last executing test programs: 2m35.167173679s ago: executing program 0 (id=2809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980), 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 2m35.041513156s ago: executing program 0 (id=2810): r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @private2, 0x7}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0x801c581f, 0x30000002000005c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r7, 0x20, &(0x7f0000000040)={&(0x7f00000001c0)=""/244, 0xf4, 0x0, &(0x7f00000003c0)=""/253, 0xfd}}, 0x10) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0xf}) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(r5, &(0x7f00000017c0)={&(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001740)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3c48fe3f19c64e7396a259143063839a8d1eb1c80699a8084a82423fbe420f94b64566170d2ba88cfca3877d69ee62c11ead838cbeaa4d74d6b6ba17e59708a11119037b46ae1ab22439969ff6276a43d76aa9b77f8fff5fb2db7cc16bff000a743ce7109ef23db1bc65a3065c9d1bc32403ae7964ec4c7224131a550751e8847ed5fe71cbe159c470e836362844a88f6cbe65f8f7820724cdffcbed403e80f2c5002a63290b5211e8975cd1f9ad5ceb9a466a60951cf0f0294341bf499c55c9", 0xc0}, {&(0x7f0000000300)="93536d0798ecdec07667815d05e7d73ed293e0ae73fe1128edf99002aef27c057396668f44dd843316d9b6d300657620c368f51d10a7dbbf43dd0c4daebc44327422c3941933cbb403528b7c602c", 0x4e}, {&(0x7f0000001580)="26e8d8dcc617ea8987329007e9e46289feeab569b574973f73c447b1f5c4a6346d05d43ee5943eee49c4e5bba1005d4afcf2ae11db488cf7936f3eabfba64b99d2010b3740add2753d66773c64927f1aa7cfff03bb5220745bb2693d8a145d4b5784912844b7426ecc4b29d37625a33a07d5a21985ebefa248eb6c9846c49882db456c0164d441dfaeab14b75c9ef38965a61602c36fdbccdf3897c6b029a642377b2ef6a036a8a78eeac940f9b29c04ec79741ae7338fa29baefa13a82f5cb347c9f7458a247a04f09a3ceda6250879f71777d9aeae20f61372b4e8b0decbe7fc", 0xe1}, {&(0x7f0000001680)="8e097df0efbf8e3220164c30c9b082c83e145920fc8711ca7d5119ec09df79d6d9b6ea7e5e5cd8fe909f5e13dae8306758522c0fb5282a81143ad2095a9ac86498955d3e03c5a88f234f3a6e680da3f88ee050714631d026d98213c555ee3fbbd794bae029a9307bf3fae6645f2075a2d99ac203d8c000045b155a85b34fd84985fe92dfb76a472082f12b6a7600118dcccc35ac5d2f0d4781fab161e5544978cf3f02d53a518d7db24940df30f5f7913bfa74380618efec21065673196405", 0xbf}], 0x5}, 0x400c014) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000007f14000000600000"], 0xfdef) 2m33.904286092s ago: executing program 0 (id=2832): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000000000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001b01a5af0343119f5d94ba0ce14fcf2e0bbcb97f6cea232e0ce589985685d29ff0d37c6af98d5fdf20a496e600698739949894e7113e0e4589ba0a528f578d69b0a77cf5d2c7e551e5fbe6c7aba57d75d5b3d562eb1def943fd8210a1ec71e2f82e68aa82ae037a269bcc888c6b3f64b700057b393f6f23b8a8624b9f89e04ee8910a00f12499a67ab553abdf4a857bffe32f6d6bbaffe60f96b6815e83fec83aec6a0673e997c87bd0fcf9256a7e104e94458bef75393954d3570b028754b5229758cac7adef5b8d3ac84c01c2839efedf84c904b199471f275d3d0a28fbe5d9f72dd6a3368b9ce50b65353e1e8309287f2bc7c10e656c37f5da0101a6602bd726ed2055dc824aae02613a3a5d39c71a29d501d21d372f9897dd97871d78501e349e740095f9140113b7deec6b9643b1db06eb77dcc65d2d76d285732acde1f12bb28550000000000000000000000000007271b34baac064c1864908c1e93a57dd6692b8211d73570e560d8cf03a55d9eb21b1820f65cd9da43067497476f91a81b8e120aadc74b7e602879662568fc2d1fd2b657246e1b05c9d4234773f795fbe9d3ded7d1e5795c0c26748720f1cf1a4883a17966e3ebf7186f621ddb2a361bc"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f00000000c0)={'gretap0\x00', 0x73}) 2m33.812429932s ago: executing program 0 (id=2834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0xa, 0x801, 0x0) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xe38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x3, 0xfffffffd) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000010300000000000000000000000000002001000000000000000000000000000100000000ff00000002bbae00fe8800000000000000000000000000010000000004"], 0x1bc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xfffffffd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x5d, 0xfffffffb, 0x22, @mcast2, @private2, 0x700, 0x8000, 0x9}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, r9, 0x25, 0x2, @val=@tracing={r10, 0x3ff}}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b0f, &(0x7f00000002c0)={'veth0_to_batadv\x00', @local}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r13, &(0x7f0000000080), 0x0}, 0x20) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000fcdbdf251e000000080004000100000008000100", @ANYRES32=r12, @ANYBLOB="09000400080004000100000000000100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000100000000000000030295e466f2181ed806114cc7643ad58f0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 2m33.658073322s ago: executing program 0 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r4, &(0x7f0000000d40)=[{&(0x7f0000000980)="a4", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@loopback, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) sendto$inet6(r1, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x6e, &(0x7f0000000540), 0x10) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01cc000000000000000007100000080001003c00000008000300", @ANYRES32=r10, @ANYBLOB="1400040070696d367265673000000000000000000800050007000000"], 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m24.388606178s ago: executing program 0 (id=2842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000180)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x81}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r8, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f00000004c0)=0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r10, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2m23.982880639s ago: executing program 32 (id=2842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000180)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x81}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r8, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f00000004c0)=0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r10, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.991319923s ago: executing program 3 (id=3737): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x5, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="400403529c53b8"], 0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.985492971s ago: executing program 4 (id=3739): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x4c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040094) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@TCA_RATE={0x0, 0x5, {0x3, 0x9}}]}, 0xfffffd8d}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x4c) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040094) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@TCA_RATE={0x0, 0x5, {0x3, 0x9}}]}, 0xfffffd8d}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 2.968015567s ago: executing program 1 (id=3740): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0xb}) getgid() r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@l2={0x1f, 0x8007, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x10}, 0x80, 0x0}, 0x0) 2.122709741s ago: executing program 4 (id=3742): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) ppoll(&(0x7f00000000c0)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001900)=ANY=[@ANYBLOB="400000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0800000000000000140012800b0001006772657461700000040002a00a0001"], 0x40}}, 0x0) 2.118492029s ago: executing program 1 (id=3744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) 2.113640471s ago: executing program 4 (id=3747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet(r7, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0xb, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0xa, 0x8, 0x100, 0xc0000000, 0x8006, 0x6, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x1, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0x13, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x80000002, 0x0, 0x4e8, 0x1, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.107867013s ago: executing program 3 (id=3750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) (async) 2.106653754s ago: executing program 5 (id=3751): bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x7, 0x1, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r2, r0, 0x1f, 0x10, 0x0, @void, @value=r3, @void, @void, r1}, 0x20) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64) r4 = socket$kcm(0x2b, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x1, 0xfffffffb, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a", 0x86}], 0x1}, 0x20000004) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) (async, rerun: 64) close(r4) (rerun: 64) 2.105704265s ago: executing program 1 (id=3752): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x80, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c00000002000000000000000000000d000000000000a56999badae9b66a2ade948f78b45fdcdf90b50abf61d95bbd46df3448a2e22556f442384a1eb2fbe2051b05fe65406f32177866c1d443fcbe28910d11e31a1083c0b62519a474db8733ca9c4dff231d1ee560fb20c38f1dff190ac2413a0fbcb18a1375d04e998300ca3ccc1d65d95703655ecb"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000180ffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) (async) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x80, 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c00000002000000000000000000000d000000000000a56999badae9b66a2ade948f78b45fdcdf90b50abf61d95bbd46df3448a2e22556f442384a1eb2fbe2051b05fe65406f32177866c1d443fcbe28910d11e31a1083c0b62519a474db8733ca9c4dff231d1ee560fb20c38f1dff190ac2413a0fbcb18a1375d04e998300ca3ccc1d65d95703655ecb"], 0x0, 0x26}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000180ffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) (async) 2.095124981s ago: executing program 3 (id=3754): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003800000000008ee078ac1e0001ac1414aa030490781200183f250000000000000000010000e00000017f00000100186371ae9b1c03"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000022801080000001100000000005042001100e700686100003a69702c0008e4ff000000004500010007000000"], 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0xe, &(0x7f0000000e80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a000108450dda45fe5ed43db9e6fd6ae6c353abc74778148174f420cba986229e918417acd5f3f9ed4a690cc74824d08f8d84bdbd842a169aec8acaa07b3f94fff5ff52c433b96b"], 0x80}, 0x1, 0xba01}, 0x4040040) 1.995567594s ago: executing program 1 (id=3755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl(r3, 0x8b0f, &(0x7f0000000040)) getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x840) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) 1.995007975s ago: executing program 5 (id=3756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x2) (async) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r3], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.849938689s ago: executing program 2 (id=3758): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x80, @remote, 0x9}, 0x1c) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 1.723397452s ago: executing program 5 (id=3759): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1e0, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb0, 0x1b}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x1e0}}, 0x410c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004804) r6 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x100, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@broadcast, 0x4e23, 0x0, 0x4e22, 0x3, 0x2, 0x20, 0x110, 0x3a}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x1, 0x8, 0x5, 0xaaf0, 0x1}, {0x500002, 0x4, 0x4, 0x2}, {0x9, 0x2167268a, 0x8}, 0x703d2b, 0x3502, 0xa, 0x0, 0x0, 0xb8}, 0x0, 0x80000002}, [@tfcpad={0x8, 0x16, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x4c000) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00fbffffffffffff130012800b00010062617461647600006200028008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) 1.717778596s ago: executing program 3 (id=3760): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r1, 0x2f, 0x8, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) 1.709768817s ago: executing program 2 (id=3761): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x0, 0x103, 0x0, 0x1}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xec}, 0x48) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x0, 0x103, 0x0, 0x1}, 0x48) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xec}, 0x48) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) (async) 1.703746999s ago: executing program 1 (id=3762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0xffff}, {0x2, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_U32_LINK={0x8, 0x3, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.559547166s ago: executing program 2 (id=3763): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x2000000000000032, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4002, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffda6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async, rerun: 64) write$nci(r4, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x28, @f={0x8d, 0x3, 0x2, 0xf2, {0xf, 0x6b, "44e78b822430e4d93120f69dffa9e3859f9fc2d9b2ff4311c5634e8feba8b9cd70196332df9eaf9474e58588908593f96102c5b18884049ecbada0a42a17e684c712bc565482b87dfeab5d41ec52f263f68af26730a75d5cc63da363723917c032326193f5a68ff34324b9"}, 0x3}}, 0x75) (async, rerun: 64) socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$inet6(0xa, 0xe, 0x7ff) (rerun: 64) sendto$inet6(r8, &(0x7f0000000540)='.', 0x1, 0x0, 0x0, 0x0) (async) r9 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x107, 0x14, 0x0, 0x20000000) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) bind$can_raw(r9, &(0x7f00000004c0)={0x1d, r10}, 0x10) (async) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40000011) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000040100001200000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYRES32=r1, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="24d32464c75ec1cee131a512ec6980c4c0b2b8c1fc5866b573de95a84b50a310c8b8207e7bdc85da454bd32c8d1f02d717d3c268ca4dfcfb4fd6751c76cd935d9f601332a3b4f24d101c24e0ac4a5e48aecba795309658a00e90a585f531b327667572779daf6627671bcf847ab4af5ad221d4003c9b4f7c175eecf01351459388a7e273f88d31c5a394601d2490ba7b51", @ANYRES64=0x0], 0x10) 1.52311419s ago: executing program 5 (id=3764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x0) poll(&(0x7f0000000200)=[{r1, 0x401}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a0101000000"], 0xec}, 0x1, 0x0, 0x0, 0x40055}, 0x4000) 1.405814632s ago: executing program 2 (id=3765): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000000000000800020000000000080001fad94cd2e220fb85c33ff9a6227725847608bfa931b6a2741dea85f6a96fdc6c6575e39597dc5476a909042709cb1ad64e174647b40e8e4749", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 1.223633937s ago: executing program 4 (id=3766): r0 = socket$kcm(0x29, 0x5, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001880)={r0}) 1.21793437s ago: executing program 2 (id=3767): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01"], 0x448}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}]}]}]}, 0x2c}}, 0x2400c090) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/138, &(0x7f0000000400)=0x8a) accept4$inet(r5, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r9, 0x72, "fd4ab1041edc92e7f3deeb1033c9785bbd258d995b6624b4a31a20c265f75680349a3a018bacccdfe57923908295d7034c1f4d1f514f20685800716f72cf4d1bab92c28fa51aca98c5b4ab00d741e5d8e54de1b8023cc3b2797b590a9ab2e2dfa731cd41536a3ca19b4479c6cd5a4a29ad03"}, &(0x7f0000000240)=0x7a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x100, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xd, 0xffff}, {0x11, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0x1}, 0x6) 1.216967238s ago: executing program 5 (id=3768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/time_for_children\x00') ioctl$NS_GET_OWNER_UID(r1, 0x8008b70d, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0xfff2, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010008a"], 0xd4}}, 0x0) 1.123108911s ago: executing program 4 (id=3769): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x61, 0x30, 0x2e, 0x61, 0x5f]}}, &(0x7f00000008c0)=""/130, 0x2c, 0x82, 0x0, 0x8, 0x10000}, 0x28) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r8, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xfb}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x49}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20000841) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x26, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x9, 0x4, 0x5, 0x7, 0x4}, @alu={0x7, 0x1, 0x233b0c4cea2b6003, 0x9, 0x4, 0x20, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4cbf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x30, 0xe6, &(0x7f0000000680)=""/230, 0x41000, 0x40, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000007c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xd, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000a00)=[r8, 0x1, r2, r9], &(0x7f0000000a40)=[{0x1, 0x1, 0xb, 0x6}, {0x1, 0x4, 0x6, 0x3}, {0x0, 0x1, 0x5, 0x2}, {0x1, 0x5, 0x4, 0x1757fa9cb201c13f}, {0x5, 0x3, 0x0, 0x2}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x4, 0xc, 0x3}, {0x0, 0x1, 0xa, 0xb}, {0x0, 0x1, 0xe}], 0x10, 0x8}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) r11 = socket$inet6(0xa, 0x80000, 0xe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES8=r11], 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x5050) 445.274559ms ago: executing program 3 (id=3770): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 109.762481ms ago: executing program 3 (id=3771): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0x174}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@default, @default, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={0x0, 0xfffffffb, 0x10001, 0x80, 0x4, 0x6, 0x6, 0x2, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x6db9, 0x8, 0x101, 0x800, 0x6}}, &(0x7f0000000240)=0xb0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r6, 0x0, 0x1000, 0x0, &(0x7f00000006c0)="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", &(0x7f0000000180), 0x0, 0x0, 0x7c, 0x91, &(0x7f00000016c0)="eedee63ed142600dfc6bd9f3efd1825ff3312571b7ee6fd8311d4e8ebfc1ecccb81ff964aabf6f080ef11c1c8e76438a939c70db2939b0bb95a5ba85a80f8b9a70ea6d04e8174559d06cadfc647676f11b56535d5fba42d35d8b4c2eddfce461d04429c73d695e8598ff86f2d78174e9360ee6e7c73066438505278e", &(0x7f0000001740)="4d8b56ec304bc508dc481597d17f39b8fdf6386446e32bf53cd0b04234b06a9900cb56954b8256e47b6e8553a5fedb59ed892e2afa483af107fbdbf3234316cda3697b9a7ab76c95f99a1d96452a5aa5420fcac22459ccfa7538c96ddafdde5fdbe51e50abdd02301f924ad2d44e431d0bf31a6431f0fe4d0895f4ea26a57f8292571d4d2dd38e6747f4857ddb2fb3ae33", 0x9, 0x0, 0xfffffff8}, 0x50) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r8, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x4, 0xa) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={r5, 0x6d}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 96.808034ms ago: executing program 5 (id=3772): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) listen(r0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311350000000000061c0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) 51.737975ms ago: executing program 4 (id=3773): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000e00)=""/4037, 0xfc5}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/187, 0xbb}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0x96}, {&(0x7f0000000240)=""/159, 0x9f}], 0xa}, 0x40002002) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x2000) 24.253308ms ago: executing program 1 (id=3774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x4f, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x4f, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) 0s ago: executing program 2 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x62, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010012000000000000000500000a400000000c0a01040000ff0700000000010000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000007bc60700000a167f830f4c1bbe6532089850d548c7b7e5f503f177e7d97bf6ec628ec70258a83321d2172034b864ef57f25910c88e5271dee3bbe9c4323a5bfcfcb2f0936043"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a0000000000006111950000006d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010004b04feffffff000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000770c14be47dc26fb54000000000000140012800b000100a849f9656754ce3600040002801400030000e7e380f934f2f17bfca65cb62285ac000000000000"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000004140056c4ee0da5b2ba2024042abd7000fddbdf25080001000200000008000100000000000800010001000033570337752250b61b714f6ad23fd6026f1921299dc363350e99c4536b7ad7ec5d50234df13c777cf17bef90c836629d1576028cde7925be67156683d7f10b02d6340cd1e007006cdc66d6d625e6ae935fcce7ccfdd10a0d043000ba4c1195b5e5f51c8ffe6f88e45059c4df99fd89a9d05e88b2b476c7d78918e84174149665c6b726418c3df9056734c9646bcf10e55217542c7213459bb90a6cf442364cc336d5f2f50201994d9c828ceb9018cd9b79063b0ad2764256324db106ac3a1840dc217506b2"], 0x30}, 0x1, 0x0, 0x0, 0x24048c01}, 0x40010) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2a, 0x2, 0x13) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {0x0, 0x10}, {0xb, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xffffffffffffff7c, 0x5, [{0x6ba1, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) kernel console output (not intermixed with test programs): B). Runtime 30 seconds [ 372.159759][ T56] block nbd1: Possible stuck request ffff888024b255c0: control (read@3072,1024B). Runtime 30 seconds [ 372.295970][T15173] netlink: 'syz.1.2525': attribute type 28 has an invalid length. [ 372.357091][T15173] netlink: 'syz.1.2525': attribute type 3 has an invalid length. [ 372.419874][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.445690][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.469175][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.578835][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.590658][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.668914][T15187] syzkaller1: entered promiscuous mode [ 372.714371][T15187] syzkaller1: entered allmulticast mode [ 372.746955][T15195] macsec3: entered promiscuous mode [ 372.752352][T15195] bridge0: entered promiscuous mode [ 372.774517][T15195] macsec3: entered allmulticast mode [ 372.788550][T15195] bridge0: entered allmulticast mode [ 372.801512][T15195] bridge0: port 1(macsec3) entered blocking state [ 372.823933][T15195] bridge0: port 1(macsec3) entered disabled state [ 372.846553][T15195] bridge0: left allmulticast mode [ 372.855282][T15195] bridge0: left promiscuous mode [ 373.025432][T15217] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 373.216099][T15232] netlink: 'syz.0.2546': attribute type 39 has an invalid length. [ 373.475028][T15250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.559145][T15252] lo speed is unknown, defaulting to 1000 [ 373.587988][T15252] lo speed is unknown, defaulting to 1000 [ 373.594941][T15252] lo speed is unknown, defaulting to 1000 [ 373.603450][T15257] netlink: 'syz.2.2555': attribute type 1 has an invalid length. [ 373.813020][T15257] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.846762][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054eab000: rx timeout, send abort [ 373.921971][T15261] bond9: (slave geneve2): making interface the new active one [ 373.946939][T15261] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 373.979944][T15266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.013390][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.036995][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.066970][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.136781][T15252] infiniband sz1: set active [ 374.142574][T10406] lo speed is unknown, defaulting to 1000 [ 374.148486][T15252] infiniband sz1: added lo [ 374.222584][T15252] RDS/IB: sz1: added [ 374.232492][T15252] smc: adding ib device sz1 with port count 1 [ 374.239183][T15252] smc: ib device sz1 port 1 has no pnetid [ 374.248839][ T10] lo speed is unknown, defaulting to 1000 [ 374.265004][T15252] lo speed is unknown, defaulting to 1000 [ 374.346893][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054ea8c00: rx timeout, send abort [ 374.356317][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054eab000: abort rx timeout. Force session deactivation [ 374.469143][T15278] lo: left promiscuous mode [ 374.474061][T15278] tunl0: left promiscuous mode [ 374.484024][T15278] gre0: left promiscuous mode [ 374.488855][T15278] gretap0: left promiscuous mode [ 374.512016][T15278] erspan0: left promiscuous mode [ 374.517295][T15278] ip_vti0: left promiscuous mode [ 374.531349][T15278] team0: left allmulticast mode [ 374.536308][T15278] geneve0: left allmulticast mode [ 374.542954][T15278] team0: left promiscuous mode [ 374.547801][T15278] geneve0: left promiscuous mode [ 374.554092][T15278] bridge0: port 1(team0) entered disabled state [ 374.571359][T15287] __nla_validate_parse: 12 callbacks suppressed [ 374.571378][T15287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2561'. [ 374.620002][T15278] batadv0: left promiscuous mode [ 374.631063][T15288] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 374.649807][T15278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.691206][T15288] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 374.719677][T15288] netlink: 'syz.3.2560': attribute type 7 has an invalid length. [ 374.733424][T15288] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2560'. [ 374.749170][T15288] NCSI netlink: No device for ifindex 131092 [ 374.779607][T15252] lo speed is unknown, defaulting to 1000 [ 374.834498][T15285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2560'. [ 374.859888][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054ea8c00: abort rx timeout. Force session deactivation [ 374.861799][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 374.892827][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2560'. [ 374.935518][T15299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2564'. [ 374.956725][T15299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2564'. [ 374.985941][T15302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2565'. [ 375.135662][T15304] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 375.154219][T15306] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 375.225255][T15252] lo speed is unknown, defaulting to 1000 [ 375.452875][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2568'. [ 375.501803][T15318] team0: Device vti0 is of different type [ 375.846999][T15252] lo speed is unknown, defaulting to 1000 [ 376.057859][T15354] tipc: Enabled bearer , priority 0 [ 376.067376][T15352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2579'. [ 376.215838][T15342] tipc: Disabling bearer [ 376.363017][T15368] vlan4: entered promiscuous mode [ 376.380674][T15368] bridge0: entered promiscuous mode [ 376.404087][T15371] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 376.428504][T15373] tipc: Enabled bearer , priority 0 [ 376.471498][T15252] lo speed is unknown, defaulting to 1000 [ 376.814550][T15397] validate_nla: 1 callbacks suppressed [ 376.814571][T15397] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 376.954283][T15403] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 377.043558][T15408] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.082621][T15408] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 377.093748][T15408] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 377.292578][T15423] netlink: 'syz.4.2600': attribute type 3 has an invalid length. [ 377.459787][T15433] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.541033][T10398] tipc: Node number set to 2718846769 [ 377.554670][T15445] tipc: Enabling of bearer rejected, already enabled [ 377.778773][T15464] syzkaller0: entered promiscuous mode [ 377.780533][T15463] Cannot find add_set index 65532 as target [ 377.824836][T15464] syzkaller0: entered allmulticast mode [ 378.217091][T15482] 8021q: adding VLAN 0 to HW filter on device bond10 [ 378.240401][T15486] netlink: 'syz.0.2616': attribute type 8 has an invalid length. [ 378.250145][T15486] tipc: Enabling of bearer rejected, already enabled [ 378.260536][T15486] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 378.268574][T15486] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 378.276624][T15486] tipc: Resetting bearer [ 378.439369][T15499] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 378.469442][T15501] dvmrp6: entered allmulticast mode [ 378.521244][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.532511][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.549484][T15499] syz.2.2619: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 378.568357][T15499] CPU: 0 UID: 0 PID: 15499 Comm: syz.2.2619 Not tainted syzkaller #0 PREEMPT(full) [ 378.568395][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.568412][T15499] Call Trace: [ 378.568420][T15499] [ 378.568428][T15499] dump_stack_lvl+0x189/0x250 [ 378.568464][T15499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.568492][T15499] ? __pfx__printk+0x10/0x10 [ 378.568513][T15499] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 378.568542][T15499] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 378.568572][T15499] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 378.568603][T15499] warn_alloc+0x214/0x310 [ 378.568641][T15499] ? __pfx_warn_alloc+0x10/0x10 [ 378.568682][T15499] ? __get_vm_area_node+0x28f/0x300 [ 378.568710][T15499] ? packet_set_ring+0x6f3/0x2120 [ 378.568734][T15499] __vmalloc_node_range_noprof+0x690/0x12d0 [ 378.568797][T15499] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.568828][T15499] ? alloc_pages_mpol+0x3cd/0x4a0 [ 378.568850][T15499] ? packet_set_ring+0x6f3/0x2120 [ 378.568868][T15499] vzalloc_noprof+0xb2/0xf0 [ 378.568907][T15499] ? packet_set_ring+0x6f3/0x2120 [ 378.568927][T15499] packet_set_ring+0x6f3/0x2120 [ 378.568967][T15499] ? __pfx_packet_set_ring+0x10/0x10 [ 378.569044][T15499] ? _copy_from_user+0x94/0xb0 [ 378.569075][T15499] packet_setsockopt+0xc5a/0x12c0 [ 378.569110][T15499] ? __pfx_packet_setsockopt+0x10/0x10 [ 378.569141][T15499] ? file_init_path+0x3b/0x590 [ 378.569178][T15499] ? aa_sk_perm+0x81e/0x950 [ 378.569211][T15499] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.569240][T15499] ? aa_sock_opt_perm+0xff/0x1b0 [ 378.569274][T15499] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 378.569297][T15499] ? __pfx_packet_setsockopt+0x10/0x10 [ 378.569330][T15499] do_sock_setsockopt+0x17c/0x1b0 [ 378.569356][T15499] __x64_sys_setsockopt+0x13f/0x1b0 [ 378.569383][T15499] do_syscall_64+0xfa/0xfa0 [ 378.569410][T15499] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.569438][T15499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.569458][T15499] ? clear_bhb_loop+0x60/0xb0 [ 378.569483][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.569510][T15499] RIP: 0033:0x7f04ffd8f6c9 [ 378.569528][T15499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.569544][T15499] RSP: 002b:00007f04fdfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 378.569565][T15499] RAX: ffffffffffffffda RBX: 00007f04fffe6090 RCX: 00007f04ffd8f6c9 [ 378.569579][T15499] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000007 [ 378.569591][T15499] RBP: 00007f04ffe11f91 R08: 000000000000001c R09: 0000000000000000 [ 378.569604][T15499] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 378.569616][T15499] R13: 00007f04fffe6128 R14: 00007f04fffe6090 R15: 00007ffdbd5dc3d8 [ 378.569651][T15499] [ 378.569752][T15499] Mem-Info: [ 378.719036][T15515] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 378.750663][T15499] active_anon:4648 inactive_anon:0 isolated_anon:0 [ 378.750663][T15499] active_file:3212 inactive_file:39966 isolated_file:0 [ 378.750663][T15499] unevictable:768 dirty:72 writeback:0 [ 378.750663][T15499] slab_reclaimable:12808 slab_unreclaimable:130710 [ 378.750663][T15499] mapped:29181 shmem:1367 pagetables:1076 [ 378.750663][T15499] sec_pagetables:0 bounce:0 [ 378.750663][T15499] kernel_misc_reclaimable:0 [ 378.750663][T15499] free:1293992 free_pcp:14954 free_cma:0 [ 378.814680][T15518] batman_adv: batadv0: Adding interface: macsec1 [ 378.878459][T15499] Node 0 active_anon:18664kB inactive_anon:0kB active_file:12848kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116616kB dirty:288kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13968kB pagetables:4244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.913590][T15518] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.978833][T15499] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 379.010134][T15518] batman_adv: batadv0: Interface activated: macsec1 [ 379.010667][T15499] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.062395][T15499] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 379.068313][T15499] Node 0 DMA32 free:1281472kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18764kB inactive_anon:0kB active_file:12848kB inactive_file:159660kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:35920kB local_pcp:21052kB free_cma:0kB [ 379.131654][T15499] lowmem_reserve[]: 0 0 0 0 0 [ 379.136452][T15499] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.206219][T15523] veth0: entered promiscuous mode [ 379.260749][T15499] lowmem_reserve[]: 0 0 0 0 0 [ 379.265463][T15527] bridge5: entered promiscuous mode [ 379.265621][T15499] Node 1 Normal free:3879064kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24028kB local_pcp:10584kB free_cma:0kB [ 379.280636][T15527] bridge5: entered allmulticast mode [ 379.333499][T15499] lowmem_reserve[]: 0 0 0 0 0 [ 379.338289][T15499] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 379.362242][T15522] veth0: left promiscuous mode [ 379.398807][T15499] Node 0 DMA32: 1194*4kB (M) 753*8kB (UM) 337*16kB (UM) 892*32kB (UME) 168*64kB (UME) 60*128kB (UME) 145*256kB (UME) 59*512kB (UM) 66*1024kB (UME) 7*2048kB (UM) 261*4096kB (UM) = 1281472kB [ 379.445486][T15499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 379.472868][T15499] Node 1 Normal: 154*4kB (UE) 60*8kB (UME) 43*16kB (UME) 27*32kB (UME) 15*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3879064kB [ 379.560643][T15499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.570253][T15499] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.628589][T15499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.644026][T15499] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.684911][T15499] 44541 total pagecache pages [ 379.689639][T15499] 0 pages in swap cache [ 379.706042][T15499] Free swap = 124996kB [ 379.710234][T15499] Total swap = 124996kB [ 379.725257][T15499] 2097051 pages RAM [ 379.737347][T15499] 0 pages HighMem/MovableOnly [ 379.742516][T15499] 424119 pages reserved [ 379.746852][T15499] 0 pages cma reserved [ 380.336434][T15579] syz_tun: entered allmulticast mode [ 380.358577][T15577] syz_tun: left allmulticast mode [ 380.484241][T15583] __nla_validate_parse: 7 callbacks suppressed [ 380.484261][T15583] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2644'. [ 380.689041][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2649'. [ 380.706935][T15597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2649'. [ 380.803464][T15604] openvswitch: netlink: Duplicate or invalid key (type 0). [ 380.833377][T15604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.038946][T15620] syzkaller0: entered promiscuous mode [ 381.048263][T15619] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 381.062564][T15620] syzkaller0: entered allmulticast mode [ 381.168991][T15631] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 381.207094][T15628] bond7: (slave gretap2): making interface the new active one [ 381.222841][T15628] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 381.523193][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2662'. [ 381.540676][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2662'. [ 381.730363][T15650] vxcan1 speed is unknown, defaulting to 1000 [ 382.097262][T15650] wg1 speed is unknown, defaulting to 1000 [ 382.375051][ T60] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 382.557249][T15684] 8021q: adding VLAN 0 to HW filter on device bond9 [ 382.572900][T15687] netlink: 'syz.0.2671': attribute type 21 has an invalid length. [ 382.590385][T15687] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 382.652488][T15650] lo speed is unknown, defaulting to 1000 [ 382.680218][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2672'. [ 382.859922][T15697] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 382.979797][T15701] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.007775][T15701] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 383.018334][T15701] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 383.065914][T15697] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.079820][T15697] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 383.276268][T15706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2676'. [ 383.458381][T15710] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 383.491508][T15710] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2675'. [ 383.921523][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2682'. [ 384.510527][T15751] sctp: [Deprecated]: syz.0.2688 (pid 15751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.510527][T15751] Use struct sctp_sack_info instead [ 384.690372][T15755] bond9: entered allmulticast mode [ 384.698626][T15755] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.737051][T15755] bridge0: port 1(bond9) entered blocking state [ 384.761217][T15755] bridge0: port 1(bond9) entered disabled state [ 384.779864][T15755] bond9: entered promiscuous mode [ 385.085092][T15762] syzkaller0: entered promiscuous mode [ 385.091202][T15762] syzkaller0: entered allmulticast mode [ 385.534125][T15782] netlink: 'syz.1.2696': attribute type 1 has an invalid length. [ 385.641146][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.651609][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.659622][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.668328][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.680617][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.625686][ T5827] bond0: (slave syz_tun): Releasing backup interface [ 386.714880][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 386.752877][T15788] veth7: entered promiscuous mode [ 386.772862][T15789] netem: unknown loss type 0 [ 386.777885][T15789] netem: change failed [ 386.866792][T15786] vxcan1 speed is unknown, defaulting to 1000 [ 386.873687][T15799] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 386.973757][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 386.994546][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 387.031964][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 387.164800][T15786] wg1 speed is unknown, defaulting to 1000 [ 387.216949][T15819] tipc: Resetting bearer [ 387.425943][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 387.791136][ T5830] Bluetooth: hci1: command tx timeout [ 387.799184][T15848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2716'. [ 387.838558][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 387.862274][T15786] lo speed is unknown, defaulting to 1000 [ 387.904331][T15850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2719'. [ 388.018488][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 388.042395][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 388.063858][T15860] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 388.078912][T15862] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 388.576525][T15786] chnl_net:caif_netlink_parms(): no params data found [ 388.662203][T15894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.687600][T15900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.806552][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.814541][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.821796][T15786] bridge_slave_0: entered allmulticast mode [ 388.829647][T15786] bridge_slave_0: entered promiscuous mode [ 388.841210][T15786] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.848414][T15786] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.855716][T15786] bridge_slave_1: entered allmulticast mode [ 388.863757][T15786] bridge_slave_1: entered promiscuous mode [ 388.906569][T15912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.035974][T15786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.064295][T15786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.085965][T15922] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 389.096115][T15922] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 389.112800][T15922] netlink: 'syz.1.2740': attribute type 2 has an invalid length. [ 389.187932][T14926] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.198038][T14926] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.219774][T15786] team0: Port device team_slave_0 added [ 389.235623][T14926] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.252719][T14926] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.265071][T15786] team0: Port device team_slave_1 added [ 389.322572][T15786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.331896][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.361642][T15786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.385963][T15786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.398047][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.431211][T15786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.595854][T15786] hsr_slave_0: entered promiscuous mode [ 389.604595][T15786] hsr_slave_1: entered promiscuous mode [ 389.611932][T15786] debugfs: 'hsr0' already exists in 'hsr' [ 389.617777][T15786] Cannot create hsr debugfs directory [ 389.871808][ T5830] Bluetooth: hci1: command tx timeout [ 390.156133][T15786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.175835][T15786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.230076][T15966] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 390.318925][T15786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.330058][T15786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.435593][T15786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.458644][T15786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.798678][T15786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 390.828163][T15786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 390.866699][T15786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 390.887645][T15786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.072512][T15786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.107562][T15786] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.139623][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.146852][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.182266][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.189546][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.241357][T16030] tipc: Enabled bearer , priority 0 [ 391.269202][T16030] syzkaller0: entered promiscuous mode [ 391.288589][T16030] syzkaller0: entered allmulticast mode [ 391.346263][T16030] tipc: Resetting bearer [ 391.439453][T16030] netlink: 'syz.4.2764': attribute type 12 has an invalid length. [ 391.454056][T16030] netlink: 'syz.4.2764': attribute type 11 has an invalid length. [ 391.475448][T16044] team0: Device ip6gre5 is of different type [ 391.516481][T16028] tipc: Resetting bearer [ 391.545336][T16028] tipc: Disabling bearer [ 391.592586][T15786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.703473][T16054] netlink: 'syz.4.2769': attribute type 1 has an invalid length. [ 391.708171][T15786] veth0_vlan: entered promiscuous mode [ 391.835221][T16054] 8021q: adding VLAN 0 to HW filter on device bond12 [ 391.921317][T16055] bond12: (slave veth17): Enslaving as an active interface with a down link [ 391.951570][ T5830] Bluetooth: hci1: command tx timeout [ 391.956606][T15786] veth1_vlan: entered promiscuous mode [ 391.988769][T16067] vlan4: entered promiscuous mode [ 392.017834][T16067] vlan4: entered allmulticast mode [ 392.025808][T16067] hsr_slave_1: entered allmulticast mode [ 392.036342][T16074] __nla_validate_parse: 11 callbacks suppressed [ 392.036357][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2773'. [ 392.068324][T15786] veth0_macvtap: entered promiscuous mode [ 392.100248][T15786] veth1_macvtap: entered promiscuous mode [ 392.131918][T15786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.140683][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 392.173138][T15786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.228153][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.239270][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.269077][T16087] sch_fq: defrate 0 ignored. [ 392.286293][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.296268][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.322401][T16087] netlink: 'syz.4.2776': attribute type 3 has an invalid length. [ 392.323343][T16089] nbd: nbd0 already in use [ 392.336325][T16089] block nbd0: NBD_DISCONNECT [ 392.342460][T16089] block nbd0: Send disconnect failed -32 [ 392.348550][T16089] block nbd0: shutting down sockets [ 392.465127][T14927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.475952][T14927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.559492][T14926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.564927][T16092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2778'. [ 392.579545][T14926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.737400][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2781'. [ 392.765987][T16099] geneve2: entered promiscuous mode [ 392.805539][T16105] º: renamed from veth1_vlan (while UP) [ 392.808985][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2782'. [ 392.824931][T16101] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2689'. [ 392.843786][T16101] xt_policy: neither incoming nor outgoing policy selected [ 392.848823][T16103] pim6reg: left allmulticast mode [ 392.859835][T16101] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.930449][T16109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.953853][T16108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.208287][T16130] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2790'. [ 393.399862][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'. [ 393.422111][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 393.431567][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 393.441144][T16153] sock: sock_timestamping_bind_phc: sock not bind to device [ 393.571975][T16162] tipc: Enabling of bearer rejected, already enabled [ 393.602914][T16162] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 393.965381][T16189] netlink: 'syz.0.2809': attribute type 15 has an invalid length. [ 394.034533][ T5830] Bluetooth: hci1: command tx timeout [ 394.479842][T16211] vlan2: entered promiscuous mode [ 394.496976][T16211] bridge0: entered promiscuous mode [ 394.793234][T16234] pim6reg527: entered allmulticast mode [ 395.329247][T16281] netlink: 'syz.4.2835': attribute type 3 has an invalid length. [ 395.495003][T16289] netlink: 'syz.4.2839': attribute type 21 has an invalid length. [ 395.621689][T16299] netlink: 'syz.2.2841': attribute type 4 has an invalid length. [ 395.748810][T16303] : entered promiscuous mode [ 396.437703][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.450779][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.458982][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.473254][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.492094][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.501063][T14927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.538587][T16325] xt_hashlimit: size too large, truncated to 1048576 [ 396.614107][T14927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.692211][T16340] vxcan1 speed is unknown, defaulting to 1000 [ 396.792575][T14927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.956794][T14927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.993539][T16357] syzkaller1: entered promiscuous mode [ 396.999224][T16357] syzkaller1: entered allmulticast mode [ 397.194109][T16371] netlink: 'syz.1.2860': attribute type 10 has an invalid length. [ 397.239138][T16340] wg1 speed is unknown, defaulting to 1000 [ 397.289655][T16371] syz_tun: entered promiscuous mode [ 397.337344][T16371] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 397.423160][T16374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.592592][T16391] 8021q: VLANs not supported on gre0 [ 397.603337][T16388] __nla_validate_parse: 18 callbacks suppressed [ 397.603358][T16388] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2864'. [ 397.611889][T14927] bond9: left promiscuous mode [ 397.649074][T14927] bridge0: port 1(bond9) entered disabled state [ 397.919182][T14927] bond7 (unregistering): (slave gretap2): Releasing active interface [ 397.946786][T14927] bond1 (unregistering): (slave gre1): Releasing backup interface [ 397.955080][T14927] gre1 (unregistering): left promiscuous mode [ 397.993822][T14927] dvmrp0 (unregistering): left allmulticast mode [ 398.043176][T14927] team0: Port device geneve0 removed [ 398.376075][T14927] bond1 (unregistering): Released all slaves [ 398.464409][T14927] bond2 (unregistering): Released all slaves [ 398.556020][T14927] bond3 (unregistering): Released all slaves [ 398.571564][T14927] bond4 (unregistering): Released all slaves [ 398.586889][T14927] bond5 (unregistering): Released all slaves [ 398.590855][ T5830] Bluetooth: hci2: command tx timeout [ 398.683402][T14927] bond6 (unregistering): (slave veth5): Releasing active interface [ 398.693104][T14927] bond6 (unregistering): Released all slaves [ 398.707926][T14927] bond0 (unregistering): Released all slaves [ 398.723396][T14927] bond7 (unregistering): Released all slaves [ 398.742699][T14927] bond8 (unregistering): Released all slaves [ 398.827447][T14927] bond9 (unregistering): Released all slaves [ 399.146919][T16410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2873'. [ 399.274438][T16413] tipc: Enabled bearer , priority 0 [ 399.367079][T16413] syzkaller0: entered promiscuous mode [ 399.373394][T16413] syzkaller0: entered allmulticast mode [ 399.379953][T16413] tipc: Resetting bearer [ 399.394029][T16340] lo speed is unknown, defaulting to 1000 [ 399.557667][T16412] tipc: Resetting bearer [ 399.836445][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 399.847789][T16446] netlink: 'syz.3.2883': attribute type 10 has an invalid length. [ 400.671373][ T5830] Bluetooth: hci2: command tx timeout [ 400.835172][T16412] tipc: Disabling bearer [ 400.872411][ T24] tipc: Node number set to 1467330306 [ 401.087359][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.146016][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.172836][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.218610][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.315222][T14927] tipc: Disabling bearer [ 401.324274][T14927] tipc: Disabling bearer [ 401.341779][T14927] tipc: Disabling bearer [ 401.361810][T14927] tipc: Left network mode [ 401.362614][T16474] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2892'. [ 401.412784][T14927] IPVS: stopping backup sync thread 6381 ... [ 401.418700][T16468] vxcan1 speed is unknown, defaulting to 1000 [ 401.472067][T16479] IPv6: sit1: Disabled Multicast RS [ 401.478657][T16479] sit1: entered allmulticast mode [ 401.684647][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2894'. [ 401.710335][T16340] chnl_net:caif_netlink_parms(): no params data found [ 401.725228][T16468] wg1 speed is unknown, defaulting to 1000 [ 401.763590][T16485] dvmrp0: entered allmulticast mode [ 401.827425][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2897'. [ 401.850034][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2897'. [ 401.929749][T16493] tipc: Enabled bearer , priority 0 [ 401.958905][T16489] syzkaller0: entered promiscuous mode [ 401.964688][T16489] syzkaller0: entered allmulticast mode [ 402.175174][T16493] tipc: Resetting bearer [ 402.198647][ T56] block nbd1: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 60 seconds [ 402.201269][T16340] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.209385][ T56] block nbd1: Possible stuck request ffff888024b25240: control (read@1024,1024B). Runtime 60 seconds [ 402.228865][ T56] block nbd1: Possible stuck request ffff888024b25400: control (read@2048,1024B). Runtime 60 seconds [ 402.239864][ T56] block nbd1: Possible stuck request ffff888024b255c0: control (read@3072,1024B). Runtime 60 seconds [ 402.248672][T16340] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.258168][T16340] bridge_slave_0: entered allmulticast mode [ 402.265938][T16340] bridge_slave_0: entered promiscuous mode [ 402.274764][T16340] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.282098][T16340] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.289325][T16340] bridge_slave_1: entered allmulticast mode [ 402.297329][T16340] bridge_slave_1: entered promiscuous mode [ 402.372476][T16487] tipc: Resetting bearer [ 402.453250][T16487] tipc: Disabling bearer [ 402.675656][T16468] lo speed is unknown, defaulting to 1000 [ 402.683381][T16340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.728987][T16340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.752903][ T5830] Bluetooth: hci2: command tx timeout [ 402.826973][T16340] team0: Port device team_slave_0 added [ 402.844280][T16340] team0: Port device team_slave_1 added [ 402.960219][T16340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.972948][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.999980][T16340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.014461][T16340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.021603][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.048754][T16340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.129598][T16524] tipc: Enabled bearer , priority 0 [ 403.175264][T16340] hsr_slave_0: entered promiscuous mode [ 403.182722][T16340] hsr_slave_1: entered promiscuous mode [ 403.189246][T16340] debugfs: 'hsr0' already exists in 'hsr' [ 403.195399][T16340] Cannot create hsr debugfs directory [ 403.260309][T16523] tipc: Disabling bearer [ 403.422245][T16528] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2906'. [ 403.791537][T16532] pim6reg1: entered promiscuous mode [ 403.827636][T16532] pim6reg1: entered allmulticast mode [ 404.367683][T16549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.377867][T16549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.394802][T16549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.403508][T16549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.608272][T14927] hsr_slave_0: left promiscuous mode [ 405.438743][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.448857][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.456720][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.466574][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.474806][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.542072][T16569] netlink: 'syz.2.2918': attribute type 1 has an invalid length. [ 405.702865][ T37] smc: removing ib device !yz! [ 405.758340][T16577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2920'. [ 405.767642][T16577] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2920'. [ 405.776958][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 405.847455][T16580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.079058][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'. [ 406.119167][T16574] netlink: 'syz.2.2918': attribute type 2 has an invalid length. [ 406.195168][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'. [ 406.234509][ T1337] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.292291][ T1337] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.304628][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 406.325618][ T1337] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.351579][ T1337] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.461630][T16566] vxcan1 speed is unknown, defaulting to 1000 [ 406.636198][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'. [ 406.668870][T16604] netlink: 'syz.4.2929': attribute type 10 has an invalid length. [ 406.696160][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'. [ 406.737406][T16604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2929'. [ 406.784328][ T30] audit: type=1800 audit(1763052130.133:10): pid=16607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2930" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3037 res=0 errno=0 [ 406.846643][T16604] geneve0: entered allmulticast mode [ 406.855996][T16604] team0: Port device geneve0 added [ 407.020322][T16613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.027681][T16615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.073574][T16614] batman_adv: batadv0: Removing interface: netdevsim0 [ 407.136252][T16614] batman_adv: batadv0: Interface deactivated: macsec1 [ 407.158400][T16614] batman_adv: batadv0: Removing interface: macsec1 [ 407.245213][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.286877][ T1337] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.322306][ T1337] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.332669][ T1337] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.373772][ T1337] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.552646][ T5830] Bluetooth: hci2: command tx timeout [ 407.555641][T16566] wg1 speed is unknown, defaulting to 1000 [ 407.684650][T16639] netlink: 'syz.1.2939': attribute type 29 has an invalid length. [ 407.770676][T16643] x_tables: duplicate underflow at hook 1 [ 408.619795][T14927] IPVS: stop unused estimator thread 0... [ 408.848428][T14927] bridge_slave_1: left allmulticast mode [ 408.868446][T14927] bridge_slave_1: left promiscuous mode [ 408.906822][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.923393][T16675] netlink: 'syz.3.2952': attribute type 5 has an invalid length. [ 408.957916][T14927] bridge_slave_0: left allmulticast mode [ 408.973892][T14927] bridge_slave_0: left promiscuous mode [ 408.979900][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.080431][T16679] netlink: 'syz.1.2955': attribute type 10 has an invalid length. [ 409.167823][T14927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.178617][T14927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.188880][T14927] bond0 (unregistering): Released all slaves [ 409.203963][T16566] lo speed is unknown, defaulting to 1000 [ 409.234298][T16679] team0: Port device dummy0 added [ 409.294333][T16679] __nla_validate_parse: 5 callbacks suppressed [ 409.294353][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2955'. [ 409.385118][T16693] netlink: 'syz.2.2958': attribute type 12 has an invalid length. [ 409.429110][T16679] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2955'. [ 409.456476][T16679] netlink: 'syz.1.2955': attribute type 10 has an invalid length. [ 409.467902][T16697] xt_l2tp: v2 doesn't support IP mode [ 409.533280][T16693] bond1: option primary_reselect: invalid value (255) [ 409.547106][T16693] bond1 (unregistering): Released all slaves [ 409.613576][T16679] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 409.631343][ T5830] Bluetooth: hci2: command tx timeout [ 409.654145][T16679] team0: Failed to send options change via netlink (err -105) [ 409.671060][T16679] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 409.684085][T16679] team0: Port device dummy0 removed [ 409.698375][T16679] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 409.969897][T16717] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2967'. [ 410.334668][T16717] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 410.368851][T16717] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 410.396421][T16717] bond0 (unregistering): Released all slaves [ 410.503213][T16725] gtp0: entered promiscuous mode [ 410.519633][T16725] gtp0: entered allmulticast mode [ 410.728850][T16745] syzkaller1: entered promiscuous mode [ 410.747574][T16745] syzkaller1: entered allmulticast mode [ 410.821238][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2979'. [ 410.834439][T14927] hsr_slave_0: left promiscuous mode [ 410.840816][T14927] hsr_slave_1: left promiscuous mode [ 410.847003][T14927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.855731][T14927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.955040][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2978'. [ 410.990786][T16756] x_tables: duplicate underflow at hook 3 [ 411.043584][T14927] team0 (unregistering): Port device team_slave_1 removed [ 411.074813][T14927] team0 (unregistering): Port device team_slave_0 removed [ 411.428358][T16566] chnl_net:caif_netlink_parms(): no params data found [ 411.569985][T16566] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.578712][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.586149][T16566] bridge_slave_0: entered allmulticast mode [ 411.595162][T16566] bridge_slave_0: entered promiscuous mode [ 411.605063][T16566] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.612598][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.619770][T16566] bridge_slave_1: entered allmulticast mode [ 411.627591][T16566] bridge_slave_1: entered promiscuous mode [ 411.676916][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.689443][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.710656][ T5830] Bluetooth: hci2: command tx timeout [ 411.729707][T16566] team0: Port device team_slave_0 added [ 411.737804][T16566] team0: Port device team_slave_1 added [ 411.768040][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.775130][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.801964][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.815686][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.823208][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.849477][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.894464][T16566] hsr_slave_0: entered promiscuous mode [ 411.901111][T16566] hsr_slave_1: entered promiscuous mode [ 411.907298][T16566] debugfs: 'hsr0' already exists in 'hsr' [ 411.913312][T16566] Cannot create hsr debugfs directory [ 412.060382][T16566] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.070275][T16566] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.080351][T16566] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.090942][T16566] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.164137][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.191711][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.207715][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.214869][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.234513][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.241651][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.418653][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.632131][T16566] veth0_vlan: entered promiscuous mode [ 412.643917][T16566] veth1_vlan: entered promiscuous mode [ 412.674961][T16566] veth0_macvtap: entered promiscuous mode [ 412.684634][T16566] veth1_macvtap: entered promiscuous mode [ 412.703510][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.718749][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.733100][T14927] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.742850][T14927] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.753242][T14927] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.762164][T14927] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.830219][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.847432][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.875062][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.883705][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.792445][ T5830] Bluetooth: hci2: command tx timeout [ 416.068746][ T5197] udevd[5197]: worker [13210] /devices/virtual/block/nbd1 is taking a long time [ 432.272055][ T56] block nbd1: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 90 seconds [ 432.282830][ T56] block nbd1: Possible stuck request ffff888024b25240: control (read@1024,1024B). Runtime 90 seconds [ 432.294115][ T56] block nbd1: Possible stuck request ffff888024b25400: control (read@2048,1024B). Runtime 90 seconds [ 432.305042][ T56] block nbd1: Possible stuck request ffff888024b255c0: control (read@3072,1024B). Runtime 90 seconds [ 439.954387][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.964399][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.352184][ T56] block nbd1: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 120 seconds [ 462.363283][ T56] block nbd1: Possible stuck request ffff888024b25240: control (read@1024,1024B). Runtime 120 seconds [ 462.374315][ T56] block nbd1: Possible stuck request ffff888024b25400: control (read@2048,1024B). Runtime 120 seconds [ 462.385427][ T56] block nbd1: Possible stuck request ffff888024b255c0: control (read@3072,1024B). Runtime 120 seconds [ 479.679491][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 479.737338][T16797] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2982'. [ 479.823055][T16797] netlink: 'syz.1.2982': attribute type 10 has an invalid length. [ 479.861711][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 479.912635][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 479.963702][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 480.044771][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 480.131418][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 480.191250][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 480.242415][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 480.282648][T16802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2985'. [ 480.501832][T16822] $Hÿ: renamed from bond0 (while UP) [ 480.548713][T16822] $Hÿ: entered promiscuous mode [ 480.579561][T16822] bond_slave_0: entered promiscuous mode [ 480.589994][T16822] bond_slave_1: entered promiscuous mode [ 480.642768][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 480.660295][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 480.673276][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 480.690479][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 480.702529][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.763778][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.782445][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.112390][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.142148][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.319064][T16856] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.609613][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.640656][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.735859][ T1337] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.745262][ T1337] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.756445][ T1337] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.766923][ T1337] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.776498][ T1337] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.787366][ T1337] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.800054][T16827] vxcan1 speed is unknown, defaulting to 1000 [ 481.869107][T16886] xt_hashlimit: size too large, truncated to 1048576 [ 481.872561][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.926547][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.036125][T16883] netlink: 'syz.2.3007': attribute type 3 has an invalid length. [ 482.068435][ T1337] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.082207][T16898] netlink: 'syz.1.3009': attribute type 27 has an invalid length. [ 482.098685][ T1337] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.341506][T16906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.357752][T10398] lo speed is unknown, defaulting to 1000 [ 482.414582][T16827] wg1 speed is unknown, defaulting to 1000 [ 482.513329][ T1141] batadv2: left allmulticast mode [ 482.523266][ T1141] batadv2: left promiscuous mode [ 482.528498][ T1141] bridge0: port 2(batadv2) entered disabled state [ 482.654822][T16914] openvswitch: netlink: Flow actions attr not present in new flow. [ 482.751615][ T5830] Bluetooth: hci0: command tx timeout [ 482.883686][ T1141] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 483.259803][ T1141] bond7 (unregistering): (slave gretap2): Releasing active interface [ 483.380370][ T1141] dvmrp6 (unregistering): left allmulticast mode [ 483.416812][ T1141] team0: Port device geneve0 removed [ 483.675330][ T1141] team0: Port device bridge3 removed [ 483.746679][ T1141] team0: Port device bridge4 removed [ 484.008481][ T1141] bond0 (unregistering): Released all slaves [ 484.029788][ T1141] bond1 (unregistering): Released all slaves [ 484.055103][ T1141] bond2 (unregistering): Released all slaves [ 484.174783][ T1141] bond3 (unregistering): Released all slaves [ 484.193925][ T1141] bond4 (unregistering): Released all slaves [ 484.308230][ T1141] bond5 (unregistering): Released all slaves [ 484.327674][ T1141] bond6 (unregistering): Released all slaves [ 484.361772][ T1141] bond7 (unregistering): Released all slaves [ 484.380179][ T1141] bond8 (unregistering): Released all slaves [ 484.496095][ T1141] bond9 (unregistering): Released all slaves [ 484.515613][ T1141] bond10 (unregistering): Released all slaves [ 484.569492][T16827] lo speed is unknown, defaulting to 1000 [ 484.814564][T16941] __nla_validate_parse: 32 callbacks suppressed [ 484.814594][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3023'. [ 484.841205][T16943] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 484.857976][ T5830] Bluetooth: hci0: command tx timeout [ 484.883618][T16947] netlink: 'syz.5.3026': attribute type 6 has an invalid length. [ 484.894125][T16948] netlink: 'syz.1.3025': attribute type 1 has an invalid length. [ 484.914683][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3023'. [ 485.101813][T16956] netlink: 'syz.2.3028': attribute type 1 has an invalid length. [ 485.239924][T16962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3028'. [ 485.624026][T16983] netlink: 'syz.2.3034': attribute type 8 has an invalid length. [ 486.027586][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 486.085963][T16827] chnl_net:caif_netlink_parms(): no params data found [ 486.419837][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 486.500990][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'. [ 486.612900][ T1141] tipc: Disabling bearer [ 486.689008][ T1141] tipc: Left network mode [ 486.807166][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.825669][T16827] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.829245][T17043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3043'. [ 486.840959][T16827] bridge_slave_0: entered allmulticast mode [ 486.861687][T16827] bridge_slave_0: entered promiscuous mode [ 486.918560][ T5830] Bluetooth: hci0: command tx timeout [ 486.920775][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.966277][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.009668][T16827] bridge_slave_1: entered allmulticast mode [ 487.039992][T16827] bridge_slave_1: entered promiscuous mode [ 487.054255][T17046] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3044'. [ 487.054814][T17050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.071701][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3044'. [ 487.256186][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.327905][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.383006][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3049'. [ 487.638355][T16827] team0: Port device team_slave_0 added [ 487.732753][T17066] veth19: entered promiscuous mode [ 487.799463][T16827] team0: Port device team_slave_1 added [ 487.857824][T17069] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 488.096792][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.114181][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.202710][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.235571][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.256553][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.326270][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.667826][T16827] hsr_slave_0: entered promiscuous mode [ 488.689122][T16827] hsr_slave_1: entered promiscuous mode [ 488.697811][T16827] debugfs: 'hsr0' already exists in 'hsr' [ 488.704966][T16827] Cannot create hsr debugfs directory [ 488.725187][ T1141] hsr_slave_0: left promiscuous mode [ 488.734546][ T1141] hsr_slave_1: left promiscuous mode [ 488.993418][ T5830] Bluetooth: hci0: command tx timeout [ 489.225388][ T1141] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 489.904577][ T13] smc: removing ib device syz0 [ 490.383776][T17096] syz_tun: entered allmulticast mode [ 490.392168][T17096] syz_tun: left allmulticast mode [ 490.588276][T17106] netlink: 'syz.5.3061': attribute type 1 has an invalid length. [ 490.662376][T17107] __nla_validate_parse: 2 callbacks suppressed [ 490.662397][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 490.785344][T17107] xt_TCPMSS: Only works on TCP SYN packets [ 490.893332][T17116] syzkaller0: entered promiscuous mode [ 490.899955][T17116] syzkaller0: entered allmulticast mode [ 490.945637][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 490.978261][T17114] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 491.225473][T17118] pim6reg: entered allmulticast mode [ 491.243846][T17125] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 491.605919][T17133] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 492.156941][ T1337] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x75 [ 492.312945][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 492.335996][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3077'. [ 492.433800][ T56] block nbd1: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 150 seconds [ 492.445884][ T56] block nbd1: Possible stuck request ffff888024b25240: control (read@1024,1024B). Runtime 150 seconds [ 492.458366][ T56] block nbd1: Possible stuck request ffff888024b25400: control (read@2048,1024B). Runtime 150 seconds [ 492.474977][ T56] block nbd1: Possible stuck request ffff888024b255c0: control (read@3072,1024B). Runtime 150 seconds [ 492.881331][T16827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.990823][ T5830] Bluetooth: hci1: command tx timeout [ 493.024053][T16827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 493.095121][T16827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 493.143091][T17175] syz.1.3079: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 493.198263][T17175] CPU: 1 UID: 0 PID: 17175 Comm: syz.1.3079 Not tainted syzkaller #0 PREEMPT(full) [ 493.198293][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.198324][T17175] Call Trace: [ 493.198333][T17175] [ 493.198345][T17175] dump_stack_lvl+0x189/0x250 [ 493.198383][T17175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.198413][T17175] ? __pfx__printk+0x10/0x10 [ 493.198434][T17175] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 493.198464][T17175] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 493.198495][T17175] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 493.198527][T17175] warn_alloc+0x214/0x310 [ 493.198566][T17175] ? __pfx_warn_alloc+0x10/0x10 [ 493.198609][T17175] ? __get_vm_area_node+0x28f/0x300 [ 493.198639][T17175] ? packet_set_ring+0x6f3/0x2120 [ 493.198663][T17175] __vmalloc_node_range_noprof+0x690/0x12d0 [ 493.198727][T17175] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 493.198760][T17175] ? alloc_pages_mpol+0x3cd/0x4a0 [ 493.198784][T17175] ? packet_set_ring+0x6f3/0x2120 [ 493.198804][T17175] vzalloc_noprof+0xb2/0xf0 [ 493.198842][T17175] ? packet_set_ring+0x6f3/0x2120 [ 493.198863][T17175] packet_set_ring+0x6f3/0x2120 [ 493.198908][T17175] ? __pfx_packet_set_ring+0x10/0x10 [ 493.198964][T17175] ? _copy_from_user+0x94/0xb0 [ 493.198997][T17175] packet_setsockopt+0xc5a/0x12c0 [ 493.199032][T17175] ? __pfx_packet_setsockopt+0x10/0x10 [ 493.199065][T17175] ? file_init_path+0x3b/0x590 [ 493.199103][T17175] ? aa_sk_perm+0x81e/0x950 [ 493.199138][T17175] ? __pfx_aa_sk_perm+0x10/0x10 [ 493.199170][T17175] ? aa_sock_opt_perm+0xff/0x1b0 [ 493.199205][T17175] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 493.199225][T17175] ? __pfx_packet_setsockopt+0x10/0x10 [ 493.199259][T17175] do_sock_setsockopt+0x17c/0x1b0 [ 493.199286][T17175] __x64_sys_setsockopt+0x13f/0x1b0 [ 493.199315][T17175] do_syscall_64+0xfa/0xfa0 [ 493.199342][T17175] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.199371][T17175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.199392][T17175] ? clear_bhb_loop+0x60/0xb0 [ 493.199417][T17175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.199438][T17175] RIP: 0033:0x7f32f278f6c9 [ 493.199457][T17175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.199476][T17175] RSP: 002b:00007f32f3611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.199498][T17175] RAX: ffffffffffffffda RBX: 00007f32f29e5fa0 RCX: 00007f32f278f6c9 [ 493.199513][T17175] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 493.199525][T17175] RBP: 00007f32f2811f91 R08: 000000000000001c R09: 0000000000000000 [ 493.199538][T17175] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 493.199551][T17175] R13: 00007f32f29e6038 R14: 00007f32f29e5fa0 R15: 00007ffe7c6a4e28 [ 493.199586][T17175] [ 493.199594][T17175] Mem-Info: [ 493.240731][T16827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.290650][T17175] active_anon:4725 inactive_anon:0 isolated_anon:0 [ 493.290650][T17175] active_file:3212 inactive_file:39999 isolated_file:0 [ 493.290650][T17175] unevictable:768 dirty:122 writeback:0 [ 493.290650][T17175] slab_reclaimable:12444 slab_unreclaimable:126093 [ 493.290650][T17175] mapped:29241 shmem:1372 pagetables:1172 [ 493.290650][T17175] sec_pagetables:0 bounce:0 [ 493.290650][T17175] kernel_misc_reclaimable:0 [ 493.290650][T17175] free:1242519 free_pcp:41871 free_cma:0 [ 493.561986][T17175] Node 0 active_anon:19100kB inactive_anon:0kB active_file:12848kB inactive_file:159792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116864kB dirty:488kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13836kB pagetables:4636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 493.618346][T17175] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 493.715673][T17175] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.769257][T17175] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 493.776407][T17175] Node 0 DMA32 free:1113932kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19000kB inactive_anon:0kB active_file:12848kB inactive_file:159792kB unevictable:1536kB writepending:488kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:141928kB local_pcp:41848kB free_cma:0kB [ 493.875090][T17175] lowmem_reserve[]: 0 0 0 0 0 [ 493.879897][T17175] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.915460][T17175] lowmem_reserve[]: 0 0 0 0 0 [ 493.921233][T17175] Node 1 Normal free:3880192kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22936kB local_pcp:13188kB free_cma:0kB [ 493.954836][T17204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3084'. [ 493.989592][T16827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.000747][T17175] lowmem_reserve[]: 0 0 0 0 0 [ 494.005527][T17175] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 494.008540][T17204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3084'. [ 494.066543][T17175] Node 0 DMA32: 2872*4kB (UME) 2056*8kB (UME) 874*16kB (UME) 887*32kB (UME) 374*64kB (UME) 304*128kB (UM) 167*256kB (UME) 101*512kB (UME) 70*1024kB (UM) 6*2048kB (U) 203*4096kB (UM) = 1143072kB [ 494.088270][T17209] x_tables: duplicate underflow at hook 2 [ 494.097941][T17209] netlink: 'syz.4.3084': attribute type 2 has an invalid length. [ 494.098762][T17175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 494.150166][T16827] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.180872][T17175] Node 1 Normal: 212*4kB (UE) 60*8kB (UME) 43*16kB (UME) 45*32kB (UME) 20*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3880192kB [ 494.210048][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.217253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.265998][T17175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.269150][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.282807][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.291943][T17214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3087'. [ 494.301217][T17175] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 494.315040][T17175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.326489][T17175] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 494.336398][T17175] 44580 total pagecache pages [ 494.341295][T17175] 0 pages in swap cache [ 494.345469][T17175] Free swap = 124996kB [ 494.466107][T17175] Total swap = 124996kB [ 494.481322][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'. [ 494.505810][T17175] 2097051 pages RAM [ 494.509674][T17175] 0 pages HighMem/MovableOnly [ 494.531177][T17175] 424119 pages reserved [ 494.535387][T17175] 0 pages cma reserved [ 494.619395][T17218] syzkaller0: entered promiscuous mode [ 494.628056][T17218] syzkaller0: entered allmulticast mode [ 494.762856][T17235] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3092'. [ 494.789141][T17237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.798846][T17235] block nbd0: not configured, cannot reconfigure [ 494.810074][T17235] openvswitch: netlink: Unknown nsh attribute 0 [ 494.819229][T17237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.843679][T17235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.049806][T17243] netlink: 'syz.4.3096': attribute type 21 has an invalid length. [ 495.090447][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.149125][T17256] netlink: 'syz.2.3098': attribute type 6 has an invalid length. [ 495.160446][T17257] netlink: 'syz.2.3098': attribute type 6 has an invalid length. [ 495.213283][T16827] veth0_vlan: entered promiscuous mode [ 495.226308][T16827] veth1_vlan: entered promiscuous mode [ 495.360151][T16827] veth0_macvtap: entered promiscuous mode [ 495.386611][T16827] veth1_macvtap: entered promiscuous mode [ 495.452379][T16827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.495395][ T1141] IPVS: stop unused estimator thread 0... [ 495.505315][T16827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.537813][ T1337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.561616][ T1337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.616621][ T1337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.629732][ T1337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.761234][T17278] bond2 (unregistering): Released all slaves [ 495.968609][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.995378][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.090882][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.109099][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.310559][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3114'. [ 497.057514][T17339] netlink: 'syz.5.3124': attribute type 6 has an invalid length. [ 497.306239][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 497.323594][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 497.332483][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.350385][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 497.366539][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 497.399764][T17355] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 497.428107][T17357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.584371][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 497.603605][T17350] vxcan1 speed is unknown, defaulting to 1000 [ 497.606035][T17368] netlink: 'syz.5.3132': attribute type 12 has an invalid length. [ 497.619690][T17367] pimreg3: entered allmulticast mode [ 497.717940][ T1337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.742793][ T1337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.808712][T17374] syz_tun: entered allmulticast mode [ 497.966169][T17378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.987378][ T1337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.011564][ T1337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.048934][T17382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.095236][T17389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.104613][T17350] lo speed is unknown, defaulting to 1000 [ 498.206227][ T1337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.217785][ T1337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.236097][T17395] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3140'. [ 498.263715][T17384] syzkaller0: entered promiscuous mode [ 498.269317][T17384] syzkaller0: entered allmulticast mode [ 498.350301][ T1337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.369682][ T1337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.441363][ T5837] Bluetooth: hci0: command 0x0405 tx timeout [ 498.604496][ T30] audit: type=1800 audit(1763052221.963:11): pid=17407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3143" name="memory.events" dev="tmpfs" ino=462 res=0 errno=0 [ 498.706594][T17406] syzkaller0: entered promiscuous mode [ 498.714568][T17406] syzkaller0: entered allmulticast mode [ 498.718595][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3145'. [ 498.815971][T17414] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 498.846928][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 499.393764][ T5830] Bluetooth: hci3: command tx timeout [ 500.146464][ T1337] bridge_slave_1: left allmulticast mode [ 500.165481][ T1337] bridge_slave_1: left promiscuous mode [ 500.191798][ T1337] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.274248][ T1337] bridge_slave_0: left allmulticast mode [ 500.280171][ T1337] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.375408][ T1337] bond_slave_0: left promiscuous mode [ 500.391560][ T1337] bond_slave_1: left promiscuous mode [ 500.494019][T17464] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3159'. [ 500.512691][T17464] sctp: [Deprecated]: syz.5.3159 (pid 17464) Use of int in maxseg socket option. [ 500.512691][T17464] Use struct sctp_assoc_value instead [ 500.536793][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 500.569821][ T1337] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 500.585874][ T1337] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 500.594452][ T1337] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 56:ce:62:61:b5:ab - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 500.639105][ T1337] bond10 (unregistering): (slave ip6gretap2): Releasing active interface [ 500.897039][ T1337] dvmrp6 (unregistering): left allmulticast mode [ 500.933403][ T1337] geneve0 (unregistering): left allmulticast mode [ 500.942184][ T1337] team0: Port device geneve0 removed [ 501.381362][ T1337] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 501.394992][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.396635][ T1337] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 501.405565][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.429688][ T1337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.441941][ T1337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.453445][ T1337] bond0 (unregistering): Released all slaves [ 501.472448][ T1337] bond1 (unregistering): Released all slaves [ 501.473541][ T5830] Bluetooth: hci3: command tx timeout [ 501.559161][ T1337] bond2 (unregistering): Released all slaves [ 501.640965][ T1337] bond3 (unregistering): Released all slaves [ 501.655517][ T1337] bond4 (unregistering): Released all slaves [ 501.738215][ T1337] bond5 (unregistering): Released all slaves [ 501.752681][ T1337] bond6 (unregistering): Released all slaves [ 501.846349][ T1337] bond7 (unregistering): (slave veth7): Releasing backup interface [ 501.856451][ T1337] bond7 (unregistering): Released all slaves [ 501.870257][ T1337] bond8 (unregistering): Released all slaves [ 501.960774][ T1337] bond9 (unregistering): (slave veth9): Releasing active interface [ 501.971411][ T1337] bond9 (unregistering): (slave veth11): Releasing active interface [ 501.981694][ T1337] bond9 (unregistering): (slave veth13): Releasing active interface [ 501.992056][ T1337] bond9 (unregistering): Released all slaves [ 502.006199][ T1337] bond10 (unregistering): Released all slaves [ 502.020074][ T1337] bond11 (unregistering): Released all slaves [ 502.114796][ T1337] bond12 (unregistering): (slave veth17): Releasing active interface [ 502.124553][ T1337] bond12 (unregistering): Released all slaves [ 502.138393][ T1337] bond13 (unregistering): Released all slaves [ 502.157232][T17442] veth0: entered promiscuous mode [ 502.163993][T17451] veth0: left promiscuous mode [ 502.448691][T17483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3164'. [ 502.473677][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 502.534643][T17479] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 502.586052][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3164'. [ 502.588855][T17350] chnl_net:caif_netlink_parms(): no params data found [ 502.633500][T17496] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 502.712355][T17483] netlink: 'syz.5.3164': attribute type 23 has an invalid length. [ 502.760301][T17499] netlink: 'syz.2.3167': attribute type 1 has an invalid length. [ 502.815145][T17499] syzkaller0: entered promiscuous mode [ 502.850676][T17499] syzkaller0: entered allmulticast mode [ 502.942666][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.962387][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.962508][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3170'. [ 502.969696][T17350] bridge_slave_0: entered allmulticast mode [ 502.990101][T17350] bridge_slave_0: entered promiscuous mode [ 503.056158][T17519] batadv1: entered allmulticast mode [ 503.067608][T17519] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 503.085758][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.107444][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.138222][T17350] bridge_slave_1: entered allmulticast mode [ 503.150060][T17350] bridge_slave_1: entered promiscuous mode [ 503.228888][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3173'. [ 503.243392][T17526] netlink: 'syz.2.3173': attribute type 7 has an invalid length. [ 503.295260][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.329061][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.335933][T17526] netlink: 'syz.2.3173': attribute type 8 has an invalid length. [ 503.375785][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'. [ 503.530141][T17350] team0: Port device team_slave_0 added [ 503.557612][ T5830] Bluetooth: hci3: command tx timeout [ 503.574596][T17542] vlan0: entered promiscuous mode [ 503.579977][T17542] vlan0: entered allmulticast mode [ 503.586319][T17542] hsr_slave_1: entered allmulticast mode [ 503.622495][T17350] team0: Port device team_slave_1 added [ 503.782350][T17545] vxcan1 speed is unknown, defaulting to 1000 [ 503.901675][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.922448][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.965430][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.018370][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.031301][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.073901][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.085569][T17545] lo speed is unknown, defaulting to 1000 [ 504.114508][ T1337] tipc: Left network mode [ 504.413191][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3187'. [ 504.422857][T17583] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3188'. [ 504.430716][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 504.488255][T17350] hsr_slave_0: entered promiscuous mode [ 504.505388][T17350] hsr_slave_1: entered promiscuous mode [ 504.524997][T17350] debugfs: 'hsr0' already exists in 'hsr' [ 504.544353][T17350] Cannot create hsr debugfs directory [ 504.957801][T17605] netlink: 'syz.5.3193': attribute type 1 has an invalid length. [ 505.073199][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 505.181879][T10406] IPVS: starting estimator thread 0... [ 505.188763][T17611] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.285468][T17617] IPVS: using max 26 ests per chain, 62400 per kthread [ 505.632860][ T5830] Bluetooth: hci3: command tx timeout [ 506.578076][T17631] geneve2: entered promiscuous mode [ 506.588894][T17631] geneve2: entered allmulticast mode [ 506.684608][ T6795] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 506.701734][ T6795] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 506.779023][ T6795] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 506.800793][ T6795] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 507.029932][T17631] syzkaller1: entered promiscuous mode [ 507.036868][T17631] syzkaller1: entered allmulticast mode [ 507.743431][T17652] netlink: 'syz.3.3205': attribute type 1 has an invalid length. [ 507.760715][T17652] __nla_validate_parse: 1 callbacks suppressed [ 507.760733][T17652] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3205'. [ 507.980622][ T1337] hsr_slave_0: left promiscuous mode [ 507.990288][ T1337] hsr_slave_1: left promiscuous mode [ 508.006850][ T1337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.015918][ T1337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.038123][ T1337] veth1_macvtap: left promiscuous mode [ 508.060954][ T1337] veth0_macvtap: left promiscuous mode [ 508.069942][ T1337] º: left promiscuous mode [ 508.079230][ T1337] veth0_vlan: left promiscuous mode [ 508.249128][ T1337] pim6reg527 (unregistering): left allmulticast mode [ 508.595629][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 508.640239][ T1337] team_slave_1 (unregistering): left allmulticast mode [ 508.648002][ T1337] team0 (unregistering): Port device team_slave_1 removed [ 508.683024][ T1337] team_slave_0 (unregistering): left allmulticast mode [ 508.690859][ T1337] team0 (unregistering): Port device team_slave_0 removed [ 509.033585][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'. [ 509.045720][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'. [ 509.207056][T17686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.326111][T17677] team0 (unregistering): Port device team_slave_0 removed [ 509.342254][T17677] team0 (unregistering): Port device team_slave_1 removed [ 509.655582][T17350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.743142][T17350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.874825][T17712] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 509.884742][T17350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.906643][T17350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.958585][T17721] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 510.055722][ T1337] IPVS: stop unused estimator thread 0... [ 510.116757][T17730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3224'. [ 510.275434][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.330089][T17747] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3228'. [ 510.340402][T17749] netlink: 'syz.5.3229': attribute type 8 has an invalid length. [ 510.373162][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.398861][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.406078][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.428355][T17754] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3231'. [ 510.472256][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.479497][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.490740][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3231'. [ 510.511106][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3231'. [ 510.771182][T17776] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3236'. [ 511.128090][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.140420][T17798] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3243'. [ 511.152453][T17798] netlink: 'syz.3.3243': attribute type 10 has an invalid length. [ 511.237980][T17798] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.286923][T17798] bond0: (slave team0): Enslaving as an active interface with an up link [ 511.519367][T17819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 511.695725][T17830] netlink: 'syz.2.3251': attribute type 8 has an invalid length. [ 511.889298][T17350] veth0_vlan: entered promiscuous mode [ 511.919592][T17350] veth1_vlan: entered promiscuous mode [ 511.995924][T17350] veth0_macvtap: entered promiscuous mode [ 512.024886][T17350] veth1_macvtap: entered promiscuous mode [ 512.075450][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.114920][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.142822][ T6795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.156738][T17851] netlink: 'syz.1.3257': attribute type 8 has an invalid length. [ 512.172647][ T6795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.181471][ T6795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.190194][ T6795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.205532][T17855] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 512.205738][T17853] tipc: Started in network mode [ 512.223283][T17853] tipc: Node identity 423c3fc163ee, cluster identity 4711 [ 512.230786][T17853] tipc: Enabled bearer , priority 0 [ 512.262303][T17859] syzkaller0: entered promiscuous mode [ 512.268227][T17859] syzkaller0: entered allmulticast mode [ 512.346749][T17853] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 512.367306][T17863] netlink: 'syz.1.3261': attribute type 20 has an invalid length. [ 512.375426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.397036][T17853] tipc: Resetting bearer [ 512.413449][T17865] netlink: 'syz.1.3261': attribute type 4 has an invalid length. [ 512.480358][T14927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.507596][T14927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.520668][T17852] tipc: Resetting bearer [ 512.553698][T17852] tipc: Disabling bearer [ 512.577409][T17868] veth1_to_bond: entered allmulticast mode [ 512.627657][T17868] bond0: (slave bond_slave_1): Releasing backup interface [ 512.677306][T17868] veth1_to_bond (unregistering): left allmulticast mode [ 512.707292][ T6795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.715536][ T6795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.817148][T17873] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 512.847098][T17873] bond0 (unregistering): Released all slaves [ 512.957707][T17886] __nla_validate_parse: 5 callbacks suppressed [ 512.957726][T17886] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3118'. [ 513.179197][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3272'. [ 513.647670][T17927] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3280'. [ 513.669128][T17929] pim6reg: entered allmulticast mode [ 513.799904][T17931] netlink: 'syz.2.3283': attribute type 11 has an invalid length. [ 513.812966][T17934] netlink: 'syz.3.3285': attribute type 5 has an invalid length. [ 513.824296][T17931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3283'. [ 513.999924][T17949] bridge2: entered promiscuous mode [ 514.014451][T17949] bridge2: entered allmulticast mode [ 514.488266][T17979] netlink: 'syz.1.3298': attribute type 10 has an invalid length. [ 514.671458][T17986] Cannot find add_set index 0 as target [ 514.782784][T17988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 514.993417][T17991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3301'. [ 515.071598][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3302'. [ 516.005881][T17981] ip6gre0: Master is either lo or non-ether device [ 516.173756][T18000] sctp: Trying to GSO but underlying device doesn't support it. [ 516.283423][T18001] netlink: 'syz.5.3307': attribute type 83 has an invalid length. [ 516.461671][T18020] nbd0: detected capacity change from 0 to 127 [ 516.469955][ T5837] block nbd0: Receive control failed (result -32) [ 516.475748][T16386] block nbd0: Send control failed (result -32) [ 516.496164][T16386] block nbd0: Request send failed, requeueing [ 516.531900][ T56] block nbd0: Dead connection, failed to find a fallback [ 516.539734][ T56] block nbd0: shutting down sockets [ 516.545670][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.554230][T18026] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3311'. [ 516.557549][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 516.576316][T16386] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.602334][T16386] Buffer I/O error on dev nbd0, logical block 1, async page read [ 516.602837][T18026] tipc: Started in network mode [ 516.617740][T16386] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.633341][T18026] tipc: Node identity ac14140f, cluster identity 4711 [ 516.642665][T18026] tipc: Enabling of bearer rejected, failed to enable media [ 516.644234][T16386] Buffer I/O error on dev nbd0, logical block 2, async page read [ 516.685368][T16386] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.713445][T16386] Buffer I/O error on dev nbd0, logical block 3, async page read [ 516.724834][T16386] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.737411][T16386] Buffer I/O error on dev nbd0, logical block 0, async page read [ 516.751361][T16386] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.781003][T16386] Buffer I/O error on dev nbd0, logical block 1, async page read [ 516.788959][T16386] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.820726][T16386] Buffer I/O error on dev nbd0, logical block 2, async page read [ 516.831715][T16386] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.851320][T16386] Buffer I/O error on dev nbd0, logical block 3, async page read [ 516.870809][T16386] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.880043][T16386] Buffer I/O error on dev nbd0, logical block 0, async page read [ 516.898910][T16386] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.940779][T16386] Buffer I/O error on dev nbd0, logical block 1, async page read [ 516.952801][T16386] ldm_validate_partition_table(): Disk read failed. [ 516.982049][T16386] Dev nbd0: unable to read RDB block 0 [ 516.996610][T16386] nbd0: unable to read partition table [ 517.073937][T16386] ldm_validate_partition_table(): Disk read failed. [ 517.095214][T18045] netlink: 'syz.4.3315': attribute type 3 has an invalid length. [ 517.103238][T16386] Dev nbd0: unable to read RDB block 0 [ 517.115421][T16386] nbd0: unable to read partition table [ 517.349044][T18052] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.380219][T18052] bond1: (slave lo): Enslaving as a backup interface with an up link [ 517.432294][T18052] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 517.502178][T18064] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3321'. [ 517.526579][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 517.624683][T18065] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 517.763497][T18074] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 517.771322][T10398] IPVS: starting estimator thread 0... [ 517.786023][T18070] netlink: 'syz.3.3323': attribute type 3 has an invalid length. [ 517.798441][T18074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.825259][T18070] netlink: 'syz.3.3323': attribute type 3 has an invalid length. [ 517.848881][T18081] netlink: 'syz.5.3327': attribute type 1 has an invalid length. [ 517.856132][T18070] netlink: 'syz.3.3323': attribute type 3 has an invalid length. [ 517.867159][T18070] netlink: 'syz.3.3323': attribute type 3 has an invalid length. [ 517.900614][T18076] IPVS: using max 26 ests per chain, 62400 per kthread [ 517.906725][T18081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.983844][T18094] __nla_validate_parse: 3 callbacks suppressed [ 517.983940][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3328'. [ 518.009869][T18086] bond0: (slave veth3): Enslaving as an active interface with a down link [ 518.073345][T18082] bond0: (slave veth5): Enslaving as an active interface with a down link [ 518.087916][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3323'. [ 518.145354][T18096] svc: failed to register nfsdv3 RPC service (errno 111). [ 518.222358][T18096] svc: failed to register nfsaclv3 RPC service (errno 111). [ 518.280285][T18111] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3333'. [ 518.294463][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 518.309112][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3333'. [ 518.391851][T18119] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3333'. [ 518.682558][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3337'. [ 518.710814][T18130] netlink: 30 bytes leftover after parsing attributes in process `syz.5.3337'. [ 518.712757][T18132] netlink: 30 bytes leftover after parsing attributes in process `syz.5.3337'. [ 518.731029][T18131] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3336'. [ 519.167670][T18143] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 519.279148][T18148] syzkaller0: entered promiscuous mode [ 519.285018][T18148] syzkaller0: entered allmulticast mode [ 520.449836][T18214] tap0: tun_chr_ioctl cmd 1074025676 [ 520.459022][T18214] tap0: owner set to 0 [ 520.470877][T18214] tap0: tun_chr_ioctl cmd 2180551740 [ 520.491078][T18216] tap0: tun_chr_ioctl cmd 1074025676 [ 520.511167][T18216] tap0: owner set to 0 [ 520.515561][T18215] tap0: tun_chr_ioctl cmd 1074025673 [ 520.529162][T18213] pim6reg1: entered promiscuous mode [ 520.540477][T18213] pim6reg1: entered allmulticast mode [ 520.685493][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.695460][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.704640][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.713014][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.721802][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.855298][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 521.403241][T18220] lo speed is unknown, defaulting to 1000 [ 521.646352][T18268] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 521.655710][T18264] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 522.109963][T18286] validate_nla: 50 callbacks suppressed [ 522.109985][T18286] netlink: 'syz.5.3384': attribute type 6 has an invalid length. [ 522.301784][T18286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.362466][T18286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.439900][T18301] bridge_slave_0: default FDB implementation only supports local addresses [ 522.512619][ T56] block nbd1: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 180 seconds [ 522.526211][ T56] block nbd1: Possible stuck request ffff888024b25240: control (read@1024,1024B). Runtime 180 seconds [ 522.537815][ T56] block nbd1: Possible stuck request ffff888024b25400: control (read@2048,1024B). Runtime 180 seconds [ 522.549943][ T56] block nbd1: Possible stuck request ffff888024b255c0: control (read@3072,1024B). Runtime 180 seconds [ 522.751725][ T5837] Bluetooth: hci5: command tx timeout [ 522.766765][T18320] syz_tun: entered allmulticast mode [ 522.927202][T18220] chnl_net:caif_netlink_parms(): no params data found [ 522.998156][T18336] __nla_validate_parse: 8 callbacks suppressed [ 522.998176][T18336] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3393'. [ 523.012891][T18339] netlink: 'syz.2.3394': attribute type 4 has an invalid length. [ 523.023827][T18337] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 523.088639][T18339] netlink: 'syz.2.3394': attribute type 4 has an invalid length. [ 523.143537][T18346] vxcan1: entered promiscuous mode [ 523.156177][T18346] vxcan1: entered allmulticast mode [ 523.267626][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3400'. [ 523.289149][T18220] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.307646][T18220] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.310074][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3400'. [ 523.325248][T18220] bridge_slave_0: entered allmulticast mode [ 523.336579][T18220] bridge_slave_0: entered promiscuous mode [ 523.349846][T18220] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.362395][T18220] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.369717][T18220] bridge_slave_1: entered allmulticast mode [ 523.378624][T18220] bridge_slave_1: entered promiscuous mode [ 523.444657][T18220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.466504][T18220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.513143][T18364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3403'. [ 523.571097][T18220] team0: Port device team_slave_0 added [ 523.587839][T18220] team0: Port device team_slave_1 added [ 523.669525][T18220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.682840][T18220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.715445][T18220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.729310][T18220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.737631][T18220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.764746][T18220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.785471][T18376] x_tables: duplicate underflow at hook 1 [ 523.919041][T18379] netlink: 'syz.5.3408': attribute type 10 has an invalid length. [ 523.941685][T18220] hsr_slave_0: entered promiscuous mode [ 523.948719][T18220] hsr_slave_1: entered promiscuous mode [ 523.952688][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 524.001667][T18220] debugfs: 'hsr0' already exists in 'hsr' [ 524.007449][T18220] Cannot create hsr debugfs directory [ 524.014579][T18379] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.022380][T18379] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.046665][T18379] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.053972][T18379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.055603][T18391] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 524.061553][T18379] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.076361][T18379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.088137][T18379] bridge0: entered promiscuous mode [ 524.094667][T18379] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 524.160833][T18393] : entered promiscuous mode [ 524.323211][T18401] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.623780][T18220] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.643149][T18426] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3419'. [ 524.645420][T18423] Bluetooth: MGMT ver 1.23 [ 524.734311][T18220] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.761513][T18429] netlink: 'syz.3.3422': attribute type 3 has an invalid length. [ 524.769413][T18429] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3422'. [ 524.825282][T18220] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.837147][ T5837] Bluetooth: hci5: command tx timeout [ 524.931400][T18220] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.173259][T18448] xt_hashlimit: size too large, truncated to 1048576 [ 525.223691][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3429'. [ 525.233297][T18450] Unsupported xt match [ 525.233314][T18450] unable to load match [ 525.242059][T18220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 525.258845][T18220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.300472][T18220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 525.333760][T18220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 525.393918][T18421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 525.483921][T18220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.540144][T18220] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.568692][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.575928][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.597879][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.605167][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.717921][T18475] netlink: 'syz.3.3434': attribute type 10 has an invalid length. [ 525.772573][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.800980][T18475] bridge_slave_1: left allmulticast mode [ 525.811387][T18475] bridge_slave_1: left promiscuous mode [ 525.829891][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.864609][T18475] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 526.305706][T18507] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3442'. [ 526.401954][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 526.403145][T18220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.440003][T18510] netlink: 'syz.2.3441': attribute type 1 has an invalid length. [ 526.449261][T18510] netlink: 'syz.2.3441': attribute type 2 has an invalid length. [ 526.551059][T18220] veth0_vlan: entered promiscuous mode [ 526.609210][T18220] veth1_vlan: entered promiscuous mode [ 526.671724][T18220] veth0_macvtap: entered promiscuous mode [ 526.674058][ T5837] Bluetooth: hci0: command 0x0405 tx timeout [ 526.693349][T18220] veth1_macvtap: entered promiscuous mode [ 526.730025][T18220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.752852][T18220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.776613][T14927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.803824][T14927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.819244][T14927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.899570][T14927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.911544][ T5837] Bluetooth: hci5: command tx timeout [ 526.982665][ T6795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.016676][ T6795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.106464][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.136969][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.441002][T18540] netlink: 'syz.2.3452': attribute type 30 has an invalid length. [ 527.544001][T18540] bond2: option arp_missed_max: invalid value (0) [ 527.551115][T18540] bond2: option arp_missed_max: allowed values 1 - 255 [ 527.643169][T18540] bond2 (unregistering): Released all slaves [ 528.031295][ T5891] IPVS: starting estimator thread 0... [ 528.039438][T18573] tipc: Enabled bearer , priority 0 [ 528.110293][T18582] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 528.130693][T18576] IPVS: using max 31 ests per chain, 74400 per kthread [ 528.213098][T18573] syzkaller0: entered promiscuous mode [ 528.227941][T18573] syzkaller0: entered allmulticast mode [ 528.288179][T18573] tipc: Resetting bearer [ 528.394127][T18571] tipc: Resetting bearer [ 528.990809][ T5830] Bluetooth: hci5: command tx timeout [ 529.076962][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 529.781532][T18571] tipc: Disabling bearer [ 529.822155][ T24] tipc: Node number set to 567427009 [ 530.062822][T18627] __nla_validate_parse: 6 callbacks suppressed [ 530.062844][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3473'. [ 530.091989][T18623] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3471'. [ 530.103413][T18623] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3471'. [ 530.147424][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'. [ 530.190340][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3474'. [ 530.216252][T18627] sctp: [Deprecated]: syz.3.3473 (pid 18627) Use of int in max_burst socket option. [ 530.216252][T18627] Use struct sctp_assoc_value instead [ 530.285808][T18636] syzkaller0: entered promiscuous mode [ 530.298036][T18636] syzkaller0: entered allmulticast mode [ 530.346897][T18636] tipc: Started in network mode [ 530.370984][T18636] tipc: Node identity a6e86062fd0d, cluster identity 4711 [ 530.379546][T18636] tipc: Enabled bearer , priority 0 [ 530.413702][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'. [ 530.441968][T18635] tipc: Resetting bearer [ 530.543072][T18635] tipc: Disabling bearer [ 530.705494][T18663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3483'. [ 530.782970][T18671] xt_socket: unknown flags 0x50 [ 530.865453][T18674] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 530.878053][T18674] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3486'. [ 531.048080][T18686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3488'. [ 531.118158][T18690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3488'. [ 531.319474][T18700] netlink: 'syz.5.3492': attribute type 1 has an invalid length. [ 531.329901][T18700] netlink: 'syz.5.3492': attribute type 2 has an invalid length. [ 531.340231][T18700] netlink: 'syz.5.3492': attribute type 1 has an invalid length. [ 531.679080][T18715] syzkaller0: entered promiscuous mode [ 531.710688][T18715] syzkaller0: entered allmulticast mode [ 531.743341][T18722] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 531.982423][T18742] netlink: 'syz.4.3503': attribute type 1 has an invalid length. [ 532.019684][T18742] netlink: 'syz.4.3503': attribute type 1 has an invalid length. [ 532.352900][T18755] 0: reclassify loop, rule prio 0, protocol 800 [ 532.682212][T18786] bridge_slave_1: left allmulticast mode [ 532.693341][T18786] bridge_slave_1: left promiscuous mode [ 532.699184][T18786] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.716779][T18786] bridge_slave_0: left allmulticast mode [ 532.737923][T18786] bridge_slave_0: left promiscuous mode [ 532.747232][T18786] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.162225][T18816] ipt_REJECT: TCP_RESET invalid for non-tcp [ 533.273904][T18825] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 533.274007][T18822] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 533.502120][T18840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.832144][T18864] netlink: 'syz.4.3540': attribute type 21 has an invalid length. [ 533.952958][T18874] netlink: 'syz.1.3543': attribute type 8 has an invalid length. [ 534.013131][T18880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.020457][T18880] IPv6: NLM_F_CREATE should be set when creating new route [ 534.509904][T18905] tipc: Enabling of bearer rejected, media not registered [ 534.883747][T18929] netlink: 'syz.4.3561': attribute type 10 has an invalid length. [ 535.092202][T18947] netlink: 'syz.1.3565': attribute type 11 has an invalid length. [ 535.288346][T18955] __nla_validate_parse: 21 callbacks suppressed [ 535.288364][T18955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3568'. [ 535.291055][T18951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3567'. [ 535.399064][T18911] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 535.817673][T18985] vxcan1: tx address claim with dest, not broadcast [ 535.932563][T18987] syz.1.3582 (18987) used greatest stack depth: 15608 bytes left [ 536.265124][T19010] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.278165][T19010] netlink: 'syz.1.3587': attribute type 1 has an invalid length. [ 536.340137][T19012] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 536.660689][T19015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3589'. [ 536.670362][T19021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3592'. [ 536.679504][ T5837] Bluetooth: hci0: command 0x0405 tx timeout [ 536.795118][T19026] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 536.916859][T19037] netlink: zone id is out of range [ 536.939295][T19037] netlink: set zone limit has 8 unknown bytes [ 537.361127][T19058] netlink: 'syz.4.3605': attribute type 6 has an invalid length. [ 537.704802][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3611'. [ 537.759599][T19086] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3612'. [ 537.837428][T19091] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 537.854605][T19054] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.862089][T19054] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.892057][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 538.020186][T19054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.295587][T19061] geneve2: entered promiscuous mode [ 538.312498][T19061] geneve2: entered allmulticast mode [ 538.403709][T19093] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 538.437242][T19093] bond2 (unregistering): Released all slaves [ 538.505770][ T37] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.528658][T19103] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3616'. [ 538.569048][ T37] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 538.596087][ T37] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.605514][ T37] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 538.615052][ T37] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.626711][ T37] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 538.635737][ T37] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.649103][ T37] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 538.695723][T19108] netlink: 'syz.2.3617': attribute type 4 has an invalid length. [ 538.706290][T19108] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3617'. [ 538.739654][T19110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3618'. [ 538.919646][T19119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.954353][T19119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.173742][T19146] syzkaller0: entered promiscuous mode [ 539.179403][T19146] syzkaller0: entered allmulticast mode [ 539.255493][T19151] netlink: 'syz.2.3628': attribute type 9 has an invalid length. [ 539.328190][T19156] netlink: 'syz.1.3631': attribute type 10 has an invalid length. [ 539.340031][T19157] netlink: 'syz.1.3631': attribute type 10 has an invalid length. [ 539.352877][T19156] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.362700][T19156] bridge_slave_1: left allmulticast mode [ 539.368412][T19156] bridge_slave_1: left promiscuous mode [ 539.379341][T19156] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.413490][T19156] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 539.444947][T19154] wg2: entered promiscuous mode [ 539.449886][T19154] wg2: entered allmulticast mode [ 539.637294][T19168] dvmrp0: entered allmulticast mode [ 539.825066][T19182] netlink: 'syz.1.3637': attribute type 3 has an invalid length. [ 539.991905][T19180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.247722][T19210] veth1_to_bond: entered allmulticast mode [ 540.321244][T19210] bond0: (slave bond_slave_1): Releasing backup interface [ 540.368807][T19210] veth1_to_bond (unregistering): left allmulticast mode [ 540.385481][T19216] __nla_validate_parse: 3 callbacks suppressed [ 540.385499][T19216] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3647'. [ 540.498656][T19224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3649'. [ 540.627643][T19235] ipt_REJECT: TCP_RESET invalid for non-tcp [ 540.905570][T19252] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3660'. [ 540.960057][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3662'. [ 540.977828][T19257] xfrm1: entered promiscuous mode [ 540.983538][T19257] xfrm1: entered allmulticast mode [ 541.682163][T19278] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3664'. [ 541.778194][T19281] netlink: 'syz.4.3667': attribute type 2 has an invalid length. [ 541.790973][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 542.227461][T19309] netlink: 'syz.1.3675': attribute type 2 has an invalid length. [ 542.240069][T19309] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3675'. [ 542.732398][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 542.761912][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3687'. [ 542.788413][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3687'. [ 543.532227][T19381] netlink: 'syz.4.3700': attribute type 83 has an invalid length. [ 543.891694][T19399] netlink: 'syz.5.3705': attribute type 5 has an invalid length. [ 544.596150][T19432] netlink: 'syz.1.3716': attribute type 1 has an invalid length. [ 544.635547][T19436] netlink: 'syz.5.3718': attribute type 75 has an invalid length. [ 544.671673][T19440] gretap1: entered promiscuous mode [ 544.685935][T19440] bond1: (slave gretap1): making interface the new active one [ 544.695873][T19440] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 544.723527][T19432] bond1: entered promiscuous mode [ 544.729298][T19432] macvlan2: entered promiscuous mode [ 544.735401][T19432] macvlan2: entered allmulticast mode [ 544.741930][T19432] bond1: entered allmulticast mode [ 544.747073][T19432] gretap1: entered allmulticast mode [ 544.754999][T19432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 544.764586][T19432] bond1: left promiscuous mode [ 544.819482][T19445] netlink: 'syz.5.3720': attribute type 13 has an invalid length. [ 544.899389][T19445] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 544.909849][T19445] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.922941][T19445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.182086][T19450] syzkaller0: entered promiscuous mode [ 545.188216][T19450] syzkaller0: entered allmulticast mode [ 545.822839][T19488] __nla_validate_parse: 11 callbacks suppressed [ 545.822858][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3731'. [ 545.824454][T19489] netlink: 'syz.1.3732': attribute type 10 has an invalid length. [ 545.857042][T19488] vlan3: entered promiscuous mode [ 545.870845][T19488] gretap0: entered promiscuous mode [ 545.885972][T19489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3732'. [ 545.918746][T19490] IPVS: set_ctl: invalid protocol: 51 172.20.20.44:20001 [ 545.959512][T19489] team0: Port device geneve0 added [ 546.098511][T19500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3739'. [ 546.182580][T19513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3741'. [ 546.253737][T19502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3737'. [ 546.299564][T19502] netlink: 'syz.3.3737': attribute type 7 has an invalid length. [ 546.321245][T19502] netlink: 'syz.3.3737': attribute type 8 has an invalid length. [ 546.340717][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3737'. [ 546.569654][T19531] Cannot find add_set index 0 as target [ 547.228211][T19567] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3755'. [ 547.244449][T19578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.402114][T19583] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3759'. [ 547.418628][T19583] batadv1: entered promiscuous mode [ 547.440832][T19583] batadv1: entered allmulticast mode [ 547.695769][T19602] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3764'. [ 547.906165][T19610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3767'. [ 548.262822][T14927] bond3 (unregistering): (slave bridge2): Releasing active interface [ 548.361416][T14927] bond5 (unregistering): (slave bridge0): Releasing active interface [ 548.620313][T14927] bond1 (unregistering): Released all slaves [ 548.707501][T14927] bond2 (unregistering): Released all slaves [ 548.722085][T14927] bond3 (unregistering): Released all slaves [ 548.736911][T14927] bond4 (unregistering): Released all slaves [ 548.751902][T14927] bond5 (unregistering): Released all slaves [ 548.770418][T14927] bond6 (unregistering): Released all slaves [ 548.790804][T14927] bond7 (unregistering): Released all slaves [ 548.805299][T14927] bond8 (unregistering): Released all slaves [ 548.825824][T14927] bond0 (unregistering): Released all slaves [ 548.840361][T14927] bond9 (unregistering): Released all slaves [ 548.862774][T14927] bond10 (unregistering): Released all slaves [ 548.884163][T19617] tc_dump_action: action bad kind [ 549.089504][T19633] [ 549.091889][T19633] ====================================================== [ 549.098930][T19633] WARNING: possible circular locking dependency detected [ 549.105970][T19633] syzkaller #0 Not tainted [ 549.110387][T19633] ------------------------------------------------------ [ 549.117399][T19633] syz.3.3771/19633 is trying to acquire lock: [ 549.123463][T19633] ffffffff8f4263b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 549.132962][T19633] [ 549.132962][T19633] but task is already holding lock: [ 549.140329][T19633] ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 549.149917][T19633] [ 549.149917][T19633] which lock already depends on the new lock. [ 549.149917][T19633] [ 549.160323][T19633] [ 549.160323][T19633] the existing dependency chain (in reverse order) is: [ 549.169339][T19633] [ 549.169339][T19633] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 549.177252][T19633] lock_acquire+0x120/0x360 [ 549.182285][T19633] _raw_spin_lock_bh+0x36/0x50 [ 549.187569][T19633] nr_rt_ioctl+0x390/0xd50 [ 549.192512][T19633] sock_do_ioctl+0xdc/0x300 [ 549.197546][T19633] sock_ioctl+0x576/0x790 [ 549.202402][T19633] __se_sys_ioctl+0xfc/0x170 [ 549.207518][T19633] do_syscall_64+0xfa/0xfa0 [ 549.212547][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.218963][T19633] [ 549.218963][T19633] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 549.226962][T19633] lock_acquire+0x120/0x360 [ 549.232005][T19633] _raw_spin_lock_bh+0x36/0x50 [ 549.237293][T19633] nr_rt_ioctl+0x193/0xd50 [ 549.242230][T19633] sock_do_ioctl+0xdc/0x300 [ 549.247256][T19633] sock_ioctl+0x576/0x790 [ 549.252109][T19633] __se_sys_ioctl+0xfc/0x170 [ 549.257225][T19633] do_syscall_64+0xfa/0xfa0 [ 549.262255][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.268670][T19633] [ 549.268670][T19633] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 549.276489][T19633] validate_chain+0xb9b/0x2140 [ 549.281776][T19633] __lock_acquire+0xab9/0xd20 [ 549.286977][T19633] lock_acquire+0x120/0x360 [ 549.292000][T19633] _raw_spin_lock_bh+0x36/0x50 [ 549.297290][T19633] nr_rt_device_down+0xa9/0x720 [ 549.302662][T19633] nr_device_event+0x137/0x150 [ 549.307969][T19633] notifier_call_chain+0x1b6/0x3e0 [ 549.313599][T19633] __dev_notify_flags+0x18d/0x2e0 [ 549.319150][T19633] netif_change_flags+0xe8/0x1a0 [ 549.324611][T19633] dev_change_flags+0x130/0x260 [ 549.329981][T19633] dev_ioctl+0x7b4/0x1150 [ 549.334840][T19633] sock_do_ioctl+0x22c/0x300 [ 549.339953][T19633] sock_ioctl+0x576/0x790 [ 549.344803][T19633] __se_sys_ioctl+0xfc/0x170 [ 549.349914][T19633] do_syscall_64+0xfa/0xfa0 [ 549.354947][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.361358][T19633] [ 549.361358][T19633] other info that might help us debug this: [ 549.361358][T19633] [ 549.371584][T19633] Chain exists of: [ 549.371584][T19633] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 549.371584][T19633] [ 549.385411][T19633] Possible unsafe locking scenario: [ 549.385411][T19633] [ 549.392857][T19633] CPU0 CPU1 [ 549.398218][T19633] ---- ---- [ 549.403575][T19633] lock(nr_neigh_list_lock); [ 549.408253][T19633] lock(&nr_node->node_lock); [ 549.415537][T19633] lock(nr_neigh_list_lock); [ 549.422730][T19633] lock(nr_node_list_lock); [ 549.427321][T19633] [ 549.427321][T19633] *** DEADLOCK *** [ 549.427321][T19633] [ 549.435484][T19633] 2 locks held by syz.3.3771/19633: [ 549.440679][T19633] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 549.449490][T19633] #1: ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 549.459505][T19633] [ 549.459505][T19633] stack backtrace: [ 549.465408][T19633] CPU: 0 UID: 0 PID: 19633 Comm: syz.3.3771 Not tainted syzkaller #0 PREEMPT(full) [ 549.465429][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.465441][T19633] Call Trace: [ 549.465447][T19633] [ 549.465455][T19633] dump_stack_lvl+0x189/0x250 [ 549.465480][T19633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.465502][T19633] ? __pfx__printk+0x10/0x10 [ 549.465525][T19633] ? print_lock_name+0xde/0x100 [ 549.465542][T19633] print_circular_bug+0x2ee/0x310 [ 549.465564][T19633] check_noncircular+0x134/0x160 [ 549.465587][T19633] validate_chain+0xb9b/0x2140 [ 549.465608][T19633] ? rt6_disable_ip+0x6b3/0x720 [ 549.465636][T19633] ? __lock_acquire+0xab9/0xd20 [ 549.465651][T19633] __lock_acquire+0xab9/0xd20 [ 549.465669][T19633] ? nr_rt_device_down+0xa9/0x720 [ 549.465687][T19633] lock_acquire+0x120/0x360 [ 549.465701][T19633] ? nr_rt_device_down+0xa9/0x720 [ 549.465725][T19633] ? nr_rt_device_down+0xa9/0x720 [ 549.465743][T19633] _raw_spin_lock_bh+0x36/0x50 [ 549.465763][T19633] ? nr_rt_device_down+0xa9/0x720 [ 549.465780][T19633] nr_rt_device_down+0xa9/0x720 [ 549.465799][T19633] ? do_raw_spin_unlock+0x122/0x240 [ 549.465824][T19633] nr_device_event+0x137/0x150 [ 549.465841][T19633] notifier_call_chain+0x1b6/0x3e0 [ 549.465863][T19633] __dev_notify_flags+0x18d/0x2e0 [ 549.465880][T19633] ? __pfx___dev_notify_flags+0x10/0x10 [ 549.465895][T19633] ? __dev_change_flags+0x4cc/0x6d0 [ 549.465912][T19633] ? __pfx___dev_change_flags+0x10/0x10 [ 549.465929][T19633] ? full_name_hash+0x92/0xe0 [ 549.465949][T19633] netif_change_flags+0xe8/0x1a0 [ 549.465968][T19633] dev_change_flags+0x130/0x260 [ 549.465985][T19633] dev_ioctl+0x7b4/0x1150 [ 549.466010][T19633] sock_do_ioctl+0x22c/0x300 [ 549.466032][T19633] ? __pfx_sock_do_ioctl+0x10/0x10 [ 549.466060][T19633] sock_ioctl+0x576/0x790 [ 549.466080][T19633] ? __pfx_sock_ioctl+0x10/0x10 [ 549.466101][T19633] ? __fget_files+0x3a0/0x420 [ 549.466115][T19633] ? __fget_files+0x2a/0x420 [ 549.466130][T19633] ? bpf_lsm_file_ioctl+0x9/0x20 [ 549.466148][T19633] ? __pfx_sock_ioctl+0x10/0x10 [ 549.466171][T19633] __se_sys_ioctl+0xfc/0x170 [ 549.466193][T19633] do_syscall_64+0xfa/0xfa0 [ 549.466215][T19633] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.466237][T19633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.466253][T19633] ? clear_bhb_loop+0x60/0xb0 [ 549.466271][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.466286][T19633] RIP: 0033:0x7fa9e1d8f6c9 [ 549.466301][T19633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.466315][T19633] RSP: 002b:00007fa9e2ca2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.466332][T19633] RAX: ffffffffffffffda RBX: 00007fa9e1fe5fa0 RCX: 00007fa9e1d8f6c9 [ 549.466344][T19633] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 549.466354][T19633] RBP: 00007fa9e1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.466365][T19633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.466375][T19633] R13: 00007fa9e1fe6038 R14: 00007fa9e1fe5fa0 R15: 00007ffc3e94d4c8 [ 549.466394][T19633] [ 549.829616][T14927] : left promiscuous mode [ 549.862484][T14927] tipc: Left network mode [ 550.125304][T14927] hsr_slave_0: left promiscuous mode [ 550.174856][T14927] pimreg3 (unregistering): left allmulticast mode [ 550.512846][ T60] smc: removing ib device syz2 [ 550.632697][ T37] smc: removing ib device sz1 [ 550.638026][T10400] lo speed is unknown, defaulting to 1000 [ 550.643922][T10400] sz1: Port: 1 Link DOWN [ 552.600968][ T56] block nbd1: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 210 seconds [ 552.611871][ T56] block nbd1: Possible stuck request ffff888024b25240: control (read@1024,1024B). Runtime 210 seconds [ 552.622893][ T56] block nbd1: Possible stuck request ffff888024b25400: control (read@2048,1024B). Runtime 210 seconds [ 552.633918][ T56] block nbd1: Possible stuck request ffff888024b255c0: control (read@3072,1024B). Runtime 210 seconds [ 554.053655][ T5197] udevd[5197]: worker [13210] /devices/virtual/block/nbd1 timeout; kill it [ 554.063417][ T5197] udevd[5197]: seq 17526 '/devices/virtual/block/nbd1' killed