last executing test programs: 4.83440829s ago: executing program 2 (id=13285): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(0x0) r2 = socket(0x14, 0x3, 0x2000004) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b45623d849747e589f5bb88690d467000000000000007911d80000000000050000000000373fa2e92b72000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xdc280, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0xffffbffe) ioctl$PPPIOCSMAXCID(r4, 0x4004743c, 0x0) socket(0xf, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) close(0xffffffffffffffff) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) (async) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) pipe(0x0) (async) socket(0x14, 0x3, 0x2000004) (async) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b45623d849747e589f5bb88690d467000000000000007911d80000000000050000000000373fa2e92b72000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xdc280, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0xffffbffe) (async) ioctl$PPPIOCSMAXCID(r4, 0x4004743c, 0x0) (async) socket(0xf, 0x4, 0x2) (async) 4.813369324s ago: executing program 0 (id=13287): sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x140e, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x79}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x14044010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x218, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xd8, 0x4, 0x0, 0x400}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'wlan0\x00', 0x9209}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9ca7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000805) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r3) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000980)={&(0x7f00000005c0), 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x2d8, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "decc2e7083098588af1fe33fc68d9ba6a68ca8bc3300c6151a091db0161d73fdad4018ecb356e1edfb0e6e9a6beaac56df0640eb3fdaabf1bfc2fffb05ce7b6de8c8ad9137839f981b6c1bf12a3182a94912104c25e7d13ea5f6d03b15e67dfbb1826e3104f47299ea3e1d7739febd64361328dd4c23b4ff926fde0c47c27f9ee9a74d1ea055c988067b3fcba5bd55b0198f3b971a042cb1a7d335989448314bc9ef31c6117731459e7d336a388516645bad76482a78eaf1572b73e19b24318a9977f9c23654490b7578fd61944f132c0683795b3d1f0d505f15259dbe"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x1bc, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9d9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#[-@,}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '{:\\!///$!)*-%{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '&--./l#\\[^{\x16)\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e0dd38c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{}/@\\&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '##\'\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4050}, 0x48000) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$nci(r8, &(0x7f0000000a00)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x5, {0x0, 0x6, 0x6, 0x5, 0x6, 0x10, 0x68, 0x100, 0xb1, "bfc628fe83970e68f7e4abd7a3ed448510afaf70e8c475c3da3c500e64ecaccaff868c7b4f9de3770e3d69a5eced7ba177be74a46488c08960b8e4669394ca96481f8c9d11b289ea930ee82fc1cab62a159b620169fe01d068353d91533c2742943f463d53474f8f89922800017c637dcf8bb6e3fa997ecb29af3998293c69ced19601f22edb1909509e28ee331ef41bb6f19b3b93bdc0c8e0be92483d997190bca58a56acb5139135eb197607050880e6"}}, 0xc2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000c80)={&(0x7f0000000b00), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000020}, 0x4044000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x94, r12, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r16}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r17}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '%'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0f}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x400c890) 4.143335981s ago: executing program 1 (id=13290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="4efeb6bca1", 0x5}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x18}}], 0x1, 0x83d086745d8479bf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5, 0x5}, 0x8) connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e21, 0x5d, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="060010004e230000"], 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x801) 4.124305104s ago: executing program 0 (id=13291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbf}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)=r1) 3.878160033s ago: executing program 0 (id=13292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0x8) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x9ad5, 0xffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x1, 0xff, 0x2, 0x7, 0xffbd}, 0x20) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) 3.525723199s ago: executing program 0 (id=13294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180600000000000000fe91000000000072013100000000809500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2cb2d127}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000021a41c42000000004a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000183400000200000000000000000000008500000010000b000249020073000000bf91000000000000b7020000000000008500000084000000b7000018000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x101}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x294, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x720, 0x6f}}}}, [@NL80211_ATTR_NAN_FUNC={0x170, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x134, 0xd, 0x0, 0x1, [{0x64, 0x0, "cc0b2db57eb794a14b915064eb5fff0e04369e1b7350e0445e304c0954e76ac6d85f0de86cb35141e61d97f8bb0d792ae9c52c7b52fd70354a48f6155b130f4951fce754aaf64b1dd9bab240674ce6f955175dc62a7c53869c5a0d3513e68484"}, {0x12, 0x0, "292401100e3d993a0aea4e2aca77"}, {0x31, 0x0, "8c80e353de78167f0b641a462d74befff51f70060ca262b809fe42b96c27701143d59c583fd7ce55703898a28d"}, {0x50, 0x0, "5581365278a6bc00d974e54a7ecb2fc2d3c2fc22b204e4d7924f9faad27a2dec68884a29038b844446c43a53404128bf1384f673560b056287c2d4e7cb70a35e7d1c7eee153cb96b4a4c2d94"}, {0x27, 0x0, "f9a298e91afe9e3825342fbbc3b505c43ad5e868a3045aef51c1dabe736d8fe5614cb4"}, {0xc, 0x0, "76b1050237e9c997"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "fb73b2516642"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x40}]}, @NL80211_ATTR_NAN_FUNC={0x104, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_SRF={0x74, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x47, 0xb, "52d6176a9654abe777c75beacdc3abde979593484dd873740384ac7ca23bee5dd3fd45a59c858e7d4614fc01ff5c3dcb879de5f348d651d0d900dca4936322d70ba2aa"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_SERVICE_INFO={0x14, 0xb, "fabacbba6db04709dd49ba51e2b13726"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="a62c210d0b171ca8e839981ab669ff9df6b142e1a42b203607a96e66e03c6e343d990bd026ee3ccaabef43df1a8ed1416f869dd31d4121d061aab178bc82432c93802c83c4cbca64aea5752dbbc7b2824244e24deef2b7159454ec6a928efbab2d5185180ae3b109bb6db54d26937cfa00412363edebcf0a87dc086a53", 0x7d, 0x4000000, &(0x7f0000000400)={0x11, 0x3, 0x0, 0x1, 0xae, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) 3.468407864s ago: executing program 4 (id=13295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000003c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef4391859863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f00000002c0)="1aa89060701107653eda123ec4647ad65ca8b7792e6da36191f93da265e6ec803be1248a4164a733eb78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248afcf84b1dbc2c2ceaef6ed1b2ad8cb9637bb85d6a7309c12da", 0x58}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) nanosleep(&(0x7f0000000200), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 3.241656346s ago: executing program 1 (id=13296): r0 = socket(0x200000000000011, 0x2, 0xd) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4686}}, @call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x2, @val=@tcx}, 0x1c) (async) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000000c0), 0x1) 3.231899959s ago: executing program 4 (id=13297): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r5}, 0x38) socket$kcm(0x29, 0x5, 0x0) (async) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd2e, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async) recvmsg$qrtr(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.626990116s ago: executing program 4 (id=13298): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000840)=@netrom={'nr', 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'caif0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0x6, "fbb020b1c236"}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x81, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r8}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x5, r8}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000098000000001e0000000000e60d002e5cc97c3b28e933000100", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) 2.508076836s ago: executing program 2 (id=13300): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x1, 0x90d6c29a684dcf18, 0x9, 0x0, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x69, 0x0, 0x6, 0x2f, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x1e, 0x3, [{0x5, 0xe, "ffc9c1b20c3bf2410101e78f"}, {0x6, 0xa, "868c4465a0b72033"}]}, @noop, @noop, @timestamp={0x44, 0x1c, 0xd0, 0x0, 0x4, [0x3, 0x6, 0x0, 0x3, 0xb, 0x401]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x8, 0x4}, {0xc, 0x6}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4e4119a49b75de4c92cf6cf39a08a033a8d1c7f52b0e68eb225b7b3b9d9a8ec68830246fe716f0367b288ed37a8bf784668d469a5b0a4f12c1d3f92b32e5248a9acadba841569eefc3e7d334a0aeadfe83b00bd490a797e6c5505f08286060efbce4c8", @ANYRES16=r6, @ANYBLOB="040027bd7000fddbdf255700000006009500ff0f0000060095000900000006009500030000000600950008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10894) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="0f096f7c02b8affcb68ec44c729fd8d4d0618b18c6cf91591d59d00078fefa684c0b75ebbc2fa09a", @ANYBLOB="996e06004d4c07005400128008000100687372004800028005000600080000000500030005000000050003e6eb70a70008000200", @ANYRESOCT=r2, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x4860}, 0x4000815) 2.324687505s ago: executing program 0 (id=13301): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.248272131s ago: executing program 2 (id=13302): socket(0x2, 0x3, 0x4) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x8, @broadcast}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48c5}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000100070000000900020073797a31000000000c0007800800060000000000050001000700000005000500020000000500050000000000"], 0x4c}}, 0x0) r7 = socket(0x2d, 0x2, 0x0) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x0, 0x0, 0x7, {[@timestamp={0x44, 0x0, 0x83, 0x0, 0x5, [0x2, 0x9, 0x7]}, @cipso={0x86, 0x0, 0xaa14a3c6d687237c, [{0x0, 0x0, "f1369d7bc4"}]}, @timestamp_prespec={0x44, 0x0, 0x4a, 0x3, 0xc, [{@multicast1, 0x1}, {@local, 0x9}]}, @end]}}}, @ip_tos_int={{0x29, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x48}}], 0x1, 0x0) (async, rerun: 32) r8 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r10 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 64) r11 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) (async, rerun: 64) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async, rerun: 64) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 2.240104585s ago: executing program 3 (id=13303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="aa6dda499bb0220a6c7ff76633c30b8d4318fcb9095cac88aa21081c399e8293df", @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf25230000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x8000) 2.212676041s ago: executing program 1 (id=13304): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006240)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x24085}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003780)=ANY=[@ANYBLOB="340000000a0601010000000000000000070000090900020073797a31000000000500010007000000080009400000000504000880bba12217e2a4ec82a175d61cd8ae39cb54bf6199276400d4b3d9d0e43c8172aefbc584ceb6b324e4944a9dbfc7b9e6958db2dcb72bbceea379df2473af56e200cb7ccd9552da8c73a9355f29c166844b6b149a2182882ce548fc3c2966daa9368beb24985b6c88a276a1aa4128638a6dd645b3a710aa55fdf4e7dc02582454cb64608a057ad78b8e6fff7f9c6a4aa1a21e6facd4acc4b44bd6542b5b"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x0}, 0x94) shutdown(r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0xffff}, 0x20) r5 = epoll_create(0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x40000000}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRES16=r6, @ANYBLOB="161f33cadbcd5b4de94b73bbe2aa9c35eb224bc3197afd690defc9c310b51e46ea2781afcfe77df2d7ea725ed204f4b42ebbeea3ccf8bbc1ee1028fca3502fc6ffc336586ea1e7f8c7abbd6a77c7894c5ac4131bf3dd0d98d1ed80859b352cef3e3156ae111e0bf779f6cf1dc84880f78eca4a42804085c985c9a4b2bbca8d7cb9b2925437d823a5fd4eb434dc783f807a3b7fbbfad25320707da65b366b667d51e58eb6698f5377d3b1cf81a4f3f1a0405ffb708acc6ca58b"], 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1400000000f2d2075b429a50740000010000000000000000"], 0x18}, 0x40c0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001300)={0x0, 0x0, "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", "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"}) 1.967222978s ago: executing program 3 (id=13305): syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x10, 0x1, 0xc88, 0xb, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x64, 0x0, 0x46, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010101, {[@timestamp_addr={0x44, 0x24, 0xf0, 0x1, 0x8, [{@private=0xa010101, 0x1}, {@remote, 0x2}, {@loopback, 0x3}, {@local, 0x7ff}]}]}}}}}) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), 0x4) 1.664637965s ago: executing program 3 (id=13306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004881) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) 1.66341496s ago: executing program 2 (id=13307): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x2, 0x4, &(0x7f0000000880)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000700)=""/157, &(0x7f00000007c0)=0x9d) ioctl$FICLONE(r1, 0x40049409, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000e36356303302b6a98dd5c8d2bc8d12726ee8135b1e92c86b4700551e3c5237bbfdee903d834a9320c86596860e7a51e9ad04d2011afe90a8018e", @ANYRES16=r4, @ANYBLOB="10002cbd7000fbdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000c000000740000000a001a0008021100000100000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0xb, 0x12) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000cc0)={'gretap0\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x1, 0x1, 0x7, 0x2, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x64, 0x0, 0x36, 0x2, 0x0, @loopback, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x91, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6500}]}, @noop, @rr={0x7, 0x17, 0x97, [@private=0xa010100, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0x1b, 0x4a, [@broadcast, @private=0xa010101, @remote, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x8, "6a48025aae1a"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d40)={'ip_vti0\x00', &(0x7f0000000d00)={'sit0\x00', 0x0, 0x700, 0x1, 0x3, 0x1ff, {{0x6, 0x4, 0x3, 0x1a, 0x18, 0x68, 0x0, 0x0, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={r0, 0x58, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000e40)={0x0, @rand_addr, @broadcast}, &(0x7f0000000e80)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="88030000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25050000001c00018008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f31000000001400020070696d726567000000000000000000000800030000000000050002001d000000050002000c0000004c000180140002007465616d5f736c6176655f3100000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRESOCT=r7, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400e89df45a9a930200776c616e310000000000e59b1458ec8ef218ea8f93edeacab78c51"], 0x388}, 0x1, 0x0, 0x0, 0x4044080}, 0x40000d0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xb, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r12, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040c55}, 0x10008894) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r13, @ANYBLOB="00022bbd7000ffdbdf250300000074000180380004001400010002004e22ac1e01010000000000000000200002000a004e2000000005fe8000000000000000000000000000aa001000000c00028008000400050000002c000280080002000400000008000400020000000800034002000000080001000f0000000800030003000000440007800800020005000000080002000100011bf73b42bb51e59c092ff33c402dbd440c5afc1bfacd390008000200050000000c000400d9000000000000000c00040007"], 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x40000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) 1.60256304s ago: executing program 0 (id=13308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f00000000c0)=""/51, 0x31}], 0x1, 0x0, 0x27}, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974790000000000800000000000000000000000000000000000000500"/45], 0x78) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) 1.446907945s ago: executing program 3 (id=13309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus640-sse2\x00'}}}]}, 0x188}}, 0x0) getpeername$ax25(r1, &(0x7f0000000000)={{0x3, @null}, [@remote, @null, @bcast, @default, @netrom, @remote, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) 1.262445289s ago: executing program 2 (id=13310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x15c, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x148, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d34725}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e657463}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x184f075c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3176a2}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x333bac87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cc0371f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e3b43f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b48957a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3047238c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79c35645}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7951476a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6277c05c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66792437}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a223f1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dcd032}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69039348}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3623668a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2153b90f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd0f358f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xedc31e4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x611c41b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c000) 1.257144915s ago: executing program 4 (id=13311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e23, 0xf, @empty, 0x7}}, [0x3d, 0x2, 0x1, 0x9, 0x9, 0x951, 0x46, 0x7ff, 0x9, 0x5, 0x6, 0x7ff, 0x10, 0x9, 0xffffffff]}, &(0x7f0000000640)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000680)={r2, @in={{0x2, 0x4e21, @private=0xa010101}}}, 0x84) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x40040) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "94c38f906d"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000040) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000080)=""/237, &(0x7f0000000180)=0xed) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000c73228e0745359ad67d1000000000000000000"], 0x48) socket$netlink(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="f66c73ff824d4b9caf44b3c7b2a564582d11b2b464e2478d0c482b7ec05f42d4fadcf270c1e5518c48bdab96019fa8aad6683ac1e7c6d2cd5fe91ba426044faa47333af0267d8db088005881642a1f827eb50539cccd9d406e9c05a82e16c40d0c5f7aeffb7dd8460bce91852dabe458ff32224dee928d209b2e38423c"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) 1.203883554s ago: executing program 3 (id=13312): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffe6b, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040091) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffe6b, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040091) (async) 1.135837533s ago: executing program 1 (id=13313): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0xee, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd8, 0x66, 0x0, 0x2, 0x11, 0x0, @empty, @broadcast}, {0x1, 0x4e20, 0xc4, 0x0, @wg=@data={0x4, 0x3, 0xfff, "062a91023240061231b22459ac4455a72ef68a72ea1c283fa684a1b88956117d1514640c55def1d5533aa4a1d5ece441214c9eb55d63ae2cd779fe25868d3d041d682bdb71df31179290ea88c83f9bf9550f5d8f72740d1a6a4f376e46dce5d39d0136a2648a22a38aa4bd3f20e158e5aca7fe6b22c586ecbec3e1111f6bee0ff90da02003b533a6e1ac94705e8fd6e16515152e16da50f5a792fa9c3933552a9d9a45c2dff458f5ce98019c"}}}}}}, 0x0) 1.028174381s ago: executing program 2 (id=13314): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = accept(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000100)=0x18, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000b00000000000000050009002c000000180a05000000000000000000020000000900020073797a30000000000900010073797a300000200014faffff1000010000000000000000000300001a"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x6000, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 880.194481ms ago: executing program 1 (id=13315): r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c00038004000500"], 0x20}}, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x3, 0x6) (rerun: 32) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 819.517625ms ago: executing program 4 (id=13316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000200000d"], 0x0, 0x3a, 0x0, 0x8}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfa, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 529.631325ms ago: executing program 3 (id=13317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64=r5, @ANYRESHEX=r1, @ANYBLOB="76fe2894014134836a6e848cbf638a33e14831a1ff81bb9131f9405dc2c20b3636bed185f0102e0b81", @ANYRESOCT=r2, @ANYRES64=r5, @ANYRESOCT=r4], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x0) 524.916878ms ago: executing program 1 (id=13318): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x2d0, 0xf0, 0xffffffff, 0x0, 0x2d0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@broadcast, @ipv6=@local, @port=0x4e23, @gre_key=0x833}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0x0, 0xff0000ff], [0x0, 0xffffffff, 0xff, 0xffffffff], 'veth1_to_hsr\x00', 'gre0\x00', {}, {}, 0x2f, 0x6, 0x2, 0x21}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@local, @ipv6=@mcast1, @gre_key=0x4, @port=0x4e20}}}, {{@ipv6={@private0, @mcast2, [0xffffff00, 0x0, 0xff0000ff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff0000ff], 'xfrm0\x00', 'nr0\x00', {0xff}, {0xff}, 0x0, 0x0, 0xf, 0x54}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, @ipv6=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, [0xff, 0x0, 0xffffffff, 0xff], [0xff, 0xff, 0xff000000], 'bond_slave_1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x1d, 0x7, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f00000000c0)='\x00', 0x80000, 0x0, 0x101, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x800) r6 = gettid() r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) r8 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) mmap(&(0x7f0000691000/0x1000)=nil, 0x1000, 0x100000e, 0x50, r9, 0x7ae1f000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="089805000750050008001300", @ANYRES32=r6, @ANYBLOB="140003007665746831576d6106000000ff010000000000006ced64c23eaeea8fdb87a235284bb0a38622d71558ee1a1b723c22170c07921fddae94de56e048db0922f1aafa57d8ee5c14eb1b99a585237a8596a88e2e04a4111fdcbb72c4b9bf372c7ad0b616a70ab3cebc63b6c3628bdaaebcdf54f22b7a3d166a52c32e969702062dea2898363ac9438cc8721784353e0a4e00743478e95aed85988f8c86ff25a1c82f1db9c752b81c0197af"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 0s ago: executing program 4 (id=13319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b00130000000800010000000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): T8914] team0 (unregistering): Port device team_slave_0 removed [ 1448.614400][T17462] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1448.621855][T17462] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1448.649355][T17470] netlink: 'syz.4.11799': attribute type 1 has an invalid length. [ 1448.703483][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11799'. [ 1448.776434][T17470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1448.876522][T17475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11801'. [ 1448.909443][T17474] netlink: 'syz.0.11800': attribute type 10 has an invalid length. [ 1448.934607][T17474] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11800'. [ 1448.963287][T17160] veth0_vlan: entered promiscuous mode [ 1449.040054][T17160] veth1_vlan: entered promiscuous mode [ 1449.059267][ T8914] IPVS: stop unused estimator thread 0... [ 1449.124389][ T5831] Bluetooth: hci1: command tx timeout [ 1449.232721][T17160] veth0_macvtap: entered promiscuous mode [ 1449.253817][T17160] veth1_macvtap: entered promiscuous mode [ 1449.311314][T17160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.363653][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.402736][ T8692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.426620][ T8692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.449763][ T8692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.482499][ T8692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.769880][T10550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.797167][T10550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.871731][T17520] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11812'. [ 1449.959722][T17522] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11813'. [ 1449.988322][ T8692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.011726][ T8692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.066596][T17524] netlink: 'syz.4.11814': attribute type 21 has an invalid length. [ 1450.083282][T17524] IPv6: NLM_F_CREATE should be specified when creating new route [ 1450.103996][T17527] netlink: 'syz.2.11816': attribute type 12 has an invalid length. [ 1450.224440][T17538] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1450.251469][T17527] bond10: option primary_reselect: invalid value (255) [ 1450.270048][T17527] bond10 (unregistering): Released all slaves [ 1450.302044][T17531] netlink: 'syz.2.11816': attribute type 5 has an invalid length. [ 1450.713805][T17559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11824'. [ 1450.753989][T17559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11824'. [ 1450.953273][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1450.968161][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1450.989016][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1451.002538][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1451.013094][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1451.088200][T17567] wg1 speed is unknown, defaulting to 1000 [ 1451.112398][T17567] lo speed is unknown, defaulting to 1000 [ 1451.361876][T17589] netlink: 'syz.4.11831': attribute type 1 has an invalid length. [ 1451.404054][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11831'. [ 1451.743449][ T6464] bond5: (slave syz_tun): Releasing backup interface [ 1451.782667][T17609] netlink: 'syz.0.11837': attribute type 1 has an invalid length. [ 1451.793375][T17610] netlink: 'syz.3.11838': attribute type 9 has an invalid length. [ 1451.803241][T17609] netlink: 'syz.0.11837': attribute type 3 has an invalid length. [ 1451.811957][T17609] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11837'. [ 1451.837099][T17567] chnl_net:caif_netlink_parms(): no params data found [ 1451.856026][T17609] NCSI netlink: No device for ifindex 813332851 [ 1452.295259][T17642] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1452.346651][T17567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.355028][T17567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.362530][T17567] bridge_slave_0: entered allmulticast mode [ 1452.371677][T17567] bridge_slave_0: entered promiscuous mode [ 1452.382336][T17567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.390436][T17567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.398172][T17567] bridge_slave_1: entered allmulticast mode [ 1452.407649][T17567] bridge_slave_1: entered promiscuous mode [ 1452.417774][T17651] tipc: Started in network mode [ 1452.433535][T17651] tipc: Node identity d6d903a5ea7d, cluster identity 4711 [ 1452.469667][T17651] tipc: Enabled bearer , priority 0 [ 1452.490392][T17636] syzkaller0: entered promiscuous mode [ 1452.511735][T17636] syzkaller0: entered allmulticast mode [ 1452.537049][T17636] tipc: Resetting bearer [ 1452.591730][T17633] tipc: Resetting bearer [ 1452.626502][T17633] tipc: Disabling bearer [ 1452.697329][T17567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.729882][T17567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.863731][T17567] team0: Port device team_slave_0 added [ 1452.890606][T17567] team0: Port device team_slave_1 added [ 1453.124855][ T5831] Bluetooth: hci3: command tx timeout [ 1453.172856][T17567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.191056][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.227393][T17567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.241268][T17567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.249133][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.304752][T17567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.345709][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1453.374375][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1453.443621][T17567] hsr_slave_0: entered promiscuous mode [ 1453.465981][T17567] hsr_slave_1: entered promiscuous mode [ 1453.472678][T17567] debugfs: 'hsr0' already exists in 'hsr' [ 1453.494400][T17567] Cannot create hsr debugfs directory [ 1453.762247][T17567] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.774896][T17567] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1453.805326][T17567] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1453.885563][T17567] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.895811][T17567] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1453.906916][T17567] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1453.984037][T17567] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.994685][T17567] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1454.005637][T17567] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1454.076684][T17567] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.087928][T17567] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1454.097910][T17567] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1454.291029][T17567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1454.302483][T17567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1454.311137][T17567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1454.326485][T17567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1454.335874][T17567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1454.347861][T17567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1454.357561][T17567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1454.369228][T17567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1454.529088][T17721] Bluetooth: MGMT ver 1.23 [ 1454.584049][T17567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.646487][T17567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.698089][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.705350][ T8692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.755521][T17730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11864'. [ 1454.785498][T17730] validate_nla: 1 callbacks suppressed [ 1454.785522][T17730] netlink: 'syz.2.11864': attribute type 33 has an invalid length. [ 1454.849043][T28464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.856306][T28464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.951647][T17730] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1454.967406][T17730] bond11 (unregistering): Released all slaves [ 1454.991071][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11868'. [ 1455.030417][T17743] netlink: 'syz.4.11869': attribute type 178 has an invalid length. [ 1455.207900][ T5831] Bluetooth: hci3: command tx timeout [ 1455.392112][T17755] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1455.443795][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11873'. [ 1455.510581][T17567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.597647][T17567] veth0_vlan: entered promiscuous mode [ 1455.622665][T17765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11875'. [ 1455.623288][T17567] veth1_vlan: entered promiscuous mode [ 1455.698228][T17567] veth0_macvtap: entered promiscuous mode [ 1455.722350][T17567] veth1_macvtap: entered promiscuous mode [ 1455.752651][T17567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.780952][T17567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.806380][T28464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.818143][T28464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.830539][T28464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.840135][T28464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.850950][T17743] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1455.864389][T17743] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1455.959140][T17743] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1455.985259][T17743] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1456.043117][T17743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1456.053268][T17743] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1456.164954][T17743] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1456.183105][T17743] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1456.250675][T17743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1456.257669][T17743] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1456.553518][T28464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.584307][T28464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.666682][T28464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.680581][T28464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.269346][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.277379][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.285390][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.293410][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.301437][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.307511][T17802] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.11882'. [ 1457.309573][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.326907][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.334037][T17806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1457.334960][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.349486][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.357562][T17804] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1457.409593][T17809] xt_socket: unknown flags 0x8 [ 1457.427501][T17809] netlink: 'syz.1.11883': attribute type 1 has an invalid length. [ 1457.446838][T17809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11883'. [ 1457.943782][T17851] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.11893'. [ 1458.339846][T17860] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1458.389528][T17860] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1458.598075][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11903'. [ 1458.658762][T17886] netlink: 'syz.3.11904': attribute type 21 has an invalid length. [ 1458.679237][T17886] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11904'. [ 1458.707548][T17886] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11904'. [ 1459.018808][T17906] wg1 speed is unknown, defaulting to 1000 [ 1459.032181][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11911'. [ 1459.071145][T17906] lo speed is unknown, defaulting to 1000 [ 1459.078817][T17917] set match dimension is over the limit! [ 1459.252824][T17920] batman_adv: batadv0: Adding interface: dummy0 [ 1459.260280][T17920] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.291663][T17920] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1459.484565][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11920'. [ 1459.496182][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11920'. [ 1459.509092][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11920'. [ 1459.783368][T17939] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1459.832855][T17939] syzkaller0: entered promiscuous mode [ 1459.848186][T17939] syzkaller0: entered allmulticast mode [ 1460.313585][T17960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11926'. [ 1460.397939][T17967] mac80211_hwsim hwsim106 syzkaller0: entered promiscuous mode [ 1460.409568][T17967] mac80211_hwsim hwsim106 syzkaller0: entered allmulticast mode [ 1460.947252][T18001] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11939'. [ 1460.949417][T18003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11938'. [ 1463.589945][T17981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1463.870501][T18021] __nla_validate_parse: 3 callbacks suppressed [ 1463.870531][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11946'. [ 1464.010149][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11947'. [ 1464.477398][T18054] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1464.696458][T18080] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11960'. [ 1464.696598][T18081] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11960'. [ 1464.799051][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11961'. [ 1465.245781][T18117] netlink: 'syz.4.11970': attribute type 1 has an invalid length. [ 1465.260104][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11969'. [ 1465.271463][T18118] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1465.280568][T18118] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1465.288991][T18118] veth0_to_bridge: entered allmulticast mode [ 1465.297621][T18118] veth0_to_bridge: entered promiscuous mode [ 1465.397126][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11971'. [ 1465.433803][T18120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11971'. [ 1465.731745][T18141] netlink: 'syz.0.11978': attribute type 64 has an invalid length. [ 1465.833681][T18152] syzkaller0: entered promiscuous mode [ 1465.859947][T18152] syzkaller0: entered allmulticast mode [ 1466.479627][T18191] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11989'. [ 1466.746797][T18199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11991'. [ 1466.847151][T18204] syzkaller0: entered promiscuous mode [ 1466.856895][T18204] syzkaller0: entered allmulticast mode [ 1466.909768][T18207] netlink: 'syz.1.11994': attribute type 11 has an invalid length. [ 1466.933797][T18204] tipc: Enabled bearer , priority 0 [ 1466.957760][T18203] tipc: Resetting bearer [ 1467.052880][T18203] tipc: Disabling bearer [ 1468.122322][T18259] syzkaller0: entered promiscuous mode [ 1468.132608][T18259] syzkaller0: entered allmulticast mode [ 1468.253297][T18259] --map-set only usable from mangle table [ 1468.532391][T18285] sctp: [Deprecated]: syz.1.12017 (pid 18285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1468.532391][T18285] Use struct sctp_sack_info instead [ 1468.736252][T18291] net_ratelimit: 45 callbacks suppressed [ 1468.736279][T18291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.805155][T18291] netlink: 'syz.2.12019': attribute type 1 has an invalid length. [ 1468.826109][T18303] netlink: 'syz.1.12022': attribute type 10 has an invalid length. [ 1468.867416][T18303] batman_adv: batadv0: Adding interface: netdevsim0 [ 1468.890644][T18303] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.937921][T18303] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1469.083992][T18310] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1469.138294][T18310] syzkaller0: entered promiscuous mode [ 1469.143844][T18310] syzkaller0: entered allmulticast mode [ 1469.426301][T18331] __nla_validate_parse: 13 callbacks suppressed [ 1469.426324][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12028'. [ 1470.267005][T18362] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12035'. [ 1472.195565][T18320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1472.206566][T18340] netlink: 'syz.3.12031': attribute type 11 has an invalid length. [ 1472.588685][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12039'. [ 1472.943992][T18397] netlink: 2648 bytes leftover after parsing attributes in process `syz.2.12047'. [ 1472.957106][T18397] netlink: 2648 bytes leftover after parsing attributes in process `syz.2.12047'. [ 1475.751335][T18388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1475.776401][T18419] netlink: 'syz.3.12051': attribute type 1 has an invalid length. [ 1475.836734][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12051'. [ 1475.985854][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12052'. [ 1476.130665][T18436] xfrm1: entered allmulticast mode [ 1476.200235][T18440] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.12057'. [ 1476.207953][T18441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12058'. [ 1476.235503][T18441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12058'. [ 1476.269042][T18441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12058'. [ 1476.336314][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1476.380401][T18453] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12062'. [ 1476.402661][T18454] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12062'. [ 1476.563837][T18463] netlink: 'syz.4.12066': attribute type 39 has an invalid length. [ 1476.615847][T18468] nbd: socks must be embedded in a SOCK_ITEM attr [ 1476.701131][T18478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12070'. [ 1476.792819][T18480] macvtap1: entered promiscuous mode [ 1476.809744][T18480] macvtap1: entered allmulticast mode [ 1476.832639][T18480] veth1_vlan: entered allmulticast mode [ 1477.086422][T18496] tap0: tun_chr_ioctl cmd 1074025672 [ 1477.091968][T18496] tap0: ignored: set checksum disabled [ 1477.143621][T18505] veth0: entered promiscuous mode [ 1477.151950][T18504] veth0: left promiscuous mode [ 1477.426560][T18515] netlink: 'syz.4.12081': attribute type 2 has an invalid length. [ 1478.014213][T18541] netlink: 'syz.0.12090': attribute type 12 has an invalid length. [ 1478.035170][T18541] netlink: 'syz.0.12090': attribute type 29 has an invalid length. [ 1478.353678][T18558] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1478.517370][T18574] syzkaller1: entered promiscuous mode [ 1478.529463][T18574] syzkaller1: entered allmulticast mode [ 1478.716332][T18588] SET target dimension over the limit! [ 1479.047257][T18596] bond6: option lp_interval: invalid value (0) [ 1479.067246][T18596] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1479.085687][T18596] bond6 (unregistering): Released all slaves [ 1479.149854][T18613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1479.209267][T18613] netlink: 'syz.3.12112': attribute type 16 has an invalid length. [ 1479.224590][T18613] netlink: 'syz.3.12112': attribute type 3 has an invalid length. [ 1479.427724][T18627] sctp: [Deprecated]: syz.2.12117 (pid 18627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1479.427724][T18627] Use struct sctp_sack_info instead [ 1480.396739][T18671] bond1: (slave erspan0): Device is not bonding slave [ 1480.403574][T18671] bond1: option active_slave: invalid value (erspan0) [ 1480.469372][T18671] bond1 (unregistering): Released all slaves [ 1480.590453][T18677] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1480.674947][T18689] netlink: Conntrack attr has 4 unknown bytes [ 1480.846779][T18695] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1480.880792][T18701] __nla_validate_parse: 10 callbacks suppressed [ 1480.880815][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12137'. [ 1480.944647][T18703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1481.249140][T18722] xt_hashlimit: size too large, truncated to 1048576 [ 1481.287793][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12148'. [ 1481.393460][T18727] bridge2: port 1(veth3) entered blocking state [ 1481.412033][T18727] bridge2: port 1(veth3) entered disabled state [ 1481.426296][T18727] veth3: entered allmulticast mode [ 1481.435697][T18727] veth3: entered promiscuous mode [ 1481.507950][T18732] bridge2: port 2(veth5) entered blocking state [ 1481.528494][T18732] bridge2: port 2(veth5) entered disabled state [ 1481.556736][T18732] veth5: entered allmulticast mode [ 1481.578140][T18732] veth5: entered promiscuous mode [ 1481.726885][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12153'. [ 1481.860864][T18753] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12155'. [ 1481.892915][T18753] nbd: illegal input index -8454144 [ 1481.901200][T18753] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1481.932696][T18758] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12157'. [ 1481.955523][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12157'. [ 1481.970555][T18758] netlink: 31 bytes leftover after parsing attributes in process `syz.0.12157'. [ 1482.004793][T18758] netlink: 'syz.0.12157': attribute type 2 has an invalid length. [ 1482.026041][T18760] syzkaller0: entered promiscuous mode [ 1482.038105][T18758] netlink: 31 bytes leftover after parsing attributes in process `syz.0.12157'. [ 1482.052322][T18760] syzkaller0: entered allmulticast mode [ 1482.325283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1482.438742][T18785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12166'. [ 1482.474507][T18785] openvswitch: netlink: Flow key attr not present in new flow. [ 1482.567820][T18789] openvswitch: netlink: Message has 4 unknown bytes. [ 1482.698523][T18802] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1482.862373][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12175'. [ 1482.991827][T18815] vlan2: entered allmulticast mode [ 1482.997426][T18815] bond0: entered allmulticast mode [ 1483.012999][T18815] bond_slave_0: entered allmulticast mode [ 1483.020326][T18815] bond_slave_1: entered allmulticast mode [ 1483.151035][T18825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1483.185752][T18825] bond_slave_0: left allmulticast mode [ 1483.229521][T18825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1483.268099][T18825] bond_slave_1: left allmulticast mode [ 1483.301998][T18825] bond0 (unregistering): Released all slaves [ 1483.413289][T18839] openvswitch: netlink: Flow key attr not present in new flow. [ 1483.641026][T18843] bond9: option all_slaves_active: invalid value (222) [ 1483.651115][T18843] bond9 (unregistering): Released all slaves [ 1483.808077][T18857] netlink: 'syz.3.12188': attribute type 51 has an invalid length. [ 1483.855164][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.871763][T18857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.901464][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.920509][T18857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1484.350336][T18873] team0 (unregistering): left promiscuous mode [ 1484.367000][T18873] team_slave_0: left promiscuous mode [ 1484.393506][T18873] team_slave_1: left promiscuous mode [ 1484.426028][T18873] team0 (unregistering): Port device team_slave_0 removed [ 1484.440945][T18873] team0 (unregistering): Port device team_slave_1 removed [ 1484.472907][T18895] syzkaller0: entered promiscuous mode [ 1484.497104][T18895] syzkaller0: entered allmulticast mode [ 1484.599123][T18872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1484.609607][T18894] syzkaller0: entered promiscuous mode [ 1484.615981][T18894] syzkaller0: entered allmulticast mode [ 1484.816274][T18911] netlink: 'syz.2.12201': attribute type 5 has an invalid length. [ 1484.842952][T18911] geneve2: entered promiscuous mode [ 1484.848824][T18911] geneve2: entered allmulticast mode [ 1484.899819][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1484.907938][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1486.417757][T18976] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1486.852970][T18996] __nla_validate_parse: 8 callbacks suppressed [ 1486.852985][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12226'. [ 1486.872047][T18996] veth0_macvtap: left promiscuous mode [ 1487.315577][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12234'. [ 1487.329784][T19020] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12235'. [ 1487.348189][T19019] hsr_slave_0 (unregistering): left promiscuous mode [ 1487.699117][T19037] netlink: 'syz.4.12239': attribute type 2 has an invalid length. [ 1487.818295][T19047] IPVS: Scheduler module ip_vs_sip not found [ 1488.116121][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12247'. [ 1488.587692][T19083] netlink: 'syz.3.12250': attribute type 11 has an invalid length. [ 1488.637340][T19102] openvswitch: netlink: Key 23 has unexpected len 687 expected 2 [ 1489.519563][T19145] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1489.553009][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12265'. [ 1489.643050][T19152] mac80211_hwsim hwsim106 syzkaller0: left promiscuous mode [ 1489.656374][T19152] mac80211_hwsim hwsim106 syzkaller0: left allmulticast mode [ 1490.244109][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 1490.252284][ C0] lec:lec_tx_timeout: lec0 [ 1490.412843][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12275'. [ 1490.464777][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12275'. [ 1490.476862][T19194] atomic_op ffff8880223b0998 conn xmit_atomic 0000000000000000 [ 1492.821645][T19162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1493.022306][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.072910][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.130448][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.158560][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.196432][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.240045][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.250212][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.273764][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.311406][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.325912][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1493.941640][T19260] netlink: 'syz.4.12292': attribute type 4 has an invalid length. [ 1494.480464][T19280] netlink: 'syz.4.12297': attribute type 29 has an invalid length. [ 1494.507176][T19280] netlink: 'syz.4.12297': attribute type 29 has an invalid length. [ 1494.848762][T19305] nft_compat: unsupported protocol 5 [ 1496.632144][T24367] lec:lec_start_xmit: lec0:No lecd attached [ 1497.512025][T19288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1498.040355][T19321] netlink: 'syz.1.12306': attribute type 1 has an invalid length. [ 1498.268226][T19321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1498.290444][T19337] __nla_validate_parse: 35 callbacks suppressed [ 1498.290465][T19337] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12306'. [ 1498.377258][T19324] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1498.511929][T19328] bond1: (slave dummy0): making interface the new active one [ 1498.527950][T19328] dummy0: entered promiscuous mode [ 1498.539263][T19328] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1498.577934][T19337] bond1: (slave dummy0): Releasing active interface [ 1498.607044][T19337] dummy0 (unregistering): left promiscuous mode [ 1499.026505][T19359] netlink: 'syz.4.12316': attribute type 1 has an invalid length. [ 1499.041714][T19359] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1499.203768][T19366] IPv6: NLM_F_CREATE should be specified when creating new route [ 1499.290527][T19366] sctp: [Deprecated]: syz.0.12317 (pid 19366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1499.290527][T19366] Use struct sctp_sack_info instead [ 1499.653616][T19377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12320'. [ 1499.682233][T19379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12320'. [ 1499.822286][T19385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1500.095980][T19400] SET target dimension over the limit! [ 1501.944513][T19352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1502.244603][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5610 ms [ 1502.252693][ C0] lec:lec_tx_timeout: lec0 [ 1502.286341][T19427] netlink: 'syz.3.12330': attribute type 4 has an invalid length. [ 1502.495901][T19431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12336'. [ 1502.545094][T19431] openvswitch: netlink: Flow key attr not present in new flow. [ 1502.731279][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1502.752591][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1502.774047][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1502.788384][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1502.802149][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1502.875466][T19448] tipc: Resetting bearer [ 1502.927069][T19448] wg1 speed is unknown, defaulting to 1000 [ 1502.942892][T19455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.999975][T19455] bridge_slave_0 (unregistering): left allmulticast mode [ 1503.030128][T19455] bridge_slave_0 (unregistering): left promiscuous mode [ 1503.054396][T19455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.137743][T19448] lo speed is unknown, defaulting to 1000 [ 1503.485002][ T8917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.503713][T19475] netlink: 'syz.1.12347': attribute type 26 has an invalid length. [ 1503.585516][T19481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12346'. [ 1503.736987][ T8917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.862948][ T8917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.927066][T19448] chnl_net:caif_netlink_parms(): no params data found [ 1504.009046][ T8917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.110210][T19502] netlink: 165 bytes leftover after parsing attributes in process `syz.1.12351'. [ 1504.196651][T19448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.217243][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.228749][T19448] bridge_slave_0: entered allmulticast mode [ 1504.239478][T19448] bridge_slave_0: entered promiscuous mode [ 1504.253508][T19448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.283811][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.304671][T19448] bridge_slave_1: entered allmulticast mode [ 1504.312089][T19448] bridge_slave_1: entered promiscuous mode [ 1504.445593][T19448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.487542][T19448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.559932][T19448] team0: Port device team_slave_0 added [ 1504.588025][T19448] team0: Port device team_slave_1 added [ 1504.622209][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12355'. [ 1504.639159][ T8917] bridge_slave_1: left allmulticast mode [ 1504.645382][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.655650][ T8917] bridge_slave_0: left allmulticast mode [ 1504.661607][ T8917] bridge_slave_0: left promiscuous mode [ 1504.668372][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.888531][ T5842] Bluetooth: hci5: command tx timeout [ 1505.130097][ T8917] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1505.139277][ T8917] bridge4 (unregistering): left promiscuous mode [ 1505.298545][ T8917] bond0 (unregistering): (slave ): Releasing backup interface [ 1505.311244][ T8917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.323239][ T8917] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1505.333107][ T8917] bond0 (unregistering): Released all slaves [ 1505.345834][ T8917] bond1 (unregistering): Released all slaves [ 1505.361731][ T8917] bond2 (unregistering): Released all slaves [ 1505.380895][ T8917] bond3 (unregistering): Released all slaves [ 1505.399469][ T8917] bond4 (unregistering): Released all slaves [ 1505.418260][ T8917] bond5 (unregistering): Released all slaves [ 1505.439403][T19448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.459302][T19448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.486866][T19448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.503004][T19448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.512403][T19448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.558487][T19448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.601415][T19518] wg1 speed is unknown, defaulting to 1000 [ 1505.630256][T19518] lo speed is unknown, defaulting to 1000 [ 1505.691953][ T8917] tipc: Disabling bearer [ 1505.697643][ T8917] tipc: Left network mode [ 1505.812525][T19448] hsr_slave_0: entered promiscuous mode [ 1505.821557][T19448] hsr_slave_1: entered promiscuous mode [ 1506.218527][T19465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1506.613436][T19530] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12358'. [ 1506.816403][T19530] bond12 (unregistering): Released all slaves [ 1506.886113][ T8917] dummy0: left promiscuous mode [ 1506.917131][T19543] sctp: [Deprecated]: syz.3.12361 (pid 19543) Use of int in maxseg socket option. [ 1506.917131][T19543] Use struct sctp_assoc_value instead [ 1506.965380][ T5842] Bluetooth: hci5: command tx timeout [ 1506.996045][ T8917] hsr_slave_0: left promiscuous mode [ 1507.024286][ T8917] hsr_slave_1: left promiscuous mode [ 1507.139958][ T8917] veth1_macvtap: left promiscuous mode [ 1507.160477][ T8917] veth0_macvtap: left promiscuous mode [ 1507.173136][ T8917] veth1_vlan: left promiscuous mode [ 1507.181799][ T8917] veth0_vlan: left promiscuous mode [ 1507.538738][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12366'. [ 1508.199518][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12366'. [ 1508.391657][T19598] netlink: 'syz.2.12368': attribute type 10 has an invalid length. [ 1508.743707][T19616] syz.3.12372: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1508.780338][T19616] CPU: 0 UID: 0 PID: 19616 Comm: syz.3.12372 Not tainted syzkaller #0 PREEMPT(full) [ 1508.780370][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1508.780384][T19616] Call Trace: [ 1508.780393][T19616] [ 1508.780403][T19616] dump_stack_lvl+0xe8/0x150 [ 1508.780442][T19616] warn_alloc+0x249/0x340 [ 1508.780474][T19616] ? stack_trace_save+0xa9/0x100 [ 1508.780502][T19616] ? __pfx_warn_alloc+0x10/0x10 [ 1508.780540][T19616] ? kasan_save_track+0x4f/0x80 [ 1508.780566][T19616] ? kasan_save_track+0x3e/0x80 [ 1508.780594][T19616] ? __kasan_kmalloc+0x93/0xb0 [ 1508.780611][T19616] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1508.780640][T19616] ? xskq_create+0x56/0x170 [ 1508.780662][T19616] ? xsk_setsockopt+0x54c/0x990 [ 1508.780685][T19616] ? do_sock_setsockopt+0x17c/0x1b0 [ 1508.780714][T19616] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1508.780744][T19616] ? do_syscall_64+0x15f/0xf80 [ 1508.780776][T19616] __vmalloc_node_range_noprof+0x132/0x1730 [ 1508.780847][T19616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1508.780889][T19616] ? __kasan_kmalloc+0x93/0xb0 [ 1508.780925][T19616] vmalloc_user_noprof+0xad/0xe0 [ 1508.780957][T19616] ? xskq_create+0xbf/0x170 [ 1508.780982][T19616] xskq_create+0xbf/0x170 [ 1508.781009][T19616] xsk_init_queue+0x8a/0xe0 [ 1508.781036][T19616] xsk_setsockopt+0x54c/0x990 [ 1508.781062][T19616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1508.781085][T19616] ? __pfx_aa_sk_perm+0x10/0x10 [ 1508.781120][T19616] ? aa_sock_opt_perm+0xff/0x1a0 [ 1508.781154][T19616] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1508.781186][T19616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1508.781207][T19616] do_sock_setsockopt+0x17c/0x1b0 [ 1508.781244][T19616] __x64_sys_setsockopt+0x13d/0x1b0 [ 1508.781276][T19616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.781298][T19616] do_syscall_64+0x15f/0xf80 [ 1508.781320][T19616] ? trace_irq_disable+0x3b/0x140 [ 1508.781343][T19616] ? clear_bhb_loop+0x40/0x90 [ 1508.781370][T19616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.781392][T19616] RIP: 0033:0x7f08f7b9c819 [ 1508.781415][T19616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.781434][T19616] RSP: 002b:00007f08f8b31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1508.781459][T19616] RAX: ffffffffffffffda RBX: 00007f08f7e15fa0 RCX: 00007f08f7b9c819 [ 1508.781476][T19616] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1508.781490][T19616] RBP: 00007f08f7c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1508.781505][T19616] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.781518][T19616] R13: 00007f08f7e16038 R14: 00007f08f7e15fa0 R15: 00007ffe28019518 [ 1508.781557][T19616] [ 1508.783171][T19616] Mem-Info: [ 1508.799210][T19598] : (slave ): Enslaving as an active interface with an up link [ 1508.832187][T19616] active_anon:6281 inactive_anon:0 isolated_anon:0 [ 1508.832187][T19616] active_file:2460 inactive_file:41319 isolated_file:0 [ 1508.832187][T19616] unevictable:768 dirty:60 writeback:0 [ 1508.832187][T19616] slab_reclaimable:14043 slab_unreclaimable:135517 [ 1508.832187][T19616] mapped:29635 shmem:1383 pagetables:1802 [ 1508.832187][T19616] sec_pagetables:0 bounce:0 [ 1508.832187][T19616] kernel_misc_reclaimable:0 [ 1508.832187][T19616] free:1259421 free_pcp:24881 free_cma:0 [ 1509.069488][ T5842] Bluetooth: hci5: command tx timeout [ 1509.076691][T19622] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12373'. [ 1509.157900][T19616] Node 0 active_anon:30624kB inactive_anon:0kB active_file:9840kB inactive_file:165076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:25720kB dirty:240kB writeback:0kB shmem:9596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17556kB pagetables:7376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1509.212379][T19607] team0 (unregistering): Port device team_slave_0 removed [ 1509.262332][T19616] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1509.312332][T19607] team0 (unregistering): Port device team_slave_1 removed [ 1509.371140][T19616] Node 0 DMA free:11160kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:68kB free_cma:0kB [ 1509.428571][T19616] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1509.459551][T19616] Node 0 DMA32 free:1366940kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34788kB inactive_anon:0kB active_file:9840kB inactive_file:165080kB unevictable:1536kB writepending:256kB zspages:0kB present:3129332kB managed:2551532kB mlocked:0kB bounce:0kB free_pcp:31420kB local_pcp:15644kB free_cma:0kB [ 1509.544492][T19616] lowmem_reserve[]: 0 0 0 0 0 [ 1509.562567][T19616] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1509.621811][ T8917] IPVS: stop unused estimator thread 0... [ 1509.642538][T19448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1509.661962][T19616] lowmem_reserve[]: 0 0 0 0 0 [ 1509.671098][T19616] Node 1 Normal free:3662880kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60488kB local_pcp:28608kB free_cma:0kB [ 1509.708254][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1509.722687][T19448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1509.730769][T19616] lowmem_reserve[]: 0 0 0 0 0 [ 1509.747477][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1509.772218][T19637] vlan4: entered allmulticast mode [ 1509.778687][T19616] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11160kB [ 1509.804220][T19448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1509.822076][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1509.831878][T19616] Node 0 DMA32: 12613*4kB (UME) 11140*8kB (UME) 6026*16kB (UME) 178*32kB (UME) 116*64kB (UME) 797*128kB (UM) 700*256kB (UM) 495*512kB (UM) 326*1024kB (UME) 120*2048kB (UME) 0*4096kB = 1363348kB [ 1509.866714][T19448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1509.895255][T19616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1509.919070][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.937247][T19616] Node 1 Normal: 16*4kB (UM) 22*8kB (UM) 19*16kB (UM) 18*32kB (UM) 23*64kB (UM) 16*128kB (UM) 18*256kB (UM) 20*512kB (UM) 18*1024kB (UM) 16*2048kB (U) 877*4096kB (UM) = 3662880kB [ 1509.961688][T19616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.976231][T19616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1510.000424][T19616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.005932][T19653] xt_hashlimit: size too large, truncated to 1048576 [ 1510.012164][T19616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1510.035570][T19616] 45178 total pagecache pages [ 1510.035795][T19641] syzkaller0: entered promiscuous mode [ 1510.040404][T19616] 0 pages in swap cache [ 1510.051001][T19616] Free swap = 124996kB [ 1510.055538][T19616] Total swap = 124996kB [ 1510.058596][T19641] syzkaller0: entered allmulticast mode [ 1510.059747][T19616] 2097051 pages RAM [ 1510.072101][T19616] 0 pages HighMem/MovableOnly [ 1510.078614][T19616] 427400 pages reserved [ 1510.105765][T19616] 0 pages cma reserved [ 1510.236814][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12382'. [ 1510.407450][T19668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.423436][T19668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1510.488070][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.570878][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12386'. [ 1510.644706][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.677327][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12387'. [ 1510.687869][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12387'. [ 1510.715467][T19668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.726488][T19668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1510.762190][T19448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.829264][T19687] bond9: option resend_igmp: invalid value (32767) [ 1510.848366][T19687] bond9: option resend_igmp: allowed values 0 - 255 [ 1510.872491][T19687] bond9 (unregistering): Released all slaves [ 1511.040866][T19668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1511.053543][T19668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1511.115815][T19693] veth1_macvtap: left promiscuous mode [ 1511.127466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.140179][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.151279][ T5842] Bluetooth: hci5: command tx timeout [ 1511.159005][T19448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.246858][T19710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.257521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.268409][T19710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.277586][ T8914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.287836][ T8914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.288993][T19709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.299541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.327680][T19668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1511.340994][T19668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1511.369274][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.376551][ T8917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.401661][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.409052][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.541058][ T8914] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.559568][ T8914] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 1511.614719][ T8920] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.623518][ T8920] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 1511.653463][T19230] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.672238][T19230] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 1511.746791][ T8920] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.764572][ T8920] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 1511.803528][T19448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.920969][T19448] veth0_vlan: entered promiscuous mode [ 1511.941700][T19448] veth1_vlan: entered promiscuous mode [ 1512.006111][T19448] veth0_macvtap: entered promiscuous mode [ 1512.039704][T19448] veth1_macvtap: entered promiscuous mode [ 1512.092773][T19448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.110853][T19448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.133520][ T8914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.159969][ T8914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.198656][ T8914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.227500][ T8914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.363967][T19739] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12400'. [ 1512.543280][T19752] syzkaller0: entered promiscuous mode [ 1512.572537][T19752] syzkaller0: entered allmulticast mode [ 1513.205164][ T5842] Bluetooth: hci5: command tx timeout [ 1514.661236][T19718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1514.841142][T19230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.880434][T19230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.958499][T19774] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002 [ 1514.975334][T19230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.995203][T19230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.266203][T19791] netlink: 'syz.3.12416': attribute type 29 has an invalid length. [ 1515.276024][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12416'. [ 1515.291607][ T8921] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.308084][T19788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12338'. [ 1515.417995][T19796] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 1515.436773][T19801] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 1515.663955][T19812] net_ratelimit: 7 callbacks suppressed [ 1515.663976][T19812] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1515.858707][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1515.876131][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1515.886859][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1515.904771][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1515.913619][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1516.030721][T19821] wg1 speed is unknown, defaulting to 1000 [ 1516.039709][T19821] lo speed is unknown, defaulting to 1000 [ 1516.300970][T19833] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1516.337555][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.346675][T19821] chnl_net:caif_netlink_parms(): no params data found [ 1516.349490][T19836] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12427'. [ 1516.407307][T19844] openvswitch: netlink: IP tunnel dst address not specified [ 1516.440851][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12429'. [ 1516.652205][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12432'. [ 1516.711330][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12434'. [ 1516.778476][ T8914] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.790447][ T8914] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1516.937067][ T8914] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.948991][ T8914] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1516.976836][T19821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.991151][T19821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.007785][T19821] bridge_slave_0: entered allmulticast mode [ 1517.016398][T19821] bridge_slave_0: entered promiscuous mode [ 1517.027097][T19821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.034803][T19821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.042629][T19821] bridge_slave_1: entered allmulticast mode [ 1517.060214][T19821] bridge_slave_1: entered promiscuous mode [ 1517.107330][ T8914] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1517.148513][ T8914] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1517.252613][ T8914] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1517.286287][ T8914] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1517.367813][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.378323][T19821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.411413][T19821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.487258][T19821] team0: Port device team_slave_0 added [ 1517.496771][T19821] team0: Port device team_slave_1 added [ 1517.498245][T19885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.540403][T19885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.553631][T19821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.561753][T19885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.570685][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.598858][T19885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.611969][T19885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.620181][T19821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.653649][T19821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.662861][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.703473][T19821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.727194][T19884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.992473][T19821] hsr_slave_0: entered promiscuous mode [ 1518.000789][T19821] hsr_slave_1: entered promiscuous mode [ 1518.007261][ T5842] Bluetooth: hci2: command tx timeout [ 1518.018954][T19821] debugfs: 'hsr0' already exists in 'hsr' [ 1518.025654][T19821] Cannot create hsr debugfs directory [ 1518.068653][ T8914] bridge_slave_1: left allmulticast mode [ 1518.077307][ T8914] bridge_slave_1: left promiscuous mode [ 1518.083251][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.432392][ T8914] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1518.446909][T19923] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12447'. [ 1518.668977][ T8914] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 1518.677771][ T8914] bridge4 (unregistering): left promiscuous mode [ 1518.815148][ T8914]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.829072][ T8914]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.840012][ T8914]  (unregistering): (slave batadv0): Releasing backup interface [ 1518.850201][ T8914]  (unregistering): (slave ): Releasing backup interface [ 1518.863669][ T8914]  (unregistering): Released all slaves [ 1518.876682][ T8914] bond1 (unregistering): Released all slaves [ 1518.897495][ T8914] bond2 (unregistering): Released all slaves [ 1518.913185][ T8914] bond3 (unregistering): Released all slaves [ 1518.931829][ T8914] bond4 (unregistering): Released all slaves [ 1518.950758][ T8914] bond5 (unregistering): Released all slaves [ 1518.970096][ T8914] bond6 (unregistering): Released all slaves [ 1518.990896][ T8914] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1519.002801][ T8914] bond7 (unregistering): Released all slaves [ 1519.022472][ T8914] bond8 (unregistering): Released all slaves [ 1519.046659][ T8914] bond9 (unregistering): Released all slaves [ 1519.062154][ T8914] bond0 (unregistering): Released all slaves [ 1519.078800][ T8914] bond10 (unregistering): Released all slaves [ 1519.105568][ T8914] bond11 (unregistering): Released all slaves [ 1519.151823][T19915] syzkaller0: entered promiscuous mode [ 1519.158388][T19915] syzkaller0: entered allmulticast mode [ 1519.509831][ T8914] : left promiscuous mode [ 1519.529000][T19925] SET target dimension over the limit! [ 1519.859930][T19935] sctp: [Deprecated]: syz.0.12450 (pid 19935) Use of int in maxseg socket option. [ 1519.859930][T19935] Use struct sctp_assoc_value instead [ 1519.954451][ T8914] IPVS: stopping backup sync thread 17755 ... [ 1520.103787][ T5842] Bluetooth: hci2: command tx timeout [ 1520.325087][T19887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1520.668440][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12456'. [ 1520.680065][T19959] xt_policy: output policy not valid in PREROUTING and INPUT [ 1520.725534][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1520.746680][T17766] net_ratelimit: 5 callbacks suppressed [ 1520.746701][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.920655][T19969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12459'. [ 1520.938173][T19972] netlink: 'syz.4.12458': attribute type 11 has an invalid length. [ 1521.004362][T19972] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.12458'. [ 1521.113388][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12459'. [ 1521.124001][T19977] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1521.373668][T19981] netlink: 'syz.1.12461': attribute type 1 has an invalid length. [ 1521.397714][T19981] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12461'. [ 1521.419281][T19981] netlink: 'syz.1.12461': attribute type 1 has an invalid length. [ 1521.436451][T19981] netlink: 'syz.1.12461': attribute type 8 has an invalid length. [ 1521.459191][T19981] netlink: 586 bytes leftover after parsing attributes in process `syz.1.12461'. [ 1521.487158][T19981] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12461'. [ 1521.525923][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.534171][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.164297][ T5842] Bluetooth: hci2: command tx timeout [ 1522.575440][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.650147][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.604744][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.244723][ T5842] Bluetooth: hci2: command tx timeout [ 1524.650847][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.272795][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.282139][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.298592][ T8914] veth0_vlan: left promiscuous mode [ 1525.598571][ T8914] team0 (unregistering): Port device team_slave_1 removed [ 1525.618139][ T8914] team0 (unregistering): Port device team_slave_0 removed [ 1525.685179][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.693361][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.065217][T20028] netlink: 'syz.3.12469': attribute type 1 has an invalid length. [ 1526.136109][T20030] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12470'. [ 1526.178794][T20033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.429873][T20037] netlink: 'syz.1.12471': attribute type 10 has an invalid length. [ 1526.466171][T20039] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12472'. [ 1526.471010][T20037] veth0_macvtap: left promiscuous mode [ 1526.536101][T19821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1526.569107][T19821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1526.624894][T19821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1526.665058][T19821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1526.692690][ T8914] IPVS: stop unused estimator thread 0... [ 1526.719308][T19821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1526.728249][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.759723][T19821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1526.780727][T19821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1526.797896][T19821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1527.211013][T19821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.251666][T20073] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.12477'. [ 1527.280163][T20073] openvswitch: netlink: Message has 6 unknown bytes. [ 1527.302383][T19821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.339481][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.346753][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.381094][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.388386][ T8914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.769224][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.030511][T20105] pimreg: entered allmulticast mode [ 1528.352878][T20122] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.12486'. [ 1528.367800][T20122] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1528.527361][T19821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.725395][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.738897][T19821] veth0_vlan: entered promiscuous mode [ 1528.750546][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12490'. [ 1528.792078][T19821] veth1_vlan: entered promiscuous mode [ 1528.806946][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.893427][T20155] netlink: 'syz.4.12492': attribute type 21 has an invalid length. [ 1528.942524][T20155] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12492'. [ 1528.945549][T19821] veth0_macvtap: entered promiscuous mode [ 1529.012694][T19821] veth1_macvtap: entered promiscuous mode [ 1529.057830][T19821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.099493][T19821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.117905][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12496'. [ 1529.148507][T20164] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12496'. [ 1529.220170][ T7344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.235399][ T7344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.326978][ T7344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.345800][ T7344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.548926][T20164] syzkaller0: entered promiscuous mode [ 1529.557406][T20164] syzkaller0: entered allmulticast mode [ 1529.732078][T20186] netlink: 120 bytes leftover after parsing attributes in process `syz.4.12500'. [ 1529.741675][T20186] netlink: 'syz.4.12500': attribute type 1 has an invalid length. [ 1529.750253][T20186] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12500'. [ 1529.854782][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.056207][T20191] netlink: 'syz.4.12502': attribute type 7 has an invalid length. [ 1530.069373][T20191] netlink: 'syz.4.12502': attribute type 8 has an invalid length. [ 1530.417121][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.896563][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.777628][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.934226][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.965413][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.010959][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.241995][ T8914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.279089][ T8914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.382393][T20224] __nla_validate_parse: 2 callbacks suppressed [ 1534.382414][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12507'. [ 1534.427098][ T7344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.446610][ T7344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.531694][T20231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12508'. [ 1534.574837][T20230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12508'. [ 1534.663111][T20237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12420'. [ 1534.676516][T20235] netlink: 'syz.3.12511': attribute type 4 has an invalid length. [ 1534.713727][T20235] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12511'. [ 1534.749992][T20240] bridge_slave_1: left allmulticast mode [ 1534.761571][T20246] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.12511'. [ 1534.772368][T20240] bridge_slave_1: left promiscuous mode [ 1534.797356][T20248] openvswitch: netlink: IPv4 tun info is not correct [ 1534.805724][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.818914][T20240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.862851][T20240] bond0: (slave bond_slave_0): Releasing backup interface [ 1534.933363][T20240] bond0: (slave bond_slave_1): Releasing backup interface [ 1534.999545][T20240] team0: Port device team_slave_0 removed [ 1535.046904][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.050619][T20240] team0: Port device team_slave_1 removed [ 1535.092575][T20240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.137342][T20240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.173443][T20240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.193379][T20240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.238245][T20240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1535.275049][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1535.290927][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1535.307341][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1535.323322][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1535.332670][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1535.691246][T20261] wg1 speed is unknown, defaulting to 1000 [ 1535.721017][T20261] lo speed is unknown, defaulting to 1000 [ 1536.086731][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.233316][T20298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.592123][T20261] chnl_net:caif_netlink_parms(): no params data found [ 1536.675441][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1536.727622][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1536.851628][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12527'. [ 1537.097502][T20261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.128318][T20261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.135832][ T5673] net_ratelimit: 2 callbacks suppressed [ 1537.135852][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.177517][T20261] bridge_slave_0: entered allmulticast mode [ 1537.209002][T20261] bridge_slave_0: entered promiscuous mode [ 1537.233355][T20261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.262185][T20261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.290102][T20261] bridge_slave_1: entered allmulticast mode [ 1537.323351][T20261] bridge_slave_1: entered promiscuous mode [ 1537.446364][ T5831] Bluetooth: hci0: command tx timeout [ 1537.538051][T20261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.583286][T20261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.700942][T20377] : renamed from bond0 (while UP) [ 1537.858327][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.876696][T20261] team0: Port device team_slave_0 added [ 1537.908108][T20261] team0: Port device team_slave_1 added [ 1537.957868][T20391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12541'. [ 1538.066884][T20261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.093385][T20261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.101552][T20394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.164959][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.173411][T20261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.223665][T20261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.266639][T20261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.335047][T20261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.371654][T20394] netlink: 'syz.3.12542': attribute type 1 has an invalid length. [ 1538.542422][T20404] bond0: (slave gretap1): making interface the new active one [ 1538.551108][T20404] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1538.626745][T20261] hsr_slave_0: entered promiscuous mode [ 1538.648648][T20261] hsr_slave_1: entered promiscuous mode [ 1538.688519][T20261] debugfs: 'hsr0' already exists in 'hsr' [ 1538.713782][T20261] Cannot create hsr debugfs directory [ 1539.070973][T20429] xt_l2tp: invalid flags combination: 0 [ 1539.152337][T20261] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.164828][T20261] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1539.204877][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.255643][T20429] netlink: 'syz.3.12551': attribute type 16 has an invalid length. [ 1539.369466][T20261] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.401742][T20261] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1539.490215][T20261] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.504859][T20261] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1539.524379][ T5831] Bluetooth: hci0: command tx timeout [ 1539.572546][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.586770][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.612012][T20450] __nla_validate_parse: 8 callbacks suppressed [ 1539.612033][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12558'. [ 1539.632415][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12557'. [ 1539.727659][T20261] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.746699][T20261] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1539.832948][T20460] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1539.851229][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12561'. [ 1539.929486][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.033613][T20471] netlink: 'syz.1.12564': attribute type 1 has an invalid length. [ 1540.143612][T20471] bond4: entered promiscuous mode [ 1540.181640][T20471] bond4: entered allmulticast mode [ 1540.188249][T20471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1540.232272][T20486] netlink: 'syz.3.12567': attribute type 2 has an invalid length. [ 1540.247837][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.258772][T20480] ip6tnl1: entered allmulticast mode [ 1540.317082][T20490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12568'. [ 1540.557328][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12570'. [ 1541.147761][T20261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1541.199128][T20261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1541.250207][T20261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1541.305146][T20261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1541.351089][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12575'. [ 1541.385913][T20550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12576'. [ 1541.388300][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12575'. [ 1541.416544][T20550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12576'. [ 1541.450298][T20261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1541.481150][T20261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1541.496405][T20261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1541.516643][T20261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1541.572485][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12575'. [ 1541.606183][ T5831] Bluetooth: hci0: command tx timeout [ 1541.632784][T20550] gretap1: entered promiscuous mode [ 1541.646133][T20550] gretap1: entered allmulticast mode [ 1541.654638][T20554] netlink: 'syz.0.12576': attribute type 3 has an invalid length. [ 1541.670324][T19230] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1541.708705][T19230] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1541.786748][ T8916] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1541.823415][ T8916] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1541.908894][T20572] netlink: 'syz.0.12579': attribute type 58 has an invalid length. [ 1542.324567][ T5670] net_ratelimit: 2 callbacks suppressed [ 1542.324588][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.348003][T20261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.483427][T20261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.523077][T19232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.530385][T19232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.679198][T19232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.686438][T19232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.743190][T20597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.777990][T20597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.987673][T20603] team0: Port device team_slave_0 removed [ 1543.364775][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.483838][T20622] batadv0: entered promiscuous mode [ 1543.504614][T20622] macsec2: entered promiscuous mode [ 1543.522575][T20622] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1543.553270][T20622] batadv0: left promiscuous mode [ 1543.687261][ T5831] Bluetooth: hci0: command tx timeout [ 1543.936340][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.436481][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.454477][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.344907][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1546.351490][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1546.493119][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.975538][T20518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.529079][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.040844][T20261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.399972][T20678] Bluetooth: MGMT ver 1.23 [ 1548.414742][T20672] nbd2: detected capacity change from 0 to 127 [ 1548.449429][T20672] __nla_validate_parse: 3 callbacks suppressed [ 1548.449450][T20672] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12599'. [ 1548.564739][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.650411][ T5831] block nbd2: Receive control failed (result -104) [ 1548.777002][T20261] veth0_vlan: entered promiscuous mode [ 1548.810670][T20261] veth1_vlan: entered promiscuous mode [ 1548.899573][T20698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1548.934815][T20261] veth0_macvtap: entered promiscuous mode [ 1548.957029][T20261] veth1_macvtap: entered promiscuous mode [ 1549.012302][T20707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12604'. [ 1549.033648][T20702] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1549.050658][T20702] bond1: option arp_ip_target: invalid value (0) [ 1549.063638][T20702] bond1 (unregistering): Released all slaves [ 1549.175689][T20261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1549.223276][T20261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.258791][ T8914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.272690][ T8914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.301158][ T8914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.325596][ T8914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.359415][T20713] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12608'. [ 1549.537915][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.605674][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.655755][ T8914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.676306][ T8914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.756848][T19232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.793633][T19232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.863137][T20730] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12615'. [ 1549.875218][T20732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.885856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.909611][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12616'. [ 1549.936947][T20732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12616'. [ 1549.991509][T20736] gre1: entered promiscuous mode [ 1550.005640][ T7207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.261039][T20751] x_tables: duplicate underflow at hook 2 [ 1550.278986][T20751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12620'. [ 1550.375048][ T30] audit: type=1107 audit(1776605633.431:15): pid=20760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\h(= km\⦖N_aUm3=hOB (}[G!,IRɐzM(,և&GlkwqrZ2Fvo\wjhٳS7;9M' [ 1550.433811][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12623'. [ 1550.645373][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.867478][T20786] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1551.142764][T20801] netlink: 'syz.2.12635': attribute type 12 has an invalid length. [ 1551.365351][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1551.373494][ C0] lec:lec_tx_timeout: lec0 [ 1551.481622][ T30] audit: type=1107 audit(1776605634.541:16): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1551.539818][T20815] netlink: 'syz.2.12640': attribute type 1 has an invalid length. [ 1551.553119][T20816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12641'. [ 1551.671754][T20819] sctp: [Deprecated]: syz.2.12640 (pid 20819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1551.671754][T20819] Use struct sctp_sack_info instead [ 1551.689845][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.753238][T20821] sctp: [Deprecated]: syz.2.12640 (pid 20821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1551.753238][T20821] Use struct sctp_sack_info instead [ 1551.757984][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12633'. [ 1551.963818][T20827] can: request_module (can-proto-0) failed. [ 1551.972815][T20819] bond0: (slave gretap1): making interface the new active one [ 1552.022218][T20819] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1552.509386][T20857] netlink: 'syz.4.12650': attribute type 1 has an invalid length. [ 1552.728245][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.045406][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.067740][T20897] netlink: 'syz.2.12662': attribute type 12 has an invalid length. [ 1553.146557][T20900] syzkaller1: entered promiscuous mode [ 1553.167012][T20900] syzkaller1: entered allmulticast mode [ 1553.477867][T20922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.485908][T20922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.767341][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.773302][T20925] syzkaller0: entered promiscuous mode [ 1553.782212][T20925] syzkaller0: entered allmulticast mode [ 1553.828713][T20930] bond1: entered promiscuous mode [ 1553.849805][T20931] macvlan2: entered promiscuous mode [ 1553.855505][T20931] macvlan2: entered allmulticast mode [ 1553.862800][T20931] bond1: (slave macvlan2): Opening slave failed [ 1553.880051][T20940] __nla_validate_parse: 5 callbacks suppressed [ 1553.880071][T20940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12674'. [ 1554.122904][T20951] netlink: 'syz.1.12677': attribute type 1 has an invalid length. [ 1554.132072][T20951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12677'. [ 1554.157907][T20937] netlink: 'syz.3.12672': attribute type 4 has an invalid length. [ 1554.170931][T20937] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12672'. [ 1554.548631][T20980] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12676'. [ 1554.808689][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.852892][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.105868][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.907802][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.936148][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.682781][T20971] syzkaller0: entered promiscuous mode [ 1558.688836][T20971] syzkaller0: entered allmulticast mode [ 1558.699825][T20986] syzkaller0: entered allmulticast mode [ 1558.977680][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.137391][ T7207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.145933][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.009668][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.055327][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.087205][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.181428][T20518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.118898][T21027] syzkaller0: entered promiscuous mode [ 1563.130840][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.143549][T21027] syzkaller0: entered allmulticast mode [ 1563.227787][T21035] netlink: 'syz.0.12687': attribute type 2 has an invalid length. [ 1563.362259][T21043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12689'. [ 1563.407611][T21043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.939337][T21068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1564.000279][T21071] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12697'. [ 1564.165088][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.566454][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12703'. [ 1564.960696][T21113] netlink: 'syz.0.12709': attribute type 1 has an invalid length. [ 1564.978092][T21110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.989559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.997845][T21113] netlink: 'syz.0.12709': attribute type 1 has an invalid length. [ 1565.021874][T21113] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.12709'. [ 1565.073585][T21125] netlink: 'syz.1.12711': attribute type 7 has an invalid length. [ 1565.126958][T21125] netlink: 'syz.1.12711': attribute type 8 has an invalid length. [ 1565.206447][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.216054][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.445212][T21135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12715'. [ 1565.498379][T21138] netlink: 41 bytes leftover after parsing attributes in process `syz.2.12716'. [ 1565.533187][T21138] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12716'. [ 1565.562581][T21138] netlink: 41 bytes leftover after parsing attributes in process `syz.2.12716'. [ 1565.668669][T21139] netlink: 'syz.0.12715': attribute type 21 has an invalid length. [ 1565.717060][T21139] IPv6: NLM_F_CREATE should be specified when creating new route [ 1565.750702][T21139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1565.758066][T21139] IPv6: NLM_F_CREATE should be set when creating new route [ 1565.765389][T21139] IPv6: NLM_F_CREATE should be set when creating new route [ 1565.772672][T21139] IPv6: NLM_F_CREATE should be set when creating new route [ 1565.808428][T21153] netlink: 'syz.2.12720': attribute type 39 has an invalid length. [ 1565.827680][T24367] lec:lec_start_xmit: lec0:No lecd attached [ 1565.966955][T21158] netlink: 'syz.4.12722': attribute type 10 has an invalid length. [ 1565.987771][T21159] netlink: 'syz.4.12722': attribute type 1 has an invalid length. [ 1566.025977][T21158] team0: Device ipvlan1 failed to register rx_handler [ 1566.095460][T21166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12724'. [ 1566.248733][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.323678][T21170] 0: reclassify loop, rule prio 0, protocol 700 [ 1566.355841][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12725'. [ 1566.432093][T21170] bridge1: port 1(veth3) entered blocking state [ 1566.457316][T21170] bridge1: port 1(veth3) entered disabled state [ 1566.476440][T21170] veth3: entered allmulticast mode [ 1566.497723][T21170] veth3: entered promiscuous mode [ 1566.539167][T21179] bridge1: port 2(veth5) entered blocking state [ 1566.546554][T21179] bridge1: port 2(veth5) entered disabled state [ 1566.553191][T21179] veth5: entered allmulticast mode [ 1566.561318][T21179] veth5: entered promiscuous mode [ 1567.540466][T21231] netlink: 'syz.1.12743': attribute type 21 has an invalid length. [ 1568.177699][T21271] tipc: Enabling of bearer rejected, failed to enable media [ 1568.245660][ T7202] net_ratelimit: 1 callbacks suppressed [ 1568.245682][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.325230][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.531336][T21293] __nla_validate_parse: 11 callbacks suppressed [ 1568.531360][T21293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12764'. [ 1568.613820][T21295] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.12765'. [ 1568.639769][T21295] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1568.729263][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.828390][T21312] xt_SECMARK: invalid mode: 9 [ 1568.902056][T21316] validate_nla: 2 callbacks suppressed [ 1568.902078][T21316] netlink: 'syz.1.12771': attribute type 1 has an invalid length. [ 1568.908133][T21314] bridge_slave_0: left allmulticast mode [ 1568.935307][T21314] bridge_slave_0: left promiscuous mode [ 1568.946047][T21314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.984456][T21319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12772'. [ 1568.996206][T21314] bridge_slave_1: left allmulticast mode [ 1569.003567][T21314] bridge_slave_1: left promiscuous mode [ 1569.017780][T21314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.052733][T21314] : (slave bond_slave_0): Releasing backup interface [ 1569.068724][T21314] : (slave bond_slave_1): Releasing backup interface [ 1569.086770][T21314] team0: Port device team_slave_0 removed [ 1569.104538][T21314] team0: Port device team_slave_1 removed [ 1569.111067][T21314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.121232][T21314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.130405][T21314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.138790][T21314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.149041][T21314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1569.195292][T21316] bond5: entered promiscuous mode [ 1569.200429][T21316] bond5: entered allmulticast mode [ 1569.212635][T21316] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1569.302828][T21325] pim6reg: entered allmulticast mode [ 1569.349055][T21339] Unsupported ieee802154 address type: 0 [ 1569.367379][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.411882][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12777'. [ 1569.451951][T21342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12777'. [ 1569.531507][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12777'. [ 1569.611039][T21351] netlink: 'syz.0.12780': attribute type 1 has an invalid length. [ 1569.778149][T21351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1569.910493][T21372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1569.932046][T21371] netlink: 'syz.3.12785': attribute type 9 has an invalid length. [ 1569.965442][T21356] bond2: (slave veth7): Enslaving as an active interface with a down link [ 1570.019081][T21363] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1570.028430][T21363] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1570.219539][T21372] "syz.2.12786" (21372) uses obsolete ecb(arc4) skcipher [ 1570.246709][T21379] netlink: 356 bytes leftover after parsing attributes in process `syz.4.12787'. [ 1570.310579][T21365] sit0: entered promiscuous mode [ 1570.357055][T21365] netlink: 'syz.1.12783': attribute type 1 has an invalid length. [ 1570.392303][T21365] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12783'. [ 1570.465459][T21385] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12789'. [ 1570.476727][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.500912][T19230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.512218][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.533088][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12792'. [ 1570.546032][T21385] netlink: 'syz.3.12789': attribute type 5 has an invalid length. [ 1570.899903][T21410] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1571.139289][T21430] netlink: 'syz.4.12804': attribute type 2 has an invalid length. [ 1571.192792][T21430] netlink: 'syz.4.12804': attribute type 3 has an invalid length. [ 1571.285862][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 1571.293997][ C0] lec:lec_tx_timeout: lec0 [ 1571.555754][T21458] netlink: 'syz.1.12810': attribute type 10 has an invalid length. [ 1572.347103][T21503] bond0: entered promiscuous mode [ 1572.358497][T21503] bond_slave_0: entered promiscuous mode [ 1572.365762][T21503] bond_slave_1: entered promiscuous mode [ 1572.375331][T21503] batadv0: entered promiscuous mode [ 1572.393109][T21503] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1572.403320][T21510] netlink: 'syz.4.12818': attribute type 10 has an invalid length. [ 1572.416397][T21503] bond0: left promiscuous mode [ 1572.422557][T21503] bond_slave_0: left promiscuous mode [ 1572.429324][T21503] bond_slave_1: left promiscuous mode [ 1572.438307][T21503] batadv0: left promiscuous mode [ 1572.500177][T21510] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1573.685135][ T5673] net_ratelimit: 8 callbacks suppressed [ 1573.685152][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.325746][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.725312][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.169067][T21492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1575.549516][T21529] __nla_validate_parse: 5 callbacks suppressed [ 1575.549540][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12828'. [ 1575.589616][T21541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12831'. [ 1575.765620][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.778247][T21548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12833'. [ 1576.019580][T21567] Bluetooth: MGMT ver 1.23 [ 1576.051344][T21567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12840'. [ 1576.406975][T19232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.420195][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.430223][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.441463][T21595] netlink: 'syz.2.12847': attribute type 1 has an invalid length. [ 1576.472670][T21595] netlink: 'syz.2.12847': attribute type 1 has an invalid length. [ 1576.484933][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12847'. [ 1576.493408][T21599] vlan2: entered allmulticast mode [ 1576.508163][T21599] bond0: entered allmulticast mode [ 1576.520995][T21599] gretap1: entered allmulticast mode [ 1576.657130][T21601] syzkaller0: entered promiscuous mode [ 1576.662706][T21601] syzkaller0: entered allmulticast mode [ 1576.737852][T21611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12851'. [ 1576.829603][T21614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1577.049753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.381405][T20518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.002164][T21568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1579.024738][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12856'. [ 1579.535974][ T5670] net_ratelimit: 2 callbacks suppressed [ 1579.535996][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.421573][T20518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.578030][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.593239][ T5831] Bluetooth: hci0: link tx timeout [ 1580.619692][ T5831] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1581.272677][T21666] syz_tun: refused to change device tx_queue_len [ 1581.340522][T21666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12868'. [ 1581.373140][T21675] gtp0: entered promiscuous mode [ 1581.401404][T21675] gtp0: entered allmulticast mode [ 1581.533245][T20518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.604640][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.701295][T21690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12874'. [ 1582.169916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.180085][T20518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.188307][T19230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.196491][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.208553][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.561216][T21714] Cannot find add_set index 0 as target [ 1582.644903][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 1584.327889][T21673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1584.558430][T21721] netlink: 'syz.2.12882': attribute type 1 has an invalid length. [ 1584.638024][T21729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12883'. [ 1584.659993][T21729] net_ratelimit: 6 callbacks suppressed [ 1584.660013][T21729] openvswitch: netlink: Flow key attr not present in new flow. [ 1584.816646][T21739] syzkaller0: entered promiscuous mode [ 1584.822249][T21739] syzkaller0: entered allmulticast mode [ 1584.830419][T21721] netlink: 'syz.2.12882': attribute type 1 has an invalid length. [ 1584.840954][T21721] netlink: 'syz.2.12882': attribute type 2 has an invalid length. [ 1584.968144][T21747] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 1584.983289][T21749] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 1585.079517][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12892'. [ 1585.139558][T21756] bond2: option xmit_hash_policy: invalid value (64) [ 1585.156484][T21756] bond2 (unregistering): Released all slaves [ 1585.206310][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.365726][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.459050][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12897'. [ 1585.512416][T21774] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.12897'. [ 1585.522564][T21774] netlink: Unknown conntrack attr (type=2304, max=9) [ 1585.830742][T21788] IPVS: length: 35 != 24 [ 1586.392452][T21796] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1586.410203][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.429281][T21801] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12905'. [ 1587.190042][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12907'. [ 1587.199317][T21808] openvswitch: netlink: Flow actions attr not present in new flow. [ 1587.444912][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.526608][T21719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1587.890137][T21824] netlink: 'syz.3.12914': attribute type 1 has an invalid length. [ 1587.923326][T21826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12912'. [ 1587.928896][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12915'. [ 1587.943885][ T8930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.954941][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.955792][T21826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12912'. [ 1587.977656][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.997562][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12915'. [ 1588.077203][T21832] vlan3: entered allmulticast mode [ 1588.082459][T21832] hsr0: entered allmulticast mode [ 1588.092618][T21832] hsr_slave_0: entered allmulticast mode [ 1588.104705][T21832] hsr_slave_1: entered allmulticast mode [ 1588.188975][T21839] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1588.358964][T21856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12921'. [ 1588.389453][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12923'. [ 1588.417586][T21852] bridge3: entered promiscuous mode [ 1588.423751][T21852] bridge3: entered allmulticast mode [ 1591.192672][T21840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1591.327029][T21872] net_ratelimit: 2 callbacks suppressed [ 1591.327052][T21872] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1591.378736][T21872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1591.440992][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12928'. [ 1591.718524][T21894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12933'. [ 1591.820248][ T7201] IPVS: starting estimator thread 0... [ 1591.924564][T21902] IPVS: using max 28 ests per chain, 67200 per kthread [ 1591.939822][T21913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12937'. [ 1591.989148][T21913] openvswitch: netlink: Flow key attr not present in new flow. [ 1592.253932][T21938] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20001 [ 1592.377243][T21946] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1592.391646][T21946] bond1 (unregistering): Released all slaves [ 1592.407511][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12948'. [ 1592.658979][T21967] veth0_to_bond: entered allmulticast mode [ 1594.163651][T22001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12964'. [ 1594.178253][T22002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12964'. [ 1594.429932][T22015] bond1: entered promiscuous mode [ 1594.442282][T22015] macvlan2: entered promiscuous mode [ 1594.447966][T22015] macvlan2: entered allmulticast mode [ 1594.454712][T22015] bond1: (slave macvlan2): Opening slave failed [ 1594.812797][T21903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1595.072275][T22026] vlan2: entered allmulticast mode [ 1595.079022][T22026] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1595.471972][T22055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12982'. [ 1595.482888][T22055] netlink: 'syz.2.12982': attribute type 7 has an invalid length. [ 1595.491341][T22055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12982'. [ 1595.992927][T22085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12986'. [ 1596.055656][T22085] openvswitch: netlink: Flow key attr not present in new flow. [ 1596.100096][T22074] syzkaller1: entered promiscuous mode [ 1596.124437][T22074] syzkaller1: entered allmulticast mode [ 1596.685847][T22100] sctp: [Deprecated]: syz.3.12990 (pid 22100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1596.685847][T22100] Use struct sctp_sack_info instead [ 1596.773515][T22106] netlink: 'syz.4.12992': attribute type 1 has an invalid length. [ 1596.924723][T22106] bond1: entered promiscuous mode [ 1596.930380][T22106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1596.991750][T22106] bond1: (slave bridge2): making interface the new active one [ 1597.011920][T22106] bridge2: entered promiscuous mode [ 1597.022178][T22106] bridge2: left promiscuous mode [ 1597.123660][T22122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12993'. [ 1597.641251][T22138] tipc: Started in network mode [ 1597.651737][T22138] tipc: Node identity , cluster identity 4711 [ 1597.659417][T22138] tipc: Failed to obtain node identity [ 1597.667892][T22138] tipc: Enabling of bearer rejected, failed to enable media [ 1597.980860][T22150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13004'. [ 1598.051021][T22155] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13009'. [ 1598.159451][T22160] bridge0: port 3(syz_tun) entered blocking state [ 1598.191370][T22160] bridge0: port 3(syz_tun) entered disabled state [ 1598.207885][T22160] syz_tun: entered allmulticast mode [ 1598.215919][T22160] syz_tun: entered promiscuous mode [ 1601.173153][T22234] nbd: illegal input index -1 [ 1601.433544][T22243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13045'. [ 1601.447322][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13046'. [ 1601.447368][T22244] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13046'. [ 1601.493439][T22243] netlink: 43 bytes leftover after parsing attributes in process `syz.2.13045'. [ 1601.495822][T22240] netlink: 'syz.4.13046': attribute type 5 has an invalid length. [ 1601.525092][T22243] netlink: 'syz.2.13045': attribute type 6 has an invalid length. [ 1601.564420][T22243] netlink: 'syz.2.13045': attribute type 5 has an invalid length. [ 1601.587190][T22243] netlink: 43 bytes leftover after parsing attributes in process `syz.2.13045'. [ 1601.926504][T22255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13049'. [ 1602.321425][T22261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1602.530733][T22266] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1603.402583][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13055'. [ 1603.589269][T22286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1603.776978][T22291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1603.820842][T22293] x_tables: duplicate underflow at hook 1 [ 1604.183809][T22299] bond2: entered allmulticast mode [ 1604.316559][T22299] bridge1: entered promiscuous mode [ 1604.339341][T22299] bridge1: entered allmulticast mode [ 1604.385328][T22299] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1605.157481][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13063'. [ 1605.336779][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13063'. [ 1605.740671][T22337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13069'. [ 1606.137352][T22349] netlink: 'syz.1.13074': attribute type 1 has an invalid length. [ 1606.228475][T22349] bond7: entered promiscuous mode [ 1606.235787][T22349] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1606.428694][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13076'. [ 1606.518568][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13075'. [ 1606.527141][T22362] hsr0: entered promiscuous mode [ 1606.550087][T22362] macvlan3: entered allmulticast mode [ 1606.557457][T22362] hsr0: entered allmulticast mode [ 1606.563607][T22362] hsr_slave_0: entered allmulticast mode [ 1606.573259][T22362] hsr_slave_1: entered allmulticast mode [ 1607.003293][T22376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13081'. [ 1607.176381][T22387] netlink: 'syz.1.13084': attribute type 10 has an invalid length. [ 1607.243387][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13082'. [ 1607.349992][T22387] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1607.459263][T22396] netlink: 'syz.4.13086': attribute type 1 has an invalid length. [ 1607.591118][T22405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13086'. [ 1607.776565][T22402] bond2: (slave geneve2): making interface the new active one [ 1607.793269][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1607.799873][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1607.850459][T22402] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1607.930020][T22405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1607.987361][ T8918] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1608.216060][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13090'. [ 1608.244641][ T8918] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1608.426817][ T8918] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1608.492737][ T8918] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1608.829565][T22448] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1608.863908][T22455] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.13096'. [ 1608.873700][T22455] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1608.953742][T22453] bond8: option lp_interval: invalid value (0) [ 1608.972729][T22453] bond8: option lp_interval: allowed values 1 - 2147483647 [ 1609.040900][T22453] bond8 (unregistering): Released all slaves [ 1609.385881][T22467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13098'. [ 1609.498894][T22478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13098'. [ 1609.824618][T22487] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1609.842057][T22487] Cannot find add_set index 0 as target [ 1609.899654][T22491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13104'. [ 1610.509411][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13112'. [ 1610.599531][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13112'. [ 1610.599548][ T8930] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.660890][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13113'. [ 1610.677139][ T8930] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.702963][ T8930] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.737658][ T8930] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.751760][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13113'. [ 1611.119657][T22537] syzkaller0: entered promiscuous mode [ 1611.133716][T22537] syzkaller0: entered allmulticast mode [ 1611.255401][T22547] netlink: 'syz.0.13120': attribute type 11 has an invalid length. [ 1611.267518][T22545] netlink: 'syz.0.13120': attribute type 11 has an invalid length. [ 1611.362002][T22552] xt_socket: unknown flags 0x50 [ 1611.362342][T22553] xt_socket: unknown flags 0x50 [ 1611.380456][T22545] netlink: 'syz.0.13120': attribute type 11 has an invalid length. [ 1611.397574][ T8914] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.409338][T22547] netlink: 'syz.0.13120': attribute type 11 has an invalid length. [ 1611.421194][ T8914] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.542978][T22559] x_tables: duplicate underflow at hook 4 [ 1611.648613][ T8914] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.811647][T22572] Bluetooth: MGMT ver 1.23 [ 1611.852304][T22575] openvswitch: netlink: IP tunnel dst address not specified [ 1612.101507][T22586] netlink: 'syz.0.13130': attribute type 1 has an invalid length. [ 1612.117539][T22586] netlink: 'syz.0.13130': attribute type 1 has an invalid length. [ 1612.842542][T22603] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1612.873010][T22603] xt_hashlimit: size too large, truncated to 1048576 [ 1613.267481][T22618] syzkaller0: entered promiscuous mode [ 1613.273254][T22618] syzkaller0: entered allmulticast mode [ 1613.284381][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 1613.295937][ C0] lec:lec_tx_timeout: lec0 [ 1613.409766][T22623] IPv6: sit1: Disabled Multicast RS [ 1613.421374][T22623] __nla_validate_parse: 4 callbacks suppressed [ 1613.421394][T22623] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.13140'. [ 1613.443086][T22623] openvswitch: netlink: Message has 5 unknown bytes. [ 1613.973049][T22639] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13143'. [ 1615.668910][T22595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1615.682154][T22620] netlink: 'syz.2.13138': attribute type 1 has an invalid length. [ 1615.704387][T22620] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13138'. [ 1615.736266][T22620] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13138'. [ 1615.751947][T22620] netlink: 'syz.2.13138': attribute type 1 has an invalid length. [ 1615.785355][T22620] netlink: 618 bytes leftover after parsing attributes in process `syz.2.13138'. [ 1615.815915][T22654] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1615.863564][T22654] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1616.856629][T22685] netlink: 5332 bytes leftover after parsing attributes in process `syz.2.13152'. [ 1616.997990][T22663] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1617.027263][T22663] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1617.321077][T22663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1617.361340][T22663] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1617.765622][T22663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1617.789935][T22663] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1617.922406][T22714] netlink: 'syz.1.13156': attribute type 15 has an invalid length. [ 1618.041358][T22717] netlink: 332 bytes leftover after parsing attributes in process `syz.1.13156'. [ 1618.052444][T22716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13157'. [ 1618.210343][T22720] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1618.598019][T22731] syzkaller1: entered promiscuous mode [ 1618.620834][T22731] syzkaller1: entered allmulticast mode [ 1618.679097][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13159'. [ 1618.689192][T22736] openvswitch: netlink: Multiple metadata blocks provided [ 1619.140991][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13165'. [ 1619.152238][T22748] netlink: 'syz.1.13163': attribute type 2 has an invalid length. [ 1619.329133][T22755] bond0: (slave bond_slave_0): Releasing backup interface [ 1619.428935][T22761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1619.548917][T22761] netlink: 228 bytes leftover after parsing attributes in process `syz.2.13167'. [ 1619.662220][T22774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13170'. [ 1619.679455][T22764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13168'. [ 1619.728468][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13170'. [ 1620.393284][T22796] tipc: Started in network mode [ 1620.425167][T22796] tipc: Node identity ac14140f, cluster identity 4711 [ 1620.447688][T22796] tipc: New replicast peer: 172.20.20.187 [ 1620.458170][T22796] tipc: Enabled bearer , priority 10 [ 1620.541430][T22805] netlink: 'syz.0.13179': attribute type 1 has an invalid length. [ 1621.026910][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13186'. [ 1621.095580][T22816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13185'. [ 1621.405460][T22836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13190'. [ 1621.443422][T22836] netlink: 'syz.1.13190': attribute type 83 has an invalid length. [ 1621.485312][ T7201] tipc: Node number set to 2886997007 [ 1621.801509][ T5192] udevd[5192]: worker [20657] /devices/virtual/block/nbd2 is taking a long time [ 1621.833254][T22853] netlink: 'syz.1.13195': attribute type 1 has an invalid length. [ 1622.293441][T22869] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000 [ 1622.357511][T22870] wg1 speed is unknown, defaulting to 1000 [ 1622.509414][T22877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13202'. [ 1623.129332][T22900] x_tables: duplicate underflow at hook 2 [ 1623.584706][T22916] syz_tun: entered allmulticast mode [ 1624.056430][ T7202] IPVS: starting estimator thread 0... [ 1624.194780][T22940] IPVS: using max 28 ests per chain, 67200 per kthread [ 1624.461288][T22951] __nla_validate_parse: 1 callbacks suppressed [ 1624.461311][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13221'. [ 1624.830949][T22967] netlink: 'syz.0.13225': attribute type 23 has an invalid length. [ 1624.867554][T22971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13227'. [ 1624.923160][T22971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13227'. [ 1625.039028][T22979] xt_hashlimit: invalid interval [ 1625.326767][T22988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13230'. [ 1625.818625][T22998] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13234'. [ 1625.873233][ T5673] IPVS: starting estimator thread 0... [ 1625.913653][T23006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13237'. [ 1625.984759][T23007] IPVS: using max 27 ests per chain, 64800 per kthread [ 1625.999366][T23006] openvswitch: netlink: Unknown nsh attribute 0 [ 1626.240147][T23017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13239'. [ 1627.150046][T23059] xt_nfacct: accounting object `syz1' does not exist [ 1627.177705][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13250'. [ 1627.575746][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13254'. [ 1627.790287][T23078] netlink: 'syz.1.13255': attribute type 39 has an invalid length. [ 1628.210581][T23096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1628.553070][T23103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13262'. [ 1628.683505][T23108] openvswitch: netlink: EtherType 50a is less than min 600 [ 1629.327195][T23124] gretap0: entered promiscuous mode [ 1629.350455][T23124] vlan4: entered promiscuous mode [ 1630.943203][T23191] __nla_validate_parse: 1 callbacks suppressed [ 1630.943227][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13288'. [ 1630.982380][T23181] syzkaller0: entered promiscuous mode [ 1631.006206][T23181] syzkaller0: entered allmulticast mode [ 1631.098302][T23191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13288'. [ 1631.266184][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13288'. [ 1631.331826][T23194] wg1 speed is unknown, defaulting to 1000 [ 1631.381072][T23194] lo speed is unknown, defaulting to 1000 [ 1631.948381][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13290'. [ 1632.011100][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13290'. [ 1632.056390][T23222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13290'. [ 1632.430645][T23232] syzkaller0: entered promiscuous mode [ 1632.471778][T23232] syzkaller0: entered allmulticast mode [ 1632.626986][T23233] tipc: Started in network mode [ 1632.643932][T23233] tipc: Node identity 962715b5e374, cluster identity 4711 [ 1632.682986][T23233] tipc: Enabled bearer , priority 0 [ 1632.748748][T23227] tipc: Resetting bearer [ 1632.921611][T24367] lec:lec_start_xmit: lec0:No lecd attached [ 1632.950263][T23227] tipc: Disabling bearer [ 1633.129073][T23253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13299'. [ 1633.383384][T23261] netlink: 'syz.2.13302': attribute type 8 has an invalid length. [ 1633.509332][T23268] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.13304'. [ 1633.537232][T23262] netlink: 'syz.2.13302': attribute type 4 has an invalid length. [ 1633.619695][T23272] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13301'. [ 1633.771058][T23272] : entered promiscuous mode [ 1634.844936][T23311] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.13315'. [ 1635.628242][T23320] [ 1635.630828][T23320] ====================================================== [ 1635.637878][T23320] WARNING: possible circular locking dependency detected [ 1635.645023][T23320] syzkaller #0 Not tainted [ 1635.650229][T23320] ------------------------------------------------------ [ 1635.657249][T23320] syz.3.13317/23320 is trying to acquire lock: [ 1635.663411][T23320] ffff8880274bebf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1635.673084][T23320] [ 1635.673084][T23320] but task is already holding lock: [ 1635.680450][T23320] ffff8880274be6d0 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1635.690731][T23320] [ 1635.690731][T23320] which lock already depends on the new lock. [ 1635.690731][T23320] [ 1635.701234][T23320] [ 1635.701234][T23320] the existing dependency chain (in reverse order) is: [ 1635.710254][T23320] [ 1635.710254][T23320] -> #6 (&q->q_usage_counter(io)#58){++++}-{0:0}: [ 1635.718966][T23320] blk_alloc_queue+0x546/0x680 [ 1635.724309][T23320] __blk_mq_alloc_disk+0x197/0x390 [ 1635.729980][T23320] nbd_dev_add+0x499/0xb50 [ 1635.735052][T23320] nbd_init+0x168/0x1f0 [ 1635.739843][T23320] do_one_initcall+0x250/0x870 [ 1635.745153][T23320] do_initcall_level+0x104/0x190 [ 1635.750651][T23320] do_initcalls+0x59/0xa0 [ 1635.755516][T23320] kernel_init_freeable+0x2a6/0x3e0 [ 1635.761335][T23320] kernel_init+0x1d/0x1d0 [ 1635.766284][T23320] ret_from_fork+0x514/0xb70 [ 1635.771501][T23320] ret_from_fork_asm+0x1a/0x30 [ 1635.776805][T23320] [ 1635.776805][T23320] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1635.784120][T23320] fs_reclaim_acquire+0x71/0x100 [ 1635.789606][T23320] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1635.795989][T23320] __alloc_skb+0x1d0/0x7d0 [ 1635.800969][T23320] __ip6_append_data+0x2d6d/0x3f70 [ 1635.806889][T23320] ip6_append_data+0x10f/0x280 [ 1635.812238][T23320] rawv6_sendmsg+0x12d3/0x18e0 [ 1635.817648][T23320] ____sys_sendmsg+0x80a/0x9f0 [ 1635.822962][T23320] ___sys_sendmsg+0x2a5/0x360 [ 1635.828174][T23320] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1635.833736][T23320] do_syscall_64+0x15f/0xf80 [ 1635.838955][T23320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.845383][T23320] [ 1635.845383][T23320] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1635.853134][T23320] lock_sock_nested+0x41/0x100 [ 1635.858431][T23320] inet_shutdown+0x6a/0x390 [ 1635.863567][T23320] nbd_mark_nsock_dead+0x2e9/0x560 [ 1635.869207][T23320] recv_work+0x1c2e/0x1d40 [ 1635.874163][T23320] process_scheduled_works+0xb5d/0x1860 [ 1635.880340][T23320] worker_thread+0xa53/0xfc0 [ 1635.885465][T23320] kthread+0x388/0x470 [ 1635.890145][T23320] ret_from_fork+0x514/0xb70 [ 1635.895350][T23320] ret_from_fork_asm+0x1a/0x30 [ 1635.901347][T23320] [ 1635.901347][T23320] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1635.909012][T23320] __mutex_lock+0x1a3/0x1550 [ 1635.914228][T23320] nbd_queue_rq+0x37b/0x1100 [ 1635.919349][T23320] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1635.925417][T23320] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1635.932274][T23320] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1635.938781][T23320] blk_mq_run_hw_queue+0x348/0x4f0 [ 1635.944428][T23320] blk_mq_dispatch_list+0xd16/0xe10 [ 1635.950152][T23320] blk_mq_flush_plug_list+0x48d/0x570 [ 1635.956051][T23320] __blk_flush_plug+0x3ed/0x4d0 [ 1635.961452][T23320] __submit_bio+0x28d/0x580 [ 1635.966500][T23320] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1635.972656][T23320] block_read_full_folio+0x599/0x830 [ 1635.978472][T23320] filemap_read_folio+0x137/0x3b0 [ 1635.984026][T23320] do_read_cache_folio+0x358/0x590 [ 1635.989671][T23320] read_part_sector+0xb6/0x2b0 [ 1635.994978][T23320] adfspart_check_ICS+0xb1/0x960 [ 1636.000441][T23320] bdev_disk_changed+0x817/0x1770 [ 1636.009118][T23320] blkdev_get_whole+0x380/0x510 [ 1636.014497][T23320] bdev_open+0x31e/0xd30 [ 1636.019266][T23320] blkdev_open+0x470/0x610 [ 1636.024299][T23320] do_dentry_open+0x785/0x14e0 [ 1636.029594][T23320] vfs_open+0x3b/0x340 [ 1636.034274][T23320] path_openat+0x2e08/0x3860 [ 1636.039407][T23320] do_file_open+0x23e/0x4a0 [ 1636.044444][T23320] do_sys_openat2+0x113/0x200 [ 1636.049649][T23320] __x64_sys_openat+0x138/0x170 [ 1636.055111][T23320] do_syscall_64+0x15f/0xf80 [ 1636.060230][T23320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.066662][T23320] [ 1636.066662][T23320] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1636.073969][T23320] __mutex_lock+0x1a3/0x1550 [ 1636.079164][T23320] nbd_queue_rq+0xc6/0x1100 [ 1636.084220][T23320] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1636.090333][T23320] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1636.097196][T23320] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1636.103807][T23320] blk_mq_run_hw_queue+0x348/0x4f0 [ 1636.109542][T23320] blk_mq_dispatch_list+0xd16/0xe10 [ 1636.115266][T23320] blk_mq_flush_plug_list+0x48d/0x570 [ 1636.121171][T23320] __blk_flush_plug+0x3ed/0x4d0 [ 1636.126549][T23320] __submit_bio+0x28d/0x580 [ 1636.131666][T23320] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1636.137823][T23320] block_read_full_folio+0x599/0x830 [ 1636.143637][T23320] filemap_read_folio+0x137/0x3b0 [ 1636.149186][T23320] do_read_cache_folio+0x358/0x590 [ 1636.154827][T23320] read_part_sector+0xb6/0x2b0 [ 1636.160203][T23320] adfspart_check_ICS+0xb1/0x960 [ 1636.165669][T23320] bdev_disk_changed+0x817/0x1770 [ 1636.171222][T23320] blkdev_get_whole+0x380/0x510 [ 1636.176610][T23320] bdev_open+0x31e/0xd30 [ 1636.181402][T23320] blkdev_open+0x470/0x610 [ 1636.186369][T23320] do_dentry_open+0x785/0x14e0 [ 1636.191758][T23320] vfs_open+0x3b/0x340 [ 1636.196451][T23320] path_openat+0x2e08/0x3860 [ 1636.201664][T23320] do_file_open+0x23e/0x4a0 [ 1636.206699][T23320] do_sys_openat2+0x113/0x200 [ 1636.211906][T23320] __x64_sys_openat+0x138/0x170 [ 1636.217288][T23320] do_syscall_64+0x15f/0xf80 [ 1636.222424][T23320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.228960][T23320] [ 1636.228960][T23320] -> #1 (set->srcu){.+.+}-{0:0}: [ 1636.236129][T23320] __synchronize_srcu+0xca/0x300 [ 1636.241614][T23320] elevator_switch+0x1e8/0x7a0 [ 1636.246935][T23320] elevator_change+0x2cc/0x450 [ 1636.252236][T23320] elevator_set_default+0x36c/0x430 [ 1636.257959][T23320] blk_register_queue+0x3e9/0x4e0 [ 1636.263536][T23320] __add_disk+0x677/0xd50 [ 1636.268401][T23320] add_disk_fwnode+0xfb/0x480 [ 1636.273628][T23320] nbd_dev_add+0x72c/0xb50 [ 1636.278668][T23320] nbd_init+0x168/0x1f0 [ 1636.283365][T23320] do_one_initcall+0x250/0x870 [ 1636.288663][T23320] do_initcall_level+0x104/0x190 [ 1636.294145][T23320] do_initcalls+0x59/0xa0 [ 1636.299029][T23320] kernel_init_freeable+0x2a6/0x3e0 [ 1636.304841][T23320] kernel_init+0x1d/0x1d0 [ 1636.309738][T23320] ret_from_fork+0x514/0xb70 [ 1636.314871][T23320] ret_from_fork_asm+0x1a/0x30 [ 1636.320182][T23320] [ 1636.320182][T23320] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1636.328038][T23320] __lock_acquire+0x15a5/0x2cf0 [ 1636.333468][T23320] lock_acquire+0x106/0x350 [ 1636.338528][T23320] __mutex_lock+0x1a3/0x1550 [ 1636.343658][T23320] elevator_change+0x1b3/0x450 [ 1636.348954][T23320] elevator_set_none+0xb5/0x140 [ 1636.354343][T23320] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1636.360696][T23320] nbd_start_device+0x17f/0xb10 [ 1636.366195][T23320] nbd_genl_connect+0x165b/0x1cf0 [ 1636.371763][T23320] genl_family_rcv_msg_doit+0x22a/0x330 [ 1636.377902][T23320] genl_rcv_msg+0x61c/0x7a0 [ 1636.382949][T23320] netlink_rcv_skb+0x232/0x4b0 [ 1636.388253][T23320] genl_rcv+0x28/0x40 [ 1636.392938][T23320] netlink_unicast+0x75c/0x8e0 [ 1636.398241][T23320] netlink_sendmsg+0x813/0xb40 [ 1636.403540][T23320] ____sys_sendmsg+0x972/0x9f0 [ 1636.408840][T23320] ___sys_sendmsg+0x2a5/0x360 [ 1636.414141][T23320] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1636.419627][T23320] do_syscall_64+0x15f/0xf80 [ 1636.424931][T23320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.431391][T23320] [ 1636.431391][T23320] other info that might help us debug this: [ 1636.431391][T23320] [ 1636.441623][T23320] Chain exists of: [ 1636.441623][T23320] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#58 [ 1636.441623][T23320] [ 1636.455374][T23320] Possible unsafe locking scenario: [ 1636.455374][T23320] [ 1636.462823][T23320] CPU0 CPU1 [ 1636.468189][T23320] ---- ---- [ 1636.473556][T23320] lock(&q->q_usage_counter(io)#58); [ 1636.478938][T23320] lock(fs_reclaim); [ 1636.485451][T23320] lock(&q->q_usage_counter(io)#58); [ 1636.493354][T23320] lock(&q->elevator_lock); [ 1636.497949][T23320] [ 1636.497949][T23320] *** DEADLOCK *** [ 1636.497949][T23320] [ 1636.506179][T23320] 6 locks held by syz.3.13317/23320: [ 1636.511480][T23320] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1636.519677][T23320] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1636.528755][T23320] #2: ffff8880277f69c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 1636.540163][T23320] #3: ffff8880277f68d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 1636.551222][T23320] #4: ffff8880274be6d0 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1636.561936][T23320] #5: ffff8880274be708 (&q->q_usage_counter(queue)#42){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1636.572829][T23320] [ 1636.572829][T23320] stack backtrace: [ 1636.578732][T23320] CPU: 0 UID: 0 PID: 23320 Comm: syz.3.13317 Not tainted syzkaller #0 PREEMPT(full) [ 1636.578754][T23320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1636.578766][T23320] Call Trace: [ 1636.578773][T23320] [ 1636.578781][T23320] dump_stack_lvl+0xe8/0x150 [ 1636.578808][T23320] print_circular_bug+0x2e1/0x300 [ 1636.578836][T23320] check_noncircular+0x12e/0x150 [ 1636.578864][T23320] __lock_acquire+0x15a5/0x2cf0 [ 1636.578895][T23320] ? elevator_change+0x1b3/0x450 [ 1636.578910][T23320] lock_acquire+0x106/0x350 [ 1636.578930][T23320] ? elevator_change+0x1b3/0x450 [ 1636.578951][T23320] __mutex_lock+0x1a3/0x1550 [ 1636.578971][T23320] ? elevator_change+0x1b3/0x450 [ 1636.578986][T23320] ? trace_irq_disable+0x3b/0x140 [ 1636.579011][T23320] ? rcu_is_watching+0x15/0xb0 [ 1636.579036][T23320] ? work_grab_pending+0x3d1/0x990 [ 1636.579060][T23320] ? elevator_change+0x1b3/0x450 [ 1636.579076][T23320] ? __pfx___mutex_lock+0x10/0x10 [ 1636.579096][T23320] ? enable_work+0x17f/0x230 [ 1636.579110][T23320] ? lockdep_hardirqs_on+0x7a/0x110 [ 1636.579132][T23320] ? __cancel_work_sync+0xf7/0x110 [ 1636.579148][T23320] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1636.579167][T23320] elevator_change+0x1b3/0x450 [ 1636.579186][T23320] elevator_set_none+0xb5/0x140 [ 1636.579201][T23320] ? __pfx_elevator_set_none+0x10/0x10 [ 1636.579220][T23320] ? xa_load+0x1db/0x210 [ 1636.579243][T23320] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1636.579269][T23320] ? kernfs_add_one+0x477/0x5c0 [ 1636.579293][T23320] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1636.579317][T23320] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1636.579340][T23320] nbd_start_device+0x17f/0xb10 [ 1636.579361][T23320] ? device_create_file+0xf4/0x1b0 [ 1636.579380][T23320] nbd_genl_connect+0x165b/0x1cf0 [ 1636.579398][T23320] ? __pfx___nla_validate_parse+0x10/0x10 [ 1636.579418][T23320] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1636.579437][T23320] ? rcu_is_watching+0x15/0xb0 [ 1636.579460][T23320] ? trace_kmalloc+0x2a/0xf0 [ 1636.579486][T23320] ? __nla_parse+0x40/0x60 [ 1636.579502][T23320] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1636.579522][T23320] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1636.579543][T23320] genl_family_rcv_msg_doit+0x22a/0x330 [ 1636.579565][T23320] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1636.579587][T23320] ? __lock_acquire+0x6b5/0x2cf0 [ 1636.579612][T23320] genl_rcv_msg+0x61c/0x7a0 [ 1636.579631][T23320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1636.579648][T23320] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1636.579670][T23320] netlink_rcv_skb+0x232/0x4b0 [ 1636.579693][T23320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1636.579711][T23320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1636.579739][T23320] ? down_read+0x270/0x2e0 [ 1636.579760][T23320] ? genl_rcv+0xd/0x40 [ 1636.579777][T23320] genl_rcv+0x28/0x40 [ 1636.579793][T23320] netlink_unicast+0x75c/0x8e0 [ 1636.579817][T23320] netlink_sendmsg+0x813/0xb40 [ 1636.579844][T23320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1636.579869][T23320] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1636.579891][T23320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1636.579918][T23320] ____sys_sendmsg+0x972/0x9f0 [ 1636.579943][T23320] ? __might_fault+0xaf/0x130 [ 1636.579967][T23320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1636.580001][T23320] ? import_iovec+0x73/0xa0 [ 1636.580019][T23320] ___sys_sendmsg+0x2a5/0x360 [ 1636.580043][T23320] ? __lock_acquire+0x6b5/0x2cf0 [ 1636.580065][T23320] ? __pfx____sys_sendmsg+0x10/0x10 [ 1636.580092][T23320] ? futex_wait+0x2a2/0x390 [ 1636.580118][T23320] ? __fget_files+0x2a/0x420 [ 1636.580137][T23320] ? __fget_files+0x3a0/0x420 [ 1636.580161][T23320] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1636.580187][T23320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1636.580215][T23320] ? rcu_is_watching+0x15/0xb0 [ 1636.580241][T23320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.580258][T23320] do_syscall_64+0x15f/0xf80 [ 1636.580277][T23320] ? trace_irq_disable+0x3b/0x140 [ 1636.580294][T23320] ? clear_bhb_loop+0x40/0x90 [ 1636.580312][T23320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.580328][T23320] RIP: 0033:0x7f08f7b9c819 [ 1636.580344][T23320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.580359][T23320] RSP: 002b:00007f08f8b31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1636.580378][T23320] RAX: ffffffffffffffda RBX: 00007f08f7e15fa0 RCX: 00007f08f7b9c819 [ 1636.580391][T23320] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 1636.580402][T23320] RBP: 00007f08f7c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1636.580413][T23320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1636.580424][T23320] R13: 00007f08f7e16038 R14: 00007f08f7e15fa0 R15: 00007ffe28019518 [ 1636.580443][T23320] [ 1637.242311][ T5831] block nbd9: Receive control failed (result -32) [ 1637.249577][ T5831] block nbd9: Receive control failed (result -32) [ 1637.296306][T23320] nbd9: detected capacity change from 0 to 63 [ 1637.304122][T20695] block nbd9: Dead connection, failed to find a fallback [ 1637.331294][T20695] block nbd9: shutting down sockets [ 1637.339610][T20695] blk_print_req_error: 138 callbacks suppressed [ 1637.339629][T20695] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.369274][T20695] buffer_io_error: 138 callbacks suppressed [ 1637.369292][T20695] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.387258][T20695] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.401331][T20695] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1637.410644][T20695] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.420282][T20695] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1637.428331][T20695] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.438226][T20695] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1637.447367][T20695] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.457289][T20695] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.469549][T20695] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.485651][T20695] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1637.516187][T20695] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.526476][T20695] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1637.542147][T20695] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.553388][T20695] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1637.562489][T20695] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.572287][T20695] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.582346][T20695] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1637.592600][T20695] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1637.605321][T20695] ldm_validate_partition_table(): Disk read failed. [ 1637.617373][T20695] Dev nbd9: unable to read RDB block 0 [ 1637.626523][T20695] nbd9: unable to read partition table [ 1637.650741][T20695] ldm_validate_partition_table(): Disk read failed. [ 1637.661150][T20695] Dev nbd9: unable to read RDB block 0 [ 1637.670363][T20695] nbd9: unable to read partition table [ 1638.244117][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 1638.252744][ C0] lec:lec_tx_timeout: lec0