last executing test programs: 10.66344251s ago: executing program 0 (id=5835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x8, 0x0, 0x1}, 0x48) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}]}, 0x28}}, 0x20000084) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) 10.485836296s ago: executing program 0 (id=5838): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f00000004000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="bf869a5144059de23ea03d", @ANYRES64=0x0], 0x20) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) connect$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvfrom$inet(r2, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf258800000008000300", @ANYRES32=r12, @ANYBLOB="70681d80581f19054465a49649e72c628767fe67e8f79a81d170593adfe4f9da124f11a89d0eedae481285811199c4992cb69109c8d44fb2e413004cb1089cf8d101940aff50c886ab69640efaa0ea9ec5bf88e3dab5205aa6e46a4cdadf9700091367515c695a955f44b0bb1829347f8dd09d901df87b3647190920146f0a2bf8c0c006d2d2d3937267"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48800) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000001100)={&(0x7f0000001040), 0xc, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="108825bd7000fbdbdf2504000000000000002000000008000300f7c1e0d131a13f320da5f924c4b8ad97fa62df555a7bf5ef89ce78474231b480d022c34309141d8507cbcd1dd354390a9888bf56f1b8b570a6a8b095ba9a52efee5dc409f064103f57334d24d7b516def4f88a703d484a2d4b42b5b5769270b893e95090ff1d1532bdaa9296607b6e109c6453d2e6fb3a1a3998f4b3ed53498f9599ed9bd6eff17c254db436b0ae52504d12ba", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5b7c2aee}, 0x1c) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 10.345167598s ago: executing program 0 (id=5840): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) 2.515180657s ago: executing program 1 (id=5930): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000004}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x39}, 0x94) (rerun: 64) 2.294779069s ago: executing program 1 (id=5933): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000200)=0xfff, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x9, 0x8, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8000, 0x1, 0x4, 0x9}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000340)=@raw=[@ldst={0x3, 0x1, 0x6, 0xb, 0xa, 0xffffffffffffffe0, 0x10}, @cb_func={0x18, 0xc, 0x4, 0x0, 0x7}], &(0x7f0000000380)='GPL\x00', 0xebfb, 0x36, &(0x7f00000003c0)=""/54, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x400, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xf, 0xff61, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)=[{0x0, 0x3, 0x7, 0x7}, {0x1, 0x2, 0xb, 0x4}, {0x1, 0x5, 0xf, 0x2}, {0x1, 0x3, 0x10, 0x3}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x7f}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x32, '\x00', r4, @sk_msg, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xb, 0x9, 0x1}, 0x10, 0x0, r6, 0x0, &(0x7f0000000580)=[r2, r2]}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.198427477s ago: executing program 3 (id=5935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a3073c3548dc7813000c901a4cd000000000900020073797a32000000000c00058008000140000060061400000011000100"], 0x98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x97) r1 = socket$kcm(0x29, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @remote, @broadcast, @remote}}}}, 0x0) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r6) close(r5) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r5) 1.967601285s ago: executing program 3 (id=5937): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}, {&(0x7f0000000380)="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"}, {&(0x7f0000000040)="56be9de5139f5f4c0428ec4384e8eb2c87c4acd2128845a71edcd729393412fd19eaa97ebc4557b9d4fb4f4ea886066f495d4f47af226a78cb9cd4320cf43a077d3892cb42ffd8155b3df6da398ceeb95590ab5d4b868b2859900b84f2c543d1b3646bf2de6d94c7e0"}], 0x1000000000000259}, 0x4008081) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}, {&(0x7f0000000380)="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"}, {&(0x7f0000000040)="56be9de5139f5f4c0428ec4384e8eb2c87c4acd2128845a71edcd729393412fd19eaa97ebc4557b9d4fb4f4ea886066f495d4f47af226a78cb9cd4320cf43a077d3892cb42ffd8155b3df6da398ceeb95590ab5d4b868b2859900b84f2c543d1b3646bf2de6d94c7e0"}], 0x1000000000000259}, 0x4008081) 1.934459259s ago: executing program 1 (id=5939): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x3, 0x0, 0x2, 0x5cc, 0x7fff, 0x80000000, 0x1, 0x8, 0x81, 0x8000000000000001, 0xfaeb, 0x5, 0x992b, 0xef7a, 0x10001]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000002c0)={r9, 0x68, &(0x7f0000000440)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x7, @private2, 0x80000001}, @in6={0xa, 0x4e22, 0x1436, @mcast1, 0x9}]}, &(0x7f00000004c0)=0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000100)={0x5, 0x38, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) 1.771384943s ago: executing program 4 (id=5941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 1.76446752s ago: executing program 3 (id=5942): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) 1.745842687s ago: executing program 2 (id=5943): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) 1.61996606s ago: executing program 3 (id=5944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="34f8d72bbb2910ccb76102903900aa3aea057a8b8caadd97f3032ac46a0a62de90990625352a3cc0f6fcbc57d49f0090e56e9be0325652b9d298c0494c7a0daa95d0ab7065cce38b0098e3e418007e8b2a979e6e678fc2b320cae36a97aff39a3cc02e2bec9e30d1f8fc28bd9a50434cb19f401780e7e0eed0abb37856f83017f1732806f2767aef8043b6f14eced405ed05a23d1b7a4084245f8317fd5074808248c2b2935b7d184dcc80", &(0x7f0000000300)=""/178}, 0x20) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close(0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) splice(r2, 0x0, r1, &(0x7f0000000080), 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000180)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.492673852s ago: executing program 2 (id=5945): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) poll(&(0x7f0000000200), 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@acquire={0x128, 0x17, 0x200, 0x70bd2b, 0x25dfdbff, {{@in=@private=0xa010101, 0x4d4, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in=@loopback, @in=@local, 0x4e23, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x11, 0x0, 0xee01}, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x37, 0x4e21, 0x48, 0x2, 0x20, 0x20, 0x32}, {0x7fffffffffffffff, 0x721b, 0x7, 0x80000000, 0x5, 0x7, 0x5, 0x3}, {0x81, 0x4, 0x5}, 0x10, 0x6e6bb8, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x40, 0x10000, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x2000}, 0x41) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r1], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.470166611s ago: executing program 3 (id=5946): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x5e25c000) close(0x4) sendto$inet(r2, &(0x7f0000000040)="398617d8d36e0fbd23626a47934df734ac10a0e6f6521f6e56a8fb48cd149c972c5eca9fa2f7c220efb3dcc27ffa00de2fa16cbccbf98aee3beb7dac90bc06afad07618ee0a8f0b1225a76e39305bf154eb60190debf399a171de739294dba8931c13b9577804bc1dc98e626f4971ad08eadff086f76d6a4bb9802e6e4", 0x7d, 0x8845, 0x0, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.38341905s ago: executing program 1 (id=5947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x31, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000000c0)={0x0, r0, r0, 0x4, 0x3, '\x00', {0x28, 0x9, 0x6a88, 0x4, 0x9, 0x17, 0x4c7, 0x9, {0x4, 0x3}, {0xffffffff, 0x5}, {0x100000001, 0x1ff}, 0xfffffffffffffffd, 0x1, 0x1, 0xe022, 0x10001, 0x0, 0x7, 0x5, 0x80, 0x6, '\x00', 0xfffffffc, 0x64, 0x1000, 0x40}}) 1.360368254s ago: executing program 4 (id=5948): socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000001400)={'virt_wifi0\x00', @random="0600"}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 1.252371464s ago: executing program 2 (id=5949): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x0, &(0x7f0000000200)=""/214, 0x40, 0x0, 0x13, 0x4f, &(0x7f0000000140)="bd5eaa2edd2d2781ba6b2ad4c9e8876956cc7b", &(0x7f0000000300)="bf30d685f67e9c05d82bfc823f94734dd05c598b6bc542a8f16e5787e73f8df443db040e2226f576c9b05386d4153abf4022380f61e1c3653ec00b684b2e4aa8ccef437189ea0e678ec343f937670c", 0x2, 0x0, 0xc}, 0x50) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(r3) 1.182202979s ago: executing program 4 (id=5950): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x100010, r0, 0x65e3e000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x3, {0x0, 0xff, 0x4}, 0xfd}, 0x18) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x7, 0xfe, 0x0, 0xfd, 0x1, 0x800}, [@RTA_VIA={0x14, 0x13, {0x0, "fea22255b36d2a6f2796c248b30c"}}]}, 0x30}}, 0x0) 1.071550291s ago: executing program 1 (id=5951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000004c0)={0x2, 0x0, @multicast2, 0x2}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], 0x122}}, 0x0) socket$kcm(0x29, 0x8, 0x0) 1.046587153s ago: executing program 2 (id=5952): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r2, 0x2}, 0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x100, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="17043a73dbde", @val={@void, {0x8100, 0x6}}, {@ipv4={0x800, @dccp={{0x15, 0x4, 0x3, 0x2e, 0xee, 0x66, 0x0, 0x7f, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x6, 0x1}, @noop, @cipso={0x86, 0x27, 0x2, [{0x1, 0x5, "60f5d0"}, {0x7, 0x11, "64703f69bd9441471a71ad5273fcae"}, {0x0, 0xb, '/8\x00\x00\x00\x00\x00\x00\x00'}]}, @timestamp={0x44, 0x8, 0xaa, 0x0, 0x5, [0x1ebb]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x31}, @noop]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, "a280c2", 0xee, "97a09c"}, "e6ef0273666fcbb236c09ae8a51b2fa9ea534bad7527bc07ca7e20054b0ece9ec4a6cd98d2500236e44377f059f9acbabfa39d7f98df88de7e44160cb38dd35093bf6c8c3e544dc84919d59c78c6f8a9ea0ec09c5f47ef69c22baabcd3889ae93236ea9377a842a4b850200bcc54e0c06a005e627d5ce3f552383a8b562cc6ed67a6144f769b2bd82ef1"}}}}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x6, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x7}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x1}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000340)={'security\x00', 0x2, [{}, {}]}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 871.806843ms ago: executing program 1 (id=5953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r2, 0x610, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x5) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 731.432521ms ago: executing program 2 (id=5954): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800a00010072616e67650000002000028091c05ece99c4e95d07000240030000000400048008001380040001000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x20000080) pipe(&(0x7f0000000480)) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000000)=""/166, 0xa6}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0xd, 0x2120, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000400)={{0x3, 0x1, 0x0, 0xd}, [{0x4, 0x5, 0x6, 0x2}]}) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 692.569738ms ago: executing program 4 (id=5955): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000080)='-{\x00', 0x8000, &(0x7f00000000c0)={@align=0x10, {0x2, 0x3, 0x1, 0xfbe3}}, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x5}, {[0xd02, 0x5, 0x1, 0xec]}, 0x7, 0x49, &(0x7f0000000200)=""/73}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 686.794337ms ago: executing program 0 (id=5846): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syz_tun\x00', 0x8000}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0xe0, 0x0, 0xe0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@broadcast, @remote, 0x0, 0xff000000, 'dvmrp0\x00', 'wg2\x00', {}, {}, 0x67, 0x3, 0x18}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x4}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'bridge_slave_1\x00', {0xfffffffffffffffd}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x884, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x662, 0xb, [0x28, 0x3a, 0x20, 0xb, 0xd, 0x3e, 0x2f, 0x3d, 0x18, 0x30, 0x3b, 0x2a, 0x3c, 0x35, 0x7, 0x1d], 0x2, 0x1, 0x92}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x10001, 0x6], 0x1}}, @common=@set={{0x40}, {{0x3, [0x0, 0x7, 0x7, 0x7, 0x2, 0x2]}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x6, 0x0, 0x0, 0x1, 0x3], 0x1, 0x1}, {0x3, [0x2, 0x1, 0x4, 0x0, 0x1, 0x3], 0x1, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x20000000) socket(0x2c, 0x6, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x0, 0x35, 0x9, 0x0, 0x4, 0x1, 0x38, 0x3, 0x9, 0x3, 0x4, 0x5, 0x4}, 0xe) 463.822438ms ago: executing program 4 (id=5956): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x58, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x404, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "f102dcf29e"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x2e, 0x1, 0xa, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r0, r0, 0x8, 0x0, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000004100)={r1, &(0x7f0000000680)='^:\x00', 0x80000, &(0x7f0000004040)={@align=0x7, {0x3, 0x1, 0x0, 0x9}}, 0xe5b, &(0x7f0000004080)={@_ha_fsid}, &(0x7f00000040c0)=0x100}) r7 = gettid() (async) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r9}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) (async) r10 = getgid() r11 = socket$xdp(0x2c, 0x3, 0x0) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000042c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmmsg$unix(r3, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)="c1af6bec8c6d90a0e1f71f7763407507c0a04872da1a873efdf449faf712b8d83e6e31b0643c8ca02cd97e2313e385e439b8b8e97f7abe3674d938a7a7f8edb848798e705ad0083d995e39f440ff575430c9a1869df15e052ab720282b9430c648479006a56b780fb321", 0x6a}, {&(0x7f0000000540)="1f56229e3961760bdfd39416a44fc3fb16299d3f4f69819792c50757d91839dfc85279b92c514bc2fc325eec6cb9379e311ca833ec84d2b028af52585a66b381e64da1859eb3eb4db7a416e965f08ef72a00369507acf7c94a1b00690a20c2cc3c1a259e9fcad6029d5079e6dbdfe6ff108e150b87e89ddb579b91c8f3f1c0c27c65581274c1874831ebf82ed66201529fe4098ec24bdaa402a90ab024376e842e899cc0d842377e0d1947ea92ddda2e63b1c71b3db2e94851f30cf5877455ce01ed89dd", 0xc4}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000440)="8335940780905c8048b348b42139b593c79a", 0x12}, {&(0x7f0000000640)="f397166185d2b7814322b72ff1b57a718aca1fb2", 0x14}, {&(0x7f0000001740)="3b56a3d0051ce523ce8fd5e8ff584530bb5b63c0a9446666bf0e53e5c72dc8a7ba2c27af2e837493f2a59d9ef78d48e7278858adb7689df8cf706c07d2a70e63f47954c348a278f020e819985e4dd0f3c362b3b3edc5a00fe4636cc3e13f85c9c4fe834689b62c92999d3c95eeb13a065f3fdd6093b5fa890cb1e28003642a2f6210625dceb856f617aa113409ebc794e6bf147050635754e47eb4a6d143b88fd347d870672b09452b8bbe57ca9f7b3a", 0xb0}, {&(0x7f0000001800)="86826de323688ed0c224158ff07d4417e31287bcd104f0af24be0506f72647cb99a0d326729338493665454d8c71836bd7bee46ecb9b39f4d94a515ca417c4e25d411a9f8c1f5d0771ae3269c7f38512a12ebaeb1107b376cdbbeb7baa6d1711e1ddd321e9b00e7853d26559115e4204b7977ce70c01bfef652a179de1a7bc3cee1f627b278d9fc6778b6e76324ccf52ee386658fdb769942026f7def4ebf8f7a2a125cf41c2bca9fc266605997b12594fc2289cb6", 0xb5}, {&(0x7f00000018c0)="ba604e9166af102414acc6e3f7a32c72b7cca462b7d8fb236adb198af111b80b25b8de7c4764cc12c99eab709f74ef9d078644f77a3d3c256f0adf333544cd6df14b75d78129138982dcc892a5c6bf02db8ca7d72908ef4699ee5bb0a43ce62adbdef286505aad98c3146bfad613add17048fe8035b48c79683676671ec169e5283686cf41909de6b24ade2ca7e3c774a80521068545b9b96121978bc5bc80e849cd9382d6514afbb9c4d2e40ddde096f0d71fdb4b2a5a38529261aaf933ed4eb54d6fdf2a10c65587ec2b83689c5d40371872cbbf1b5c500489124e8f1a25b528fc5d26f8756e8782e0eee1c9888288466014a81a4a", 0xf6}, {&(0x7f00000019c0)="bf87489dd097a4a9546c96c0f5dfd20293298e5bc47cb7bee729f54c92d6bf53982159d59d41cb6945148b893f30a8dad279125a627dc0ddccc64270c1b8905a6c169b90878e87fb555737bbdcf1f01335abee1799b0914f30d13e9c80ad591339095a2b430254f08cc6ae3769e650d94fe9e5bc551f662e400821e861bd0b667c6a61128024e1db5c109267f5c9fdc9cc8ecb4b9c7510b66bee15a388690d4ddd54235732a21e3f47805bcf4ffb403bce05baf3538c430d5f5d84001a692d0d4081a3e8fe8c0554f6de170293f6f4d925b9d43e327d23b4fa9bfc51ae7b9e136c5bf71fa190368a897517e283feba911e289e6ded2297645b6525197e", 0xfd}], 0x9, 0x0, 0x0, 0x1}}, {{&(0x7f0000001b80)=@abs={0xb8291570e3f93841, 0x0, 0x4e23}, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001c00)="03f9976a7e7b35901bb3e2e1d5850b9c08cfc4deb51348e77464b856d8bb46d759921fe1402b77cac3f69de6d5abba2d69b95b32803b585e4d318aae625af1b3ce3540b33cd26118e98f6bf29dc237edaca4c206d91c00fe58b5b92094ee7d86328c512cf3d9dbf67560451e0dbc5085b57386a911ec0ad6011e2c681f538ad0a31b3908a8ffc40f180a675b2c43703fb612ebe91670f9ea17357eabe61faa64bf95942e977fa9f7da7e6721ffe5aedeadb22c42793b57b696cffd4d527613cc8e0c5e2a508cd795a817a5593bcadd8dee942ee9f29802dbe615393bab90fa5c9c3d5fdc28aaee5beed66b64f8dd3b76647a40d5", 0xf4}, {&(0x7f0000001d00)="dcc912ef27630e27e9716aae03087cdaa4e5fafe38e7eed78dbb5881849601e4d2ed5bebfb54a14426f958d44ef103a3630c2a8cb4b3feb4bb46e114ffcf22f4ff4c4c3dfefb7dc505bc32b71bb9c8d928f6f1dade1af81be692a138d4dcca2d2695a04e531b920ecac46bf75a2733f19e3f231efe342078bdb7da6723a606333e74353e12e44f2d123e46cef2c0ad7d9264881a81c0570f67c1942e6eb397175dbfaa59972d6adff0ed102625f3709b3dec6b250b729556134a106fe3187c3bff1740ada72921ce0f9cb818a9adda4dd7db78aa595ee5de09", 0xd9}, {&(0x7f0000001e00)="2bb91bd7740bb8ce1148516e66f6fbe20b3d15f0357d055481bc06604958dc782ee1e29d42e831e3cac27ddd55df928881562b0ad769ce67e5067b10badf6543d3bddcba0c2109aff9d4e33f85095a6beddf8d21856324e575706b84c824b3e9f2768f719085a48fe71ad8183343569751cbce0b71fe9c9070d9ba94f6612dd989fc2ac18571e169e98b98ed1ee0290bb64f115b49da778223d8262f169a894aac6e6f1b6602f879f6ba7bf8d24fd7bba84f1dd0f634121b14bd9f7c97cb9a784e2e180ccac3ee377cdbb10add9d01476a4014b001ed", 0xd6}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="0806ef6322dcdeb4c9ba300f11f1b228bb8ddcf7f851e30a99770c40de165c54a6819b5b408a91cd750e33b9b1ba140c53bfc36c01e1d4aa957b64b276fc728e240729abc6ebf6f10e2343460971dba49d60ebf4c851ca654b291f9a4d4b05ea3404cc8419c1fdbeb335afda2c5afdce3350db90d430ade72fbcd89dfce21e619febd6076f2cce34657a0a8768808ea044071fd4927726aefaf6acebde289291524dab39d4801f2d6a9bf7eb7b91dff3ba2f6a284390a2", 0xb7}], 0x6, &(0x7f0000004140)=[@rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r6, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}, @rights={{0x28, 0x1, 0x1, [r11, r0, r1, r1, r1, r0]}}], 0x90, 0x1}}, {{&(0x7f0000004200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004280), 0x0, &(0x7f0000004300)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r1, r1, r12]}}], 0x28, 0x80}}], 0x3, 0x1) (async, rerun: 64) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r13, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000080) 326.484703ms ago: executing program 2 (id=5958): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0xb) socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x38, '\x00', r3, 0x25, r0, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x4, 0xaf, 0xb}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[r0, r0, r0, r0, r0, r5], &(0x7f0000000200)=[{0x4, 0x3, 0x0, 0x4}, {0x2, 0x1, 0xc, 0x1}, {0x0, 0x4, 0x7, 0x9}, {0x4, 0x4, 0x5, 0x5}, {0x1, 0x1, 0xf, 0xf}], 0x10, 0x2}, 0x94) 282.097928ms ago: executing program 0 (id=5959): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000180)=[0x0], 0x0, 0x69c73889, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@delneigh={0x7c, 0x1d, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, r3, 0x40, 0x0, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r3}, @NDA_SRC_VNI={0x8, 0xb, 0x10}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_VNI={0x8, 0x7, 0xa3}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x3, 0x4, 0x2}}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NDA_LINK_NETNSID={0x8, 0xa, 0xffffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24042000}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) r7 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3d, 0x4, 0x0, 0x200, 0x2, 0xf9, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xff7ff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r8, 0xc252d000) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0xfe, 0x6, @random="afa100"}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="7a100000430cffff18b3d8605e58480000f8ffb92f695c480000"], &(0x7f0000000740)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x30, '\x00', r4, @fallback=0x3b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x1, 0xa, 0x4, 0xfff}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x2, 0x0, 0x9}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pK \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000800000000800"/20, @ANYRES32=0x1, @ANYBLOB="530400"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000010000000300"/28], 0x50) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000a40)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000055630000000000000000000061105100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r17, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r16}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r18, &(0x7f00000006c0), 0x0}, 0x20) r19 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0xadf1a3fb, 0x18}, 0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f0000000ec0), &(0x7f0000000f00)=0x6) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000007000000030000000800000006040000", @ANYRES32, @ANYBLOB="0e00000000f9ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000050000000f00"/28], 0x50) sendmsg$kcm(r9, &(0x7f0000000e80)={0x0, 0x86fcf0ba33152e71, &(0x7f0000000e40)=[{&(0x7f0000000fc0)="5d6ccc516f97be8cbe6406052b980b8675060796cf86619d5afcae9f435379845dc48653f6ce9ec2cb5e4ac312ec18e889c8f53536764df332a7699b2da51724f321d16df492d9ae294d09a6e653586e9490a14792fdc11fc1be504e69056f85089acbd68d1617a6d9eb80470a613fe8e48fdfc148bd64d91eb7bdd14024092fd151005cd92889eb969c20e0d2cb097bb01d0438ee8d90ed4733f7c1b68e28d0e1698a66f67982a2ea8760ba253a2458f425610e76026988b77828be03318788dda2e3919a0d6ffcc4d92782a6800647671969b05f3c4445645328ddedc3", 0x9b}, {&(0x7f0000000d80)="bb7288f085fc73494defadafad6514c87cfad562741fba8370c70771200658e1950dddc4fc01b11ef842ece8f15e563681c6f829d4a589fd682e42a905ca189f9a9066b9ceef915664b573db7bf7810ae40d3cc86bf166563f0f23e8467176b7f16f1bda16dedfcbbd267bb7d01ab13f0986176fe9af7ae29367b71b10f52d577cbf21f95bd014faa8d8ee31de08ec98c34309f1df1036bf4c"}], 0x1, &(0x7f0000001340)}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x12, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000060000100018240000", @ANYBLOB="cdbc4629821a6158040e53a1036b0c7e1b7f499209d403639ec640d923376da57c3612de08e1926addbe0c152b3ef280ea32a5f4bf988f661af361a5453f844bab7dfb184a5e0c2abd818127d67e845d71231f379d8e1e8a63baad34751526e128d63c2a526af08bb207a735841880eac3ae82ab94e70342da926ba806d6be3e286ef5ca4fbd339512f6187ced3528d869bf", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000033097000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xa0, &(0x7f00000005c0)=""/160, 0x41100, 0x40, '\x00', r3, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0xe, 0x4, 0x5a9}, 0x10, r5, r11, 0x4, &(0x7f0000000c40)=[r12, r13, r1, r14, r15, r18, r19, r15, r20], &(0x7f0000000c80)=[{0x0, 0x1, 0xe, 0x8}, {0x5, 0x1, 0x7, 0x5}, {0x5, 0x4, 0xc, 0x6}, {0x1, 0x1, 0xf, 0x2}], 0x10, 0x196}, 0x94) 179.688028ms ago: executing program 3 (id=5960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x39}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000040), 0x100000000000026a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5e0}], 0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000480)={@local, 0x0, 0x0, 0x40, 0x0, [{@broadcast}, {@broadcast}, {@dev}, {@dev}]}}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_FLOW={0x8}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 98.62119ms ago: executing program 4 (id=5961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) writev(r2, &(0x7f0000000180), 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @dev, 0x0}, &(0x7f0000000140)=0xc) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x4000000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000000000009e4df63ca4a0d371106100000000843c38c45900aa83158c4792756b1ad992cba2ffbf0e79948b6a3e128b43f664a73c1d63d4ee"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, r3, 0x8, 0x0, 0xfffffd0d}, 0x94) 0s ago: executing program 0 (id=5962): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001140)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xd, 'wg2\x00'}) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400e4ff0f00010400000600000000000000962c132eb70e3d6bbeb7223f5074fc550c6b8d308b5c561a44ba6d62d43ba1c940408738915279a8dfa84c9c0470b69a3da7f562e0044d0cdbeab6e84290f5853b6cf396a696e86db31a9103a00ec5849fb970484169f614000000000000000000000000002464ad777cbd4136eaef1f8f9e4f52158e15b634b7a792a4edd9ea296fddbbe068ef3d03faff56a4324e05fb89ebd4d8142bea0b1f6d7ed63dff950a012c1d40b7172a6cc38fd560042f5dedec419764495756f4bd98ea6ec17dcf5f99ee852281bba8a8e1ea1eb55d93785bcbe15bd48f0cbffd58a3", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000040)='\x00', 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) kernel console output (not intermixed with test programs): tribute type 10 has an invalid length. [ 428.553448][T19808] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 428.824073][T19824] hsr0 speed is unknown, defaulting to 1000 [ 428.851462][T19824] hsr0 speed is unknown, defaulting to 1000 [ 428.858353][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.009068][T19827] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 429.023835][T19824] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 429.038657][T19827] bond4 (unregistering): Released all slaves [ 429.061334][T19841] netlink: 'syz.0.3732': attribute type 10 has an invalid length. [ 429.100697][T19844] macsec2: entered promiscuous mode [ 429.145018][T19839] can: request_module (can-proto-0) failed. [ 429.211035][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.225129][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.234182][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.254207][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.272054][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.291772][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.301055][T19824] hsr0 speed is unknown, defaulting to 1000 [ 429.304973][T19850] syzkaller0: entered promiscuous mode [ 429.332757][T19850] syzkaller0: entered allmulticast mode [ 429.587738][T19860] bond4 (unregistering): Released all slaves [ 429.819789][T19873] netlink: 'syz.3.3745': attribute type 8 has an invalid length. [ 429.995315][T19888] rdma_op ffff888053e4d9f0 conn xmit_rdma 0000000000000000 [ 430.041307][T19890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.339431][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 430.347513][ C0] lec:lec_tx_timeout: lec0 [ 430.352854][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 430.463240][T19922] netlink: 'syz.0.3763': attribute type 1 has an invalid length. [ 430.525826][T19924] bond2: entered promiscuous mode [ 430.535128][T19924] bond2: entered allmulticast mode [ 430.544847][T19924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.966827][T19947] __nla_validate_parse: 18 callbacks suppressed [ 430.966850][T19947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3770'. [ 431.323626][T19971] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3772'. [ 431.509678][T19978] netlink: 'syz.4.3779': attribute type 4 has an invalid length. [ 431.584486][T19983] netlink: 'syz.4.3779': attribute type 4 has an invalid length. [ 431.667187][T19975] syzkaller1: entered promiscuous mode [ 431.672891][T19975] syzkaller1: entered allmulticast mode [ 431.983858][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'. [ 432.305641][T20023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3794'. [ 432.434755][T20036] netlink: 'syz.0.3796': attribute type 11 has an invalid length. [ 432.693103][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'. [ 432.704695][T20049] bridge_slave_1: left allmulticast mode [ 432.710851][T20049] bridge_slave_1: left promiscuous mode [ 432.729813][T20049] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.777105][T20049] bridge_slave_0: left allmulticast mode [ 432.811117][T20049] bridge_slave_0: left promiscuous mode [ 432.820276][T20049] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.141162][T20063] netlink: 'syz.3.3802': attribute type 83 has an invalid length. [ 433.153110][T20063] netlink: 'syz.3.3802': attribute type 1 has an invalid length. [ 433.191709][T20065] netlink: 'syz.2.3804': attribute type 7 has an invalid length. [ 433.219498][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 433.271593][T20063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.283385][T20073] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3806'. [ 433.376800][T20067] bond2: (slave geneve2): making interface the new active one [ 433.400944][T20067] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 433.422414][T20065] netlink: 'syz.2.3804': attribute type 7 has an invalid length. [ 433.440811][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 433.476142][T20080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3809'. [ 433.563401][T20083] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 433.583980][T20080] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3809'. [ 433.828085][T20094] netlink: 'syz.2.3813': attribute type 16 has an invalid length. [ 433.892634][T20094] netlink: 'syz.2.3813': attribute type 17 has an invalid length. [ 433.933410][T20103] x_tables: duplicate underflow at hook 4 [ 434.097217][T20094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.686997][T20152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.694410][T20152] IPv6: NLM_F_CREATE should be set when creating new route [ 434.821318][T20161] bond3: entered promiscuous mode [ 434.826633][T20161] bond3: entered allmulticast mode [ 434.832503][T20161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.936687][T20172] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 435.323645][T20204] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.359415][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 435.367525][ C0] lec:lec_tx_timeout: lec0 [ 435.372943][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.760912][T20228] netlink: 'syz.3.3849': attribute type 1 has an invalid length. [ 435.865189][T20230] 8021q: VLANs not supported on lo [ 435.883793][T20229] bond4: (slave gretap1): making interface the new active one [ 435.893126][T20229] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 436.128904][T20250] __nla_validate_parse: 9 callbacks suppressed [ 436.128927][T20250] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3858'. [ 436.379513][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3860'. [ 436.718359][T20283] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3866'. [ 436.930609][T20293] nftables ruleset with unbound chain [ 436.942605][T20294] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 436.956497][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3872'. [ 437.046387][T20269] hsr0 speed is unknown, defaulting to 1000 [ 437.203431][T20306] netlink: 'syz.3.3876': attribute type 12 has an invalid length. [ 437.254761][T20306] bond5: option primary_reselect: invalid value (255) [ 437.270955][T20306] bond5 (unregistering): Released all slaves [ 437.513308][T20312] syzkaller1: entered promiscuous mode [ 437.519781][T20312] syzkaller1: entered allmulticast mode [ 437.540708][T20325] openvswitch: netlink: IP tunnel dst address not specified [ 437.790327][T20329] syzkaller0: entered promiscuous mode [ 437.809323][T20329] syzkaller0: entered allmulticast mode [ 438.224843][T20347] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 438.261510][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 438.275075][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3887'. [ 438.975897][T20384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3898'. [ 439.087284][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 439.092769][T20392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3899'. [ 439.207353][ T8350] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.216570][ T8350] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.225839][ T8350] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.235187][ T8350] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.379220][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 440.387492][ C0] lec:lec_tx_timeout: lec0 [ 440.392409][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 440.445711][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.237155][T20352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.478095][T20415] block nbd1: not configured, cannot reconfigure [ 441.501254][T20415] netlink: 'syz.1.3905': attribute type 10 has an invalid length. [ 441.516397][T20415] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3905'. [ 441.627629][T20427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3909'. [ 441.675413][T20427] gretap0: entered promiscuous mode [ 441.709924][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3909'. [ 441.719010][T20427] gretap0: left promiscuous mode [ 441.821744][T20431] netlink: 81 bytes leftover after parsing attributes in process `syz.1.3911'. [ 442.252028][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3918'. [ 442.271416][T20463] SET target dimension over the limit! [ 442.296917][T20460] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3918'. [ 442.310054][T20460] syzkaller0: entered promiscuous mode [ 442.315590][T20460] syzkaller0: entered allmulticast mode [ 442.325284][T20460] tc action pedit offset must be on 32 bit boundaries [ 442.334324][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3918'. [ 442.415799][T20456] syzkaller1: entered promiscuous mode [ 442.435564][T20456] syzkaller1: entered allmulticast mode [ 442.526445][T20468] netlink: 'syz.4.3921': attribute type 1 has an invalid length. [ 442.538184][T20468] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3921'. [ 442.686610][T20474] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 442.716018][T20474] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.746409][T20474] gretap2: entered promiscuous mode [ 442.772318][T20474] gretap2: entered allmulticast mode [ 443.172380][T20499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3929'. [ 443.273738][T20504] syzkaller1: entered promiscuous mode [ 443.280830][T20504] syzkaller1: entered allmulticast mode [ 443.416012][T20511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3935'. [ 443.436442][T20511] netlink: 'syz.3.3935': attribute type 7 has an invalid length. [ 443.826241][T20525] syzkaller0: entered promiscuous mode [ 443.844840][T20527] netlink: 'syz.3.3940': attribute type 15 has an invalid length. [ 444.012532][T20548] netlink: 'syz.3.3945': attribute type 64 has an invalid length. [ 444.795015][T20556] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 445.399316][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.407468][ C0] lec:lec_tx_timeout: lec0 [ 445.412694][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.808682][ T5836] Bluetooth: hci4: command tx timeout [ 446.169400][ T24] hsr0 speed is unknown, defaulting to 1000 [ 446.609850][T20586] netlink: 'syz.0.3955': attribute type 3 has an invalid length. [ 446.783200][T20596] __nla_validate_parse: 8 callbacks suppressed [ 446.783221][T20596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3960'. [ 447.078735][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3966'. [ 447.159046][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3970'. [ 447.181085][T20623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3970'. [ 447.252578][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3970'. [ 447.338380][T20625] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 447.346707][T20631] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 447.384014][T20631] team0: Port device dummy0 added [ 447.398366][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3973'. [ 447.432452][T20639] netlink: 'syz.1.3966': attribute type 21 has an invalid length. [ 447.436531][T20638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 447.481796][T20638] netlink: 'syz.3.3974': attribute type 30 has an invalid length. [ 447.499852][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3974'. [ 447.608729][T20639] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 447.638600][T20639] bond3 (unregistering): Released all slaves [ 447.704045][T20648] macvlan0: entered promiscuous mode [ 447.956834][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'. [ 447.997684][T20670] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 448.154881][T20679] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3986'. [ 448.539882][T20703] openvswitch: netlink: Unknown nsh attribute 0 [ 448.571725][T20702] netlink: 'syz.0.3989': attribute type 4 has an invalid length. [ 448.880935][T20712] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 448.898681][T20712] tipc: Resetting bearer [ 449.129975][T20729] bridge0: port 1(veth3) entered blocking state [ 449.149467][T20729] bridge0: port 1(veth3) entered disabled state [ 449.163166][T20729] veth3: entered allmulticast mode [ 449.173043][T20729] veth3: entered promiscuous mode [ 449.291079][T20744] syzkaller0: entered promiscuous mode [ 449.297859][T20744] syzkaller0: entered allmulticast mode [ 449.298184][T20745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.645558][T20754] syzkaller0: entered promiscuous mode [ 449.651609][T20754] syzkaller0: entered allmulticast mode [ 449.990479][T20775] vlan1: entered allmulticast mode [ 450.007246][T20775] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 450.086445][T20779] netlink: 'syz.1.4014': attribute type 16 has an invalid length. [ 450.123355][T20780] netlink: 'syz.1.4014': attribute type 16 has an invalid length. [ 450.161382][T20779] netlink: 'syz.1.4014': attribute type 17 has an invalid length. [ 450.181970][T20780] netlink: 'syz.1.4014': attribute type 17 has an invalid length. [ 450.272891][T20775] tipc: Resetting bearer [ 450.285431][T20775] tipc: Resetting bearer [ 450.341751][T20779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.363996][T20780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.379557][T20791] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 450.419509][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 450.427581][ C0] lec:lec_tx_timeout: lec0 [ 450.432812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.483455][T20787] bond3: Invalid ad_actor_system MAC address. [ 450.490392][T20787] bond3: option ad_actor_system: invalid value (1) [ 450.501311][T20787] bond3 (unregistering): Released all slaves [ 450.576397][T20793] ±ÿ=–a²š«: renamed from lo (while UP) [ 450.606030][T20767] hsr0 speed is unknown, defaulting to 1000 [ 450.794944][T20807] netlink: Conntrack attr has 4 unknown bytes [ 451.637910][T20849] IPVS: sh: FWM 3 0x00000003 - no destination available [ 451.684648][ T215] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.713864][ T215] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.739650][ T215] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.756791][ T215] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.781988][T20855] validate_nla: 4 callbacks suppressed [ 451.782009][T20855] netlink: 'syz.0.4037': attribute type 12 has an invalid length. [ 451.964037][T20859] netlink: 'syz.4.4039': attribute type 12 has an invalid length. [ 451.978366][T20859] netlink: 'syz.4.4039': attribute type 29 has an invalid length. [ 451.989755][T20859] __nla_validate_parse: 26 callbacks suppressed [ 451.989776][T20859] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4039'. [ 452.007657][T20859] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4039'. [ 452.025935][T20866] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4042'. [ 452.180733][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4045'. [ 452.198023][T20877] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.207323][T20877] IPVS: set_ctl: invalid protocol: 29550 101.116.0.0:0 [ 452.406430][T20889] sctp: [Deprecated]: syz.3.4048 (pid 20889) Use of int in max_burst socket option. [ 452.406430][T20889] Use struct sctp_assoc_value instead [ 452.493864][T20889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4048'. [ 452.541083][T20891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4049'. [ 452.657275][T20886] hsr0 speed is unknown, defaulting to 1000 [ 452.759420][T20903] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 452.789293][T20903] netlink: 'syz.0.4051': attribute type 2 has an invalid length. [ 452.903084][T20903] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 453.033691][T20919] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4056'. [ 453.057607][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4055'. [ 453.094311][T20920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4055'. [ 453.158511][T20920] geneve2: entered promiscuous mode [ 453.180450][T20920] geneve2: entered allmulticast mode [ 453.233256][T20915] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4055'. [ 453.291000][T20931] netlink: 'syz.0.4058': attribute type 1 has an invalid length. [ 453.476224][T20931] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 453.813184][T20946] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 453.848840][T20946] bond5 (unregistering): Released all slaves [ 454.357891][T20985] rose0: left promiscuous mode [ 454.385033][T20985] rose0: left allmulticast mode [ 454.398966][T20991] netlink: 'syz.3.4070': attribute type 1 has an invalid length. [ 454.420783][T20992] rose0: entered allmulticast mode [ 454.500482][T20993] syzkaller0: entered promiscuous mode [ 454.506067][T20993] syzkaller0: entered allmulticast mode [ 455.439147][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 455.447267][ C0] lec:lec_tx_timeout: lec0 [ 455.453323][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.535431][T21044] openvswitch: netlink: IP tunnel dst address not specified [ 455.802441][T21048] erspan0: entered promiscuous mode [ 456.026289][T21054] xt_CONNSECMARK: invalid mode: 0 [ 456.771382][T21085] blkio.reset_stats is deprecated [ 456.801985][T21086] syzkaller0: entered promiscuous mode [ 456.807527][T21086] syzkaller0: entered allmulticast mode [ 457.378042][ T5490] veth1_macvtap: left promiscuous mode [ 457.464925][T21114] syzkaller0: entered promiscuous mode [ 457.479025][T21110] netlink: 'syz.3.4107': attribute type 2 has an invalid length. [ 457.486946][T21110] netlink: 'syz.3.4107': attribute type 2 has an invalid length. [ 457.495606][T21110] netlink: 'syz.3.4107': attribute type 2 has an invalid length. [ 457.518766][T21110] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 457.528273][T21114] syzkaller0: entered allmulticast mode [ 458.189376][T21152] netlink: 'syz.3.4116': attribute type 21 has an invalid length. [ 458.221840][T21152] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.242093][T21157] netlink: zone id is out of range [ 458.248147][T21158] __nla_validate_parse: 14 callbacks suppressed [ 458.248167][T21158] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4115'. [ 458.275031][T21157] netlink: zone id is out of range [ 458.289342][T21157] netlink: zone id is out of range [ 458.294560][T21157] netlink: zone id is out of range [ 458.319260][T21157] netlink: zone id is out of range [ 458.337187][T21157] netlink: zone id is out of range [ 458.369975][T21157] netlink: zone id is out of range [ 458.375164][T21157] netlink: zone id is out of range [ 458.397655][T21167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4114'. [ 458.409497][T21157] netlink: zone id is out of range [ 458.549576][T21171] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 458.563504][T21174] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 458.589821][T21171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4118'. [ 458.740547][T21181] netlink: 'syz.2.4121': attribute type 1 has an invalid length. [ 458.865941][T21188] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4124'. [ 458.888706][T21186] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 458.962240][T21186] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 459.027570][T21186] bond5: (slave ip6gre1): making interface the new active one [ 459.046035][T21186] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 459.087738][T21203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4126'. [ 459.100435][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4127'. [ 459.150159][T21201] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4123'. [ 459.245042][T21209] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4128'. [ 459.297483][T21197] syzkaller0: entered promiscuous mode [ 459.338695][T21197] syzkaller0: entered allmulticast mode [ 459.910746][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'. [ 460.472828][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 460.480901][ C0] lec:lec_tx_timeout: lec0 [ 460.485901][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 461.742601][T21253] bridge3: entered promiscuous mode [ 461.758357][T21253] bridge3: entered allmulticast mode [ 462.052320][T21269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4144'. [ 462.145230][T21286] xt_addrtype: ipv6 does not support BROADCAST matching [ 462.271343][T21290] netlink: 'syz.0.4149': attribute type 83 has an invalid length. [ 462.480356][T21292] udevd[21292]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 462.517657][T21292] udevd[21292]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 462.592588][T21310] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 462.599765][T21306] erspan0: entered promiscuous mode [ 462.813304][T21317] netlink: 'syz.1.4158': attribute type 21 has an invalid length. [ 463.362902][T21343] Bluetooth: MGMT ver 1.23 [ 463.649063][T21357] netlink: 'syz.2.4168': attribute type 11 has an invalid length. [ 463.657723][T21357] netlink: 'syz.2.4168': attribute type 4 has an invalid length. [ 463.667557][T21357] __nla_validate_parse: 7 callbacks suppressed [ 463.667577][T21357] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.4168'. [ 463.883552][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4171'. [ 463.893991][T21367] block nbd0: Unsupported socket: should be TCP or UNIX. [ 463.926786][T21372] tipc: Started in network mode [ 463.932738][T21372] tipc: Node identity 4, cluster identity 4711 [ 463.940218][T21372] tipc: Node number set to 4 [ 463.951772][T21372] net_ratelimit: 185 callbacks suppressed [ 463.951792][T21372] openvswitch: netlink: Flow key attribute not present in set flow. [ 464.038619][T21374] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 464.048109][T21374] tipc: Resetting bearer [ 464.122616][T21378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4177'. [ 464.141506][T21378] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4177'. [ 464.190547][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 464.216408][T21378] netlink: 'syz.2.4177': attribute type 1 has an invalid length. [ 464.227030][T21378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.623520][T21411] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 464.821391][T21432] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4190'. [ 464.894830][T21433] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4190'. [ 465.051612][T21445] tc_dump_action: action bad kind [ 465.159790][T21447] tipc: Started in network mode [ 465.164751][T21447] tipc: Node identity 7ab40fe4dbc2, cluster identity 4711 [ 465.201601][T21447] tipc: Enabled bearer , priority 0 [ 465.267078][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'. [ 465.339866][T21458] syzkaller0: entered promiscuous mode [ 465.345482][T21458] syzkaller0: entered allmulticast mode [ 465.352472][T21458] tipc: Resetting bearer [ 465.416255][T21464] gre1: entered promiscuous mode [ 465.421820][T21464] gre1: entered allmulticast mode [ 465.481020][T21446] tipc: Resetting bearer [ 466.279279][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 466.287416][ C0] lec:lec_tx_timeout: lec0 [ 466.292504][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 467.519704][T21446] tipc: Disabling bearer [ 467.612294][ T5912] tipc: Node number set to 2708869092 [ 467.791077][T21504] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4206'. [ 467.811630][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4208'. [ 467.840869][T21504] netlink: 'syz.3.4206': attribute type 2 has an invalid length. [ 467.863135][T21504] vþ: entered promiscuous mode [ 468.216359][T21527] pim6reg: entered allmulticast mode [ 468.516362][T21554] netlink: 'syz.2.4224': attribute type 1 has an invalid length. [ 468.539887][T21554] netlink: 'syz.2.4224': attribute type 2 has an invalid length. [ 468.547697][T21557] x_tables: duplicate underflow at hook 2 [ 468.547779][T21554] netlink: 'syz.2.4224': attribute type 2 has an invalid length. [ 468.603846][T21554] netlink: 'syz.2.4224': attribute type 2 has an invalid length. [ 468.606436][T21559] sctp: [Deprecated]: syz.1.4227 (pid 21559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.606436][T21559] Use struct sctp_sack_info instead [ 468.792433][T21573] ipt_ECN: cannot use operation on non-tcp rule [ 468.808214][T21573] __nla_validate_parse: 3 callbacks suppressed [ 468.808233][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4232'. [ 469.104022][T21583] macvlan0: entered promiscuous mode [ 469.204503][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 469.227673][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4238'. [ 469.234566][T21589] netlink: 'syz.3.4237': attribute type 5 has an invalid length. [ 469.280453][T21589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4237'. [ 469.371235][T21589] geneve3: entered promiscuous mode [ 469.419291][T21589] geneve3: entered allmulticast mode [ 469.462291][ T6911] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 469.489519][T21605] xt_CONNSECMARK: invalid mode: 0 [ 469.506723][ T6911] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 469.571518][ T6911] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 469.573869][T21598] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4240'. [ 469.607348][ T6911] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 470.181006][T21652] netlink: 'syz.1.4254': attribute type 21 has an invalid length. [ 470.202675][T21652] netlink: 'syz.1.4254': attribute type 22 has an invalid length. [ 470.213300][T21652] netlink: 'syz.1.4254': attribute type 23 has an invalid length. [ 470.225771][T21652] netlink: 'syz.1.4254': attribute type 25 has an invalid length. [ 470.235174][T21652] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4254'. [ 470.550555][T21671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 470.645674][T21676] bond6: (slave veth3): Enslaving as an active interface with a down link [ 470.704235][T21671] vlan2: entered allmulticast mode [ 470.717049][T21671] veth0_to_bond: entered allmulticast mode [ 470.727092][T21671] veth0_to_bond: entered promiscuous mode [ 470.734894][T21671] veth0_to_bond: left promiscuous mode [ 470.743995][T21671] bond6: (slave vlan2): making interface the new active one [ 470.753567][T21671] veth0_to_bond: entered promiscuous mode [ 470.768982][T21671] vlan2: entered promiscuous mode [ 470.774995][T21671] bond6: (slave vlan2): Enslaving as an active interface with an up link [ 470.811559][T21680] syzkaller0: entered promiscuous mode [ 470.818975][T21680] syzkaller0: entered allmulticast mode [ 470.878992][T21689] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4263'. [ 470.976536][T21694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4265'. [ 471.051666][T21694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4265'. [ 471.319265][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 471.327427][ C0] lec:lec_tx_timeout: lec0 [ 471.332601][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 471.856118][T21744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4276'. [ 472.463620][T21769] xt_hashlimit: size too large, truncated to 1048576 [ 473.749030][ T5490] veth0_macvtap: left promiscuous mode [ 474.120410][ T1217] page_pool_release_retry() stalled pool shutdown: id 95, 1 inflight 60 sec [ 474.393463][T21857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.418225][T21866] __nla_validate_parse: 3 callbacks suppressed [ 474.418252][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 474.448237][T21867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4302'. [ 474.580166][T21867] openvswitch: netlink: IP tunnel dst address not specified [ 474.908272][T21893] nft_compat: unsupported protocol 1 [ 475.353838][T21913] can: request_module (can-proto-5) failed. [ 475.633633][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4321'. [ 475.705024][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4321'. [ 475.804175][T21947] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 475.842467][T21948] bridge0: port 1(batadv1) entered blocking state [ 475.861684][T21948] bridge0: port 1(batadv1) entered disabled state [ 475.877583][T21948] batadv1: entered allmulticast mode [ 475.898425][T21948] batadv1: entered promiscuous mode [ 476.080273][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4327'. [ 476.084729][T21965] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4326'. [ 476.128623][T21964] openvswitch: netlink: Flow actions attr not present in new flow. [ 476.174835][T21970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4326'. [ 476.273483][T21977] validate_nla: 1 callbacks suppressed [ 476.273508][T21977] netlink: 'syz.3.4328': attribute type 1 has an invalid length. [ 476.329576][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 476.339809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 476.339845][ C0] lec:lec_tx_timeout: lec0 [ 476.348355][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.361399][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 476.387585][T21983] netlink: 'syz.1.4330': attribute type 16 has an invalid length. [ 476.399059][T21983] netlink: 'syz.1.4330': attribute type 17 has an invalid length. [ 476.463404][T21983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.925044][T22017] netlink: 'syz.0.4338': attribute type 2 has an invalid length. [ 476.949455][T22017] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4338'. [ 476.992964][T22013] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4338'. [ 477.137872][T22025] netlink: 'syz.1.4340': attribute type 4 has an invalid length. [ 477.162979][T22026] netlink: 'syz.1.4340': attribute type 12 has an invalid length. [ 477.193136][T22025] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4340'. [ 477.254090][T22030] netlink: 'syz.2.4341': attribute type 1 has an invalid length. [ 477.286074][T22026] bond3: option primary_reselect: invalid value (255) [ 477.316334][T22026] bond3 (unregistering): Released all slaves [ 477.378482][T22034] xt_policy: too many policy elements [ 477.630382][T22008] hsr0 speed is unknown, defaulting to 1000 [ 477.631671][T22044] netdevsim netdevsim0: Direct firmware load for 0 failed with error -2 [ 477.666504][T22044] netdevsim netdevsim0: Falling back to sysfs fallback for: 0 [ 477.944001][T22065] h: entered promiscuous mode [ 479.627939][T22137] nbd: couldn't find device at index 2 [ 479.630204][T22140] __nla_validate_parse: 7 callbacks suppressed [ 479.630223][T22140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4366'. [ 479.683439][T22143] netlink: 'syz.3.4368': attribute type 10 has an invalid length. [ 480.037642][T22166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4373'. [ 480.058010][T22166] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4373'. [ 480.067429][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4373'. [ 480.106551][T22155] IPv6: sit1: Disabled Multicast RS [ 480.113409][T22155] sit1: entered allmulticast mode [ 480.192609][T22168] bond3: option mode: unable to set because the bond device has slaves [ 480.214911][T22171] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 480.261971][T22169] syzkaller0: entered promiscuous mode [ 480.267518][T22169] syzkaller0: entered allmulticast mode [ 480.726436][T22203] netlink: 'syz.0.4382': attribute type 2 has an invalid length. [ 480.754665][T22203] netlink: 'syz.0.4382': attribute type 8 has an invalid length. [ 480.776772][T22203] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4382'. [ 481.072839][T22224] dvmrp0: entered allmulticast mode [ 481.185682][T22226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4388'. [ 481.349128][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 481.357234][ C0] lec:lec_tx_timeout: lec0 [ 481.362559][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 481.412897][T22241] xt_l2tp: unknown flags: 10 [ 481.426204][T22241] netlink: 'syz.1.4392': attribute type 21 has an invalid length. [ 481.435490][T22241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4392'. [ 481.459602][T22241] netlink: 'syz.1.4392': attribute type 5 has an invalid length. [ 481.476686][T22246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4393'. [ 481.479892][T22241] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4392'. [ 481.528382][T22238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4393'. [ 481.538350][T22251] netlink: 'syz.0.4395': attribute type 1 has an invalid length. [ 481.941992][ T83] vlan2: left promiscuous mode [ 482.426713][T22309] bond3 (unregistering): Released all slaves [ 482.537864][T22317] netlink: 'syz.4.4412': attribute type 1 has an invalid length. [ 482.558115][ T796] IPVS: starting estimator thread 0... [ 482.571560][T22323] netlink: 'syz.3.4414': attribute type 10 has an invalid length. [ 482.572097][T22316] IPVS: ip_vs_edit_dest(): server weight less than zero [ 482.581348][T22323] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 482.651085][T22322] IPVS: using max 25 ests per chain, 60000 per kthread [ 483.143998][T22359] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 483.574170][T22382] netlink: 'syz.0.4433': attribute type 16 has an invalid length. [ 483.593454][T22382] netlink: 'syz.0.4433': attribute type 17 has an invalid length. [ 483.621032][T22384] netlink: 'syz.1.4434': attribute type 3 has an invalid length. [ 483.845223][T22382] macvlan0: left promiscuous mode [ 483.864926][T22382] veth0_macvtap: entered promiscuous mode [ 483.871767][T22382] veth0_macvtap: entered allmulticast mode [ 483.877784][T22382] macvtap0: left allmulticast mode [ 483.883417][T22382] veth0_macvtap: left allmulticast mode [ 483.907112][T22382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.917065][T22382] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 484.095079][T22406] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 484.106487][T22409] netlink: 'syz.2.4438': attribute type 1 has an invalid length. [ 484.315384][T22422] netlink: 'syz.2.4444': attribute type 1 has an invalid length. [ 484.387282][T22418] nbd: device at index 64 is going down [ 484.388530][T22422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.586200][T22418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.629037][T22431] udevd[22431]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 484.717142][T22431] udevd[22431]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 484.925286][T22461] __nla_validate_parse: 27 callbacks suppressed [ 484.925308][T22461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4454'. [ 485.354658][T22495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4465'. [ 485.475854][T22502] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 485.498818][T22502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.550373][T22505] Bluetooth: MGMT ver 1.23 [ 485.558416][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4469'. [ 485.598455][T22505] hsr0: entered promiscuous mode [ 485.606727][T22505] macvlan2: entered allmulticast mode [ 485.617610][T22507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4470'. [ 485.617765][T22505] hsr0: entered allmulticast mode [ 485.632512][T22505] hsr_slave_0: entered allmulticast mode [ 485.848140][T22511] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4471'. [ 486.186818][T22530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4476'. [ 486.369141][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 486.377257][ C0] lec:lec_tx_timeout: lec0 [ 486.382247][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 486.419173][T22542] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4480'. [ 486.671462][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4483'. [ 486.681209][T22548] validate_nla: 5 callbacks suppressed [ 486.681230][T22548] netlink: 'syz.3.4479': attribute type 18 has an invalid length. [ 487.136881][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4488'. [ 487.337887][T22572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4489'. [ 487.629666][T22592] h: entered promiscuous mode [ 487.726876][T22599] tipc: Enabling of bearer rejected, failed to enable media [ 487.968401][T22618] ipt_REJECT: TCP_RESET invalid for non-tcp [ 488.180981][T22637] netlink: 'syz.0.4509': attribute type 10 has an invalid length. [ 488.220703][T22637] netlink: 'syz.0.4509': attribute type 1 has an invalid length. [ 488.301876][T22641] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 488.325779][T22641] syzkaller0: entered promiscuous mode [ 488.334842][T22641] syzkaller0: entered allmulticast mode [ 488.837062][T22673] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 488.940045][T22674] netlink: 'syz.4.4525': attribute type 21 has an invalid length. [ 489.330750][T22706] xt_policy: too many policy elements [ 490.000117][T22742] __nla_validate_parse: 16 callbacks suppressed [ 490.000139][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 490.099052][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807acf1400: rx timeout, send abort [ 490.275230][T22752] Cannot find del_set index 4 as target [ 490.511489][T22764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4551'. [ 490.607427][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807acf1400: abort rx timeout. Force session deactivation [ 490.702584][T22777] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4553'. [ 490.762759][T22779] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4554'. [ 491.188898][T22805] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 491.314385][T22819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4564'. [ 491.321371][T22822] openvswitch: netlink: IP tunnel dst address not specified [ 491.389155][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 491.397337][ C0] lec:lec_tx_timeout: lec0 [ 491.402783][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 491.542070][T22836] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4569'. [ 491.593804][T22837] netlink: 'syz.1.4568': attribute type 1 has an invalid length. [ 491.602529][T22837] netlink: 'syz.1.4568': attribute type 1 has an invalid length. [ 491.703581][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 491.833334][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 491.898516][T22853] syzkaller1: entered promiscuous mode [ 491.932851][T22853] syzkaller1: entered allmulticast mode [ 491.962113][T22853] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.969416][T22853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.376522][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4580'. [ 492.422095][T22887] netlink: 'syz.1.4582': attribute type 51 has an invalid length. [ 492.447357][T22887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.458903][T22887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.471287][T22887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.478942][T22887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.536652][T22884] tunl0: entered promiscuous mode [ 492.574177][T22884] netlink: 'syz.4.4581': attribute type 3 has an invalid length. [ 492.619293][T22884] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4581'. [ 492.737968][T22899] netlink: zone id is out of range [ 492.744056][T22899] netlink: zone id is out of range [ 492.766063][T22899] netlink: zone id is out of range [ 492.774149][T22899] netlink: zone id is out of range [ 492.787628][T22899] netlink: zone id is out of range [ 492.806631][T22899] netlink: zone id is out of range [ 492.830113][T22899] netlink: zone id is out of range [ 492.851447][T22899] netlink: zone id is out of range [ 492.883277][T22906] syzkaller0: entered promiscuous mode [ 493.317043][T22937] netlink: 'syz.0.4599': attribute type 1 has an invalid length. [ 493.527462][T22953] syzkaller0: entered promiscuous mode [ 493.533874][T22953] syzkaller0: entered allmulticast mode [ 494.624106][T23002] veth0: entered promiscuous mode [ 494.763721][T22993] veth0: left promiscuous mode [ 494.924796][T22984] netlink: 'syz.2.4614': attribute type 62 has an invalid length. [ 495.021527][T23023] netlink: 'syz.3.4625': attribute type 3 has an invalid length. [ 495.058619][T23025] macvtap2: entered promiscuous mode [ 495.071921][T23025] macvtap2: entered allmulticast mode [ 495.077480][T23025] veth1_vlan: entered allmulticast mode [ 495.110882][T23024] gtp2: entered promiscuous mode [ 495.115947][T23024] gtp2: entered allmulticast mode [ 495.335750][T23044] __nla_validate_parse: 14 callbacks suppressed [ 495.335773][T23044] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4631'. [ 495.463722][T23041] bond3: (slave vlan0): Enslaving as a backup interface with an up link [ 495.496379][T23051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4633'. [ 495.501094][T23048] sctp: [Deprecated]: syz.1.4634 (pid 23048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.501094][T23048] Use struct sctp_sack_info instead [ 495.632769][T23041] nft_compat: unsupported protocol 0 [ 495.698612][ T5836] Bluetooth: hci4: link tx timeout [ 495.705751][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 496.179688][T23091] netlink: 'syz.0.4644': attribute type 3 has an invalid length. [ 496.203686][T23091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4644'. [ 496.233081][ T6911] tipc: Subscription rejected, illegal request [ 496.380696][T23095] lec:lec_atm_send: lec0: Unknown message type 813182976 [ 496.432032][T23079] lec:lec_atm_close: lec0: Shut down! [ 496.592351][T23109] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4646'. [ 497.122984][T23138] netlink: 'syz.3.4655': attribute type 12 has an invalid length. [ 497.135085][T23140] netlink: 'syz.4.4657': attribute type 10 has an invalid length. [ 497.180086][T23140] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 497.364725][T23161] dvmrp0: left allmulticast mode [ 497.403596][T23163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4660'. [ 497.667188][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4666'. [ 497.696095][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4666'. [ 497.723144][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 497.836875][T23191] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 497.896655][T23192] sctp: [Deprecated]: syz.0.4670 (pid 23192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.896655][T23192] Use struct sctp_sack_info instead [ 498.513757][T23234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4680'. [ 498.779531][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4681'. [ 498.839239][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 499.012046][T23238] macvtap0: entered promiscuous mode [ 499.017467][T23238] veth0_macvtap: entered promiscuous mode [ 499.065535][T23239] veth0_macvtap: left promiscuous mode [ 499.162111][T23241] netlink: 'syz.2.4682': attribute type 4 has an invalid length. [ 499.338163][T23251] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003 [ 499.682484][T23270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4685'. [ 499.898521][T23276] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 500.006300][T23276] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 500.034357][T23276] gretap3: entered promiscuous mode [ 500.051707][T23276] gretap3: entered allmulticast mode [ 500.058504][T23283] xt_hashlimit: size too large, truncated to 1048576 [ 500.230987][T23255] hsr0 speed is unknown, defaulting to 1000 [ 500.669802][T23307] __nla_validate_parse: 1 callbacks suppressed [ 500.669825][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 500.743622][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 500.876310][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4701'. [ 500.925445][T23315] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 501.102502][T23323] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4704'. [ 501.227308][T23332] netlink: 'syz.4.4707': attribute type 10 has an invalid length. [ 501.317597][T23332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.338831][T23335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4708'. [ 501.372325][T23332] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 501.414755][T23337] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4709'. [ 501.428559][T23340] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4709'. [ 501.439123][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 501.447208][ C0] lec:lec_tx_timeout: lec0 [ 501.451974][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 501.522337][T23343] syzkaller0: entered promiscuous mode [ 501.527887][T23343] syzkaller0: entered allmulticast mode [ 501.650335][T23349] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.4711'. [ 501.776418][T23357] set match dimension is over the limit! [ 501.832873][T23360] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4714'. [ 501.892136][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.951528][T23363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4714'. [ 502.065902][T23365] syzkaller1: entered promiscuous mode [ 502.160208][T23365] syzkaller1: entered allmulticast mode [ 502.176229][T23367] netlink: 'syz.3.4715': attribute type 1 has an invalid length. [ 505.260487][T23371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.457984][T23442] netlink: 'syz.0.4734': attribute type 21 has an invalid length. [ 505.478347][T23442] netlink: 'syz.0.4734': attribute type 5 has an invalid length. [ 505.577215][T23458] IPv6: NLM_F_REPLACE set, but no existing node found! [ 505.590555][T23458] netlink: 'syz.2.4738': attribute type 1 has an invalid length. [ 505.844536][T23471] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 505.911711][T23471] bond3 (unregistering): Released all slaves [ 506.070367][T23472] __nla_validate_parse: 12 callbacks suppressed [ 506.070388][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'. [ 506.151572][T23472] team0: Port device dummy0 removed [ 506.186114][T23496] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4746'. [ 506.198044][T23495] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4747'. [ 506.302659][T23501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4749'. [ 506.459672][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 506.467759][ C0] lec:lec_tx_timeout: lec0 [ 506.472807][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.506609][T23515] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4754'. [ 506.516800][T23515] 8021q: VLANs not supported on gre0 [ 506.564345][T23517] geneve4: entered promiscuous mode [ 506.688885][T23523] netlink: 'syz.0.4758': attribute type 1 has an invalid length. [ 506.702590][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4758'. [ 506.712313][T23523] netlink: 'syz.0.4758': attribute type 1 has an invalid length. [ 506.978740][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4764'. [ 507.601580][T23572] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4769'. [ 507.612127][T23572] net_ratelimit: 4 callbacks suppressed [ 507.612147][T23572] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 507.751409][T23581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4774'. [ 507.779885][T23585] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4775'. [ 507.938916][T23595] sctp: [Deprecated]: syz.3.4777 (pid 23595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.938916][T23595] Use struct sctp_sack_info instead [ 508.307695][T23614] Unsupported ieee802154 address type: 0 [ 508.339398][T23617] syzkaller1: entered promiscuous mode [ 508.358656][T23617] syzkaller1: entered allmulticast mode [ 508.390923][T23619] syzkaller0: entered promiscuous mode [ 508.403427][T23619] syzkaller0: entered allmulticast mode [ 508.590436][T23631] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 508.706140][T23631] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 508.871008][T23645] netlink: 'syz.2.4793': attribute type 11 has an invalid length. [ 508.908842][T23649] netlink: 'syz.3.4795': attribute type 1 has an invalid length. [ 508.970647][T23649] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.056395][T23656] syzkaller0: entered promiscuous mode [ 509.078167][T23656] syzkaller0: entered allmulticast mode [ 509.500681][T23695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.775515][T23712] netlink: zone id is out of range [ 509.781836][T23712] netlink: zone id is out of range [ 509.787335][T23712] netlink: zone id is out of range [ 509.798584][T23712] netlink: zone id is out of range [ 509.805992][T23712] netlink: zone id is out of range [ 509.812917][T23712] netlink: zone id is out of range [ 509.818084][T23712] netlink: zone id is out of range [ 509.884656][T23719] delete_channel: no stack [ 509.992280][T23727] xt_hashlimit: size too large, truncated to 1048576 [ 510.193523][T23740] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 510.888969][T23767] xt_limit: Overflow, try lower: 604147548/4200216962 [ 510.891970][T23763] bond6: entered promiscuous mode [ 510.919781][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 510.926883][T23763] bond6: entered allmulticast mode [ 510.933174][T23763] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.178583][T23790] syzkaller0: entered promiscuous mode [ 511.214844][T23790] syzkaller0: entered allmulticast mode [ 511.388512][T23790] __nla_validate_parse: 75 callbacks suppressed [ 511.388535][T23790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4831'. [ 511.480093][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 511.488214][ C0] lec:lec_tx_timeout: lec0 [ 511.495364][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 512.179212][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4846'. [ 512.391857][T23852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 512.630662][T23870] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4852'. [ 512.642244][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4853'. [ 512.660172][T23872] : entered promiscuous mode [ 512.764466][T23870] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4852'. [ 512.780970][T23870] syzkaller0: entered allmulticast mode [ 512.925113][T23883] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4859'. [ 512.959959][T23883] net_ratelimit: 138 callbacks suppressed [ 512.959983][T23883] netlink: Conntrack attr has 3 unknown bytes [ 513.091397][T23890] bond3: entered allmulticast mode [ 513.877689][T23921] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4870'. [ 513.886821][T23924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4871'. [ 513.894379][T23925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4869'. [ 514.113086][T23934] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 514.276683][T23946] netlink: 'syz.3.4877': attribute type 9 has an invalid length. [ 514.755107][T23971] syzkaller0: entered promiscuous mode [ 514.781983][T23971] syzkaller0: entered allmulticast mode [ 514.798180][T23975] netlink: 'syz.3.4888': attribute type 1 has an invalid length. [ 514.876479][T23981] netlink: 'syz.1.4890': attribute type 11 has an invalid length. [ 514.964616][T23978] tipc: Enabling of bearer rejected, failed to enable media [ 515.128131][T24001] netlink: 'syz.2.4895': attribute type 1 has an invalid length. [ 515.158659][T24001] 8021q: adding VLAN 0 to HW filter on device bond8 [ 517.319215][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 517.327366][ C0] lec:lec_tx_timeout: lec0 [ 517.333218][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 517.780774][T23975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.082835][T24026] netlink: 'syz.3.4901': attribute type 1 has an invalid length. [ 518.155410][T24035] __nla_validate_parse: 3 callbacks suppressed [ 518.155432][T24035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4905'. [ 518.162933][T24026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 518.204147][T24029] tipc: Enabling of bearer rejected, failed to enable media [ 518.382133][T24046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4909'. [ 518.425260][T24046] netlink: 'syz.3.4909': attribute type 1 has an invalid length. [ 518.464456][T24046] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4909'. [ 518.514427][T24053] netlink: 'syz.4.4913': attribute type 1 has an invalid length. [ 518.527005][T24053] netlink: 'syz.4.4913': attribute type 2 has an invalid length. [ 518.657368][T24062] netlink: 'syz.4.4913': attribute type 1 has an invalid length. [ 518.667305][T24062] netlink: 'syz.4.4913': attribute type 2 has an invalid length. [ 518.726855][T24065] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4916'. [ 518.741485][T24065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4916'. [ 518.923991][T24075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4921'. [ 518.962981][T24075] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4921'. [ 518.990400][T24083] netlink: 'syz.2.4923': attribute type 1 has an invalid length. [ 518.998880][T24083] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4923'. [ 519.020099][T24077] bond8: option min_links: invalid value (18446744073709551614) [ 519.029335][T24077] bond8: option min_links: allowed values 0 - 2147483647 [ 519.044068][T24077] bond8 (unregistering): Released all slaves [ 519.058981][T24083] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4923'. [ 519.068453][T24083] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4923'. [ 519.306112][T24100] validate_nla: 1 callbacks suppressed [ 519.306136][T24100] netlink: 'syz.3.4928': attribute type 1 has an invalid length. [ 519.340344][T24100] netlink: 'syz.3.4928': attribute type 4 has an invalid length. [ 519.524629][T24116] netlink: 'syz.3.4933': attribute type 15 has an invalid length. [ 520.143738][T24150] netlink: 'syz.3.4941': attribute type 1 has an invalid length. [ 520.168704][T24153] netlink: 'syz.0.4944': attribute type 12 has an invalid length. [ 520.233449][T24150] 8021q: adding VLAN 0 to HW filter on device bond8 [ 520.325905][T24153] bond4: option primary_reselect: invalid value (255) [ 520.337834][T24153] bond4 (unregistering): Released all slaves [ 520.346096][T24168] netlink: 'syz.1.4947': attribute type 1 has an invalid length. [ 520.364919][T24168] netlink: 'syz.1.4947': attribute type 7 has an invalid length. [ 520.377645][T24168] netlink: 'syz.1.4947': attribute type 8 has an invalid length. [ 520.392936][T24160] bond8: (slave ip6erspan0): making interface the new active one [ 520.393226][T24168] netlink: 'syz.1.4947': attribute type 1 has an invalid length. [ 520.405667][T24160] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 520.414147][T24168] netlink: 'syz.1.4947': attribute type 7 has an invalid length. [ 520.736038][T24186] xt_CT: No such helper "snmp_trap" [ 520.877805][T24186] xt_CT: No such helper "snmp_trap" [ 520.950172][T24202] Unsupported ieee802154 address type: 0 [ 520.958776][T24186] xt_CT: No such helper "snmp_trap" [ 521.057804][T24186] xt_CT: No such helper "snmp_trap" [ 521.200703][T24186] xt_CT: No such helper "snmp_trap" [ 521.292549][T24186] xt_CT: No such helper "snmp_trap" [ 521.372169][T24186] xt_CT: No such helper "snmp_trap" [ 521.482354][T24186] xt_CT: No such helper "snmp_trap" [ 521.590341][T24236] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.598317][T24236] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.820166][ T5912] IPVS: starting estimator thread 0... [ 521.920622][T24245] IPVS: using max 27 ests per chain, 64800 per kthread [ 522.052662][T24260] netem: incorrect gi model size [ 522.058466][T24260] netem: change failed [ 522.178813][T24262] udevd[24262]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 522.205969][T24262] udevd[24262]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 522.349855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 522.358168][ C0] lec:lec_tx_timeout: lec0 [ 522.367528][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 522.494424][T24275] can: request_module (can-proto-0) failed. [ 522.821032][T24284] bridge7: entered promiscuous mode [ 522.834930][T24284] bridge7: entered allmulticast mode [ 522.898204][T24287] sctp: [Deprecated]: syz.2.4977 (pid 24287) Use of int in maxseg socket option. [ 522.898204][T24287] Use struct sctp_assoc_value instead [ 523.041846][T24294] tap0: tun_chr_ioctl cmd 1074025676 [ 523.047222][T24294] tap0: owner set to 0 [ 523.490202][T24322] bond9: entered promiscuous mode [ 523.495328][T24322] bond9: entered allmulticast mode [ 523.502823][T24322] 8021q: adding VLAN 0 to HW filter on device bond9 [ 523.521032][T24326] __nla_validate_parse: 16 callbacks suppressed [ 523.521047][T24326] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4986'. [ 523.540651][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4985'. [ 523.542041][T24326] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4986'. [ 523.564647][T24322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4985'. [ 523.575047][T24322] block nbd3: Unsupported socket: should be TCP or UNIX. [ 523.781330][T24337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4991'. [ 523.781931][T24336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4990'. [ 523.800189][T24337] vlan2: entered allmulticast mode [ 523.800212][T24337] gretap0: entered allmulticast mode [ 523.855244][T24336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4990'. [ 524.022320][T24349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.038428][T24348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.058410][T24354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.112428][T24358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.123140][T24353] syzkaller1: entered promiscuous mode [ 524.128662][T24353] syzkaller1: entered allmulticast mode [ 524.158359][T24361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.207834][T24363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4998'. [ 524.227295][T24358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.233212][T24363] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4998'. [ 524.286004][T24363] veth1: entered promiscuous mode [ 524.329709][T24368] openvswitch: netlink: Missing key (keys=40, expected=100) [ 524.382398][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'. [ 524.397483][T24370] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.420158][T24370] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.501141][T24379] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 524.523959][T24381] sctp: [Deprecated]: syz.1.5005 (pid 24381) Use of int in max_burst socket option deprecated. [ 524.523959][T24381] Use struct sctp_assoc_value instead [ 524.573433][T24383] PKCS7: Unknown OID: [4] (bad) [ 524.580383][T24383] PKCS7: Only support pkcs7_signedData type [ 525.546105][T24439] sctp: [Deprecated]: syz.4.5025 (pid 24439) Use of int in maxseg socket option. [ 525.546105][T24439] Use struct sctp_assoc_value instead [ 525.792357][T24448] netem: change failed [ 525.985437][T24463] batman_adv: batadv0: Interface deactivated: dummy0 [ 525.992565][T24463] batman_adv: batadv0: Removing interface: dummy0 [ 526.013120][T24463] bridge_slave_0: left allmulticast mode [ 526.019552][T24463] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.047647][T24463] bridge_slave_1: left allmulticast mode [ 526.091718][T24463] bridge_slave_1: left promiscuous mode [ 526.124165][T24463] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.188867][T24463] bond0: (slave bond_slave_0): Releasing backup interface [ 526.250762][T24463] bond0: (slave bond_slave_1): Releasing backup interface [ 526.316625][T24463] team0: Port device team_slave_0 removed [ 526.336355][T24463] team0: Port device team_slave_1 removed [ 526.454956][T24463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.468648][T24463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.484062][T24463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.492610][T24463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.507889][T24463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 526.561712][T24465] geneve0: entered promiscuous mode [ 526.833148][T24494] validate_nla: 6 callbacks suppressed [ 526.833168][T24494] netlink: 'syz.4.5042': attribute type 4 has an invalid length. [ 526.975017][T24499] syzkaller0: entered promiscuous mode [ 526.980843][T24499] syzkaller0: entered allmulticast mode [ 527.379720][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 527.387896][ C0] lec:lec_tx_timeout: lec0 [ 527.393139][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 528.526080][T24440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.948600][T24542] netlink: 'syz.4.5048': attribute type 1 has an invalid length. [ 530.284340][T24541] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 530.313802][T24541] bond10: (slave lo): Enslaving as an active interface with an up link [ 530.328250][T24541] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 530.598149][T24570] xt_hashlimit: size too large, truncated to 1048576 [ 530.826762][T24581] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 530.882063][T24587] xt_TCPMSS: Only works on TCP SYN packets [ 530.949420][T24589] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 530.989758][T24589] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 531.023926][T24589] tipc: Resetting bearer [ 531.280628][T24603] __nla_validate_parse: 6 callbacks suppressed [ 531.280650][T24603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5067'. [ 531.500073][T24614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5069'. [ 531.865195][T24642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.872586][T24642] IPv6: NLM_F_CREATE should be set when creating new route [ 531.900114][T24642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5073'. [ 531.977058][T24621] tipc: Resetting bearer [ 532.401692][T24667] tipc: Enabled bearer , priority 24 [ 532.409206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 532.417251][ C0] lec:lec_tx_timeout: lec0 [ 532.422703][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 532.534852][T24679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5084'. [ 533.000926][T24707] block nbd3: server does not support multiple connections per device. [ 533.032014][T24707] block nbd3: shutting down sockets [ 533.168148][T24715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5090'. [ 533.425321][T24732] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.5094'. [ 533.444428][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'. [ 533.460293][T24732] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.5094'. [ 533.543768][T24739] 8021q: VLANs not supported on sit0 [ 533.552296][T24738] 8021q: VLANs not supported on sit0 [ 533.722055][T24744] netlink: 'syz.3.5098': attribute type 1 has an invalid length. [ 533.749410][T24744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.756895][T24744] IPv6: NLM_F_CREATE should be set when creating new route [ 534.048094][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 534.060567][T24770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5103'. [ 534.104071][T24766] 8021q: VLANs not supported on ipvlan0 [ 534.181857][T24774] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 534.614530][T24796] netlink: 'syz.0.5111': attribute type 1 has an invalid length. [ 534.631329][T24796] netlink: 'syz.0.5111': attribute type 2 has an invalid length. [ 534.933169][T24813] veth0: entered promiscuous mode [ 534.977962][T24808] veth0: left promiscuous mode [ 534.994541][T24815] netlink: 'syz.1.5117': attribute type 1 has an invalid length. [ 536.044521][T24882] netlink: 'syz.3.5135': attribute type 1 has an invalid length. [ 536.223111][T24888] xt_hashlimit: size too large, truncated to 1048576 [ 536.416388][T24899] geneve5: entered promiscuous mode [ 536.422203][T24899] geneve5: entered allmulticast mode [ 536.430735][ T6908] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 536.446496][ T6908] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 536.480848][T24901] delete_channel: no stack [ 536.485661][ T6908] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 536.540541][ T6908] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 536.663726][T24907] __nla_validate_parse: 7 callbacks suppressed [ 536.663748][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 537.014921][T24930] netlink: 'syz.3.5146': attribute type 1 has an invalid length. [ 537.043315][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5148'. [ 537.381396][T24940] bond4: option all_slaves_active: invalid value (222) [ 537.407599][T24940] bond4 (unregistering): Released all slaves [ 537.430187][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 537.438323][ C0] lec:lec_tx_timeout: lec0 [ 537.443602][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 537.822384][T24965] syzkaller0: entered promiscuous mode [ 537.827944][T24965] syzkaller0: entered allmulticast mode [ 538.187875][T24987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5159'. [ 538.209037][T24987] Cannot find add_set index 0 as target [ 540.828524][T25050] netlink: 'syz.0.5174': attribute type 1 has an invalid length. [ 540.871455][T25050] 8021q: adding VLAN 0 to HW filter on device bond4 [ 541.044249][T25053] bond4: (slave veth9): Enslaving as an active interface with a down link [ 541.088530][T25050] vlan5: entered allmulticast mode [ 541.096087][T25050] veth0_to_bond: entered allmulticast mode [ 541.104114][T25050] veth0_to_bond: entered promiscuous mode [ 541.111516][T25050] veth0_to_bond: left promiscuous mode [ 541.120379][T25050] bond4: (slave vlan5): making interface the new active one [ 541.138910][T25050] veth0_to_bond: entered promiscuous mode [ 541.149322][T25050] vlan5: entered promiscuous mode [ 541.158976][T25050] bond4: (slave vlan5): Enslaving as an active interface with an up link [ 541.648934][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 541.657355][T25096] h: entered promiscuous mode [ 541.681996][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 541.699978][T25099] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.751595][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 541.813181][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 541.881826][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 542.024557][T25089] hsr0 speed is unknown, defaulting to 1000 [ 542.071261][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 542.095766][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 542.169921][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 542.184693][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 542.194389][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 542.204956][T25103] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5188'. [ 542.459672][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 542.467853][ C0] lec:lec_tx_timeout: lec0 [ 542.473487][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 542.615796][T25149] xt_hashlimit: size too large, truncated to 1048576 [ 542.783206][T25165] netlink: 'syz.0.5199': attribute type 2 has an invalid length. [ 542.900363][T25145] syzkaller0: entered promiscuous mode [ 542.905900][T25145] syzkaller0: entered allmulticast mode [ 543.117587][T25176] x_tables: duplicate underflow at hook 3 [ 543.927530][T25209] bond5: option resend_igmp: invalid value (32767) [ 543.966570][T25209] bond5: option resend_igmp: allowed values 0 - 255 [ 543.987324][T25209] bond5 (unregistering): Released all slaves [ 544.228709][T25228] netlink: 'syz.3.5214': attribute type 1 has an invalid length. [ 544.557205][T25247] openvswitch: netlink: IP tunnel dst address not specified [ 544.585205][T25251] openvswitch: netlink: IP tunnel dst address not specified [ 545.086872][T25278] netlink: 'syz.4.5231': attribute type 1 has an invalid length. [ 545.262421][T25278] bond5: entered promiscuous mode [ 545.267622][T25278] bond5: entered allmulticast mode [ 545.280399][T25278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 546.071997][T25325] netlink: 'syz.4.5242': attribute type 1 has an invalid length. [ 546.438471][T25345] netlink: 'syz.1.5247': attribute type 2 has an invalid length. [ 546.552380][T25351] syzkaller1: entered promiscuous mode [ 546.558221][T25351] syzkaller1: entered allmulticast mode [ 546.656985][T25358] netlink: 'syz.0.5252': attribute type 39 has an invalid length. [ 546.783765][T25366] netlink: 'syz.2.5254': attribute type 39 has an invalid length. [ 547.489182][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 547.497351][ C0] lec:lec_tx_timeout: lec0 [ 547.502068][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 547.617965][T25410] __nla_validate_parse: 36 callbacks suppressed [ 547.617987][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5263'. [ 547.626101][T25370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.154911][T25385] veth0: entered promiscuous mode [ 548.212895][ T6908] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.226210][ T6908] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.263360][ T6908] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.294691][ T6908] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.335299][T25386] veth0: left promiscuous mode [ 548.363576][ T6908] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.411365][ T6908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.442952][ T6908] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.490416][ T6908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.220317][T25479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5275'. [ 549.353056][T25482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.366042][T25440] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5266'. [ 549.533923][T25456] netlink: 'syz.3.5270': attribute type 13 has an invalid length. [ 549.865301][T25505] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5277'. [ 549.891028][T25506] openvswitch: netlink: Message has -2 unknown bytes. [ 549.898749][T25506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5276'. [ 552.121087][T25477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.130361][T25437] tipc: Enabling of bearer rejected, failed to enable media [ 552.441200][ T83] vlan5: left promiscuous mode [ 552.621959][T25558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5284'. [ 552.704786][T25564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5282'. [ 552.720241][T25566] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 552.753776][T25567] netlink: 'syz.0.5287': attribute type 7 has an invalid length. [ 552.902999][T25573] netlink: 'syz.1.5289': attribute type 3 has an invalid length. [ 552.931238][T25573] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5289'. [ 552.941936][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5289'. [ 552.951497][T25573] netlink: 'syz.1.5289': attribute type 5 has an invalid length. [ 552.960523][T25573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5289'. [ 553.101674][T25573] geneve2: entered promiscuous mode [ 553.120652][T25573] geneve2: entered allmulticast mode [ 553.151481][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 553.167562][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 553.206998][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 553.223994][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 553.270747][T25587] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5293'. [ 553.574498][T25601] smc: net device team0 applied user defined pnetid SYZ2 [ 553.719097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6220 ms [ 553.727210][ C0] lec:lec_tx_timeout: lec0 [ 553.732694][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.111573][T25604] hsr0 speed is unknown, defaulting to 1000 [ 554.233003][T25619] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5304'. [ 554.426694][T25622] syzkaller0: entered promiscuous mode [ 554.433923][T25622] syzkaller0: entered allmulticast mode [ 554.482783][T25633] sctp: [Deprecated]: syz.3.5308 (pid 25633) Use of int in max_burst socket option. [ 554.482783][T25633] Use struct sctp_assoc_value instead [ 554.552774][T25635] IPVS: length: 191 != 8 [ 554.625778][T25637] sctp: [Deprecated]: syz.1.5309 (pid 25637) Use of int in max_burst socket option deprecated. [ 554.625778][T25637] Use struct sctp_assoc_value instead [ 555.198043][T25631] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 555.434167][T25628] lec:lec_atm_close: lec0: Shut down! [ 555.715427][T25650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5312'. [ 557.911124][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 558.402075][T25696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5320'. [ 558.413710][T25696] lo: Caught tx_queue_len zero misconfig [ 558.694207][T25650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.707790][T25690] netlink: 'syz.3.5320': attribute type 1 has an invalid length. [ 558.752699][T25690] netlink: 'syz.3.5320': attribute type 2 has an invalid length. [ 558.955895][T25717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5325'. [ 558.972099][T25719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5324'. [ 559.040227][T25725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5321'. [ 559.080674][T25719] 8021q: adding VLAN 0 to HW filter on device bond11 [ 559.164634][T25726] bond11: entered promiscuous mode [ 559.196286][T25726] bond11: entered allmulticast mode [ 559.243902][T25726] 8021q: adding VLAN 0 to HW filter on device bond11 [ 559.271424][T25726] team0: Port device bond11 added [ 559.333752][T25719] vxcan3: entered promiscuous mode [ 559.360185][T25719] bond11: (slave vxcan3): refused to change device type [ 559.627172][T25747] netlink: 'syz.4.5330': attribute type 2 has an invalid length. [ 559.647932][T25747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5330'. [ 559.795182][T25751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5332'. [ 559.919986][T25759] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5336'. [ 559.942010][T25759] syzkaller0: entered promiscuous mode [ 559.963499][T25762] netlink: 'syz.3.5335': attribute type 1 has an invalid length. [ 559.964712][T25759] syzkaller0: entered allmulticast mode [ 560.117949][T25768] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5336'. [ 560.256556][T25778] netlink: 'syz.2.5339': attribute type 10 has an invalid length. [ 560.257379][T25781] netlink: 'syz.2.5339': attribute type 10 has an invalid length. [ 560.275414][T25782] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.5340'. [ 560.383987][T25778] team0 (unregistering): Port device team_slave_0 removed [ 560.401612][T25778] team0 (unregistering): Port device team_slave_1 removed [ 560.439721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 560.447856][ C0] lec:lec_tx_timeout: lec0 [ 560.453439][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.682510][T25790] syzkaller1: entered promiscuous mode [ 560.718691][T25790] syzkaller1: entered allmulticast mode [ 560.786883][T25790] mac80211_hwsim hwsim38 ÿ: renamed from wlan1 [ 561.106176][T25818] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 561.209794][T25821] netlink: 'syz.2.5353': attribute type 4 has an invalid length. [ 561.622783][T25846] xt_bpf: check failed: parse error [ 561.636699][T25846] netlink: 'syz.3.5360': attribute type 32 has an invalid length. [ 561.698328][T25854] sctp: [Deprecated]: syz.3.5360 (pid 25854) Use of int in maxseg socket option. [ 561.698328][T25854] Use struct sctp_assoc_value instead [ 561.808578][T25846] bond12: Setting coupled_control to off (0) [ 562.033667][T25857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.056321][T25857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.233342][T25857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.250013][T25857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.463289][T25857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.482426][T25857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.497231][T25896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.528821][T25896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.714995][T25904] netlink: 'syz.3.5375': attribute type 26 has an invalid length. [ 562.730435][T25857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.749798][T25857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.983064][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 47118 - 0 [ 563.092919][T22807] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 47118 - 0 [ 563.238116][T22809] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 47118 - 0 [ 563.326111][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.392498][T25487] udevd[25487]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 563.403266][T22809] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 47118 - 0 [ 563.692664][T25944] netlink: 'syz.4.5384': attribute type 2 has an invalid length. [ 564.012462][T25969] __nla_validate_parse: 9 callbacks suppressed [ 564.012484][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5391'. [ 564.101273][T25972] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5392'. [ 564.142323][T25972] xt_policy: neither incoming nor outgoing policy selected [ 564.825919][T26021] SET target dimension over the limit! [ 565.302071][T26041] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5408'. [ 565.392805][T26041] netlink: 'syz.0.5408': attribute type 1 has an invalid length. [ 565.469573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 565.477725][ C0] lec:lec_tx_timeout: lec0 [ 565.483617][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 565.997033][T26095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5422'. [ 566.175296][T26103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5424'. [ 566.240219][T26109] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 566.342501][T26116] siw: device registration error -23 [ 566.357149][T26115] siw: device registration error -23 [ 566.364737][T26115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5429'. [ 566.374568][T26115] block nbd3: Unsupported socket: should be TCP or UNIX. [ 566.466175][T26122] netlink: 'syz.2.5428': attribute type 1 has an invalid length. [ 566.515536][T26122] netlink: 'syz.2.5428': attribute type 11 has an invalid length. [ 566.516117][T26125] netlink: 'syz.3.5431': attribute type 1 has an invalid length. [ 566.566514][T26126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5428'. [ 566.568821][T26122] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5428'. [ 566.587636][T26125] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5431'. [ 566.626255][T26125] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5431'. [ 567.441704][T26172] syzkaller0: entered promiscuous mode [ 567.859719][T26198] netlink: 'syz.0.5451': attribute type 1 has an invalid length. [ 567.953080][T26198] bond5: entered promiscuous mode [ 567.958461][T26198] bond5: entered allmulticast mode [ 567.966043][T26198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.000440][T26205] netlink: 'syz.3.5453': attribute type 4 has an invalid length. [ 568.098756][ T215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.114174][T26198] tipc: Started in network mode [ 568.123848][T26198] tipc: Node identity , cluster identity 4711 [ 568.139197][ T215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.140922][T26198] tipc: Failed to obtain node identity [ 568.152898][T26198] tipc: Enabling of bearer rejected, failed to enable media [ 568.409294][T26238] xt_bpf: check failed: parse error [ 568.566346][T26232] netlink: 'syz.1.5459': attribute type 29 has an invalid length. [ 568.630764][T26232] IPVS: set_ctl: invalid protocol: 1 172.30.1.2:20002 [ 568.651855][T26232] netlink: 'syz.1.5459': attribute type 29 has an invalid length. [ 568.735276][T26244] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 568.793303][T26244] bond6 (unregistering): Released all slaves [ 569.186774][T26267] syzkaller1: left promiscuous mode [ 569.217183][T26267] syzkaller1: left allmulticast mode [ 569.321492][T26279] sock: sock_set_timeout: `syz.2.5471' (pid 26279) tries to set negative timeout [ 569.620213][T26292] __nla_validate_parse: 11 callbacks suppressed [ 569.620238][T26292] netlink: 393 bytes leftover after parsing attributes in process `syz.1.5476'. [ 569.672217][T26296] netlink: 'syz.2.5475': attribute type 1 has an invalid length. [ 569.686600][T26297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5477'. [ 569.762513][T26296] 8021q: adding VLAN 0 to HW filter on device bond9 [ 569.804591][T26304] bond4: (slave veth0_to_bond): Releasing active interface [ 569.820570][T26310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5480'. [ 569.938510][T26304] veth0_to_bond: left promiscuous mode [ 569.968228][T26304] veth0_to_bond: entered promiscuous mode [ 569.986254][T26304] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 569.999686][T26322] netlink: 'syz.4.5483': attribute type 83 has an invalid length. [ 570.019928][T26316] bond9: entered promiscuous mode [ 570.025125][T26316] bond9: entered allmulticast mode [ 570.045173][T26326] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 570.320956][T26340] batadv_slave_0: mtu less than device minimum [ 570.708816][T26314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 570.719256][T26314] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 570.810179][T26314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 570.829154][T26314] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 571.176154][T26392] bridge5: entered promiscuous mode [ 571.326276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 571.334427][ C0] lec:lec_tx_timeout: lec0 [ 571.340508][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 571.679711][T26421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5502'. [ 571.858426][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5506'. [ 571.868425][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5506'. [ 572.481656][T26454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5509'. [ 572.957769][T26487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5520'. [ 573.062308][T26490] bond0: entered promiscuous mode [ 573.067447][T26490] bond_slave_0: entered promiscuous mode [ 573.098489][T26490] bond_slave_1: entered promiscuous mode [ 573.107076][T26490] batadv0: entered promiscuous mode [ 573.134388][T26490] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 573.163782][T26490] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 573.215451][T26490] hsr1: entered promiscuous mode [ 573.241992][T26490] hsr1: entered allmulticast mode [ 573.258008][T26490] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 573.276523][T26490] bond0: left promiscuous mode [ 573.287173][T26490] bond_slave_0: left promiscuous mode [ 573.294169][T26490] bond_slave_1: left promiscuous mode [ 573.311465][T26490] batadv0: left promiscuous mode [ 573.348688][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5523'. [ 573.471813][T26480] veth0: entered promiscuous mode [ 573.500449][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5516'. [ 573.575902][T26480] veth0 (unregistering): left promiscuous mode [ 573.780295][T26523] Unsupported ieee802154 address type: 0 [ 573.990457][T26537] Cannot find del_set index 2 as target [ 574.006814][T26538] netlink: 'syz.2.5530': attribute type 21 has an invalid length. [ 574.027575][T26538] netlink: 'syz.2.5530': attribute type 22 has an invalid length. [ 574.054798][T26538] netlink: 'syz.2.5530': attribute type 23 has an invalid length. [ 574.086473][T26538] netlink: 'syz.2.5530': attribute type 25 has an invalid length. [ 574.162281][T26538] syzkaller0: entered promiscuous mode [ 574.167839][T26538] syzkaller0: entered allmulticast mode [ 574.634382][T26577] netlink: 'syz.3.5540': attribute type 12 has an invalid length. [ 574.701385][T26577] netlink: 'syz.3.5540': attribute type 1 has an invalid length. [ 574.710867][T26577] __nla_validate_parse: 3 callbacks suppressed [ 574.710886][T26577] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5540'. [ 574.772533][T26586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5540'. [ 574.784388][T26586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5540'. [ 574.938304][T26591] netlink: 'syz.1.5546': attribute type 4 has an invalid length. [ 575.006283][T26597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5545'. [ 575.230074][T26616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5550'. [ 575.280152][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5550'. [ 575.607622][T26644] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5556'. [ 575.638219][T26642] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5556'. [ 575.684590][T26641] syzkaller1: entered promiscuous mode [ 575.725695][T26641] syzkaller1: entered allmulticast mode [ 575.975651][T26667] netlink: 'syz.4.5562': attribute type 1 has an invalid length. [ 576.027398][T26667] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 576.073700][T26674] netlink: 'syz.2.5564': attribute type 1 has an invalid length. [ 576.114234][T26674] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 576.137262][T26685] netlink: 'syz.1.5563': attribute type 1 has an invalid length. [ 576.349893][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 576.358013][ C0] lec:lec_tx_timeout: lec0 [ 576.361675][T26698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5568'. [ 576.363373][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 576.425006][T26701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5570'. [ 576.483130][T26700] veth5: entered promiscuous mode [ 576.604953][T26705] openvswitch: netlink: Message has 6 unknown bytes. [ 577.188340][T26745] nbd: nbd64 already in use [ 577.423693][T26757] syzkaller0: entered promiscuous mode [ 577.541172][T26757] syzkaller0: entered allmulticast mode [ 577.613512][T26772] sctp: [Deprecated]: syz.3.5581 (pid 26772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.613512][T26772] Use struct sctp_sack_info instead [ 577.710696][T26716] udevd[26716]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 578.134699][T26786] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 578.206341][T26786] bond10 (unregistering): Released all slaves [ 578.564877][T26804] syzkaller0: entered promiscuous mode [ 578.602923][T26804] syzkaller0: entered allmulticast mode [ 579.048707][T26828] ip6t_REJECT: ECHOREPLY is not supported [ 579.130211][T26829] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 579.167529][T26831] syzkaller0: entered promiscuous mode [ 579.184473][T26831] syzkaller0: entered allmulticast mode [ 579.358871][T26841] xfrm2: entered allmulticast mode [ 579.667823][T26856] veth0: entered promiscuous mode [ 579.702808][T26855] veth0: left promiscuous mode [ 579.844147][T26866] __nla_validate_parse: 12 callbacks suppressed [ 579.844171][T26866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5608'. [ 580.016607][T26876] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5611'. [ 580.046375][T26876] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5611'. [ 580.117477][T26884] tunl0: Caught tx_queue_len zero misconfig [ 580.183343][T26884] bond_slave_0: Caught tx_queue_len zero misconfig [ 580.346041][T26897] x_tables: duplicate underflow at hook 4 [ 580.433626][T26907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5620'. [ 580.460068][T26907] openvswitch: netlink: Missing key (keys=40, expected=80) [ 580.728641][T26929] ip6t_srh: unknown srh invflags 4000 [ 580.735623][T26922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5623'. [ 581.031121][T26936] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5626'. [ 581.066557][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5628'. [ 581.331532][T26952] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5632'. [ 581.342305][T26953] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5632'. [ 581.379608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 581.387682][ C0] lec:lec_tx_timeout: lec0 [ 581.502807][T26961] netlink: 412 bytes leftover after parsing attributes in process `syz.0.5635'. [ 581.723336][T26972] validate_nla: 2 callbacks suppressed [ 581.723362][T26972] netlink: 'syz.0.5638': attribute type 28 has an invalid length. [ 581.756256][T26972] netlink: 'syz.0.5638': attribute type 3 has an invalid length. [ 582.008052][T26991] netlink: 'syz.0.5644': attribute type 2 has an invalid length. [ 582.031965][T26991] netlink: 'syz.0.5644': attribute type 8 has an invalid length. [ 582.108471][T26994] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 582.363710][T27012] nbd: couldn't find device at index 242 [ 582.760074][T27031] netlink: 'syz.2.5655': attribute type 1 has an invalid length. [ 583.031561][T27051] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 583.093012][T27051] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 583.120118][T27051] gretap2: entered promiscuous mode [ 583.139402][T27051] gretap2: entered allmulticast mode [ 583.362484][T27071] IPv6: sit4: Disabled Multicast RS [ 583.387166][T27071] sit4: entered allmulticast mode [ 583.992664][T27109] netlink: 'syz.1.5675': attribute type 1 has an invalid length. [ 584.278041][T27136] netlink: 'syz.4.5683': attribute type 23 has an invalid length. [ 584.570869][T27154] netlink: 'syz.1.5689': attribute type 4 has an invalid length. [ 585.012727][T27191] __nla_validate_parse: 16 callbacks suppressed [ 585.012754][T27191] netlink: 18 bytes leftover after parsing attributes in process `syz.0.5697'. [ 585.231208][T27207] syzkaller1: entered promiscuous mode [ 585.236936][T27207] syzkaller1: entered allmulticast mode [ 585.645948][T27224] xt_limit: Overflow, try lower: 604147548/4200216962 [ 585.665698][T27224] tipc: Invalid UDP bearer configuration [ 585.665760][T27224] tipc: Enabling of bearer rejected, failed to enable media [ 585.750931][T27236] netlink: 'syz.4.5711': attribute type 24 has an invalid length. [ 585.936071][T27249] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 586.429007][T27232] bond6: entered promiscuous mode [ 586.435051][T27236] netlink: 'syz.4.5711': attribute type 24 has an invalid length. [ 586.442227][T27247] macvlan4: entered promiscuous mode [ 586.449501][T27247] macvlan4: entered allmulticast mode [ 586.455944][T27247] bond6: (slave macvlan4): Opening slave failed [ 587.303233][T27312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5735'. [ 587.327420][T27312] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 587.352146][T27312] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 587.374571][T27312] team0: Failed to send options change via netlink (err -105) [ 587.393014][T27312] team0: Port device batadv1 added [ 587.556463][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5739'. [ 587.569978][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5739'. [ 587.581199][T27328] validate_nla: 63 callbacks suppressed [ 587.581216][T27328] netlink: 'syz.1.5739': attribute type 14 has an invalid length. [ 587.595338][T27328] netlink: 'syz.1.5739': attribute type 13 has an invalid length. [ 587.637652][T27331] xfrm1: entered allmulticast mode [ 587.657835][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5740'. [ 587.877406][T27345] netlink: 4628 bytes leftover after parsing attributes in process `syz.1.5745'. [ 587.990754][T27348] netlink: 'syz.4.5746': attribute type 1 has an invalid length. [ 588.015332][T27348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5746'. [ 588.328362][T27375] netlink: 'syz.2.5755': attribute type 1 has an invalid length. [ 588.386292][T27375] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5755'. [ 588.409200][T27375] netlink: 'syz.2.5755': attribute type 1 has an invalid length. [ 588.419984][T27375] netlink: 'syz.2.5755': attribute type 8 has an invalid length. [ 588.427863][T27375] netlink: 606 bytes leftover after parsing attributes in process `syz.2.5755'. [ 588.472269][T27375] vlan4: entered allmulticast mode [ 588.477560][T27375] bridge0: entered allmulticast mode [ 588.533800][T27375] bridge0: port 3(vlan4) entered blocking state [ 588.572714][T27375] bridge0: port 3(vlan4) entered disabled state [ 588.572915][T27393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 588.694607][T27395] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 588.714072][T27395] bond4 (unregistering): Released all slaves [ 588.904336][T27413] sctp: [Deprecated]: syz.2.5764 (pid 27413) Use of int in maxseg socket option. [ 588.904336][T27413] Use struct sctp_assoc_value instead [ 589.055855][T27412] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 589.401727][T27439] ip6tnl0: Caught tx_queue_len zero misconfig [ 589.443891][T27441] netlink: 'syz.4.5773': attribute type 16 has an invalid length. [ 589.478931][T27441] netlink: 'syz.4.5773': attribute type 17 has an invalid length. [ 589.553327][T27441] tunl0: left promiscuous mode [ 589.642198][T27441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.889604][T27470] netlink: 'syz.0.5781': attribute type 1 has an invalid length. [ 589.907801][T27470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5781'. [ 589.925320][T27470] netlink: 'syz.0.5781': attribute type 2 has an invalid length. [ 590.206708][T27492] __nla_validate_parse: 1 callbacks suppressed [ 590.206730][T27492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5784'. [ 590.254627][T27492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5784'. [ 590.399796][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5788'. [ 590.619483][T27511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5790'. [ 590.637696][T27510] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 590.661440][T27510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5791'. [ 590.670779][T27521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5794'. [ 590.711522][T27523] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5795'. [ 590.714265][T27510] : entered promiscuous mode [ 590.914430][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'. [ 591.027526][T27545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5800'. [ 591.073210][T27545] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5800'. [ 591.117685][T27547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.148529][T27550] openvswitch: netlink: EtherType 50a is less than min 600 [ 592.227442][T27602] bond10: entered promiscuous mode [ 592.233364][T27602] 8021q: adding VLAN 0 to HW filter on device bond10 [ 592.293043][T27602] xt_hashlimit: size too large, truncated to 1048576 [ 592.380710][T27629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.666240][T27640] bond14: option xmit_hash_policy: invalid value (64) [ 592.692656][T27640] bond14 (unregistering): Released all slaves [ 592.993328][T27658] batadv_slave_1: Caught tx_queue_len zero misconfig [ 593.006477][T27656] validate_nla: 68 callbacks suppressed [ 593.006497][T27656] netlink: 'syz.2.5829': attribute type 1 has an invalid length. [ 593.021671][T27659] netlink: 'syz.2.5829': attribute type 1 has an invalid length. [ 593.101778][T27647] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 593.108181][T27659] bond11: entered promiscuous mode [ 593.113907][T27647] sock: sock_timestamping_bind_phc: sock not bind to device [ 593.142462][T27659] 8021q: adding VLAN 0 to HW filter on device bond11 [ 593.183018][T27638] netlink: 'syz.4.5822': attribute type 1 has an invalid length. [ 593.191057][T27638] netlink: 'syz.4.5822': attribute type 11 has an invalid length. [ 593.216685][T27665] bond11: (slave bridge10): making interface the new active one [ 593.227353][T27665] bridge10: entered promiscuous mode [ 593.238370][T27665] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 594.269369][T27735] xt_ecn: cannot match TCP bits for non-tcp packets [ 594.356039][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.367606][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.377886][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.389790][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.402373][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.479920][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.502412][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.519732][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.552803][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.575513][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.851856][T27761] team0: entered promiscuous mode [ 594.857031][T27761] team0: entered allmulticast mode [ 594.950449][T27764] veth0: Caught tx_queue_len zero misconfig [ 595.501786][T27784] bond12: option all_slaves_active: invalid value (222) [ 595.533365][T27784] bond12 (unregistering): Released all slaves [ 595.677952][T27739] hsr0 speed is unknown, defaulting to 1000 [ 596.187775][T27831] netlink: 'syz.1.5872': attribute type 1 has an invalid length. [ 596.217663][T27831] netlink: 'syz.1.5872': attribute type 1 has an invalid length. [ 596.320432][T27842] __nla_validate_parse: 85 callbacks suppressed [ 596.320451][T27842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5875'. [ 596.352392][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5872'. [ 596.382419][T27739] chnl_net:caif_netlink_parms(): no params data found [ 596.584814][T27842] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5875'. [ 596.679201][ T5836] Bluetooth: hci0: command tx timeout [ 596.793977][T27739] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.803358][T27739] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.810998][T27739] bridge_slave_0: entered allmulticast mode [ 596.821678][T27739] bridge_slave_0: entered promiscuous mode [ 596.842842][T27862] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5879'. [ 596.903661][T27739] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.932488][T27739] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.956431][T27739] bridge_slave_1: entered allmulticast mode [ 596.967895][T27884] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 597.016822][T27739] bridge_slave_1: entered promiscuous mode [ 597.051873][T27875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5881'. [ 597.106028][T27875] xt_hashlimit: invalid rate [ 597.238379][T27739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.284439][T27739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.397537][T27739] team0: Port device team_slave_0 added [ 597.416159][T27909] syz.3.5888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 597.441992][T27907] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 597.463671][T27909] CPU: 0 UID: 0 PID: 27909 Comm: syz.3.5888 Not tainted syzkaller #0 PREEMPT(full) [ 597.463700][T27909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 597.463712][T27909] Call Trace: [ 597.463721][T27909] [ 597.463729][T27909] dump_stack_lvl+0xe8/0x150 [ 597.463764][T27909] warn_alloc+0x249/0x340 [ 597.463790][T27909] ? stack_trace_save+0xa9/0x100 [ 597.463815][T27909] ? __pfx_warn_alloc+0x10/0x10 [ 597.463847][T27909] ? kasan_save_track+0x4f/0x80 [ 597.463866][T27909] ? kasan_save_track+0x3e/0x80 [ 597.463885][T27909] ? __kasan_kmalloc+0x93/0xb0 [ 597.463906][T27909] ? __kmalloc_cache_noprof+0x31c/0x660 [ 597.463927][T27909] ? xskq_create+0x56/0x170 [ 597.463952][T27909] ? xsk_setsockopt+0x54c/0x990 [ 597.463979][T27909] ? do_sock_setsockopt+0x17c/0x1b0 [ 597.463999][T27909] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 597.464020][T27909] ? do_syscall_64+0x14d/0xf80 [ 597.464047][T27909] __vmalloc_node_range_noprof+0x132/0x1730 [ 597.464107][T27909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.464137][T27909] ? __kasan_kmalloc+0x93/0xb0 [ 597.464168][T27909] vmalloc_user_noprof+0xad/0xe0 [ 597.464191][T27909] ? xskq_create+0xbf/0x170 [ 597.464222][T27909] xskq_create+0xbf/0x170 [ 597.464247][T27909] xsk_init_queue+0x8a/0xe0 [ 597.464271][T27909] xsk_setsockopt+0x54c/0x990 [ 597.464304][T27909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.464332][T27909] ? __pfx_aa_sk_perm+0x10/0x10 [ 597.464364][T27909] ? aa_sock_opt_perm+0xff/0x1a0 [ 597.464397][T27909] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 597.464420][T27909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.464452][T27909] do_sock_setsockopt+0x17c/0x1b0 [ 597.464480][T27909] __x64_sys_setsockopt+0x13d/0x1b0 [ 597.464508][T27909] do_syscall_64+0x14d/0xf80 [ 597.464530][T27909] ? trace_irq_disable+0x3b/0x150 [ 597.464546][T27909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.464565][T27909] ? clear_bhb_loop+0x40/0x90 [ 597.464591][T27909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.464611][T27909] RIP: 0033:0x7f368559c819 [ 597.464632][T27909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.464649][T27909] RSP: 002b:00007f36863e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 597.464672][T27909] RAX: ffffffffffffffda RBX: 00007f3685816090 RCX: 00007f368559c819 [ 597.464687][T27909] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 597.464698][T27909] RBP: 00007f3685632c91 R08: 0000000000000004 R09: 0000000000000000 [ 597.464711][T27909] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.464723][T27909] R13: 00007f3685816128 R14: 00007f3685816090 R15: 00007fff3604f5e8 [ 597.464758][T27909] [ 597.464797][T27739] team0: Port device team_slave_1 added [ 597.474171][T27909] Mem-Info: [ 597.474247][T27909] active_anon:7329 inactive_anon:0 isolated_anon:0 [ 597.474247][T27909] active_file:2511 inactive_file:40529 isolated_file:0 [ 597.474247][T27909] unevictable:768 dirty:126 writeback:0 [ 597.474247][T27909] slab_reclaimable:13848 slab_unreclaimable:127438 [ 597.474247][T27909] mapped:29327 shmem:1383 pagetables:1792 [ 597.474247][T27909] sec_pagetables:0 bounce:0 [ 597.474247][T27909] kernel_misc_reclaimable:0 [ 597.474247][T27909] free:1276083 free_pcp:24462 free_cma:0 [ 597.474302][T27909] Node 0 active_anon:29316kB inactive_anon:0kB active_file:10044kB inactive_file:161916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100924kB dirty:504kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16116kB pagetables:7012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 597.474355][T27909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 597.474403][T27909] Node 0 DMA free:11076kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:188kB local_pcp:84kB free_cma:0kB [ 597.474465][T27909] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 597.518272][T27905] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5887'. [ 597.547906][T27909] Node 0 [ 597.560638][T27915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5889'. [ 597.579664][T27909] DMA32 free:1259336kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29216kB inactive_anon:0kB active_file:10044kB inactive_file:161916kB unevictable:1536kB writepending:504kB zspages:0kB present:3129332kB managed:2552660kB mlocked:0kB bounce:0kB free_pcp:32296kB local_pcp:14448kB free_cma:0kB [ 597.665422][T27739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.674911][T27909] lowmem_reserve[]: [ 597.750131][T27739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.800520][T27909] 0 0 0 0 0 [ 597.800572][T27909] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 597.800634][T27909] lowmem_reserve[]: 0 0 0 0 0 [ 597.800681][T27909] Node 1 Normal free:3833792kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64912kB local_pcp:32544kB free_cma:0kB [ 597.800744][T27909] lowmem_reserve[]: 0 0 0 0 0 [ 597.800789][T27909] Node 0 DMA: 1*4kB (U) 2*8kB (U) 3*16kB (U) 2*32kB (U) 1*64kB (U) 3*128kB (U) 3*256kB (U) 1*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11076kB [ 597.800982][T27909] Node 0 [ 597.858097][T27739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.932363][T27909] DMA32: 10542*4kB (UME) 6912*8kB (UM) 3009*16kB (UME) 159*32kB (UM) 137*64kB (UM) 618*128kB (UM) 659*256kB (UME) 426*512kB (UME) 317*1024kB (UM) 151*2048kB (UM) 0*4096kB = 1259240kB [ 598.115801][T27739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.157598][T27739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.169186][T27909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 598.214954][T27739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.275928][T27909] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 14*16kB (UM) 11*32kB (UM) 11*64kB (UM) 9*128kB (UM) 6*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 4*2048kB (U) 931*4096kB (UM) = 3833792kB [ 598.329111][T27909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.346773][T27909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.356523][T27909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.399270][T27909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.424400][T27909] 44419 total pagecache pages [ 598.445779][T27739] hsr_slave_0: entered promiscuous mode [ 598.449191][T27909] 0 pages in swap cache [ 598.461784][T27909] Free swap = 124996kB [ 598.475668][T27739] hsr_slave_1: entered promiscuous mode [ 598.486228][T27909] Total swap = 124996kB [ 598.502594][T27909] 2097051 pages RAM [ 598.503011][T27739] debugfs: 'hsr0' already exists in 'hsr' [ 598.514168][T27909] 0 pages HighMem/MovableOnly [ 598.539152][T27909] 427051 pages reserved [ 598.543881][T27739] Cannot create hsr debugfs directory [ 598.558593][T27909] 0 pages cma reserved [ 598.759890][ T5836] Bluetooth: hci0: command tx timeout [ 598.797935][T27956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5897'. [ 598.810625][T27956] netlink: 'syz.4.5897': attribute type 1 has an invalid length. [ 598.818550][T27956] netlink: 'syz.4.5897': attribute type 1 has an invalid length. [ 598.826730][T27956] netlink: 'syz.4.5897': attribute type 2 has an invalid length. [ 598.836650][T27956] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5897'. [ 598.857345][T27960] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5895'. [ 599.017802][T27960] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 599.056700][T27960] bond0 (unregistering): Released all slaves [ 599.467790][T27990] Bluetooth: MGMT ver 1.23 [ 599.512980][T27739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.544916][T27739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.616913][T28003] "syz.1.5907" (28003) uses obsolete ecb(arc4) skcipher [ 599.618546][T28002] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 599.632383][T28003] IPVS: ip_vs_add_dest(): server weight less than zero [ 599.697041][T27739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.749266][T27739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.765875][T28009] sock: sock_timestamping_bind_phc: sock not bind to device [ 599.981266][T27739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.000508][T27739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.107186][T16129] lec:lec_start_xmit: lec0:No lecd attached [ 600.184316][T27739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.209468][T27739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.456931][T28052] netlink: 'syz.2.5919': attribute type 1 has an invalid length. [ 600.477869][T28052] netlink: 'syz.2.5919': attribute type 4 has an invalid length. [ 600.618856][T27739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 600.656284][T27739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 600.684617][T27739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 600.775015][T27739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 600.842220][ T5836] Bluetooth: hci0: command tx timeout [ 601.021295][T28082] netlink: 'syz.1.5927': attribute type 1 has an invalid length. [ 601.059849][T27739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.090291][T27739] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.167250][T22817] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.174615][T22817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.226080][T22817] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.233393][T22817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.282408][T28090] netlink: 'syz.4.5929': attribute type 3 has an invalid length. [ 601.623380][T28105] netlink: 'syz.1.5933': attribute type 39 has an invalid length. [ 601.730243][T28111] __nla_validate_parse: 14 callbacks suppressed [ 601.730263][T28111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5935'. [ 601.783436][T27739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.960095][T27739] veth0_vlan: entered promiscuous mode [ 602.004170][T27739] veth1_vlan: entered promiscuous mode [ 602.112462][T27739] veth0_macvtap: entered promiscuous mode [ 602.172479][T28132] gretap2: entered promiscuous mode [ 602.179961][T28132] batman_adv: batadv0: Adding interface: gretap2 [ 602.186647][T28132] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 602.215317][T28132] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 602.215509][ T5836] block nbd5: Receive control failed (result -107) [ 602.230104][T27739] veth1_macvtap: entered promiscuous mode [ 602.249375][T28135] nbd5: detected capacity change from 0 to 127 [ 602.258682][T28050] block nbd5: Dead connection, failed to find a fallback [ 602.287270][T28050] block nbd5: shutting down sockets [ 602.295282][T28050] blk_print_req_error: 138 callbacks suppressed [ 602.295302][T28050] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.313809][T27739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.321403][T28050] buffer_io_error: 138 callbacks suppressed [ 602.321419][T28050] Buffer I/O error on dev nbd5, logical block 0, async page read [ 602.339189][T28050] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.355397][T27739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.364274][T28050] Buffer I/O error on dev nbd5, logical block 1, async page read [ 602.382360][T28050] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.398662][T28050] Buffer I/O error on dev nbd5, logical block 2, async page read [ 602.419875][T22812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.429925][T22812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.438714][T22812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.448794][T28050] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.479670][T28050] Buffer I/O error on dev nbd5, logical block 3, async page read [ 602.491633][T22812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.510173][T28050] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.537733][T28050] Buffer I/O error on dev nbd5, logical block 0, async page read [ 602.553121][T28050] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.562471][T28148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5947'. [ 602.575405][T28050] Buffer I/O error on dev nbd5, logical block 1, async page read [ 602.584588][T28050] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.640271][T28050] Buffer I/O error on dev nbd5, logical block 2, async page read [ 602.675384][T28050] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.693556][T28050] Buffer I/O error on dev nbd5, logical block 3, async page read [ 602.719374][T28050] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.769485][T28050] Buffer I/O error on dev nbd5, logical block 0, async page read [ 602.801387][T28050] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.827530][T22807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.827713][T28050] Buffer I/O error on dev nbd5, logical block 1, async page read [ 602.860568][T22807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.867706][T28156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5951'. [ 602.882646][T28050] ldm_validate_partition_table(): Disk read failed. [ 602.894462][T28050] Dev nbd5: unable to read RDB block 0 [ 602.902590][T28050] nbd5: unable to read partition table [ 602.958786][T28050] ldm_validate_partition_table(): Disk read failed. [ 602.984131][T22812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.986747][T28050] Dev nbd5: unable to read RDB block 0 [ 603.017164][T28050] nbd5: unable to read partition table [ 603.026047][T22812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.128511][T28165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5953'. [ 603.248041][T28171] openvswitch: netlink: IP tunnel dst address not specified [ 603.293251][T28173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5954'. [ 603.304298][T28172] x_tables: duplicate underflow at hook 2 [ 603.770090][T28188] netlink: 'syz.3.5960': attribute type 1 has an invalid length. [ 603.825427][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 603.848640][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 603.863002][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 603.879797][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 603.887662][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.904392][ T5836] [ 603.906802][ T5836] ====================================================== [ 603.913945][ T5836] WARNING: possible circular locking dependency detected [ 603.920998][ T5836] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 603.925485][ T5836] ------------------------------------------------------ [ 603.932541][ T5836] kworker/u9:5/5836 is trying to acquire lock: [ 603.938730][ T5836] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x46c/0x540 [ 603.949274][ T5836] [ 603.949274][ T5836] but task is already holding lock: [ 603.956665][ T5836] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 603.966185][ T5836] [ 603.966185][ T5836] which lock already depends on the new lock. [ 603.966185][ T5836] [ 603.976593][ T5836] [ 603.976593][ T5836] the existing dependency chain (in reverse order) is: [ 603.985611][ T5836] [ 603.985611][ T5836] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 603.993706][ T5836] down_write+0x96/0x200 [ 603.998497][ T5836] kernfs_add_one+0x41/0x5c0 [ 604.003649][ T5836] kernfs_create_dir_ns+0xde/0x130 [ 604.009313][ T5836] internal_create_group+0x425/0x1180 [ 604.015251][ T5836] cpuhp_invoke_callback+0x445/0x860 [ 604.021102][ T5836] cpuhp_issue_call+0x430/0x7a0 [ 604.026587][ T5836] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 604.033193][ T5836] __cpuhp_setup_state+0x3f/0x60 [ 604.038669][ T5836] do_one_initcall+0x250/0x8d0 [ 604.043971][ T5836] do_initcall_level+0x104/0x190 [ 604.049444][ T5836] do_initcalls+0x59/0xa0 [ 604.054428][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 604.060185][ T5836] kernel_init+0x1d/0x1d0 [ 604.065060][ T5836] ret_from_fork+0x51e/0xb90 [ 604.070186][ T5836] ret_from_fork_asm+0x1a/0x30 [ 604.075485][ T5836] [ 604.075485][ T5836] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 604.083507][ T5836] [ 604.083507][ T5836] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 604.091332][ T5836] cpus_read_lock+0x42/0x160 [ 604.096452][ T5836] static_key_disable+0x12/0x20 [ 604.101871][ T5836] __inet_hash_connect+0x2430/0x2440 [ 604.107773][ T5836] tcp_v4_connect+0xd5f/0x19b0 [ 604.113067][ T5836] __inet_stream_connect+0x25a/0xdd0 [ 604.118894][ T5836] inet_stream_connect+0x66/0xa0 [ 604.124394][ T5836] __sys_connect+0x312/0x450 [ 604.129532][ T5836] __x64_sys_connect+0x7a/0x90 [ 604.134824][ T5836] do_syscall_64+0x14d/0xf80 [ 604.139950][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.146411][ T5836] [ 604.146411][ T5836] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 604.154101][ T5836] lock_sock_nested+0x48/0x100 [ 604.159476][ T5836] inet_shutdown+0x6a/0x390 [ 604.164546][ T5836] nbd_mark_nsock_dead+0x2e9/0x560 [ 604.170252][ T5836] recv_work+0x1c7f/0x1d90 [ 604.175214][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 604.181334][ T5836] worker_thread+0xa53/0xfc0 [ 604.186487][ T5836] kthread+0x388/0x470 [ 604.191123][ T5836] ret_from_fork+0x51e/0xb90 [ 604.196365][ T5836] ret_from_fork_asm+0x1a/0x30 [ 604.201703][ T5836] [ 604.201703][ T5836] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 604.209387][ T5836] __mutex_lock+0x19f/0x1300 [ 604.214582][ T5836] nbd_queue_rq+0x37b/0x1100 [ 604.219728][ T5836] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 604.226176][ T5836] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 604.233059][ T5836] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 604.239608][ T5836] blk_mq_run_hw_queue+0x348/0x4f0 [ 604.245369][ T5836] blk_mq_dispatch_list+0xd16/0xe10 [ 604.251115][ T5836] blk_mq_flush_plug_list+0x48d/0x570 [ 604.257044][ T5836] __blk_flush_plug+0x3ed/0x4d0 [ 604.262459][ T5836] __submit_bio+0x28d/0x580 [ 604.267519][ T5836] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 604.273790][ T5836] block_read_full_folio+0x599/0x830 [ 604.279635][ T5836] filemap_read_folio+0x137/0x3b0 [ 604.285231][ T5836] do_read_cache_folio+0x358/0x590 [ 604.290884][ T5836] read_part_sector+0xb6/0x2b0 [ 604.296207][ T5836] adfspart_check_ICS+0xa5/0xa40 [ 604.301690][ T5836] bdev_disk_changed+0x7ba/0x1550 [ 604.307299][ T5836] blkdev_get_whole+0x380/0x510 [ 604.312709][ T5836] bdev_open+0x31e/0xd30 [ 604.317532][ T5836] blkdev_open+0x470/0x610 [ 604.322553][ T5836] do_dentry_open+0x785/0x14e0 [ 604.327889][ T5836] vfs_open+0x3b/0x340 [ 604.332523][ T5836] path_openat+0x2e08/0x3860 [ 604.337684][ T5836] do_file_open+0x23e/0x4a0 [ 604.342752][ T5836] do_sys_openat2+0x113/0x200 [ 604.348071][ T5836] __x64_sys_openat+0x138/0x170 [ 604.353496][ T5836] do_syscall_64+0x14d/0xf80 [ 604.358651][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.365090][ T5836] [ 604.365090][ T5836] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 604.372369][ T5836] __mutex_lock+0x19f/0x1300 [ 604.377534][ T5836] nbd_queue_rq+0xc6/0x1100 [ 604.382593][ T5836] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 604.388707][ T5836] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 604.395701][ T5836] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 604.402240][ T5836] blk_mq_run_hw_queue+0x348/0x4f0 [ 604.407896][ T5836] blk_mq_dispatch_list+0xd16/0xe10 [ 604.413664][ T5836] blk_mq_flush_plug_list+0x48d/0x570 [ 604.419603][ T5836] __blk_flush_plug+0x3ed/0x4d0 [ 604.425028][ T5836] __submit_bio+0x28d/0x580 [ 604.430091][ T5836] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 604.436378][ T5836] block_read_full_folio+0x599/0x830 [ 604.442221][ T5836] filemap_read_folio+0x137/0x3b0 [ 604.447804][ T5836] do_read_cache_folio+0x358/0x590 [ 604.453566][ T5836] read_part_sector+0xb6/0x2b0 [ 604.458892][ T5836] adfspart_check_ICS+0xa5/0xa40 [ 604.464374][ T5836] bdev_disk_changed+0x7ba/0x1550 [ 604.469960][ T5836] blkdev_get_whole+0x380/0x510 [ 604.475367][ T5836] bdev_open+0x31e/0xd30 [ 604.480171][ T5836] blkdev_open+0x470/0x610 [ 604.485145][ T5836] do_dentry_open+0x785/0x14e0 [ 604.490493][ T5836] vfs_open+0x3b/0x340 [ 604.495150][ T5836] path_openat+0x2e08/0x3860 [ 604.500389][ T5836] do_file_open+0x23e/0x4a0 [ 604.505441][ T5836] do_sys_openat2+0x113/0x200 [ 604.510690][ T5836] __x64_sys_openat+0x138/0x170 [ 604.516193][ T5836] do_syscall_64+0x14d/0xf80 [ 604.521345][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.527786][ T5836] [ 604.527786][ T5836] -> #4 (set->srcu){.+.+}-{0:0}: [ 604.535043][ T5836] __synchronize_srcu+0xca/0x300 [ 604.540548][ T5836] elevator_switch+0x1e8/0x7a0 [ 604.545877][ T5836] elevator_change+0x2cc/0x450 [ 604.551201][ T5836] elevator_set_default+0x36c/0x430 [ 604.557030][ T5836] blk_register_queue+0x366/0x430 [ 604.562623][ T5836] __add_disk+0x677/0xd50 [ 604.567518][ T5836] add_disk_fwnode+0xfb/0x480 [ 604.572765][ T5836] nbd_dev_add+0x72c/0xb50 [ 604.577726][ T5836] nbd_init+0x168/0x1f0 [ 604.582452][ T5836] do_one_initcall+0x250/0x8d0 [ 604.587792][ T5836] do_initcall_level+0x104/0x190 [ 604.593301][ T5836] do_initcalls+0x59/0xa0 [ 604.598183][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 604.603969][ T5836] kernel_init+0x1d/0x1d0 [ 604.608866][ T5836] ret_from_fork+0x51e/0xb90 [ 604.614015][ T5836] ret_from_fork_asm+0x1a/0x30 [ 604.619361][ T5836] [ 604.619361][ T5836] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 604.627321][ T5836] __mutex_lock+0x19f/0x1300 [ 604.632458][ T5836] elevator_change+0x1b3/0x450 [ 604.637775][ T5836] elevator_set_none+0xb5/0x140 [ 604.643279][ T5836] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 604.649670][ T5836] nbd_start_device+0x17f/0xb10 [ 604.655077][ T5836] nbd_genl_connect+0x165b/0x1cf0 [ 604.660652][ T5836] genl_family_rcv_msg_doit+0x22a/0x330 [ 604.666774][ T5836] genl_rcv_msg+0x61c/0x7a0 [ 604.671863][ T5836] netlink_rcv_skb+0x232/0x4b0 [ 604.677486][ T5836] genl_rcv+0x28/0x40 [ 604.682077][ T5836] netlink_unicast+0x80f/0x9b0 [ 604.687432][ T5836] netlink_sendmsg+0x813/0xb40 [ 604.692753][ T5836] ____sys_sendmsg+0x972/0x9f0 [ 604.698069][ T5836] ___sys_sendmsg+0x2a5/0x360 [ 604.703295][ T5836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 604.708821][ T5836] do_syscall_64+0x14d/0xf80 [ 604.713985][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.720429][ T5836] [ 604.720429][ T5836] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 604.729089][ T5836] blk_alloc_queue+0x546/0x680 [ 604.734413][ T5836] __blk_mq_alloc_disk+0x197/0x390 [ 604.740085][ T5836] nbd_dev_add+0x499/0xb50 [ 604.745048][ T5836] nbd_init+0x168/0x1f0 [ 604.749776][ T5836] do_one_initcall+0x250/0x8d0 [ 604.755127][ T5836] do_initcall_level+0x104/0x190 [ 604.760800][ T5836] do_initcalls+0x59/0xa0 [ 604.765707][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 604.771474][ T5836] kernel_init+0x1d/0x1d0 [ 604.776439][ T5836] ret_from_fork+0x51e/0xb90 [ 604.781609][ T5836] ret_from_fork_asm+0x1a/0x30 [ 604.786938][ T5836] [ 604.786938][ T5836] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 604.794191][ T5836] fs_reclaim_acquire+0x71/0x100 [ 604.799695][ T5836] kmem_cache_alloc_noprof+0x40/0x650 [ 604.805620][ T5836] __kernfs_iattrs+0xdf/0x340 [ 604.810861][ T5836] kernfs_iop_setattr+0xea/0x3f0 [ 604.816358][ T5836] notify_change+0xc1a/0xf40 [ 604.821524][ T5836] do_truncate+0x1c2/0x250 [ 604.827115][ T5836] path_openat+0x2f89/0x3860 [ 604.832262][ T5836] do_file_open+0x23e/0x4a0 [ 604.837299][ T5836] do_sys_openat2+0x113/0x200 [ 604.842515][ T5836] __x64_sys_openat+0x138/0x170 [ 604.847900][ T5836] do_syscall_64+0x14d/0xf80 [ 604.853019][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.859446][ T5836] [ 604.859446][ T5836] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 604.868009][ T5836] __lock_acquire+0x15a5/0x2cf0 [ 604.873390][ T5836] lock_acquire+0xf0/0x2e0 [ 604.878355][ T5836] down_write+0x96/0x200 [ 604.883128][ T5836] kernfs_link_sibling+0x46c/0x540 [ 604.888917][ T5836] kernfs_add_one+0x1ca/0x5c0 [ 604.894154][ T5836] kernfs_create_dir_ns+0xde/0x130 [ 604.899796][ T5836] sysfs_create_dir_ns+0x12f/0x2a0 [ 604.905442][ T5836] kobject_add_internal+0x62b/0xd00 [ 604.911182][ T5836] kobject_add+0x163/0x240 [ 604.916131][ T5836] device_add+0x408/0xb70 [ 604.920997][ T5836] hci_conn_add_sysfs+0xd5/0x210 [ 604.926466][ T5836] hci_conn_complete_evt+0x77a/0x11d0 [ 604.932455][ T5836] hci_event_packet+0x805/0x12c0 [ 604.937936][ T5836] hci_rx_work+0x3ee/0x1030 [ 604.942970][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 604.949048][ T5836] worker_thread+0xa53/0xfc0 [ 604.954170][ T5836] kthread+0x388/0x470 [ 604.958767][ T5836] ret_from_fork+0x51e/0xb90 [ 604.963982][ T5836] ret_from_fork_asm+0x1a/0x30 [ 604.969284][ T5836] [ 604.969284][ T5836] other info that might help us debug this: [ 604.969284][ T5836] [ 604.979518][ T5836] Chain exists of: [ 604.979518][ T5836] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 604.979518][ T5836] [ 604.993966][ T5836] Possible unsafe locking scenario: [ 604.993966][ T5836] [ 605.001431][ T5836] CPU0 CPU1 [ 605.006888][ T5836] ---- ---- [ 605.012261][ T5836] lock(&root->kernfs_rwsem); [ 605.017051][ T5836] lock(cpuhp_state_mutex); [ 605.024174][ T5836] lock(&root->kernfs_rwsem); [ 605.031493][ T5836] lock(&root->kernfs_iattr_rwsem); [ 605.036804][ T5836] [ 605.036804][ T5836] *** DEADLOCK *** [ 605.036804][ T5836] [ 605.044992][ T5836] 4 locks held by kworker/u9:5/5836: [ 605.050384][ T5836] #0: ffff888076384948 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 605.061478][ T5836] #1: ffffc90003c57c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 605.073496][ T5836] #2: ffff8880a8afc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xbb/0x11d0 [ 605.083354][ T5836] #3: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 605.093238][ T5836] [ 605.093238][ T5836] stack backtrace: [ 605.099133][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 605.099154][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 605.099166][ T5836] Workqueue: hci5 hci_rx_work [ 605.099189][ T5836] Call Trace: [ 605.099195][ T5836] [ 605.099201][ T5836] dump_stack_lvl+0xe8/0x150 [ 605.099225][ T5836] print_circular_bug+0x2e1/0x300 [ 605.099251][ T5836] check_noncircular+0x12e/0x150 [ 605.099277][ T5836] __lock_acquire+0x15a5/0x2cf0 [ 605.099301][ T5836] ? __lock_acquire+0x6b5/0x2cf0 [ 605.099325][ T5836] lock_acquire+0xf0/0x2e0 [ 605.099344][ T5836] ? kernfs_link_sibling+0x46c/0x540 [ 605.099371][ T5836] down_write+0x96/0x200 [ 605.099392][ T5836] ? kernfs_link_sibling+0x46c/0x540 [ 605.099416][ T5836] ? __pfx_down_write+0x10/0x10 [ 605.099442][ T5836] ? kernfs_root+0x1c/0x230 [ 605.099464][ T5836] ? kernfs_root+0x1c/0x230 [ 605.099486][ T5836] ? kernfs_root+0x1ea/0x230 [ 605.099508][ T5836] kernfs_link_sibling+0x46c/0x540 [ 605.099536][ T5836] kernfs_add_one+0x1ca/0x5c0 [ 605.099561][ T5836] kernfs_create_dir_ns+0xde/0x130 [ 605.099578][ T5836] sysfs_create_dir_ns+0x12f/0x2a0 [ 605.099601][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 605.099623][ T5836] ? do_raw_spin_unlock+0xf5/0x210 [ 605.099641][ T5836] kobject_add_internal+0x62b/0xd00 [ 605.099666][ T5836] kobject_add+0x163/0x240 [ 605.099688][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 605.099708][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 605.099725][ T5836] ? get_device_parent+0x366/0x3a0 [ 605.099746][ T5836] device_add+0x408/0xb70 [ 605.099766][ T5836] hci_conn_add_sysfs+0xd5/0x210 [ 605.099785][ T5836] hci_conn_complete_evt+0x77a/0x11d0 [ 605.099808][ T5836] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 605.099830][ T5836] hci_event_packet+0x805/0x12c0 [ 605.099850][ T5836] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 605.099869][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 605.099889][ T5836] ? kcov_remote_start+0x49a/0x7a0 [ 605.099913][ T5836] ? hci_send_to_monitor+0xe2/0x590 [ 605.099938][ T5836] hci_rx_work+0x3ee/0x1030 [ 605.099959][ T5836] ? process_scheduled_works+0xa8d/0x18c0 [ 605.099982][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 605.100012][ T5836] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.100034][ T5836] ? assign_work+0x3d5/0x5e0 [ 605.100055][ T5836] worker_thread+0xa53/0xfc0 [ 605.100085][ T5836] kthread+0x388/0x470 [ 605.100100][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 605.100120][ T5836] ? __pfx_kthread+0x10/0x10 [ 605.100135][ T5836] ret_from_fork+0x51e/0xb90 [ 605.100156][ T5836] ? __pfx_ret_from_fork+0x10/0x10 [ 605.100177][ T5836] ? __switch_to+0xc7d/0x1450 [ 605.100195][ T5836] ? __pfx_kthread+0x10/0x10 [ 605.100210][ T5836] ret_from_fork_asm+0x1a/0x30 [ 605.100238][ T5836] [ 605.371137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 605.379221][ C0] lec:lec_tx_timeout: lec0 [ 605.467779][T28188] syzkaller0: entered promiscuous mode [ 605.522054][T28188] syzkaller0: entered allmulticast mode [ 605.560192][T28194] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5960'. [ 606.255909][T22807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.304337][T22807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.363107][T22807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.423451][T22807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.499128][T22817] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 47118 - 0 [ 606.519738][T22817] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 47118 - 0 [ 606.529127][ T8350] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 47118 - 0 [ 606.549767][T22817] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 47118 - 0 [ 606.564048][T22807] bridge_slave_1: left allmulticast mode [ 606.576593][T22807] bridge_slave_1: left promiscuous mode [ 606.582777][T22807] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.591368][T22807] bridge_slave_0: left allmulticast mode [ 606.597237][T22807] bridge_slave_0: left promiscuous mode [ 606.604429][T22807] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.671987][T22807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.682714][T22807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.692567][T22807] bond0 (unregistering): Released all slaves [ 606.967038][T22807] hsr_slave_0: left promiscuous mode [ 606.973074][T22807] hsr_slave_1: left promiscuous mode [ 606.979794][T22807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.987215][T22807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.998677][T22807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.006269][T22807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.024106][T22807] veth1_macvtap: left promiscuous mode [ 607.029721][T22807] veth0_macvtap: left promiscuous mode [ 607.035242][T22807] veth1_vlan: left promiscuous mode [ 607.040697][T22807] veth0_vlan: left promiscuous mode [ 607.133339][T22807] team0 (unregistering): Port device team_slave_1 removed [ 607.151738][T22807] team0 (unregistering): Port device team_slave_0 removed