last executing test programs: 5.483912322s ago: executing program 0 (id=4626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x6a, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 5.199922657s ago: executing program 1 (id=4628): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) write(r0, &(0x7f0000000b00)="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", 0x1000) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd7ce8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce97511e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402264f5889c56a53709f603f181659c358ad806290d5f942f7a53b8a9deee9ff", 0xa0}], 0x1, 0x0, 0x0, 0x8080}, 0x2400401d) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000015000100faffffff0000002002180000", @ANYRES32=r3, @ANYBLOB="14000300766574683000000058a6000000000000"], 0x2c}}, 0x4000850) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) 4.931019825s ago: executing program 0 (id=4630): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x56}, &(0x7f00000003c0)=0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x1) getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f0000000100)) 4.36169468s ago: executing program 1 (id=4633): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20021000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5ff", 0xb8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 4.014650286s ago: executing program 2 (id=4634): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x7, 0x40, 0x7, 0x8, {{0x3a, 0x4, 0x3, 0x2c, 0xe8, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @multicast2, {[@rr={0x7, 0x23, 0xe6, [@loopback, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @empty, @empty, @loopback, @multicast2]}, @timestamp={0x44, 0x18, 0xf7, 0x0, 0xc, [0x6, 0x1, 0xd, 0x6, 0x401]}, @ssrr={0x89, 0x17, 0xa, [@local, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @multicast1]}, @end, @cipso={0x86, 0x28, 0x1, [{0x7, 0x4, "41db"}, {0x6, 0x3, '^'}, {0x7, 0xa, "5753753e5cbde3a0"}, {0x1, 0x9, "1d9f3fe7d82bd2"}, {0x5, 0x8, "274f15f35dfe"}]}, @cipso={0x86, 0x13, 0x1, [{0x2, 0xd, "5c42d81ef38570f12dfebe"}]}, @timestamp_addr={0x44, 0x34, 0x8d, 0x1, 0x1, [{@loopback, 0xf}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x6}, {@local, 0x7}, {@remote, 0x8aed}, {@loopback, 0x9c60}, {@multicast1, 0x9}]}, @generic={0x83, 0xf, "be4426de730e8e40adadc87bba"}]}}}}}) (async, rerun: 32) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000c080002400000000208000440000000020900010073797a3000000000140000001100010000000000000000000000000a28"], 0xd4}}, 0x0) 3.803273659s ago: executing program 0 (id=4636): openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000180)) 3.751449106s ago: executing program 2 (id=4637): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (rerun: 64) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r2, 0x1, 0xffffffff}, 0x10) poll(&(0x7f0000000080)=[{r0, 0x48}, {r1}, {r1, 0x8002}], 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0x4) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) 3.589779117s ago: executing program 1 (id=4640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x9c, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 2.967127781s ago: executing program 1 (id=4643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) 2.728697383s ago: executing program 0 (id=4644): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0xb, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4004890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='>', 0x1}], 0x1}, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000280)) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000002, 0x6e073, 0xffffffffffffffff, 0x100000000) 2.728213714s ago: executing program 2 (id=4645): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c304050000000000280012800b0001006772657461700000180002800400120005000900b40000000800140004000000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c304050000000000280012800b0001006772657461700000180002800400120005000900b40000000800140004000000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) 2.57529894s ago: executing program 4 (id=4646): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x24) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) socket$inet(0x2, 0xa, 0x2) 2.432579748s ago: executing program 1 (id=4647): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_tunnel_key={0x54, 0x18, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}]}, {0x1c, 0x6, "eff70f2c9296623b3f558b46b5363cadb53c8235cdce543a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x28, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004004000080000000100000080000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000100"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x5, 0xfffff4d6, 0x4, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x6, 0x7}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x300) writev(r5, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', r4, r5, 0x1, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xffffffffffffffcc}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.30859371s ago: executing program 3 (id=4648): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x804, @multicast1}}, 0x5, 0x6d0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x804, @multicast1}}, 0x5, 0x6d0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) accept(r0, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 2.11578781s ago: executing program 4 (id=4649): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 1.952126001s ago: executing program 4 (id=4650): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1d0, 0x230, 0x242, 0x1d0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0xff, 0x0, 0x1}, 0x0, 0xd8, 0x138, 0x0, {0xff0f000000000000}, [@common=@set={{0x40}, {{0x3, [0x3, 0x1, 0x4, 0x0, 0x2, 0x4], 0x6, 0x9}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x9, 0x2, 0x2, 0x2], 0x4, 0x1}, {0x3, [0x2, 0x2, 0xd, 0x1, 0x5, 0x6], 0x0, 0x6}}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 1.776526744s ago: executing program 3 (id=4651): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@private0, 0x0}, &(0x7f0000000200)=0x14) recvfrom$packet(r0, &(0x7f0000000080)=""/216, 0xd8, 0x10021, &(0x7f0000000240)={0x11, 0x19, r1}, 0x14) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x40) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r2, 0x12504000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000400)='\x00', 0x6c43c0, &(0x7f0000000440)={@_ha_fsid={[0xfffffff8, 0x500]}, {0x101, 0x100, 0x6d9d9e33, 0xffffffffffffffff}}, 0x1000, &(0x7f0000000480), &(0x7f00000004c0)=0x3ff}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @broadcast, r1}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x20, &(0x7f0000000540)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.578698778s ago: executing program 4 (id=4652): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='veth0_to_team\x00') r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000003f00000008000300e32bb593ee596f7b3be04f8080e98e442352cd7d49bc423297cdc76bb78f1a7e23bcc23f24c4b4b3436efce4416236dc97041bf5da70a2a4e5b53d0e83b3fd418f367a26f7a6aceca3f86016a3ff4b0d6d2cd04faf1f8e1546f1fe4a77c156e2ba1c46900cf513ebf8c104b968f9dd8e5debb879cb69cea65399b74491ec33cd7bad57", @ANYRES32=r6, @ANYBLOB="14005e8008000100ffffffff0800020000000000"], 0x30}}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x111, 0x2, 0x1, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008b0"], 0x178}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.4590483s ago: executing program 3 (id=4653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0xf5, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.140417784s ago: executing program 3 (id=4654): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0xfa73]}]}}}}}}}}, 0x0) 1.093344956s ago: executing program 2 (id=4655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x3c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 764.29922ms ago: executing program 0 (id=4656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2e000000302000000400000004000000000000187912d16f5fbd5ebb4b9444f9c5", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x3, 0x0, 0x0, 0x70bd26, 0x0, [@sadb_x_policy={0x0, 0x12, 0x1, 0x2, 0x0, 0x6e6bba, 0x9, {0x0, 0x6c, 0xf, 0xa1, 0x0, 0x2, 0x0, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38}}, 0x480c0) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x4c4}, 0x1, 0x0, 0x0, 0x1}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0xa, 0x801, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r6, 0x8) accept4(r6, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r7 = socket(0x10, 0x803, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x1b, 0x0, "6f3b695a6cff944db415e7aa1d8cb41a0df389b956816785a3b79d3d05f9fad17a005b3acec288a9f3d3033036428670a9c5acf745c5190b6b7689216bab425d0c24f693055d6f62838fc8d590cd0c88"}, 0xd8) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x6404481c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000600000000000800174000000000050005000000000005000100060000000d0003006c6973743a73657400000000e2ed1844a4a1637f2a1838713cf1a348816dd63027aab218485119ad3c89ccdbe8b228c0cdfe10b5f4e403548c603fcae26c060d96b8beefbe438cb77961e42d76e03f78739f03bf0a82dc7e7c52b0c63c3f933d710d58e38a2db8c543f2da28226409c9cf4727c0f8e44822fc65adee54327437de8ac32b01138eea3c1045da0917d61bfd999b7f31a1da12917fef16ffa9af8004f3ecb75af6210c08f22bd680fe5a7948ccb8ea75511749f2d853d843aa6bb9890574396861ee52a968f82b32209f06ae079b266943a6bec702c8f2d8f6356fb8f9ac67682f7d346c"], 0x5c}}, 0x0) 688.488289ms ago: executing program 3 (id=4657): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0503feffffff000000000700000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4004018}, 0x20044000) (async) shutdown(r1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x4, 0x305294c5, 0x10001, 0x9, 0x101, 0x2, r6}, 0x20) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000029c0)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (rerun: 32) 663.303927ms ago: executing program 2 (id=4658): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) 508.657695ms ago: executing program 4 (id=4659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 332.396972ms ago: executing program 1 (id=4660): syz_init_net_socket$nfc_raw(0x27, 0x4, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}}, 0x14}}, 0x4008030) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x200) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[{0x10, 0x1, 0x86}], 0x10}}], 0x2, 0x40840) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990009000000740000000800a0009e0900000800a1007c1a0000080026008009000008009f0004000001"], 0x48}}, 0x20000000) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r8, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000680)="dfa8d416db50e5", 0x7}, {&(0x7f0000000a40)="737beaeca1943e78120c97335a3e78610633b469d513871c483f23d49bfe7a21ac783b7240dac3fde8c3ee2b855a060f532b18fcdd72e05b5c99b8e02413a71c198da8f08f4784241cd4935ccf3bb72bfecd1bf337ff2f263575843f50ff9d0758bff9a06cda67d060811ad3a6459a59abbf0248c49f5e15314fd2b1153245398d5162918d2705f3d946623fc16bc46fb922b5c34b947e8aff0bf92f00c73e2ddc3e34992ba65e3eb021a52afc396c4aba4bc8e981e1b4c4ff88cf617b3f7a5ae774e1fe0a8074eb9b7fe058fe0d0c17b09a8a6d103930f8131c7b4a30d57d88d06f96ba736f22e24cf2390dd31d48e9", 0xf0}], 0x2) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xfffffffc, 0x8}, 0xc) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x14}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x26, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000700000000000000ff00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000b7080000000000007b8af8ff00000000b7080000680000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018170000", @ANYRES32, @ANYBLOB="00000000bb940000182230006b52abb18c88284d7f9dd5b71b76868585f4a175af6c59799bae3cdb1c121866c8885e89e657b09cb98b36bf25192b3a0c2324f5d546e1008a6a91ea30951d2636e9904ed5d4fd5568b0e79729d3e36604063f6a2d909515522fcc2cabf2ee6bd72595f5980b9d0313f0614a0579aa4bb0b7b305088171119ab80e6887187dc625238d7ee2298a25049e1e7f3095c2de05d55c29dec35c8c905a761b66a869fa38d7e4e5e5d27e", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001835000004000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x200, 0x8b, &(0x7f00000002c0)=""/139, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x2, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[r12, r13], &(0x7f0000000500)=[{0x4, 0x5, 0x7}, {0x3, 0x1, 0x4}, {0x0, 0x4, 0x9, 0x7}, {0x0, 0x4, 0x0, 0xa}, {0x4, 0x4, 0x2, 0x3}, {0x4, 0x3, 0x806, 0x1}, {0x5, 0x3, 0x1, 0x3}, {0x0, 0x2, 0x2, 0x6}, {0x0, 0x2, 0x5}], 0x10, 0x1}, 0x94) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) 127.901377ms ago: executing program 2 (id=4661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000002a0000010900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000a8008000100688d33f2"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e22, 0x1, @remote, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x41, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000290001002abd70e5929f7111e37e001e", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e30000000000000000000000014001680100001800c000700fcffffff03000000"], 0x48}}, 0x0) 82.944179ms ago: executing program 3 (id=4662): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) (async) 244.204µs ago: executing program 0 (id=4663): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020005000c"], 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0xc040) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0fd00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @random="0000520fd07a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @private=0xa010102, {[@lsrr={0x83, 0x7, 0x0, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x80, 0x3, 0x0, [{@multicast1}, {@empty}, {@remote}, {@loopback, 0xd}, {@dev={0xac, 0x14, 0x14, 0x40}}]}]}}, "ff80aa0100000034"}}}}}, 0x0) 0s ago: executing program 4 (id=4664): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3765, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0xbe}, @call={0x85, 0x0, 0x0, 0x79}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x52, &(0x7f0000000180)=""/82, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x10, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x5, 0x5, 0xb, 0x5}, {0x4, 0x5, 0xa, 0x3}], 0x10, 0x3}, 0x94) ioctl$FICLONE(r1, 0x40049409, r2) kernel console output (not intermixed with test programs): VQ 0x0 after dequeue, screwing up backlog [ 356.246066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.257090][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.275071][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.280943][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.987969][T17381] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.029378][T17381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3246'. [ 358.066038][T17388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.289690][T16961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.404743][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.465869][T16961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 358.511810][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.538557][T16961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 358.614097][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.657959][T16961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 358.725311][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.749760][T17419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3254'. [ 358.766400][T17417] net_ratelimit: 1 callbacks suppressed [ 358.766419][T17417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.783531][T17416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.083357][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 359.117193][T17417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.126769][T17416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.240841][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.276463][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.362084][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.400692][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.420931][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 359.449912][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.457576][ T644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.489550][T17459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3262'. [ 359.524622][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.531928][T16436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.821226][T17471] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 359.860139][T17471] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 359.878225][T17473] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 359.983112][T17477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.196559][T17483] __nla_validate_parse: 65 callbacks suppressed [ 360.196580][T17483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3267'. [ 360.398535][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.457565][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3269'. [ 360.527625][ T5633] block nbd6: Receive control failed (result -107) [ 361.113191][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.200363][T17542] bridge1: entered promiscuous mode [ 361.445307][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.603265][T16961] veth0_vlan: entered promiscuous mode [ 361.622354][T16961] veth1_vlan: entered promiscuous mode [ 361.673513][T16961] veth0_macvtap: entered promiscuous mode [ 361.685221][T16961] veth1_macvtap: entered promiscuous mode [ 361.709093][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.724377][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.790370][T16437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.837088][T16437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.856782][T16437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.868571][T16437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.317444][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.476901][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.852393][T17529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.862426][T17550] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3277'. [ 364.249246][T16436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.281198][T16436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.356884][ T644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.377375][ T644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.387420][T17585] net_ratelimit: 1 callbacks suppressed [ 364.387439][T17585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.435794][T17585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.465883][T17585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.478239][T17589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.527495][T17589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.541925][T17589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.556925][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.591905][T17589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.641301][T17594] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3285'. [ 364.653121][T17577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.678590][T17594] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3285'. [ 364.851817][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3148'. [ 364.885668][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3148'. [ 364.935636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.004600][T17610] syzkaller1: entered promiscuous mode [ 365.022170][T17610] syzkaller1: entered allmulticast mode [ 365.256645][ T4942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.272076][ T4942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.286834][ T4942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.313456][ T4942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.325285][ T4942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.838243][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.980060][T17646] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 366.007949][T17646] netlink: 'syz.0.3298': attribute type 2 has an invalid length. [ 366.386937][T17671] ip6t_srh: unknown srh invflags 4000 [ 366.401721][T17671] netlink: 'syz.0.3302': attribute type 21 has an invalid length. [ 366.412757][T17671] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3302'. [ 366.575147][T17615] lo speed is unknown, defaulting to 1000 [ 367.440456][ T4942] Bluetooth: hci4: command tx timeout [ 367.504900][T17615] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.515334][T17615] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.522877][T17615] bridge_slave_0: entered allmulticast mode [ 367.531387][T17615] bridge_slave_0: entered promiscuous mode [ 367.549917][T17615] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.563442][T17615] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.582254][T17615] bridge_slave_1: entered allmulticast mode [ 367.607166][T17615] bridge_slave_1: entered promiscuous mode [ 367.790964][T17615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.820640][T17615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.837200][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'. [ 367.870530][T17730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3316'. [ 367.928645][T17734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3320'. [ 368.047064][ T8263] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.088545][T17615] team0: Port device team_slave_0 added [ 368.130133][T17615] team0: Port device team_slave_1 added [ 368.247529][T17750] netlink: 'syz.4.3323': attribute type 34 has an invalid length. [ 368.294671][T17615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.302636][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 368.312355][T17615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.353611][T17743] sctp: [Deprecated]: syz.4.3323 (pid 17743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.353611][T17743] Use struct sctp_sack_info instead [ 368.371596][T17615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.405410][T17615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.426684][T17615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.468126][T17615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.531000][T17765] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3326'. [ 368.551476][T17765] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3326'. [ 368.562888][T17757] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 368.583185][T17757] bond1 (unregistering): Released all slaves [ 368.643241][ T3372] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.657530][ T3372] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.667030][ T6021] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.897989][T17615] hsr_slave_0: entered promiscuous mode [ 368.915889][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 368.922515][T17615] hsr_slave_1: entered promiscuous mode [ 368.957727][T17615] debugfs: 'hsr0' already exists in 'hsr' [ 368.972073][T17615] Cannot create hsr debugfs directory [ 369.103648][T17789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.305810][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3335'. [ 369.499963][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.509432][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.534248][ T4942] Bluetooth: hci4: command tx timeout [ 369.701845][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'. [ 369.788027][T17793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.811450][T17793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.250417][T17827] openvswitch: ovs-system: Dropping previously announced user features [ 370.251079][ T6021] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.292128][T17828] net_ratelimit: 17 callbacks suppressed [ 370.292149][T17828] openvswitch: netlink: Flow actions attr not present in new flow. [ 370.311295][ T6021] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.321807][ T6021] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 38911 - 0 [ 370.333137][ T6021] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.373756][ T6021] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.404220][ T6021] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 38911 - 0 [ 370.613571][T17842] netlink: 'syz.4.3349': attribute type 15 has an invalid length. [ 370.626396][T16436] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.651621][T16436] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.684071][T16436] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 38911 - 0 [ 370.711939][T17841] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 370.875059][T17615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.890342][T17615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.945921][T16436] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.960381][T16436] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.001134][T16436] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 38911 - 0 [ 371.200212][T17615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.214310][T17615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.560407][T17615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.572235][T17615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.598317][ T4942] Bluetooth: hci4: command tx timeout [ 371.612216][T17878] __nla_validate_parse: 5 callbacks suppressed [ 371.612237][T17878] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3358'. [ 371.720865][T17615] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 371.750094][T17615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.762743][T17615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.835313][T17884] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3360'. [ 371.876479][T17884] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3360'. [ 372.096192][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'. [ 372.198750][T17615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.229186][T17615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.267052][T17615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.287274][T17615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.301544][T17615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.318794][T17615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.327772][T17615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.372843][T17615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.812272][T17615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.891816][T17615] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.995129][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.002367][ T644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.051957][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.059228][ T644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.469817][T17958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.661792][T17969] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 373.674398][T17969] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 373.689371][ T4942] Bluetooth: hci4: command tx timeout [ 373.823568][T17963] tunl0: entered promiscuous mode [ 373.843256][T17963] tunl0: entered allmulticast mode [ 374.340445][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 374.387882][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 374.464255][T17615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.663781][T17615] veth0_vlan: entered promiscuous mode [ 374.683948][T17615] veth1_vlan: entered promiscuous mode [ 374.753635][T17615] veth0_macvtap: entered promiscuous mode [ 374.780785][T17615] veth1_macvtap: entered promiscuous mode [ 374.809237][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 374.825662][T18019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3389'. [ 374.836733][T18020] netlink: 'syz.3.3388': attribute type 3 has an invalid length. [ 374.861877][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3389'. [ 374.870808][T17615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.905168][T17615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.995555][ T6021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.119114][ T644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.185747][ T644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.202160][T16436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.319203][T16437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.362191][T16437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.443124][T16436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.451127][T16436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.659550][T18058] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.721178][T18058] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 375.783128][T18062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3402'. [ 376.029129][T18062] netlink: 'syz.2.3402': attribute type 1 has an invalid length. [ 376.056349][T18062] nbd: error processing sock list [ 376.077549][ T1728] block nbd5: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 120 seconds [ 376.088773][ T1728] block nbd5: Possible stuck request ffff888027c001c0: control (read@1024,1024B). Runtime 120 seconds [ 376.100048][ T1728] block nbd5: Possible stuck request ffff888027c00380: control (read@2048,1024B). Runtime 120 seconds [ 376.111161][ T1728] block nbd5: Possible stuck request ffff888027c00540: control (read@3072,1024B). Runtime 120 seconds [ 376.258064][T18084] netlink: 'syz.3.3407': attribute type 1 has an invalid length. [ 376.273880][T18079] team0: Device gtp0 is of different type [ 376.347466][T18084] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 376.371046][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.394759][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.411515][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.421682][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.432038][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.918269][T18107] ipvlan2: entered promiscuous mode [ 377.469899][T18136] __nla_validate_parse: 2 callbacks suppressed [ 377.469923][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3418'. [ 377.532875][T18140] openvswitch: netlink: IP tunnel TTL not specified. [ 377.579398][T18091] lo speed is unknown, defaulting to 1000 [ 377.586405][T18138] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 377.867941][T18154] bridge_slave_0: left allmulticast mode [ 377.875662][T18154] bridge_slave_0: left promiscuous mode [ 377.881688][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.899372][T18154] bridge_slave_1: left allmulticast mode [ 377.905485][T18154] bridge_slave_1: left promiscuous mode [ 377.913074][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.937651][T18154] bond0: (slave bond_slave_0): Releasing backup interface [ 377.963112][T18154] bond0: (slave bond_slave_1): Releasing backup interface [ 378.044169][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 378.058533][T18154] team0: Port device team_slave_0 removed [ 378.071475][T18154] team0: Port device team_slave_1 removed [ 378.080240][T18154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.088143][T18154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.112645][T18154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.123053][T18154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.134184][T18154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 378.300225][T18162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3424'. [ 378.349410][T18172] ªªªªª»: renamed from dummy0 [ 378.477662][ T4942] Bluetooth: hci2: command tx timeout [ 378.502356][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3430'. [ 378.562488][T18195] netlink: 'syz.4.3432': attribute type 2 has an invalid length. [ 378.571116][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'. [ 378.643776][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.735286][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3431'. [ 378.771320][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3431'. [ 378.779160][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3434'. [ 378.985338][T18211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3437'. [ 379.044811][T18220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3437'. [ 379.144975][T18091] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.164260][T18091] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.182447][T18091] bridge_slave_0: entered allmulticast mode [ 379.204973][T18091] bridge_slave_0: entered promiscuous mode [ 379.249120][T18091] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.282883][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.303879][T18091] bridge_slave_1: entered allmulticast mode [ 379.318623][T18091] bridge_slave_1: entered promiscuous mode [ 379.391967][T18091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.408116][T18091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.568791][T18091] team0: Port device team_slave_0 added [ 379.606626][T18091] team0: Port device team_slave_1 added [ 379.743560][T18091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.764688][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.801697][T18091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.848478][T18091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.880542][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.938905][T18091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.084697][T18091] hsr_slave_0: entered promiscuous mode [ 380.121721][T18091] hsr_slave_1: entered promiscuous mode [ 380.153349][T18091] debugfs: 'hsr0' already exists in 'hsr' [ 380.170032][T18091] Cannot create hsr debugfs directory [ 380.453129][T18290] netlink: 'syz.2.3456': attribute type 2 has an invalid length. [ 380.556616][ T4942] Bluetooth: hci2: command tx timeout [ 380.701024][T18300] syzkaller1: entered promiscuous mode [ 380.716267][T18300] syzkaller1: entered allmulticast mode [ 380.895176][T18308] netlink: 'syz.1.3457': attribute type 21 has an invalid length. [ 380.902118][T18299] tipc: Started in network mode [ 380.916935][T18299] tipc: Node identity ac14142f, cluster identity 4711 [ 380.930616][T18299] tipc: New replicast peer: 0.0.0.0 [ 380.938485][T18299] tipc: Enabled bearer , priority 10 [ 381.259934][T18091] bond0: (slave netdevsim1): Releasing backup interface [ 381.338909][T18091] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 382.000652][T18363] Bluetooth: MGMT ver 1.23 [ 382.116296][ T5751] tipc: Node number set to 2886997039 [ 382.307838][T18091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.333826][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.342386][T18091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.365383][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.391433][T18091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.418670][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.470749][T18091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.490738][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.535558][T18381] __nla_validate_parse: 5 callbacks suppressed [ 382.535578][T18381] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3478'. [ 382.635783][ T4942] Bluetooth: hci2: command tx timeout [ 382.661195][T18384] syzkaller0: entered promiscuous mode [ 382.668413][T18384] syzkaller0: entered allmulticast mode [ 382.873567][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 382.925295][T18408] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 384.715684][ T4942] Bluetooth: hci2: command tx timeout [ 385.164648][T18406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.227132][T18406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.599776][T18091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.614703][T18438] netlink: 'syz.1.3491': attribute type 28 has an invalid length. [ 385.628805][T18432] xt_CT: No such helper "pptp" [ 385.637631][T18438] netlink: 'syz.1.3491': attribute type 3 has an invalid length. [ 385.662438][T18438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3491'. [ 385.751196][T18091] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.834598][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.841914][ T644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.015037][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.022323][ T644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.098841][T18459] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 386.314852][T18471] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 386.864036][T18492] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 386.904168][T18496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3504'. [ 386.912795][T18492] netlink: 'syz.4.3502': attribute type 2 has an invalid length. [ 386.930294][T18499] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 387.219708][T18510] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 387.264783][T18516] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 387.271885][T18517] SET target dimension over the limit! [ 387.307406][T18516] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 387.407049][T18521] netlink: 'syz.3.3511': attribute type 1 has an invalid length. [ 387.430652][T18521] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 387.457518][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3512'. [ 387.529424][T18526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.592724][T18533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.666748][T18539] openvswitch: netlink: IP tunnel dst address not specified [ 387.674218][T18539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.749172][T18091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.788098][T18539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3514'. [ 387.919153][T18091] veth0_vlan: entered promiscuous mode [ 387.942858][T18091] veth1_vlan: entered promiscuous mode [ 388.019415][T18091] veth0_macvtap: entered promiscuous mode [ 388.040896][T18091] veth1_macvtap: entered promiscuous mode [ 388.109111][T18091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.156253][T18091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.202157][T18560] block nbd1: NBD_DISCONNECT [ 388.213572][ T6025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.234028][ T6025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.257567][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3521'. [ 388.284827][T18560] block nbd1: Send disconnect failed -32 [ 388.333822][T18560] block nbd1: shutting down sockets [ 388.395770][T16438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.410599][T16438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.471748][T18566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3521'. [ 388.573010][ T3372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.603075][ T3372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.694134][T16438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.731991][T16438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.875687][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.001980][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 389.050692][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 389.103288][T18597] netlink: 'syz.1.3530': attribute type 64 has an invalid length. [ 389.123587][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 389.143782][T18597] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3530'. [ 389.158738][T18601] netlink: 'syz.1.3530': attribute type 64 has an invalid length. [ 389.201358][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 389.231303][T18601] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3530'. [ 389.245960][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 389.813419][T18619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.891916][T18619] bond3: (slave bond4): Enslaving as an active interface with an up link [ 390.931987][T18689] lo speed is unknown, defaulting to 1000 [ 391.049561][T18704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.316285][ T10] IPVS: starting estimator thread 0... [ 391.428187][T18717] IPVS: using max 26 ests per chain, 62400 per kthread [ 391.814883][ T5752] IPVS: starting estimator thread 0... [ 391.829408][T18738] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 391.871243][T18742] validate_nla: 2 callbacks suppressed [ 391.871265][T18742] netlink: 'syz.2.3566': attribute type 1 has an invalid length. [ 391.896632][T18742] netlink: 'syz.2.3566': attribute type 2 has an invalid length. [ 391.936422][T18737] IPVS: using max 26 ests per chain, 62400 per kthread [ 393.110081][T18789] syzkaller0: entered promiscuous mode [ 393.135741][T18789] syzkaller0: entered allmulticast mode [ 393.174843][T18789] __nla_validate_parse: 10 callbacks suppressed [ 393.174876][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3582'. [ 393.191150][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'. [ 393.909607][T18817] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 394.324467][T18831] netlink: 'syz.4.3594': attribute type 1 has an invalid length. [ 394.339943][T18821] Cannot find set identified by id 0 to match [ 394.553325][T18831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.782704][T18846] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 394.994459][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3602'. [ 395.552944][T18893] tipc: Started in network mode [ 395.567305][T18893] tipc: Node identity ac14142f, cluster identity 4711 [ 395.585931][T18893] tipc: New replicast peer: 172.20.20.170 [ 395.605081][T18893] tipc: Enabled bearer , priority 10 [ 395.618191][T18897] tipc: New replicast peer: 0.0.0.0 [ 395.767948][T18905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.751859][ T5630] tipc: Node number set to 2886997039 [ 396.783984][T18947] bridge0: port 1(wlan1) entered blocking state [ 396.802702][T18947] bridge0: port 1(wlan1) entered disabled state [ 396.837961][T18947] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 396.862335][T18947] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 396.871765][T18947] bridge0: port 1(wlan1) entered blocking state [ 396.878188][T18947] bridge0: port 1(wlan1) entered forwarding state [ 397.099620][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 397.132274][T18962] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 397.154035][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 397.168588][T18970] netlink: 50 bytes leftover after parsing attributes in process `syz.1.3635'. [ 397.179219][T18970] netlink: 50 bytes leftover after parsing attributes in process `syz.1.3635'. [ 397.220758][T18969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3632'. [ 397.447830][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3641'. [ 397.646641][T18996] netlink: 'syz.4.3644': attribute type 4 has an invalid length. [ 397.686036][T19002] vlan1: entered allmulticast mode [ 397.691256][T19002] veth0_vlan: entered allmulticast mode [ 397.758504][ T36] bridge0: port 1(wlan1) entered disabled state [ 398.092386][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3655'. [ 398.181157][T19033] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 398.438937][T19030] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 398.666363][T19030] bond2: (slave lo): Enslaving as an active interface with an up link [ 398.753479][T19030] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 399.519704][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3669'. [ 399.540555][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3668'. [ 399.868693][T19085] xt_hashlimit: size too large, truncated to 1048576 [ 399.963341][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 400.070546][T19103] xt_hashlimit: size too large, truncated to 1048576 [ 400.519980][T19119] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3679'. [ 400.591721][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 400.606523][T19123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3680'. [ 401.651846][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'. [ 401.682682][T19167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.703955][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3691'. [ 401.716492][T19174] netlink: 'syz.1.3691': attribute type 5 has an invalid length. [ 401.769762][T19174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3691'. [ 401.814873][T19164] veth0_macvtap: left promiscuous mode [ 402.137383][T19174] geneve2: entered promiscuous mode [ 402.153932][T19174] geneve2: entered allmulticast mode [ 402.183423][T19194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.221648][T19194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.486839][T16435] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 402.502229][T16435] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 402.541863][T16435] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 402.610899][ T6021] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 402.705858][T19207] block nbd1: server does not support multiple connections per device. [ 402.736907][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 402.746446][T19207] block nbd1: shutting down sockets [ 403.030026][T19223] netlink: 'syz.2.3708': attribute type 50 has an invalid length. [ 403.245704][T19226] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 403.466145][T19226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.594103][T19245] bond1: (slave geneve2): making interface the new active one [ 403.630251][T19245] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 403.918305][T19267] sctp: [Deprecated]: syz.1.3723 (pid 19267) Use of int in max_burst socket option. [ 403.918305][T19267] Use struct sctp_assoc_value instead [ 404.158279][T19278] bond2: Removing last arp target with arp_interval on [ 404.397769][T19290] Unsupported ieee802154 address type: 0 [ 404.525052][T19292] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 404.573683][T19295] ip_tables: iptables: counters copy to user failed while replacing table [ 404.609967][T19298] __nla_validate_parse: 5 callbacks suppressed [ 404.609990][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'. [ 404.673931][T19301] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 404.705055][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3732'. [ 404.756028][T19303] bridge0: port 3(veth1_to_bridge) entered blocking state [ 404.783721][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 404.804411][T19303] bridge0: port 3(veth1_to_bridge) entered disabled state [ 404.830295][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 404.841697][T19303] veth1_to_bridge: entered allmulticast mode [ 404.853099][T19303] veth1_to_bridge: entered promiscuous mode [ 404.860726][T19303] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.881087][T19303] bridge0: port 3(veth1_to_bridge) entered blocking state [ 404.888509][T19303] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 405.177312][T19313] lo: entered allmulticast mode [ 405.212902][T19310] lo: left allmulticast mode [ 405.256637][T19315] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3737'. [ 405.524316][T19323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3740'. [ 405.562922][T19325] team0: No ports can be present during mode change [ 405.588248][T19322] netlink: 'syz.2.3740': attribute type 1 has an invalid length. [ 405.805262][T19339] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3744'. [ 405.831919][T19338] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3745'. [ 405.914307][T19335] bond3: option resend_igmp: invalid value (32767) [ 405.971474][T19335] bond3: option resend_igmp: allowed values 0 - 255 [ 406.060298][T19335] bond3 (unregistering): Released all slaves [ 406.158157][ T1728] block nbd5: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 150 seconds [ 406.172786][ T1728] block nbd5: Possible stuck request ffff888027c001c0: control (read@1024,1024B). Runtime 150 seconds [ 406.187226][ T1728] block nbd5: Possible stuck request ffff888027c00380: control (read@2048,1024B). Runtime 150 seconds [ 406.198332][ T1728] block nbd5: Possible stuck request ffff888027c00540: control (read@3072,1024B). Runtime 150 seconds [ 406.268452][T19340] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3744'. [ 406.514257][T19362] x_tables: duplicate underflow at hook 1 [ 407.027619][T19377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3755'. [ 409.364297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.377786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.391219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.404606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.418118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.431497][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.444930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.458513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.527023][ C1] net_ratelimit: 30 callbacks suppressed [ 409.527046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.546614][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.560498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.574476][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.589612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.603414][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.617319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.631088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.644863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.658695][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 409.684051][T19415] __nla_validate_parse: 14 callbacks suppressed [ 409.684071][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'. [ 410.071229][T19428] syz_tun: entered allmulticast mode [ 410.594199][T19436] netlink: 'syz.1.3772': attribute type 1 has an invalid length. [ 410.642613][T19439] netlink: 'syz.2.3773': attribute type 24 has an invalid length. [ 410.994349][T19436] bond6: entered promiscuous mode [ 411.024597][T19436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 411.062953][T19431] lo speed is unknown, defaulting to 1000 [ 411.132563][T19450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3776'. [ 411.161644][T19445] bond6: (slave bridge1): making interface the new active one [ 411.180602][T19450] netlink: 'syz.3.3776': attribute type 7 has an invalid length. [ 411.216891][T19445] bridge1: entered promiscuous mode [ 411.224132][T19450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3776'. [ 411.253892][T19445] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 411.694480][T19457] netlink: 'syz.4.3778': attribute type 11 has an invalid length. [ 411.775260][T19457] netlink: 'syz.4.3778': attribute type 4 has an invalid length. [ 411.860359][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 411.909476][T19457] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3778'. [ 414.536200][ C1] net_ratelimit: 3434 callbacks suppressed [ 414.536224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.555712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.569224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.582730][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.596267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.609803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.623787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.637258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.650938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.664424][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 414.996639][T19517] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3791'. [ 415.030324][T19519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3793'. [ 415.433086][T19528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3796'. [ 416.376847][T19542] netlink: 'syz.4.3801': attribute type 3 has an invalid length. [ 416.986418][T19558] tipc: Enabling of bearer rejected, failed to enable media [ 417.146959][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3806'. [ 417.387462][T19568] netlink: 'syz.1.3807': attribute type 1 has an invalid length. [ 417.487360][T19568] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3807'. [ 419.157956][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 419.240940][T19605] bridge1: entered promiscuous mode [ 419.280766][T19605] bridge1: entered allmulticast mode [ 419.368815][T19605] team0: Port device bridge1 added [ 419.546033][ C1] net_ratelimit: 3371 callbacks suppressed [ 419.546053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.565531][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.579003][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.592581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.606168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.619629][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.635837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.650075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.663987][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.677688][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 419.724359][T19609] bridge0: port 3(team0) entered blocking state [ 419.819415][T19609] bridge0: port 3(team0) entered disabled state [ 419.876603][T19609] team0: entered allmulticast mode [ 419.896945][T19609] team_slave_0: entered allmulticast mode [ 419.950881][T19609] team_slave_1: entered allmulticast mode [ 420.067436][T19609] team0: entered promiscuous mode [ 420.113569][T19609] team_slave_0: entered promiscuous mode [ 420.141513][T19609] team_slave_1: entered promiscuous mode [ 420.220936][T19625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3822'. [ 420.329094][T19621] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 420.367974][T19621] netlink: 'syz.1.3821': attribute type 7 has an invalid length. [ 420.432975][T19621] netlink: 'syz.1.3821': attribute type 8 has an invalid length. [ 420.513667][T19621] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3821'. [ 420.567050][T19621] NCSI netlink: No device for ifindex 65584 [ 420.619037][T19628] netlink: 81 bytes leftover after parsing attributes in process `syz.4.3823'. [ 420.651808][T19622] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 420.729885][T19622] netlink: 'syz.1.3821': attribute type 7 has an invalid length. [ 420.756522][T19622] netlink: 'syz.1.3821': attribute type 8 has an invalid length. [ 420.865556][T19622] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3821'. [ 420.885880][T19635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.921847][T19622] NCSI netlink: No device for ifindex 65584 [ 421.192922][T19635] team0: Port device syz_tun added [ 421.593757][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3829'. [ 421.784215][T19652] netlink: 'syz.3.3832': attribute type 2 has an invalid length. [ 423.070425][T19671] syzkaller1: entered promiscuous mode [ 423.155146][T19671] syzkaller1: entered allmulticast mode [ 423.294680][T19680] IPv6: NLM_F_CREATE should be specified when creating new route [ 423.335090][T19680] netlink: 'syz.1.3841': attribute type 1 has an invalid length. [ 423.789419][T19692] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3842'. [ 423.930568][T19673] lo speed is unknown, defaulting to 1000 [ 424.555626][ C1] net_ratelimit: 3381 callbacks suppressed [ 424.555649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.576072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.589620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.603327][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.617136][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.630820][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.644734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.658151][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.671592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 424.684977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 425.841681][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3852'. [ 427.633670][T19729] vlan1 (unregistering): left allmulticast mode [ 427.660480][T19729] veth0_vlan (unregistering): left allmulticast mode [ 428.388850][T19766] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3859'. [ 428.472070][T19766] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3859'. [ 428.548235][T19751] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 428.573239][T19766] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3859'. [ 429.020715][T19773] bond0: invalid NS target ff00:: specified for addition [ 429.154826][T19773] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 429.565787][ C1] net_ratelimit: 3241 callbacks suppressed [ 429.565810][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.585474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.599091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.612586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.626114][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.639612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.653223][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.667513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.680878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 429.694288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 430.297072][T19790] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3866'. [ 430.435326][T19794] nbd: nbd4 already in use [ 430.544251][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'. [ 430.554960][T19802] nbd: nbd4 already in use [ 430.641662][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3867'. [ 430.690693][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3869'. [ 430.712888][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'. [ 430.934093][T19811] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3867'. [ 431.631251][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3872'. [ 431.706913][T19823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3872'. [ 431.879571][T19827] netlink: 'syz.2.3874': attribute type 83 has an invalid length. [ 432.046573][T19827] raw_sendmsg: syz.2.3874 forgot to set AF_INET. Fix it! [ 432.346614][T19832] IPv6: sit1: Disabled Multicast RS [ 432.499774][T19832] sit1: entered promiscuous mode [ 432.522082][T19832] sit1: entered allmulticast mode [ 434.129804][T19880] sctp: [Deprecated]: syz.2.3887 (pid 19880) Use of int in max_burst socket option deprecated. [ 434.129804][T19880] Use struct sctp_assoc_value instead [ 434.283507][T19883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3889'. [ 434.576312][ C1] net_ratelimit: 3264 callbacks suppressed [ 434.576334][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.596167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.609968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.623852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.637635][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.651430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.665244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.679058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.695223][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.708787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 434.998795][T19879] pimreg: entered allmulticast mode [ 435.055518][T19890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.698765][T19890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.210086][T19892] ip_vti0: entered promiscuous mode [ 436.407393][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 436.478739][ T1728] block nbd5: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 180 seconds [ 436.604595][ T1728] block nbd5: Possible stuck request ffff888027c001c0: control (read@1024,1024B). Runtime 180 seconds [ 436.634449][ T1728] block nbd5: Possible stuck request ffff888027c00380: control (read@2048,1024B). Runtime 180 seconds [ 436.664934][ T1728] block nbd5: Possible stuck request ffff888027c00540: control (read@3072,1024B). Runtime 180 seconds [ 436.844505][ T8263] bridge_slave_1: left allmulticast mode [ 436.925165][ T8263] bridge_slave_1: left promiscuous mode [ 437.021696][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.288700][ T8263] lo: left allmulticast mode [ 438.898346][ T8263] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.940851][ T8263] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.972349][ T8263] .` (unregistering): (slave bond3): Releasing backup interface [ 439.003761][ T8263] .` (unregistering): Released all slaves [ 439.025113][ T8263] bond1 (unregistering): Released all slaves [ 439.052034][ T8263] bond2 (unregistering): Released all slaves [ 439.075336][ T8263] bond3 (unregistering): Released all slaves [ 439.141625][T19923] bridge2: entered promiscuous mode [ 439.172275][T19923] bridge2: entered allmulticast mode [ 439.219732][T19923] team0: Port device bridge2 added [ 439.586310][ C1] net_ratelimit: 3560 callbacks suppressed [ 439.586332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.607267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.621178][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.634893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.648566][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.662082][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.675735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.689281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.702839][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.716748][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 439.897906][ T8263] tipc: Disabling bearer [ 439.939515][ T8263] tipc: Disabling bearer [ 440.053576][ T8263] tipc: Left network mode [ 440.078178][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 440.116638][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.188733][T19954] syzkaller0: entered promiscuous mode [ 440.245224][T19954] syzkaller0: entered allmulticast mode [ 440.663783][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3909'. [ 442.011389][T19986] syzkaller1: entered promiscuous mode [ 442.099102][T19986] syzkaller1: entered allmulticast mode [ 442.161729][T19956] Bluetooth: hci5: command 0x0406 tx timeout [ 442.443445][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 442.588532][T20003] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 443.192936][T20015] netlink: 'syz.1.3921': attribute type 8 has an invalid length. [ 443.517177][T20003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.527151][T20021] xt_hashlimit: size too large, truncated to 1048576 [ 443.794828][T20006] bond3: (slave geneve3): making interface the new active one [ 443.862875][T20006] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 444.596052][ C1] net_ratelimit: 3511 callbacks suppressed [ 444.596075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.615419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.628939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.642496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.656122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.669622][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.683159][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.696679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.710150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 444.723573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 445.473922][T20040] wg1: entered promiscuous mode [ 447.554561][T20072] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3937'. [ 447.622245][T20072] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3937'. [ 447.661898][T20083] netlink: 'syz.2.3939': attribute type 1 has an invalid length. [ 447.835199][T20090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3941'. [ 448.099730][T20083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.312813][ T8263] hsr_slave_0: left promiscuous mode [ 448.899188][T20100] netlink: 'syz.0.3944': attribute type 2 has an invalid length. [ 448.978030][ T8263] veth1_macvtap: left promiscuous mode [ 449.030790][ T8263] veth0_macvtap: left promiscuous mode [ 449.538748][T20111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.605582][ C1] net_ratelimit: 3463 callbacks suppressed [ 449.605606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.625023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.638130][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.652271][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.665836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.679199][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.692334][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.705726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.719151][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.732636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 449.806499][T20113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3948'. [ 449.944421][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3949'. [ 451.102374][T20114] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 452.575283][ T8263] IPVS: stop unused estimator thread 0... [ 454.201679][T20180] netlink: 'syz.4.3967': attribute type 16 has an invalid length. [ 454.229953][T20179] lo speed is unknown, defaulting to 1000 [ 454.247478][T20180] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3967'. [ 454.468638][T20182] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3968'. [ 454.585887][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3969'. [ 454.615600][ C1] net_ratelimit: 3606 callbacks suppressed [ 454.615623][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.635041][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.648729][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.662355][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.676046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.689559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.703113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.716616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.732627][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.746111][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 454.962894][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3971'. [ 455.343865][T20194] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 455.375346][T20200] syz.2.3974: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 455.638643][T20200] CPU: 0 UID: 0 PID: 20200 Comm: syz.2.3974 Not tainted syzkaller #0 PREEMPT(full) [ 455.638675][T20200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.638700][T20200] Call Trace: [ 455.638710][T20200] [ 455.638719][T20200] dump_stack_lvl+0xe8/0x150 [ 455.638761][T20200] warn_alloc+0x24c/0x270 [ 455.638794][T20200] ? stack_depot_save_flags+0x33/0x800 [ 455.638828][T20200] ? __pfx_warn_alloc+0x10/0x10 [ 455.638859][T20200] ? kasan_save_track+0x3e/0x80 [ 455.638888][T20200] ? __kasan_kmalloc+0x93/0xb0 [ 455.638920][T20200] ? xsk_setsockopt+0x52a/0x960 [ 455.638941][T20200] ? do_sock_setsockopt+0x17c/0x1b0 [ 455.638964][T20200] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 455.638987][T20200] ? do_syscall_64+0x174/0x580 [ 455.639014][T20200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.639054][T20200] __vmalloc_node_range_noprof+0x12c/0x1730 [ 455.639117][T20200] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.639151][T20200] ? __kasan_kmalloc+0x93/0xb0 [ 455.639193][T20200] ? __kmalloc_cache_noprof+0x32d/0x660 [ 455.639224][T20200] ? __kmalloc_cache_noprof+0x150/0x660 [ 455.639257][T20200] vmalloc_user_noprof+0xad/0xe0 [ 455.639287][T20200] ? xskq_create+0xbf/0x170 [ 455.639313][T20200] xskq_create+0xbf/0x170 [ 455.639342][T20200] xsk_init_queue+0x8a/0xe0 [ 455.639375][T20200] xsk_setsockopt+0x52a/0x960 [ 455.639398][T20200] ? __fget_files+0x2a/0x420 [ 455.639430][T20200] ? __pfx_xsk_setsockopt+0x10/0x10 [ 455.639454][T20200] ? __pfx_aa_sk_perm+0x10/0x10 [ 455.639482][T20200] ? aa_sock_opt_perm+0xff/0x1a0 [ 455.639511][T20200] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 455.639535][T20200] ? __pfx_xsk_setsockopt+0x10/0x10 [ 455.639560][T20200] do_sock_setsockopt+0x17c/0x1b0 [ 455.639597][T20200] __x64_sys_setsockopt+0x13d/0x1b0 [ 455.639624][T20200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.639649][T20200] do_syscall_64+0x174/0x580 [ 455.639675][T20200] ? trace_irq_disable+0x3b/0x140 [ 455.639705][T20200] ? clear_bhb_loop+0x40/0x90 [ 455.639733][T20200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.639756][T20200] RIP: 0033:0x7f5d9319e0d9 [ 455.639777][T20200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.639797][T20200] RSP: 002b:00007f5d93f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 455.639820][T20200] RAX: ffffffffffffffda RBX: 00007f5d93425fa0 RCX: 00007f5d9319e0d9 [ 455.639836][T20200] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 455.639850][T20200] RBP: 00007f5d93235024 R08: 0000000000000004 R09: 0000000000000000 [ 455.639864][T20200] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.639879][T20200] R13: 00007f5d93426038 R14: 00007f5d93425fa0 R15: 00007ffdf1376e48 [ 455.639915][T20200] [ 455.639975][T20200] Mem-Info: [ 456.263454][T20200] active_anon:6063 inactive_anon:0 isolated_anon:0 [ 456.263454][T20200] active_file:0 inactive_file:43521 isolated_file:0 [ 456.263454][T20200] unevictable:768 dirty:51 writeback:0 [ 456.263454][T20200] slab_reclaimable:11596 slab_unreclaimable:117938 [ 456.263454][T20200] mapped:30600 shmem:1288 pagetables:1382 [ 456.263454][T20200] sec_pagetables:0 bounce:0 [ 456.263454][T20200] kernel_misc_reclaimable:0 [ 456.263454][T20200] free:1297555 free_pcp:11224 free_cma:0 [ 456.431160][T20200] Node 0 active_anon:24352kB inactive_anon:0kB active_file:0kB inactive_file:173880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122400kB dirty:204kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15296kB pagetables:5592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.502179][T20224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3978'. [ 456.586443][T20200] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.621969][T20200] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.666448][T20200] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 456.672655][T20200] Node 0 DMA32 free:1231632kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24352kB inactive_anon:0kB active_file:0kB inactive_file:173880kB unevictable:1536kB writepending:204kB zspages:0kB present:3129332kB managed:2548532kB mlocked:0kB bounce:0kB free_pcp:44232kB local_pcp:21040kB free_cma:0kB [ 456.708440][T20200] lowmem_reserve[]: 0 0 0 0 0 [ 456.713439][T20200] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.777249][T20200] lowmem_reserve[]: 0 0 0 0 0 [ 456.782272][T20200] Node 1 Normal free:3943528kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.834281][T20200] lowmem_reserve[]: 0 0 0 0 0 [ 456.840319][T20200] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 456.854055][T20200] Node 0 DMA32: 1032*4kB (UME) 776*8kB (UME) 243*16kB (UME) 160*32kB (UME) 27*64kB (UME) 25*128kB (UME) 20*256kB (UM) 6*512kB (UM) 5*1024kB (UME) 5*2048kB (UM) 289*4096kB (UM) = 1231568kB [ 456.880400][T20200] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 456.893843][T20200] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 6*16kB (UM) 11*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943528kB [ 456.912272][T20200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.923304][T20200] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.935121][T20200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.946686][T20200] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.983367][T20200] 44805 total pagecache pages [ 456.997486][T20200] 0 pages in swap cache [ 457.001831][T20200] Free swap = 124996kB [ 457.007507][T20200] Total swap = 124996kB [ 457.011936][T20200] 2097051 pages RAM [ 457.018547][T20200] 0 pages HighMem/MovableOnly [ 457.023502][T20200] 428239 pages reserved [ 457.029180][T20200] 0 pages cma reserved [ 457.459004][T20206] : renamed from bond_slave_1 (while UP) [ 458.173625][T20247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3984'. [ 458.282463][T20238] vlan2: entered allmulticast mode [ 458.340214][T20238] bond0: entered allmulticast mode [ 459.626161][ C1] net_ratelimit: 2995 callbacks suppressed [ 459.626182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.645707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.659403][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.673667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.687290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.700993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.714683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.728289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.741946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 459.755639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 460.608476][T20286] syzkaller1: entered promiscuous mode [ 460.629104][T20286] syzkaller1: entered allmulticast mode [ 460.810216][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 460.939840][T20301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3996'. [ 461.077751][T20295] netlink: 'syz.0.3992': attribute type 14 has an invalid length. [ 461.129817][T20298] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 461.192865][T20298] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 461.251916][T20298] gretap1: entered promiscuous mode [ 461.278822][T20298] gretap1: entered allmulticast mode [ 461.333602][T20299] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 461.401254][T20299] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 462.581316][ T187] IPVS: starting estimator thread 0... [ 462.687236][T20336] IPVS: using max 25 ests per chain, 60000 per kthread [ 462.811304][T20340] syzkaller0: entered promiscuous mode [ 462.866318][T20340] syzkaller0: entered allmulticast mode [ 463.124333][T20348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4007'. [ 463.561376][T20353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4008'. [ 464.114860][T20370] netlink: 'syz.2.4012': attribute type 1 has an invalid length. [ 464.425181][T20381] netlink: 'syz.3.4014': attribute type 1 has an invalid length. [ 464.469363][T20370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.636330][ C1] net_ratelimit: 3314 callbacks suppressed [ 464.636359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.655825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.669430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.683100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.696706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.710223][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.723735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.737785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.751547][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 464.765068][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 465.011309][T20381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.220348][T20388] netlink: 'syz.2.4017': attribute type 4 has an invalid length. [ 465.258092][T20393] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 465.290994][T20390] netlink: 'syz.2.4017': attribute type 4 has an invalid length. [ 465.333087][T20388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4017'. [ 465.360004][T20393] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4016'. [ 465.447049][T20390] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4017'. [ 465.496750][T20393] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 465.850876][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4019'. [ 465.933275][T20407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4021'. [ 465.974871][T20406] xt_nat: multiple ranges no longer supported [ 466.059394][T20412] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4023'. [ 466.208481][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'. [ 466.847933][T20428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4028'. [ 467.126624][T20439] netlink: 'syz.3.4030': attribute type 9 has an invalid length. [ 467.162112][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4030'. [ 467.184640][ T1728] block nbd5: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 210 seconds [ 467.232411][ T1728] block nbd5: Possible stuck request ffff888027c001c0: control (read@1024,1024B). Runtime 210 seconds [ 467.261584][ T1728] block nbd5: Possible stuck request ffff888027c00380: control (read@2048,1024B). Runtime 210 seconds [ 467.291606][ T1728] block nbd5: Possible stuck request ffff888027c00540: control (read@3072,1024B). Runtime 210 seconds [ 467.549922][T20443] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 467.707583][T20443] xt_hashlimit: size too large, truncated to 1048576 [ 467.760583][T19956] Bluetooth: hci3: command 0x0405 tx timeout [ 469.646672][ C1] net_ratelimit: 5675 callbacks suppressed [ 469.646761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.665581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.678231][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 469.691862][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.704354][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.717078][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 469.730636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.743202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.755843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 469.769478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.139128][T20492] netlink: 'syz.3.4045': attribute type 1 has an invalid length. [ 470.247156][T20492] netlink: 'syz.3.4045': attribute type 3 has an invalid length. [ 470.420407][T20492] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4045'. [ 470.807432][T20501] nbd: must specify at least one socket [ 470.847033][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4048'. [ 471.927337][T20516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4053'. [ 472.441268][T20522] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4054'. [ 472.470136][T20523] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 472.656262][T20523] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.702525][T20523] gretap1: entered promiscuous mode [ 472.744199][T20523] gretap1: entered allmulticast mode [ 472.781918][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'. [ 472.968834][ T4992] udevd[4992]: worker [5641] /devices/virtual/block/nbd5 timeout; kill it [ 473.077301][ T4992] udevd[4992]: seq 16897 '/devices/virtual/block/nbd5' killed [ 473.321540][T20532] netlink: 'syz.4.4058': attribute type 21 has an invalid length. [ 473.365918][T20532] netlink: 'syz.4.4058': attribute type 1 has an invalid length. [ 473.576856][T20537] netlink: 'syz.2.4059': attribute type 9 has an invalid length. [ 473.627304][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4059'. [ 473.696240][T20537] FAULT_INJECTION: forcing a failure. [ 473.696240][T20537] name failslab, interval 1, probability 0, space 0, times 0 [ 473.805508][T20537] CPU: 0 UID: 0 PID: 20537 Comm: syz.2.4059 Not tainted syzkaller #0 PREEMPT(full) [ 473.805539][T20537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.805553][T20537] Call Trace: [ 473.805628][T20537] [ 473.805708][T20537] dump_stack_lvl+0xe8/0x150 [ 473.805870][T20537] should_fail_ex+0x40c/0x560 [ 473.805998][T20537] should_failslab+0xa8/0x100 [ 473.806060][T20537] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 473.806100][T20537] ? ovs_flow_alloc+0x24/0x1f0 [ 473.806242][T20537] ? ovs_flow_alloc+0x24/0x1f0 [ 473.806288][T20537] ovs_flow_alloc+0x24/0x1f0 [ 473.806323][T20537] ovs_packet_cmd_execute+0x5b6/0xef0 [ 473.806391][T20537] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 473.806430][T20537] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 473.806544][T20537] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 473.806587][T20537] genl_family_rcv_msg_doit+0x233/0x340 [ 473.806627][T20537] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 473.806673][T20537] ? bpf_lsm_capable+0x9/0x20 [ 473.806728][T20537] ? security_capable+0x7e/0x2c0 [ 473.806804][T20537] genl_rcv_msg+0x614/0x7a0 [ 473.806843][T20537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.806874][T20537] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 473.806925][T20537] netlink_rcv_skb+0x226/0x4a0 [ 473.806952][T20537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.806985][T20537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.807027][T20537] ? down_read+0x2be/0x330 [ 473.807135][T20537] genl_rcv+0x28/0x40 [ 473.807164][T20537] netlink_unicast+0x7bb/0x940 [ 473.807199][T20537] netlink_sendmsg+0x813/0xb40 [ 473.807236][T20537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.807277][T20537] ? aa_sock_msg_perm+0xf1/0x1b0 [ 473.807338][T20537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.807364][T20537] sock_sendmsg_nosec+0x13a/0x180 [ 473.807465][T20537] ____sys_sendmsg+0x54e/0x850 [ 473.807507][T20537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.807544][T20537] ? import_iovec+0x73/0xa0 [ 473.807600][T20537] ___sys_sendmsg+0x2a5/0x360 [ 473.807625][T20537] ? __lock_acquire+0x683/0x2cf0 [ 473.807680][T20537] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.807746][T20537] ? __fget_files+0x2a/0x420 [ 473.807791][T20537] ? __fget_files+0x3a2/0x420 [ 473.807832][T20537] __x64_sys_sendmsg+0x1b1/0x290 [ 473.807861][T20537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.807908][T20537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.807949][T20537] do_syscall_64+0x174/0x580 [ 473.808022][T20537] ? trace_irq_disable+0x3b/0x140 [ 473.808067][T20537] ? clear_bhb_loop+0x40/0x90 [ 473.808094][T20537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.808116][T20537] RIP: 0033:0x7f5d9319e0d9 [ 473.808167][T20537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.808186][T20537] RSP: 002b:00007f5d93f89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.808238][T20537] RAX: ffffffffffffffda RBX: 00007f5d93425fa0 RCX: 00007f5d9319e0d9 [ 473.808255][T20537] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 473.808277][T20537] RBP: 00007f5d93f89090 R08: 0000000000000000 R09: 0000000000000000 [ 473.808291][T20537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.808304][T20537] R13: 00007f5d93426038 R14: 00007f5d93425fa0 R15: 00007ffdf1376e48 [ 473.808340][T20537] [ 474.524494][T20539] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 474.536880][T20542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4062'. [ 474.653816][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 474.655896][ C1] net_ratelimit: 6543 callbacks suppressed [ 474.655948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.682290][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.695253][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.707909][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 474.720517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.734015][T20539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.734096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.753799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.766404][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:2b:8e:b5:af:a3, vlan:0) [ 474.779010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.792622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.034697][T20539] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 475.157342][T20539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.414936][T20589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4071'. [ 476.654604][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4070'. [ 476.729442][T20590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4071'. [ 477.027821][T20586] block nbd1: Unsupported socket: should be TCP or UNIX. [ 478.241959][T20625] netlink: 'syz.4.4082': attribute type 9 has an invalid length. [ 478.300844][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 478.356448][T20625] FAULT_INJECTION: forcing a failure. [ 478.356448][T20625] name failslab, interval 1, probability 0, space 0, times 0 [ 478.413332][T20625] CPU: 0 UID: 0 PID: 20625 Comm: syz.4.4082 Not tainted syzkaller #0 PREEMPT(full) [ 478.413363][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.413377][T20625] Call Trace: [ 478.413389][T20625] [ 478.413399][T20625] dump_stack_lvl+0xe8/0x150 [ 478.413439][T20625] should_fail_ex+0x40c/0x560 [ 478.413472][T20625] should_failslab+0xa8/0x100 [ 478.413508][T20625] __kmalloc_noprof+0xfe/0x720 [ 478.413537][T20625] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 478.413565][T20625] ? ovs_nla_copy_actions+0x68/0x3d0 [ 478.413593][T20625] ? ovs_nla_copy_actions+0x68/0x3d0 [ 478.413630][T20625] ovs_nla_copy_actions+0x68/0x3d0 [ 478.413665][T20625] ovs_packet_cmd_execute+0x66e/0xef0 [ 478.413710][T20625] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 478.413749][T20625] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 478.413783][T20625] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 478.413824][T20625] genl_family_rcv_msg_doit+0x233/0x340 [ 478.413864][T20625] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.413911][T20625] ? bpf_lsm_capable+0x9/0x20 [ 478.413939][T20625] ? security_capable+0x7e/0x2c0 [ 478.413970][T20625] genl_rcv_msg+0x614/0x7a0 [ 478.414008][T20625] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.414039][T20625] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 478.414089][T20625] netlink_rcv_skb+0x226/0x4a0 [ 478.414117][T20625] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.414151][T20625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.414194][T20625] ? down_read+0x2be/0x330 [ 478.414236][T20625] genl_rcv+0x28/0x40 [ 478.414265][T20625] netlink_unicast+0x7bb/0x940 [ 478.414302][T20625] netlink_sendmsg+0x813/0xb40 [ 478.414339][T20625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.414370][T20625] ? aa_sock_msg_perm+0xf1/0x1b0 [ 478.414400][T20625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.414425][T20625] sock_sendmsg_nosec+0x13a/0x180 [ 478.414460][T20625] ____sys_sendmsg+0x54e/0x850 [ 478.414492][T20625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.414527][T20625] ? import_iovec+0x73/0xa0 [ 478.414553][T20625] ___sys_sendmsg+0x2a5/0x360 [ 478.414577][T20625] ? __lock_acquire+0x683/0x2cf0 [ 478.414612][T20625] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.414679][T20625] ? __fget_files+0x2a/0x420 [ 478.414707][T20625] ? __fget_files+0x3a2/0x420 [ 478.414749][T20625] __x64_sys_sendmsg+0x1b1/0x290 [ 478.414778][T20625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.414825][T20625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.414849][T20625] do_syscall_64+0x174/0x580 [ 478.414874][T20625] ? trace_irq_disable+0x3b/0x140 [ 478.414902][T20625] ? clear_bhb_loop+0x40/0x90 [ 478.414930][T20625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.414952][T20625] RIP: 0033:0x7f613c79e0d9 [ 478.414973][T20625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.414992][T20625] RSP: 002b:00007f613d6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.415016][T20625] RAX: ffffffffffffffda RBX: 00007f613ca25fa0 RCX: 00007f613c79e0d9 [ 478.415032][T20625] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 478.415046][T20625] RBP: 00007f613d6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 478.415059][T20625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.415072][T20625] R13: 00007f613ca26038 R14: 00007f613ca25fa0 R15: 00007fff26304068 [ 478.415109][T20625] [ 479.191671][T20642] sctp: [Deprecated]: syz.1.4087 (pid 20642) Use of int in max_burst socket option. [ 479.191671][T20642] Use struct sctp_assoc_value instead [ 479.621741][T20618] bridge0: port 3(veth1_to_bridge) entered disabled state [ 479.629294][T20618] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.637965][T20618] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.708690][T20642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4087'. [ 480.254119][T20662] net_ratelimit: 5306 callbacks suppressed [ 480.254141][T20662] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 480.273112][ T4942] Bluetooth: hci2: link tx timeout [ 480.300822][ T4942] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.360399][T20665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4096'. [ 480.470322][T20669] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4097'. [ 480.513733][T20669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4097'. [ 480.789018][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4099'. [ 480.834108][T20669] bond8 (unregistering): Released all slaves [ 481.587560][T20694] netlink: 'syz.1.4104': attribute type 1 has an invalid length. [ 481.841491][T20694] 8021q: adding VLAN 0 to HW filter on device bond8 [ 482.070500][T20697] bond8: (slave geneve3): making interface the new active one [ 482.149613][T20697] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 482.273790][T20707] netlink: 'syz.0.4106': attribute type 5 has an invalid length. [ 482.397590][ T4942] Bluetooth: hci2: command 0x0406 tx timeout [ 482.895978][T20719] openvswitch: netlink: IP tunnel dst address not specified [ 482.950490][T20719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.144918][T20747] netlink: 'syz.1.4117': attribute type 9 has an invalid length. [ 484.190976][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'. [ 484.262438][T20749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4116'. [ 484.509726][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4120'. [ 485.016145][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4124'. [ 485.485285][T20779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4125'. [ 486.212199][T20801] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4133'. [ 486.560521][T20809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4136'. [ 486.594944][T20809] nbd: must specify a size in bytes for the device [ 486.719344][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4136'. [ 486.944445][T20825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4141'. [ 486.985785][T19956] block nbd1: Receive control failed (result -32) [ 487.345029][ T30] audit: type=1800 audit(1785926422.907:12): pid=20833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4143" name="memory.events" dev="tmpfs" ino=1360 res=0 errno=0 [ 487.369278][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'. [ 487.693132][T20845] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 487.850808][T20845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.860041][T20845] IPv6: NLM_F_CREATE should be set when creating new route [ 487.867772][T20845] IPv6: NLM_F_CREATE should be set when creating new route [ 488.034641][T20849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.244714][T19956] Bluetooth: hci4: command 0x0406 tx timeout [ 489.138965][T20870] xt_CT: No such helper "syz1" [ 489.206973][T20877] siw: device registration error -23 [ 489.281062][T20881] netlink: 'syz.4.4156': attribute type 21 has an invalid length. [ 489.313767][T20881] __nla_validate_parse: 6 callbacks suppressed [ 489.313815][T20881] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4156'. [ 489.371559][T20881] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4156'. [ 489.567569][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4156'. [ 491.045021][T20916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.073969][ T6025] nci: nci_rsp_packet: unknown rsp opcode 0x303 [ 491.463534][T20938] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 491.533300][T20938] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 492.809158][T20972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4179'. [ 493.255240][T20982] netlink: zone id is out of range [ 493.303815][T20982] netlink: zone id is out of range [ 493.355560][T20982] netlink: zone id is out of range [ 493.543527][T20993] netlink: 'syz.4.4186': attribute type 11 has an invalid length. [ 493.651274][T20993] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4186'. [ 493.668217][T20992] netlink: 'syz.1.4185': attribute type 1 has an invalid length. [ 493.934948][T21003] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4188'. [ 494.018247][T20989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4185'. [ 494.100681][T21011] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4187'. [ 494.463922][T20999] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.506829][T20999] bond9: (slave bond10): making interface the new active one [ 494.527674][T20999] bond9: (slave bond10): Enslaving as an active interface with an up link [ 494.558985][T21006] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 494.586141][T20989] 8021q: adding VLAN 0 to HW filter on device bond9 [ 494.898365][T21028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4193'. [ 494.915267][T21027] netlink: 'syz.1.4192': attribute type 3 has an invalid length. [ 494.951215][T21027] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 495.020296][T21033] nbd: socks must be embedded in a SOCK_ITEM attr [ 495.126715][T21032] team0: Device gtp0 is of different type [ 496.906695][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4205'. [ 496.990861][T21070] netlink: 'syz.4.4205': attribute type 21 has an invalid length. [ 497.028651][T21070] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4205'. [ 497.052189][T21070] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4205'. [ 497.678392][ T1728] block nbd5: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 240 seconds [ 497.689461][ T1728] block nbd5: Possible stuck request ffff888027c001c0: control (read@1024,1024B). Runtime 240 seconds [ 497.700963][ T1728] block nbd5: Possible stuck request ffff888027c00380: control (read@2048,1024B). Runtime 240 seconds [ 497.712961][ T1728] block nbd5: Possible stuck request ffff888027c00540: control (read@3072,1024B). Runtime 240 seconds [ 497.770335][T21085] openvswitch: netlink: IP tunnel dst address not specified [ 497.864304][T21028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.364896][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4211'. [ 498.784682][T21105] netlink: 'syz.4.4218': attribute type 2 has an invalid length. [ 498.820360][T21105] netlink: 'syz.4.4218': attribute type 2 has an invalid length. [ 498.999211][T21116] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 499.012012][T21117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4221'. [ 500.026711][T21123] netlink: 'syz.1.4222': attribute type 1 has an invalid length. [ 500.462901][T21123] 8021q: adding VLAN 0 to HW filter on device bond11 [ 500.781146][T21128] bond11: (slave veth5): Enslaving as an active interface with a down link [ 500.964113][T21143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.017044][T21130] bond3 (unregistering): Released all slaves [ 501.049721][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4228'. [ 501.119259][T21152] netlink: 'syz.4.4228': attribute type 21 has an invalid length. [ 501.269879][T21152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4228'. [ 501.341044][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4230'. [ 501.526630][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.791890][T21158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4232'. [ 501.879618][T21160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4232'. [ 502.727930][T21187] openvswitch: netlink: IPv4 tun info is not correct [ 504.734752][T21233] netlink: 'syz.0.4249': attribute type 25 has an invalid length. [ 504.849527][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 505.529568][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.537091][T21257] IPv6: NLM_F_CREATE should be set when creating new route [ 505.544362][T21257] IPv6: NLM_F_CREATE should be set when creating new route [ 505.668321][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.748194][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.823278][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.895060][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.907490][T21263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4257'. [ 505.971517][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.017538][T21265] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4257'. [ 506.040889][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.071157][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.094949][T21263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4257'. [ 506.120425][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.169032][T21272] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4259'. [ 506.194438][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.257571][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.336583][T21257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.701878][T21292] netlink: 'syz.0.4262': attribute type 11 has an invalid length. [ 507.362349][T21310] netlink: 'syz.0.4269': attribute type 15 has an invalid length. [ 507.394810][T21306] bridge1: entered promiscuous mode [ 507.420108][T21310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4269'. [ 507.453565][T21306] bridge1: entered allmulticast mode [ 507.504562][T21306] team0: Port device bridge1 added [ 508.430967][T21320] netlink: 'syz.1.4272': attribute type 2 has an invalid length. [ 508.615747][T21327] netlink: 'syz.0.4274': attribute type 1 has an invalid length. [ 508.854657][T21332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4274'. [ 509.006371][T21332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.022870][T21342] macvtap0: entered allmulticast mode [ 509.043915][T21342] veth0_macvtap: entered allmulticast mode [ 509.363718][T21351] block nbd0: reconnected socket [ 509.407108][ T4942] block nbd0: Receive control failed (result -32) [ 509.508135][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4283'. [ 509.573559][T21359] netlink: 46 bytes leftover after parsing attributes in process `syz.4.4283'. [ 511.023938][T21398] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 511.765102][T21412] xt_l2tp: invalid flags combination: 8 [ 511.793525][T21411] syzkaller1: entered promiscuous mode [ 511.817418][T21411] syzkaller1: entered allmulticast mode [ 512.608114][T21429] netlink: 'syz.1.4306': attribute type 21 has an invalid length. [ 512.669560][T21429] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 512.710095][T21430] Unknown options in mask 4 [ 513.587430][T21455] ip6gre1: entered promiscuous mode [ 513.638818][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4314'. [ 513.856840][T21458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4315'. [ 515.473957][T21487] lo speed is unknown, defaulting to 1000 [ 516.943855][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 517.006507][T21534] sctp: [Deprecated]: syz.3.4335 (pid 21534) Use of int in maxseg socket option. [ 517.006507][T21534] Use struct sctp_assoc_value instead [ 517.423897][T21542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4339'. [ 517.493390][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 517.606086][T21542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4339'. [ 517.641183][T21546] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 518.783324][T21569] netlink: 'syz.2.4348': attribute type 21 has an invalid length. [ 518.869247][T21569] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4348'. [ 518.959257][T21580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4350'. [ 519.048020][T21569] netlink: 'syz.2.4348': attribute type 5 has an invalid length. [ 519.136381][T21569] netlink: 'syz.2.4348': attribute type 6 has an invalid length. [ 519.181245][T21569] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4348'. [ 519.767993][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'. [ 519.824170][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4359'. [ 519.901090][T21610] netlink: 'syz.1.4359': attribute type 12 has an invalid length. [ 519.950496][T21610] netlink: 'syz.1.4359': attribute type 11 has an invalid length. [ 520.102182][T21599] netlink: 'syz.3.4353': attribute type 5 has an invalid length. [ 520.361878][T21609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4357'. [ 520.374211][T21609] tipc: Invalid UDP bearer configuration [ 520.374276][T21609] tipc: Enabling of bearer rejected, failed to enable media [ 520.597073][T21628] netlink: 'syz.2.4362': attribute type 7 has an invalid length. [ 520.675692][T21628] netlink: 'syz.2.4362': attribute type 8 has an invalid length. [ 521.013319][T21634] netlink: 'syz.1.4363': attribute type 5 has an invalid length. [ 521.145090][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4366'. [ 521.194689][T21641] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 521.520316][T21640] bond3: option xmit_hash_policy: invalid value (64) [ 521.623339][T21640] bond3 (unregistering): Released all slaves [ 521.990103][T21641] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 522.098018][T21656] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 523.152435][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4372'. [ 523.688881][ T4942] block nbd7: Receive control failed (result -1) [ 523.750704][T21687] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 523.791791][T21687] bond5 (unregistering): Released all slaves [ 523.968351][T21689] bond0: Error: Cannot enslave bond to itself. [ 523.976781][T21694] netlink: 'syz.4.4378': attribute type 2 has an invalid length. [ 523.993249][T21685] bond0: Error: Cannot enslave bond to itself. [ 524.127691][T21694] x_tables: unsorted entry at hook 1 [ 524.211791][T21694] ip6gre2: entered allmulticast mode [ 524.292288][T21699] ip_tables: iptables: counters copy to user failed while replacing table [ 524.388847][T21698] xt_TPROXY: Can be used only with -p tcp or -p udp [ 524.570675][T21709] netlink: 'syz.2.4381': attribute type 9 has an invalid length. [ 524.606765][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4381'. [ 524.832084][T21712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4380'. [ 524.862101][T21717] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 524.923390][T21713] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 525.014345][T21721] bond5: entered promiscuous mode [ 525.021004][T21718] bond0: Error: Cannot enslave bond to itself. [ 525.106852][T21718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4383'. [ 525.822067][T21741] netlink: 'syz.1.4390': attribute type 6 has an invalid length. [ 525.913467][T21741] gre0: entered promiscuous mode [ 525.954204][T21741] gre0: entered allmulticast mode [ 525.987230][T21745] x_tables: duplicate underflow at hook 3 [ 526.050226][T21744] smc: net device lo erased user defined pnetid SYZ0 [ 526.163501][T21753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4392'. [ 526.275673][T21756] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.285782][T21756] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.300939][T21744] smc: smcd device lo erased user defined pnetid SYZ0 [ 526.374698][T16439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.412999][T21760] xt_hashlimit: size too large, truncated to 1048576 [ 526.439751][ T5630] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.448980][T16439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.568392][T21761] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.696719][T21766] netlink: 'syz.2.4396': attribute type 9 has an invalid length. [ 526.736963][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4396'. [ 526.746350][T21769] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4398'. [ 526.840370][T21761] bridge_slave_0 (unregistering): left allmulticast mode [ 526.863549][T21761] bridge_slave_0 (unregistering): left promiscuous mode [ 526.905010][T21761] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.196674][ T809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.277319][ T809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.721075][T21788] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 527.763303][ T1728] block nbd5: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 270 seconds [ 527.775206][ T1728] block nbd5: Possible stuck request ffff888027c001c0: control (read@1024,1024B). Runtime 270 seconds [ 527.788584][ T1728] block nbd5: Possible stuck request ffff888027c00380: control (read@2048,1024B). Runtime 270 seconds [ 527.802457][ T1728] block nbd5: Possible stuck request ffff888027c00540: control (read@3072,1024B). Runtime 270 seconds [ 528.997287][T21818] netlink: 'syz.1.4411': attribute type 9 has an invalid length. [ 529.021268][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4411'. [ 529.034877][T21821] Cannot find del_set index 4 as target [ 529.180888][T21820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4412'. [ 529.391683][T21820] vlan2: entered promiscuous mode [ 529.448494][T21820] bridge0: entered promiscuous mode [ 529.565008][T21826] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 529.632058][T21826] bond3 (unregistering): Released all slaves [ 529.893083][T21846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4420'. [ 530.018210][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4419'. [ 530.292529][T21853] netlink: 'syz.2.4421': attribute type 1 has an invalid length. [ 530.395648][T21853] netlink: 'syz.2.4421': attribute type 11 has an invalid length. [ 530.438098][T21853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4421'. [ 530.795783][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.853639][T21850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4419'. [ 531.423735][T21874] netlink: 'syz.3.4426': attribute type 1 has an invalid length. [ 531.783669][T21874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.824886][T21901] netlink: 'syz.4.4431': attribute type 1 has an invalid length. [ 532.123671][T21895] bond3: (slave veth7): Enslaving as an active interface with a down link [ 532.709385][T21874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.738923][T21874] bond3: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 532.981295][T21908] bridge3: entered promiscuous mode [ 533.530436][T21950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4439'. [ 533.849919][T21954] block nbd4: reconnected socket [ 533.899731][T21954] block nbd4: reconnected socket [ 533.990308][T19956] block nbd4: Receive control failed (result -32) [ 533.997478][ T4942] block nbd4: Receive control failed (result -32) [ 534.364583][T21969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 534.828400][T21974] bridge0: port 2(dummy0) entered blocking state [ 534.887242][T21974] bridge0: port 2(dummy0) entered disabled state [ 534.926638][T21974] dummy0: entered allmulticast mode [ 534.998213][T21974] dummy0: entered promiscuous mode [ 535.081779][T21974] bridge0: port 2(dummy0) entered blocking state [ 535.088529][T21974] bridge0: port 2(dummy0) entered forwarding state [ 535.163112][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4450'. [ 535.398942][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 535.502845][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 535.568561][T21995] netlink: 'syz.4.4453': attribute type 1 has an invalid length. [ 536.035281][T22003] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4456'. [ 536.101262][T22003] openvswitch: netlink: Message has 4 unknown bytes. [ 536.163704][T22006] block nbd1: reconnected socket [ 536.242259][ T4942] block nbd1: Receive control failed (result -32) [ 537.488877][T22034] smc: net device team0 applied user defined pnetid SYZ2 [ 539.084747][T22075] netlink: 'syz.0.4472': attribute type 2 has an invalid length. [ 539.164450][T22075] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4472'. [ 539.186094][T22068] lo speed is unknown, defaulting to 1000 [ 539.887217][T22040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4467'. [ 539.915564][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.011787][T22085] --map-set only usable from mangle table [ 540.460628][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4479'. [ 540.709225][T22105] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 540.958947][T22110] syzkaller0: entered promiscuous mode [ 540.990862][T22110] syzkaller0: entered allmulticast mode [ 541.288663][T22124] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 541.504499][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 541.651351][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4487'. [ 541.718169][T22123] netlink: 'syz.0.4487': attribute type 15 has an invalid length. [ 541.832354][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 541.845967][ T644] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 541.885782][ T644] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 541.907786][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4487'. [ 541.924901][ T644] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 541.940916][T22123] netlink: 'syz.0.4487': attribute type 15 has an invalid length. [ 541.961048][ T644] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 542.357343][T22141] netlink: 'syz.0.4492': attribute type 9 has an invalid length. [ 542.365140][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4492'. [ 542.390997][T22143] netlink: 'syz.1.4493': attribute type 2 has an invalid length. [ 543.751325][T22181] netlink: 'syz.3.4504': attribute type 2 has an invalid length. [ 543.805603][T22181] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 543.893007][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4504'. [ 543.988418][T22187] netlink: 'syz.3.4504': attribute type 10 has an invalid length. [ 544.084323][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4504'. [ 545.103727][T22212] netlink: 'syz.2.4515': attribute type 2 has an invalid length. [ 545.206118][T22219] netlink: 'syz.1.4517': attribute type 9 has an invalid length. [ 545.263175][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4517'. [ 545.679738][T22229] block nbd3: NBD_DISCONNECT [ 545.727383][T22229] block nbd3: Send disconnect failed -32 [ 545.735561][T22226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.751760][T22226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.762780][T22229] block nbd3: shutting down sockets [ 546.613995][T22240] netlink: 'syz.0.4525': attribute type 14 has an invalid length. [ 546.644519][T22240] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4525'. [ 546.983634][T22259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4528'. [ 547.033241][T22260] netlink: 'syz.2.4529': attribute type 9 has an invalid length. [ 547.071802][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4528'. [ 547.090652][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4529'. [ 547.144226][T22262] xt_hashlimit: size too large, truncated to 1048576 [ 547.530421][T22269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4534'. [ 548.679579][T22295] xt_socket: unknown flags 0x8 [ 548.710525][T22299] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4542'. [ 549.160617][T22312] netlink: 'syz.2.4545': attribute type 9 has an invalid length. [ 549.171876][T22307] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4544'. [ 549.220489][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4545'. [ 549.487904][T22317] veth1_macvtap: left promiscuous mode [ 549.657710][T22324] syzkaller1: entered promiscuous mode [ 549.693075][T22324] syzkaller1: entered allmulticast mode [ 550.619795][T22332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.101460][T22350] netlink: 'syz.3.4558': attribute type 9 has an invalid length. [ 551.158107][T22350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4558'. [ 551.254349][T22356] tipc: Enabling of bearer rejected, failed to enable media [ 551.322408][T22358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.419985][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 551.451272][T22361] bond6: option all_slaves_active: invalid value (222) [ 551.530278][T22361] bond6 (unregistering): Released all slaves [ 551.825642][T22354] __nla_validate_parse: 2 callbacks suppressed [ 551.825665][T22354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4559'. [ 553.040102][T22391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4568'. [ 553.166876][T22400] netlink: 'syz.2.4572': attribute type 9 has an invalid length. [ 553.174879][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4572'. [ 553.515136][T22412] netlink: 'syz.2.4574': attribute type 1 has an invalid length. [ 553.606456][T22415] netlink: 'syz.0.4575': attribute type 1 has an invalid length. [ 553.665118][T22419] netlink: 'syz.1.4576': attribute type 4 has an invalid length. [ 553.680940][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4577'. [ 553.707121][T22412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.733395][T22419] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4576'. [ 553.770408][T22415] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 553.799423][T22421] erspan2: entered allmulticast mode [ 553.920587][T22420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4577'. [ 554.211840][T22434] netlink: 'syz.0.4580': attribute type 1 has an invalid length. [ 554.249985][T22434] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4580'. [ 554.382889][T22439] veth0: entered promiscuous mode [ 554.424901][T22438] veth0: left promiscuous mode [ 554.732607][T22443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4582'. [ 554.909696][T22446] netlink: 'syz.0.4583': attribute type 9 has an invalid length. [ 554.957152][T22446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4583'. [ 555.002395][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 556.518721][T22486] netlink: 'syz.1.4592': attribute type 7 has an invalid length. [ 556.597779][T22486] netlink: 'syz.1.4592': attribute type 8 has an invalid length. [ 556.828032][T22499] netlink: 'syz.4.4594': attribute type 21 has an invalid length. [ 556.891451][T22501] __nla_validate_parse: 6 callbacks suppressed [ 556.891472][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4592'. [ 556.981290][T22505] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4596'. [ 557.393227][T22510] syzkaller0: entered promiscuous mode [ 557.471294][T22510] syzkaller0: entered allmulticast mode [ 557.840608][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.986710][ T1728] block nbd5: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 300 seconds [ 558.001239][ T1728] block nbd5: Possible stuck request ffff888027c001c0: control (read@1024,1024B). Runtime 300 seconds [ 558.012815][ T1728] block nbd5: Possible stuck request ffff888027c00380: control (read@2048,1024B). Runtime 300 seconds [ 558.024244][ T1728] block nbd5: Possible stuck request ffff888027c00540: control (read@3072,1024B). Runtime 300 seconds [ 558.664442][T22541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4604'. [ 558.778242][T22541] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4604'. [ 559.064633][T22541] veth5: entered promiscuous mode [ 559.412387][T22562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4611'. [ 559.696871][T22562] team0: Port device team_slave_0 removed [ 560.155666][ T809] page_pool_release_retry() stalled pool shutdown: id 118, 1 inflight 60 sec [ 561.526575][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4621'. [ 561.604647][T22613] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4621'. [ 561.670937][T22613] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4621'. [ 562.561659][T22642] veth0: entered promiscuous mode [ 562.663775][T22635] veth0: left promiscuous mode [ 562.959618][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.121957][T22652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4632'. [ 563.161955][T22652] block nbd3: Unsupported socket: should be TCP or UNIX. [ 565.560095][T22718] Cannot find set identified by id 3 to match [ 565.970005][T22691] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 566.002016][T22691] syzkaller0: entered promiscuous mode [ 566.008705][T22691] syzkaller0: entered allmulticast mode [ 566.102269][T22732] siw: device registration error -23 [ 567.299072][T22754] netlink: 'syz.1.4660': attribute type 21 has an invalid length. [ 567.346213][T22754] netlink: 'syz.1.4660': attribute type 6 has an invalid length. [ 567.459983][T22754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4660'. [ 567.480090][T22764] netlink: Conntrack attr has 1 unknown bytes [ 567.502864][T22764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.522718][T22766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4661'. [ 567.544564][T22759] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 567.608534][T22767] [ 567.610933][T22767] ====================================================== [ 567.617998][T22767] WARNING: possible circular locking dependency detected [ 567.625118][T22767] syzkaller #0 Not tainted [ 567.629554][T22767] ------------------------------------------------------ [ 567.636629][T22767] syz.3.4662/22767 is trying to acquire lock: [ 567.642724][T22767] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 567.653444][T22767] [ 567.653444][T22767] but task is already holding lock: [ 567.660828][T22767] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 567.670288][T22767] [ 567.670288][T22767] which lock already depends on the new lock. [ 567.670288][T22767] [ 567.680711][T22767] [ 567.680711][T22767] the existing dependency chain (in reverse order) is: [ 567.689746][T22767] [ 567.689746][T22767] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 567.697890][T22767] down_write+0x96/0x200 [ 567.702698][T22767] kernfs_add_one+0x41/0x5e0 [ 567.707849][T22767] kernfs_create_dir_ns+0x1a1/0x230 [ 567.713602][T22767] internal_create_group+0x440/0x1180 [ 567.719535][T22767] cpuhp_invoke_callback+0x434/0x810 [ 567.725431][T22767] cpuhp_issue_call+0x3f0/0x750 [ 567.730837][T22767] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 567.737456][T22767] __cpuhp_setup_state+0x3f/0x60 [ 567.742950][T22767] do_one_initcall+0x250/0x870 [ 567.748291][T22767] do_initcall_level+0x10a/0x1a0 [ 567.753897][T22767] do_initcalls+0x59/0xa0 [ 567.758774][T22767] kernel_init_freeable+0x29d/0x3e0 [ 567.764558][T22767] kernel_init+0x1d/0x1d0 [ 567.769453][T22767] ret_from_fork+0x514/0xb70 [ 567.774726][T22767] ret_from_fork_asm+0x1a/0x30 [ 567.780042][T22767] [ 567.780042][T22767] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 567.787907][T22767] [ 567.787907][T22767] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 567.795695][T22767] cpus_read_lock+0x42/0x160 [ 567.800842][T22767] static_key_slow_inc+0x12/0x30 [ 567.806369][T22767] nbd_genl_reconfigure+0x1301/0x1e80 [ 567.812387][T22767] genl_family_rcv_msg_doit+0x233/0x340 [ 567.818496][T22767] genl_rcv_msg+0x614/0x7a0 [ 567.823565][T22767] netlink_rcv_skb+0x226/0x4a0 [ 567.828886][T22767] genl_rcv+0x28/0x40 [ 567.833425][T22767] netlink_unicast+0x7bb/0x940 [ 567.838733][T22767] netlink_sendmsg+0x813/0xb40 [ 567.844051][T22767] sock_sendmsg_nosec+0x13a/0x180 [ 567.849749][T22767] ____sys_sendmsg+0x54e/0x850 [ 567.855061][T22767] ___sys_sendmsg+0x2a5/0x360 [ 567.860293][T22767] __x64_sys_sendmsg+0x1b1/0x290 [ 567.865779][T22767] do_syscall_64+0x174/0x580 [ 567.870924][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.877377][T22767] [ 567.877377][T22767] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 567.885066][T22767] __mutex_lock+0x19d/0x1550 [ 567.890226][T22767] nbd_queue_rq+0x373/0x1150 [ 567.895365][T22767] blk_mq_dispatch_rq_list+0x499/0x1990 [ 567.901609][T22767] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 567.908539][T22767] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 567.915095][T22767] blk_mq_run_work_fn+0x16c/0x300 [ 567.920672][T22767] process_scheduled_works+0xa8e/0x14e0 [ 567.926891][T22767] worker_thread+0xa47/0xfb0 [ 567.932055][T22767] kthread+0x388/0x470 [ 567.936699][T22767] ret_from_fork+0x514/0xb70 [ 567.941861][T22767] ret_from_fork_asm+0x1a/0x30 [ 567.947179][T22767] [ 567.947179][T22767] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 567.954445][T22767] __mutex_lock+0x19d/0x1550 [ 567.959594][T22767] nbd_queue_rq+0xc1/0x1150 [ 567.964654][T22767] blk_mq_dispatch_rq_list+0x499/0x1990 [ 567.970764][T22767] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 567.977667][T22767] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 567.984211][T22767] blk_mq_run_work_fn+0x16c/0x300 [ 567.989792][T22767] process_scheduled_works+0xa8e/0x14e0 [ 567.995886][T22767] worker_thread+0xa47/0xfb0 [ 568.001030][T22767] kthread+0x388/0x470 [ 568.005654][T22767] ret_from_fork+0x514/0xb70 [ 568.010810][T22767] ret_from_fork_asm+0x1a/0x30 [ 568.016134][T22767] [ 568.016134][T22767] -> #4 (set->srcu){.+.+}-{0:0}: [ 568.023313][T22767] __synchronize_srcu+0xc9/0x2f0 [ 568.028852][T22767] elevator_switch+0x1e8/0x7b0 [ 568.034278][T22767] elevator_change+0x2fa/0x480 [ 568.039622][T22767] elevator_set_default+0x375/0x440 [ 568.045399][T22767] blk_register_queue+0x3f3/0x4e0 [ 568.051037][T22767] __add_disk+0x6cb/0xe30 [ 568.055945][T22767] add_disk_fwnode+0x100/0x3a0 [ 568.061354][T22767] nbd_dev_add+0x733/0xb60 [ 568.066318][T22767] nbd_init+0x15f/0x1e0 [ 568.071090][T22767] do_one_initcall+0x250/0x870 [ 568.076428][T22767] do_initcall_level+0x10a/0x1a0 [ 568.081929][T22767] do_initcalls+0x59/0xa0 [ 568.086819][T22767] kernel_init_freeable+0x29d/0x3e0 [ 568.092576][T22767] kernel_init+0x1d/0x1d0 [ 568.097549][T22767] ret_from_fork+0x514/0xb70 [ 568.102746][T22767] ret_from_fork_asm+0x1a/0x30 [ 568.108061][T22767] [ 568.108061][T22767] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 568.115917][T22767] __mutex_lock+0x19d/0x1550 [ 568.121069][T22767] elevator_change+0x1af/0x480 [ 568.126395][T22767] elevator_set_none+0xb5/0x140 [ 568.131819][T22767] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 568.138196][T22767] nbd_start_device+0x189/0xb30 [ 568.143591][T22767] nbd_genl_connect+0x1597/0x1c10 [ 568.149163][T22767] genl_family_rcv_msg_doit+0x233/0x340 [ 568.155267][T22767] genl_rcv_msg+0x614/0x7a0 [ 568.160320][T22767] netlink_rcv_skb+0x226/0x4a0 [ 568.165651][T22767] genl_rcv+0x28/0x40 [ 568.170211][T22767] netlink_unicast+0x7bb/0x940 [ 568.175528][T22767] netlink_sendmsg+0x813/0xb40 [ 568.180852][T22767] sock_sendmsg_nosec+0x13a/0x180 [ 568.186445][T22767] ____sys_sendmsg+0x54e/0x850 [ 568.191756][T22767] ___sys_sendmsg+0x2a5/0x360 [ 568.196977][T22767] __x64_sys_sendmsg+0x1b1/0x290 [ 568.202461][T22767] do_syscall_64+0x174/0x580 [ 568.207597][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.214121][T22767] [ 568.214121][T22767] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 568.222801][T22767] blk_alloc_queue+0x544/0x690 [ 568.228129][T22767] __blk_mq_alloc_disk+0x194/0x390 [ 568.233784][T22767] nbd_dev_add+0x494/0xb60 [ 568.238746][T22767] nbd_init+0x15f/0x1e0 [ 568.243449][T22767] do_one_initcall+0x250/0x870 [ 568.248782][T22767] do_initcall_level+0x10a/0x1a0 [ 568.254265][T22767] do_initcalls+0x59/0xa0 [ 568.259140][T22767] kernel_init_freeable+0x29d/0x3e0 [ 568.264896][T22767] kernel_init+0x1d/0x1d0 [ 568.269782][T22767] ret_from_fork+0x514/0xb70 [ 568.274935][T22767] ret_from_fork_asm+0x1a/0x30 [ 568.280247][T22767] [ 568.280247][T22767] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 568.287603][T22767] fs_reclaim_acquire+0x71/0x100 [ 568.293095][T22767] kmem_cache_alloc_noprof+0x64/0x5f0 [ 568.299021][T22767] __kernfs_iattrs+0xdd/0x380 [ 568.304249][T22767] kernfs_iop_setattr+0xe6/0x3f0 [ 568.309736][T22767] notify_change+0xbba/0xea0 [ 568.314871][T22767] do_truncate+0x1c2/0x250 [ 568.319857][T22767] path_openat+0x2fed/0x3830 [ 568.325002][T22767] do_file_open+0x23e/0x4a0 [ 568.330071][T22767] do_sys_openat2+0x115/0x200 [ 568.335316][T22767] __x64_sys_openat+0x138/0x170 [ 568.340719][T22767] do_syscall_64+0x174/0x580 [ 568.345867][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.352311][T22767] [ 568.352311][T22767] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 568.360879][T22767] __lock_acquire+0x1520/0x2cf0 [ 568.366288][T22767] lock_acquire+0x106/0x350 [ 568.371349][T22767] down_write+0x96/0x200 [ 568.376153][T22767] kernfs_link_sibling+0x4c7/0x5a0 [ 568.381826][T22767] kernfs_add_one+0x1d2/0x5e0 [ 568.387063][T22767] __kernfs_create_file+0x22b/0x2e0 [ 568.392808][T22767] sysfs_add_file_mode_ns+0x237/0x300 [ 568.398726][T22767] sysfs_create_file_ns+0x12b/0x1b0 [ 568.404493][T22767] idletimer_tg_checkentry_v1+0x4ea/0xf00 [ 568.410874][T22767] xt_check_target+0x619/0xca0 [ 568.416240][T22767] nft_target_init+0x6bd/0xa30 [ 568.421596][T22767] nf_tables_newrule+0x179e/0x28a0 [ 568.427303][T22767] nfnetlink_rcv+0x1288/0x28c0 [ 568.432654][T22767] netlink_unicast+0x7bb/0x940 [ 568.437977][T22767] netlink_sendmsg+0x813/0xb40 [ 568.443296][T22767] sock_sendmsg_nosec+0x13a/0x180 [ 568.448891][T22767] ____sys_sendmsg+0x54e/0x850 [ 568.454202][T22767] ___sys_sendmsg+0x2a5/0x360 [ 568.459426][T22767] __x64_sys_sendmsg+0x1b1/0x290 [ 568.464913][T22767] do_syscall_64+0x174/0x580 [ 568.470077][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.476524][T22767] [ 568.476524][T22767] other info that might help us debug this: [ 568.476524][T22767] [ 568.486777][T22767] Chain exists of: [ 568.486777][T22767] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 568.486777][T22767] [ 568.501251][T22767] Possible unsafe locking scenario: [ 568.501251][T22767] [ 568.508799][T22767] CPU0 CPU1 [ 568.514236][T22767] ---- ---- [ 568.519665][T22767] lock(&root->kernfs_rwsem); [ 568.524464][T22767] lock(cpuhp_state_mutex); [ 568.531609][T22767] lock(&root->kernfs_rwsem); [ 568.538930][T22767] lock(&root->kernfs_iattr_rwsem); [ 568.544245][T22767] [ 568.544245][T22767] *** DEADLOCK *** [ 568.544245][T22767] [ 568.552482][T22767] 3 locks held by syz.3.4662/22767: [ 568.557695][T22767] #0: ffff888033aa6cd0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 568.568541][T22767] #1: ffffffff900db200 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry_v1+0x10a/0xf00 [ 568.578884][T22767] #2: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 568.588789][T22767] [ 568.588789][T22767] stack backtrace: [ 568.594716][T22767] CPU: 1 UID: 0 PID: 22767 Comm: syz.3.4662 Not tainted syzkaller #0 PREEMPT(full) [ 568.594745][T22767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.594760][T22767] Call Trace: [ 568.594772][T22767] [ 568.594783][T22767] dump_stack_lvl+0xe8/0x150 [ 568.594823][T22767] print_circular_bug+0x2e1/0x300 [ 568.594850][T22767] check_noncircular+0x12e/0x150 [ 568.594877][T22767] __lock_acquire+0x1520/0x2cf0 [ 568.594912][T22767] ? __lock_acquire+0x683/0x2cf0 [ 568.594950][T22767] ? kernfs_link_sibling+0x4c7/0x5a0 [ 568.594983][T22767] lock_acquire+0x106/0x350 [ 568.595011][T22767] ? kernfs_link_sibling+0x4c7/0x5a0 [ 568.595052][T22767] down_write+0x96/0x200 [ 568.595082][T22767] ? kernfs_link_sibling+0x4c7/0x5a0 [ 568.595114][T22767] ? __pfx_down_write+0x10/0x10 [ 568.595142][T22767] ? kernfs_root+0x1c/0x230 [ 568.595171][T22767] ? kernfs_root+0x1c/0x230 [ 568.595200][T22767] ? kernfs_root+0x1c/0x230 [ 568.595230][T22767] ? kernfs_root+0x1ea/0x230 [ 568.595261][T22767] kernfs_link_sibling+0x4c7/0x5a0 [ 568.595300][T22767] kernfs_add_one+0x1d2/0x5e0 [ 568.595334][T22767] __kernfs_create_file+0x22b/0x2e0 [ 568.595355][T22767] sysfs_add_file_mode_ns+0x237/0x300 [ 568.595386][T22767] sysfs_create_file_ns+0x12b/0x1b0 [ 568.595411][T22767] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 568.595441][T22767] ? __kasan_kmalloc+0x93/0xb0 [ 568.595474][T22767] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 568.595502][T22767] ? __asan_memcpy+0x40/0x70 [ 568.595531][T22767] idletimer_tg_checkentry_v1+0x4ea/0xf00 [ 568.595573][T22767] xt_check_target+0x619/0xca0 [ 568.595605][T22767] ? __flush_work+0x101/0xca0 [ 568.595639][T22767] ? __pfx_xt_check_target+0x10/0x10 [ 568.595682][T22767] ? flush_work+0xd/0x30 [ 568.595712][T22767] nft_target_init+0x6bd/0xa30 [ 568.595743][T22767] ? __pfx_nft_target_init+0x10/0x10 [ 568.595786][T22767] ? __kmalloc_noprof+0x396/0x720 [ 568.595814][T22767] ? __kmalloc_noprof+0x1ad/0x720 [ 568.595841][T22767] ? nf_tables_newrule+0x1524/0x28a0 [ 568.595861][T22767] ? nf_tables_newrule+0x1524/0x28a0 [ 568.595885][T22767] nf_tables_newrule+0x179e/0x28a0 [ 568.595915][T22767] ? __pfx_nf_tables_newrule+0x10/0x10 [ 568.595948][T22767] ? nfnl_pernet+0x23/0x240 [ 568.595970][T22767] ? nfnl_pernet+0x23/0x240 [ 568.595996][T22767] ? __nla_parse+0x40/0x60 [ 568.596031][T22767] nfnetlink_rcv+0x1288/0x28c0 [ 568.596081][T22767] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 568.596129][T22767] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.596160][T22767] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.596186][T22767] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.596214][T22767] netlink_unicast+0x7bb/0x940 [ 568.596243][T22767] netlink_sendmsg+0x813/0xb40 [ 568.596274][T22767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.596302][T22767] ? aa_sock_msg_perm+0xf1/0x1b0 [ 568.596331][T22767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.596356][T22767] sock_sendmsg_nosec+0x13a/0x180 [ 568.596391][T22767] ____sys_sendmsg+0x54e/0x850 [ 568.596419][T22767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.596449][T22767] ? import_iovec+0x73/0xa0 [ 568.596472][T22767] ___sys_sendmsg+0x2a5/0x360 [ 568.596497][T22767] ? __lock_acquire+0x683/0x2cf0 [ 568.596530][T22767] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.596582][T22767] ? __fget_files+0x2a/0x420 [ 568.596612][T22767] ? __fget_files+0x3a2/0x420 [ 568.596647][T22767] __x64_sys_sendmsg+0x1b1/0x290 [ 568.596670][T22767] ? sched_clock+0x3f/0x60 [ 568.596698][T22767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.596733][T22767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.596757][T22767] do_syscall_64+0x174/0x580 [ 568.596784][T22767] ? clear_bhb_loop+0x40/0x90 [ 568.596808][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.596831][T22767] RIP: 0033:0x7f5fc0f9e0d9 [ 568.596852][T22767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.596872][T22767] RSP: 002b:00007f5fc1e2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.596897][T22767] RAX: ffffffffffffffda RBX: 00007f5fc1226180 RCX: 00007f5fc0f9e0d9 [ 568.596914][T22767] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 568.596929][T22767] RBP: 00007f5fc1035024 R08: 0000000000000000 R09: 0000000000000000 [ 568.596943][T22767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.596956][T22767] R13: 00007f5fc1226218 R14: 00007f5fc1226180 R15: 00007ffdfd9644b8 [ 568.596982][T22767] [ 569.040418][T22768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4663'. [ 569.221750][T22759] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)