802af70610 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 882.842915][ T3259] #4: ffff88802af70098 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 882.854370][ T3259] #5: ffff88802af70588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 882.864432][ T3259] [ 882.864432][ T3259] stack backtrace: [ 882.870353][ T3259] CPU: 0 UID: 0 PID: 3259 Comm: syz.3.7835 Not tainted syzkaller #0 PREEMPT(full) [ 882.870377][ T3259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.870390][ T3259] Call Trace: [ 882.870398][ T3259] [ 882.870407][ T3259] dump_stack_lvl+0xe8/0x150 [ 882.870439][ T3259] print_circular_bug+0x2e1/0x300 [ 882.870461][ T3259] check_noncircular+0x12e/0x150 [ 882.870482][ T3259] __lock_acquire+0x1520/0x2cf0 [ 882.870509][ T3259] ? check_noncircular+0xda/0x150 [ 882.870531][ T3259] ? lockdep_unlock+0x5d/0xd0 [ 882.870558][ T3259] ? __lock_acquire+0x13e8/0x2cf0 [ 882.870585][ T3259] ? __lock_acquire+0x13e8/0x2cf0 [ 882.870611][ T3259] ? __synchronize_srcu+0xb5/0x2f0 [ 882.870636][ T3259] lock_sync+0x9d/0x120 [ 882.870659][ T3259] ? __synchronize_srcu+0xb5/0x2f0 [ 882.870687][ T3259] __synchronize_srcu+0xc9/0x2f0 [ 882.870714][ T3259] ? __pfx___synchronize_srcu+0x10/0x10 [ 882.870738][ T3259] ? do_raw_spin_lock+0x12b/0x2f0 [ 882.870763][ T3259] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 882.870781][ T3259] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 882.870806][ T3259] ? synchronize_srcu+0x20a/0x260 [ 882.870832][ T3259] elevator_switch+0x1e8/0x7b0 [ 882.870857][ T3259] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 882.870876][ T3259] elevator_change+0x2fa/0x480 [ 882.870901][ T3259] ? do_raw_spin_unlock+0xf5/0x210 [ 882.870923][ T3259] elevator_set_default+0x375/0x440 [ 882.870950][ T3259] ? __pfx_elevator_set_default+0x10/0x10 [ 882.870981][ T3259] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 882.871079][ T3259] ? blk_crypto_sysfs_register+0x11c/0x170 [ 882.871151][ T3259] blk_register_queue+0x3f3/0x4e0 [ 882.871173][ T3259] __add_disk+0x6cb/0xe30 [ 882.871196][ T3259] add_disk_fwnode+0x100/0x3a0 [ 882.871217][ T3259] nbd_dev_add+0x733/0xb60 [ 882.871238][ T3259] ? __pfx_nbd_dev_add+0x10/0x10 [ 882.871264][ T3259] ? bpf_lsm_capable+0x9/0x20 [ 882.871290][ T3259] ? security_capable+0x7e/0x2c0 [ 882.871337][ T3259] ? radix_tree_lookup+0x25c/0x290 [ 882.871399][ T3259] nbd_genl_connect+0x992/0x1c10 [ 882.871420][ T3259] ? __pfx_nbd_genl_connect+0x10/0x10 [ 882.871438][ T3259] ? rcu_is_watching+0x15/0xb0 [ 882.871455][ T3259] ? trace_kmalloc+0x2a/0xf0 [ 882.871479][ T3259] ? __kmalloc_noprof+0x396/0x720 [ 882.871504][ T3259] ? __nla_parse+0x40/0x60 [ 882.871532][ T3259] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 882.871591][ T3259] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 882.871621][ T3259] genl_family_rcv_msg_doit+0x233/0x340 [ 882.871651][ T3259] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 882.871682][ T3259] ? __lock_acquire+0x683/0x2cf0 [ 882.871712][ T3259] genl_rcv_msg+0x614/0x7a0 [ 882.871743][ T3259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 882.871771][ T3259] ? __pfx_nbd_genl_connect+0x10/0x10 [ 882.871800][ T3259] netlink_rcv_skb+0x226/0x4a0 [ 882.871825][ T3259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 882.871856][ T3259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 882.871889][ T3259] ? down_read+0x2be/0x330 [ 882.871919][ T3259] genl_rcv+0x28/0x40 [ 882.871947][ T3259] netlink_unicast+0x7bb/0x940 [ 882.871975][ T3259] netlink_sendmsg+0x813/0xb40 [ 882.872007][ T3259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.872035][ T3259] ? aa_sock_msg_perm+0xf1/0x1b0 [ 882.872062][ T3259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.872087][ T3259] sock_sendmsg_nosec+0x13a/0x180 [ 882.872120][ T3259] ____sys_sendmsg+0x54e/0x850 [ 882.872147][ T3259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.872181][ T3259] ? import_iovec+0x73/0xa0 [ 882.872225][ T3259] ___sys_sendmsg+0x2a5/0x360 [ 882.872248][ T3259] ? __lock_acquire+0x683/0x2cf0 [ 882.872281][ T3259] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.872307][ T3259] ? futex_wait+0x2a2/0x390 [ 882.872365][ T3259] ? __fget_files+0x2a/0x420 [ 882.872396][ T3259] ? __fget_files+0x3a2/0x420 [ 882.872431][ T3259] __x64_sys_sendmsg+0x1b1/0x290 [ 882.872452][ T3259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 882.872480][ T3259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.872499][ T3259] do_syscall_64+0x174/0x580 [ 882.872520][ T3259] ? trace_irq_disable+0x3b/0x140 [ 882.872544][ T3259] ? clear_bhb_loop+0x40/0x90 [ 882.872577][ T3259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.872596][ T3259] RIP: 0033:0x7fc67019e019 [ 882.872614][ T3259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.872630][ T3259] RSP: 002b:00007fc670fb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.872649][ T3259] RAX: ffffffffffffffda RBX: 00007fc670425fa0 RCX: 00007fc67019e019 [ 882.872663][ T3259] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 882.872675][ T3259] RBP: 00007fc67023500c R08: 0000000000000000 R09: 0000000000000000 [ 882.872686][ T3259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.872697][ T3259] R13: 00007fc670426038 R14: 00007fc670425fa0 R15: 00007ffc996704c8 [ 882.872719][ T3259] [ 883.412886][ T3264] validate_nla: 59 callbacks suppressed [ 883.412906][ T3264] netlink: 'syz.4.7836': attribute type 32 has an invalid length. [ 883.427216][ T3264] netlink: 'syz.4.7836': attribute type 8 has an invalid length. [ 883.512927][ T3261] __nla_validate_parse: 6 callbacks suppressed [ 883.512950][ T3261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7835'. [ 883.533105][ T3261] nbd: nbd64 already in use