last executing test programs: 6.146527019s ago: executing program 4 (id=12047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a0b04000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)=0xe, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000002060500f06ae607000000020000000005000400000000000900020073797a32000000000500010007000000ffffffffffffffff00000000"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x4000094) 4.80906497s ago: executing program 4 (id=12064): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.424462493s ago: executing program 4 (id=12070): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='geneve1\x00') syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) r4 = epoll_create(0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000000}) 4.140909194s ago: executing program 4 (id=12074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280060005004e22"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = gettid() r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = getgid() ioctl$TUNSETGROUP(r6, 0x400454ce, r7) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = gettid() r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x8}}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r11}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getgid() r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r12, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002440)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002480)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@empty}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000002580)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000025c0)={{{@in, @in6=@private2}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f00000026c0)=0xe8) 3.78465118s ago: executing program 4 (id=12081): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x400}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r0, &(0x7f0000000040)="ead77b", 0x3, 0x20000840, &(0x7f0000000080)={0xa, 0x4e24, 0x8b7a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x80}, 0x1, 0x7}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.495096566s ago: executing program 4 (id=12084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc236, 0x0, 0x0, 0x0, 0x9}, [@generic={0x7f, 0xa, 0x3, 0x2, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4800000}]}, &(0x7f0000000100)='GPL\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[{0x3, 0x4, 0x7, 0xa}], 0x10, 0x7}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) 2.567455985s ago: executing program 3 (id=12095): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x7f, 0x4}) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x20, 0x70bd29, 0x25dfdbfc, {0x10, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2297, 0x5, 0x0, 0x4, 0xf9}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x7f, 0x4}) (async) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x20, 0x70bd29, 0x25dfdbfc, {0x10, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2297, 0x5, 0x0, 0x4, 0xf9}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) (async) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) (async) 2.393194422s ago: executing program 1 (id=12096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24040800, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b8, 0x1a0, 0xd0, 0x360, 0x360, 0x360, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'rose0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff], 'bridge0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x4}, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2a, 0x9, 0x6, 0xb9, 0xed4, @mcast2, @remote, @loopback, [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff0000ff], 0x2000, 0x301}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0) 2.381789544s ago: executing program 0 (id=12097): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, r0, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/cgroup\x00') r4 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x4004040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, r0, 0x0, 0x1, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) close(r2) (async) gettid() (async) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/cgroup\x00') (async) getuid() (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x4004040}, 0x0) (async) 2.378402292s ago: executing program 3 (id=12098): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r6, 0x300, 0x70bd26, 0x1000, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x16}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9c}]}, 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.220741315s ago: executing program 1 (id=12099): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x0, 0x3, 0x2}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0x4, 0x8fc9}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 2.136664319s ago: executing program 0 (id=12100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_emit_ethernet(0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa99879e18f3ff8906434b5682f8682ed45b171376ad6a4e38b7b6a7854bdf2cbcb6245fd5539d8ffe6a8f98cecd73"], 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@caif=@rfm={0x25, 0x7, "44b53f2e02ec970784f9c9cd9ea5a1a4"}, 0x80, &(0x7f0000000180)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7", 0x72}], 0x3a}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0) 1.773948546s ago: executing program 3 (id=12101): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x240400c0}, 0x8089) 1.729040897s ago: executing program 0 (id=12102): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0xe63}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x30, 0x0, @void, @void, @void, @value=r4}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xe2, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f0000000300), 0x8, 0x75, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 1.576442482s ago: executing program 3 (id=12104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @multicast1}, {}, 0x0, {0x2, 0x0, @broadcast}}) 1.40997959s ago: executing program 1 (id=12105): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockname(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) r1 = socket(0x5, 0x3, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4ee}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[], 0x610) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x64004081}, 0x0) r9 = socket(0xa, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) close(r0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r10, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000300)={0x3, {{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) close(0x4) 1.324308477s ago: executing program 3 (id=12107): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000580)=@ethtool_stats}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x62, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) close(r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000000000000038000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000d3e2b8be45e3adf67cfd5c01504776748a2795e7fd5392cb00000000000000000000000fbb7112edbd7d39490ddf389863abe205c427bcb0990628ce1959294b7d715fad81af37e6b44df09a578fda34b9b34f6a9b7fd25143b9c746d3a3db050af6fced9a8f8d6e0fd28157067286da5134c5492421ac37993544a0ac80627ba435bb0b58287d41", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000107010800000000000000ec2b2a98570a57a04000000000000000000c0002400000000000000000000000020000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.322511944s ago: executing program 0 (id=12108): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x448d0) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a"], 0x14}}, 0x0) 968.555066ms ago: executing program 2 (id=12109): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1b, 0x80000, 0x51, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x4000000) 923.062971ms ago: executing program 3 (id=12110): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="a976cc", 0x3}], 0x1, 0x1e9b, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) sendto$packet(r0, &(0x7f0000000040)="b70b9ddb66d751d4e01fdf32e441ca1fd1d303ba5a8db30ee638352139b0dde5cbcb4ff66334c94dd3db3d8ea99d5b71bd032bb1ee670ec4c23fd622", 0x3c, 0x0, &(0x7f0000000080)={0x11, 0x8, r4, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 667.762783ms ago: executing program 2 (id=12111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_emit_ethernet(0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa99879e18f3ff8906434b5682f8682ed45b171376ad6a4e38b7b6a7854bdf2cbcb6245fd5539d8ffe6a8f98cecd73"], 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@caif=@rfm={0x25, 0x7, "44b53f2e02ec970784f9c9cd9ea5a1a4"}, 0x80, &(0x7f0000000180)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7", 0x72}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0) 551.946723ms ago: executing program 0 (id=12112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x29) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000000)='\xff\xff\xff\xff\xff\xff', 0x101000, &(0x7f0000000080)={@_ha_fsid={[0x1ff, 0x1]}, {0x1200, 0x3, 0x1}}, 0x9, &(0x7f0000000180), &(0x7f0000000200)=0x100}) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000380), 0x2, 0x0) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 491.24918ms ago: executing program 2 (id=12113): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f0800040001000000", 0x24) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='\\]]%+:\'-\x00', 0x282200, &(0x7f0000000100)={@align=0x5, {0x50d, 0x7, 0x81, 0x9}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)}) 385.253582ms ago: executing program 1 (id=12114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 312.085414ms ago: executing program 2 (id=12115): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f0000000280)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c000180", @ANYRES32, @ANYRES32, @ANYBLOB="0c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100) 238.109924ms ago: executing program 1 (id=12116): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000080)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x2, 0x2, 0x4, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x700, 0x1, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x8, 0x8, 0x26, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x40, 0x7, 0x2, 0xfffff800}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x700, 0x7800, 0x1, 0x200, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x2b, 0x0, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x23, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0xb4, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x80}, {@local, 0x1ff}, {@loopback, 0x8}, {@multicast2, 0xf}]}, @lsrr={0x83, 0x7, 0xe4, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x2b, 0xb9, [@remote, @broadcast, @private=0xa010102, @multicast1, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000480)={@multicast1, @empty, 0x0}, &(0x7f00000004c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, r2, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf8}}, 0x4000) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={r6, 0x0, 0x8}, 0xc) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd}, {0xf, 0x3}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x4}, @datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x3, 0xc3b, 0x3}], "96909d"}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @var={0xb, 0x0, 0x0, 0xe, 0x4, 0x2}, @var={0xd, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0]}}, &(0x7f00000007c0)=""/175, 0x8b, 0xaf, 0x0, 0x100, 0x10000}, 0x28) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x7, '\x00', r3, r11, 0x2, 0x1, 0x3}, 0x50) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r10, 0xcfb000) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000940)='veth0_vlan\x00') (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000980)={0x0, 0xffffafdf}, &(0x7f00000009c0)=0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000022b}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r14, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xcc, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x801}, 0x94) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, r16, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x49}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r17, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048010}, 0x20000850) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000fc0)={'gretap0\x00', r8, 0x10, 0x10, 0x101, 0x3, {{0x18, 0x4, 0x3, 0xb, 0x60, 0x68, 0x0, 0xd, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x65, 0x0, 0x3, [0x7, 0xda, 0xc4]}, @timestamp={0x44, 0xc, 0xc6, 0x0, 0x1, [0x7ff, 0x6]}, @ra={0x94, 0x4}, @generic={0x7, 0x11, "396aac14b2586529c5443bfef65c1d"}, @ssrr={0x89, 0x1b, 0xb6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @loopback, @empty, @local]}]}}}}}) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001080)={r13, 0x8}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001100)={r18, 0x5, 0x4, [0xb, 0x4, 0x2, 0x6]}, 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001140)={'pimreg1\x00'}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x78, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0xf, 0x0, 0xf1, 0x5, {0x4e22, 0x4e24, [0x2, 0xf6, 0x62, 0x8], [0xe383, 0xb, 0x7, 0xb], 0x0, [0x6, 0x8]}, 0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "2dd9defb0e76f495c80665ce8b36b71477b739c5c483486e5b51f93956c2d97b2b798cbac750"}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x4083) 124.200388ms ago: executing program 0 (id=12117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ce830100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010102, @loopback, 0x0, 0x8, [@local, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @empty, @local]}, 0x30) 123.276785ms ago: executing program 2 (id=12118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x4, 0x1ff, "fac16a590b17"}}) 36.606389ms ago: executing program 2 (id=12119): socketpair(0x23, 0x3, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001180)={@broadcast, @multicast1, 0x0}, &(0x7f00000011c0)=0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001200), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={0x0, 0x7, 0x18}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={0x0, 0x7, 0x18}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x81, 0x8}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x81, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@bloom_filter={0x1e, 0x5, 0x792, 0x51, 0xa0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x5, 0x0, 0x5, 0xf}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@bloom_filter={0x1e, 0x5, 0x792, 0x51, 0xa0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x5, 0x0, 0x5, 0xf}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000013c0)={0xffffffffffffffff, 0x4, 0x30}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x0, 0x4, 0x8, 0xa, 0x50, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='GPL\x00', 0x5, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000001240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0xc, 0x6, 0x100}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001400)=[r4, r5, r6, r7, 0xffffffffffffffff], &(0x7f0000001440)=[{0x4, 0x1, 0x0, 0x5}], 0x10, 0x8}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x0, 0x4, 0x8, 0xa, 0x50, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='GPL\x00', 0x5, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000001240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0xc, 0x6, 0x100}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001400)=[r4, r5, r6, r7, 0xffffffffffffffff], &(0x7f0000001440)=[{0x4, 0x1, 0x0, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001540)=r7, 0x4) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001540)=r7, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000015c0)={r4, &(0x7f0000001580)="c6b6a4679bbd8cd503a7c9bcee43c97f5d7cf396e05a7b"}, 0x20) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x810) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x810) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001800)={@cgroup, 0x22, 0x1, 0xfff, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000017c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000001880)='syz1\x00', 0x200002, 0x0) (async) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001880)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000018c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001840)={@cgroup=r11, r8, 0x18, 0x201c, 0x0, @value=r12, @void, @void, @void, r10}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000001940), r12) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001940), r12) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r12, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x64, r13, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xf}}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x40001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r12, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x1a4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x185, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7ec}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0xb}, @value=@ver_80211n={0x0, 0x10, 0x3, 0x1, 0x0, 0x3}}, 0x0, 0x4, 0x1a, @val={0x10, 0x1, 0x94}, [{0xdd, 0x4c, "d6d683dc968a25a896f366b713c04559dec6e5cad25a579ecd2d2d165085de14600950cce21ad005c579bd404766c4985fca62f3c25606a4daecc81e5062264735d392dcd2f91d58a032efc7"}, {0xdd, 0x1d, "571e69f0a4c903ee46ec506240cc533eac25b392f49635e7a4ad0ba890"}, {0xdd, 0x2b, "c93cb1a0d5f4eec4739ea579606eca9e254fb39e6484da423170818e1af62015cd450b143ac599f1e448bc"}, {0xdd, 0x6d, "eefa1d430e3c5e97c573afb52dd7cbcaa2ebafdfd561ebd575390211bc018bbac3698e34c423a2892e409cdae404403974cdc50987dc63ebeab6e946c3b4ebe42cfa2691da462a61fd1d7f4eb419ab94496aef4c3f9945a3134a4bc1a0f8daed47009092d61863d4dd801fdc55"}, {0xdd, 0x20, "ca809051da5931cb83e003988b2eee4f86eed940d65dfa63f9793bc2b94aabb4"}, {0xdd, 0x2f, "c71b48802d4f0514b80bd17b57d43db7823e120c1c754935860e561d4a26f7357b92837d2cec6aee0bdc0ccb4bcff6"}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r12, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x1a4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x185, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7ec}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0xb}, @value=@ver_80211n={0x0, 0x10, 0x3, 0x1, 0x0, 0x3}}, 0x0, 0x4, 0x1a, @val={0x10, 0x1, 0x94}, [{0xdd, 0x4c, "d6d683dc968a25a896f366b713c04559dec6e5cad25a579ecd2d2d165085de14600950cce21ad005c579bd404766c4985fca62f3c25606a4daecc81e5062264735d392dcd2f91d58a032efc7"}, {0xdd, 0x1d, "571e69f0a4c903ee46ec506240cc533eac25b392f49635e7a4ad0ba890"}, {0xdd, 0x2b, "c93cb1a0d5f4eec4739ea579606eca9e254fb39e6484da423170818e1af62015cd450b143ac599f1e448bc"}, {0xdd, 0x6d, "eefa1d430e3c5e97c573afb52dd7cbcaa2ebafdfd561ebd575390211bc018bbac3698e34c423a2892e409cdae404403974cdc50987dc63ebeab6e946c3b4ebe42cfa2691da462a61fd1d7f4eb419ab94496aef4c3f9945a3134a4bc1a0f8daed47009092d61863d4dd801fdc55"}, {0xdd, 0x20, "ca809051da5931cb83e003988b2eee4f86eed940d65dfa63f9793bc2b94aabb4"}, {0xdd, 0x2f, "c71b48802d4f0514b80bd17b57d43db7823e120c1c754935860e561d4a26f7357b92837d2cec6aee0bdc0ccb4bcff6"}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r1) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x44, r14, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x6a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001ec0)={'sit0\x00', &(0x7f0000001e80)={@empty, @empty, 0x13, 0xc}}) sendmsg$nl_route_sched(r4, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)=@gettclass={0x24, 0x2a, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x8}, {0x10, 0x4}, {0xfff2, 0xd90d49d21c2131ee}}, [""]}, 0x24}}, 0x4000084) close(r0) (async) close(r0) r15 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r15, 0x118, 0x1, &(0x7f0000002000)=0x418, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000002040), 0x3) 0s ago: executing program 1 (id=12120): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) (async) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async, rerun: 32) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) (async, rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffef000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001002e417a7ee723ea7ab4274800000000000044000500ac1414aa000004000000fffffff30000000000003c00000002000000ac1414aa00170000000068570ef56db2c686afa007d0a2d4ccfc9ad4db6a"], 0xfc}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async, rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x9, 0xb, 0xfffffffffffffffe, 0x2b1, 0x202000000002e0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000060000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): T9351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9950'. [ 858.515344][ T9385] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9962'. [ 858.688458][ T9396] nbd: nbd0 already in use [ 858.703230][ T9397] nbd: nbd0 already in use [ 858.857577][ T9407] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9970'. [ 858.884900][ T9405] netlink: 'syz.0.9969': attribute type 3 has an invalid length. [ 858.903957][ T9409] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 858.930183][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9972'. [ 859.001051][ T9413] netlink: 272 bytes leftover after parsing attributes in process `syz.0.9973'. [ 859.035046][ T9413] netlink: 'syz.0.9973': attribute type 10 has an invalid length. [ 859.076241][ T9419] netlink: 'syz.4.9976': attribute type 21 has an invalid length. [ 859.095260][ T9419] IPv6: NLM_F_CREATE should be specified when creating new route [ 859.103819][ T9417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 859.111099][ T9417] IPv6: NLM_F_CREATE should be set when creating new route [ 859.139917][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.149218][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9974'. [ 859.382088][ T9440] netlink: 'syz.0.9981': attribute type 39 has an invalid length. [ 859.657512][ T9453] netlink: 67 bytes leftover after parsing attributes in process `syz.2.9983'. [ 859.695735][ T9453] 8021q: VLANs not supported on lo [ 859.788830][ T9453] bond5: (slave ip6gre0): Device is not bonding slave [ 859.815535][ T9453] bond5: option active_slave: invalid value (ip6gre0) [ 859.843840][ T9453] bond5 (unregistering): Released all slaves [ 859.929914][ T9464] netlink: 'syz.4.9988': attribute type 2 has an invalid length. [ 860.165927][ T9484] IPVS: length: 80 != 8 [ 860.664986][ T9523] syzkaller0: entered promiscuous mode [ 860.670977][ T9523] syzkaller0: entered allmulticast mode [ 860.947682][ T9545] netlink: 'syz.0.10013': attribute type 83 has an invalid length. [ 861.074822][ T9552] netlink: 'syz.3.10018': attribute type 10 has an invalid length. [ 861.110243][ T9552] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 861.141574][ T9552] syzkaller0: left promiscuous mode [ 861.145149][ T4046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.148291][ T9552] syzkaller0: left allmulticast mode [ 861.195286][ T4046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.327121][ T9571] nbd: must specify a size in bytes for the device [ 861.336244][ T9571] nbd: must specify a size in bytes for the device [ 861.488092][ T9588] netlink: 'syz.4.10029': attribute type 28 has an invalid length. [ 861.510775][ T9588] netlink: 'syz.4.10029': attribute type 3 has an invalid length. [ 861.535913][ T9589] lo speed is unknown, defaulting to 1000 [ 861.559997][ T9589] wg1 speed is unknown, defaulting to 1000 [ 861.727392][ T9593] netlink: 'syz.2.10030': attribute type 1 has an invalid length. [ 862.112410][ T9616] bond3: option mode: invalid value (64) [ 862.155298][ T9616] bond3 (unregistering): Released all slaves [ 862.675884][ T9654] lo speed is unknown, defaulting to 1000 [ 862.683302][ T9654] wg1 speed is unknown, defaulting to 1000 [ 862.959348][ T9667] IPv6: Can't replace route, no match found [ 863.038814][ T9667] syzkaller0: entered promiscuous mode [ 863.054626][ T9667] syzkaller0: entered allmulticast mode [ 863.456333][ T9697] bond4: entered promiscuous mode [ 863.461780][ T9697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.482293][ T9704] ipvlan2: entered allmulticast mode [ 863.531873][ T9704] bond4: entered allmulticast mode [ 863.559587][ T9697] bond4: (slave bridge1): making interface the new active one [ 863.568376][ T9697] bridge1: entered promiscuous mode [ 863.573880][ T9697] bridge1: entered allmulticast mode [ 863.596079][ T9697] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 863.939626][ T9738] validate_nla: 2 callbacks suppressed [ 863.939646][ T9738] netlink: 'syz.4.10071': attribute type 2 has an invalid length. [ 864.093136][ T9747] __nla_validate_parse: 18 callbacks suppressed [ 864.093157][ T9747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10076'. [ 864.318515][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10078'. [ 864.484003][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10083'. [ 864.510046][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10083'. [ 864.667457][ T9777] netlink: 'syz.2.10085': attribute type 2 has an invalid length. [ 864.842078][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10089'. [ 864.927124][ T9792] netlink: 'syz.3.10089': attribute type 1 has an invalid length. [ 864.959901][ T9792] netlink: 'syz.3.10089': attribute type 2 has an invalid length. [ 865.020634][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10092'. [ 865.136946][ T9811] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10096'. [ 865.153929][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10095'. [ 865.241104][ T9823] netlink: 'syz.3.10096': attribute type 1 has an invalid length. [ 865.266183][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10097'. [ 865.275869][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10092'. [ 865.817469][ T9852] netlink: 'syz.2.10102': attribute type 1 has an invalid length. [ 865.848700][ T9852] netlink: 'syz.2.10102': attribute type 1 has an invalid length. [ 865.911619][ T9855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 865.947474][ T9870] delete_channel: no stack [ 866.003917][ T9862] veth5: entered allmulticast mode [ 866.022998][ T9858] syzkaller0: entered allmulticast mode [ 866.235480][ T9890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.733874][ T9923] erspan0: entered promiscuous mode [ 866.965862][ T9935] nbd: illegal input index 2958377 [ 867.070780][ T9943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 867.078065][ T9943] IPv6: NLM_F_CREATE should be set when creating new route [ 867.085329][ T9943] IPv6: NLM_F_CREATE should be set when creating new route [ 867.194712][ T9952] netlink: 'syz.1.10132': attribute type 24 has an invalid length. [ 867.439451][ T9972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 867.620461][ T9981] nbd: nbd64 already in use [ 867.668112][ T9984] veth1_macvtap: left promiscuous mode [ 867.715593][ T9992] netlink: 'syz.0.10144': attribute type 3 has an invalid length. [ 867.929406][ T9319] udevd[9319]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 867.973720][T10005] sctp: [Deprecated]: syz.0.10149 (pid 10005) Use of int in maxseg socket option. [ 867.973720][T10005] Use struct sctp_assoc_value instead [ 868.207239][T10028] netlink: 'syz.0.10155': attribute type 3 has an invalid length. [ 869.989553][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.384371][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 870.978473][T10007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.005412][T10045] validate_nla: 1 callbacks suppressed [ 871.005431][T10045] netlink: 'syz.4.10160': attribute type 1 has an invalid length. [ 871.074315][T10045] __nla_validate_parse: 21 callbacks suppressed [ 871.074334][T10045] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10160'. [ 871.153701][T10045] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10160'. [ 871.173985][T10045] netlink: 658 bytes leftover after parsing attributes in process `syz.4.10160'. [ 871.194794][T10055] netlink: 216 bytes leftover after parsing attributes in process `syz.3.10162'. [ 871.206467][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10164'. [ 871.207686][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10164'. [ 871.222844][T10061] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10163'. [ 871.240664][T10055] netlink: 'syz.3.10162': attribute type 2 has an invalid length. [ 871.251215][T10061] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10163'. [ 871.266238][T10061] netlink: 7783 bytes leftover after parsing attributes in process `syz.2.10163'. [ 871.286287][T10061] netlink: 10824 bytes leftover after parsing attributes in process `syz.2.10163'. [ 871.653426][T10089] C: left promiscuous mode [ 871.840804][T10102] openvswitch: netlink: Message has -2 unknown bytes. [ 871.929896][T10106] xt_connbytes: Forcing CT accounting to be enabled [ 872.188969][T10089] batadv_slave_0: left promiscuous mode [ 872.206248][T10089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.521858][T10089] bond2: left promiscuous mode [ 872.528711][T10089] bond2: left allmulticast mode [ 872.550259][T10089] bond3: left allmulticast mode [ 872.556422][T10089] bond4: left promiscuous mode [ 872.561322][T10089] bond4: left allmulticast mode [ 872.584496][ T5716] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.615300][ T5716] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.654424][ T5716] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.663344][ T5716] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.697548][T10121] delete_channel: no stack [ 872.739641][T10125] netlink: 'syz.1.10178': attribute type 1 has an invalid length. [ 872.781997][T10125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 872.830052][T10125] bond3: (slave veth3): Enslaving as an active interface with a down link [ 872.864858][T10125] macvlan3: entered promiscuous mode [ 872.870699][T10125] macvlan3: entered allmulticast mode [ 872.878132][T10125] bond3: entered promiscuous mode [ 872.883798][T10125] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 872.892970][T10125] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 872.910103][T10125] bond3: left promiscuous mode [ 873.284781][T10150] bond0: entered promiscuous mode [ 873.289923][T10150] bond_slave_0: entered promiscuous mode [ 873.296081][T10150] bond_slave_1: entered promiscuous mode [ 873.301884][T10150] bridge_slave_1: entered promiscuous mode [ 873.308776][T10150] bridge0: entered promiscuous mode [ 873.315839][T10150] bond0: left promiscuous mode [ 873.320702][T10150] bond_slave_0: left promiscuous mode [ 873.326847][T10150] bond_slave_1: left promiscuous mode [ 873.332408][T10150] bridge_slave_1: left promiscuous mode [ 873.338309][T10150] bridge0: left promiscuous mode [ 874.382974][T10083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.454380][T10156] netlink: 'syz.3.10189': attribute type 9 has an invalid length. [ 874.583698][T10162] veth7: entered promiscuous mode [ 874.698433][T10169] netlink: 'syz.4.10190': attribute type 10 has an invalid length. [ 874.769332][T10169] batman_adv: batadv0: Adding interface: netdevsim0 [ 874.786095][T10169] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.842282][T10169] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 874.950948][T10191] sit0: entered promiscuous mode [ 874.963125][T10191] netlink: 'syz.1.10201': attribute type 1 has an invalid length. [ 875.048302][T10202] netlink: 'syz.3.10203': attribute type 1 has an invalid length. [ 875.086452][T10202] 8021q: adding VLAN 0 to HW filter on device bond7 [ 875.123164][T10210] vlan3: entered allmulticast mode [ 875.133700][T10210] erspan0: entered allmulticast mode [ 875.517597][T10238] netlink: 'syz.0.10212': attribute type 1 has an invalid length. [ 875.578996][T10238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 875.608961][T10239] macvlan2: entered promiscuous mode [ 875.615059][T10239] macvlan2: entered allmulticast mode [ 875.621915][T10239] bond2: entered promiscuous mode [ 875.631040][T10239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 875.642914][T10239] bond2: left promiscuous mode [ 875.744541][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 875.752569][ C1] lec:lec_tx_timeout: lec0 [ 875.758364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 876.015250][T10276] netlink: 'syz.3.10224': attribute type 10 has an invalid length. [ 876.098733][ T5717] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 876.197024][T10291] __nla_validate_parse: 30 callbacks suppressed [ 876.197042][T10291] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.10227'. [ 876.228789][T10291] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.10227'. [ 877.242419][T10355] xt_l2tp: v2 tid > 0xffff: 1114244 [ 877.330430][T10356] bond2 (unregistering): Released all slaves [ 877.383118][T10363] netlink: 'syz.0.10245': attribute type 1 has an invalid length. [ 877.484581][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10244'. [ 877.530548][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10244'. [ 877.742403][T10390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10249'. [ 877.796086][T10390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 877.803342][T10390] IPv6: NLM_F_CREATE should be set when creating new route [ 877.817191][T10373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10246'. [ 877.994812][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10251'. [ 878.029528][T10398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.051911][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10252'. [ 878.066147][T10398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.265302][T10410] netlink: 'syz.3.10254': attribute type 2 has an invalid length. [ 878.681648][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10259'. [ 878.698331][T10429] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10259'. [ 879.071899][T10451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 879.079338][T10451] IPv6: NLM_F_CREATE should be set when creating new route [ 879.086604][T10451] IPv6: NLM_F_CREATE should be set when creating new route [ 879.375556][T10461] vlan3: entered promiscuous mode [ 879.380633][T10461] gretap0: entered promiscuous mode [ 879.790029][T10500] netlink: 'syz.0.10278': attribute type 6 has an invalid length. [ 879.910306][T10508] netlink: 'syz.3.10281': attribute type 6 has an invalid length. [ 879.933628][T10509] openvswitch: netlink: Flow actions attr not present in new flow. [ 879.963134][T10508] netlink: 'syz.3.10281': attribute type 7 has an invalid length. [ 879.987630][T10508] netlink: 'syz.3.10281': attribute type 8 has an invalid length. [ 880.013882][T10508] netlink: 'syz.3.10281': attribute type 7 has an invalid length. [ 880.046197][T10508] netlink: 'syz.3.10281': attribute type 9 has an invalid length. [ 880.236160][T10524] vlan3: entered allmulticast mode [ 880.241394][T10524] bridge0: entered allmulticast mode [ 880.247375][T10524] bridge0: port 4(vlan3) entered blocking state [ 880.255222][T10524] bridge0: port 4(vlan3) entered disabled state [ 880.299512][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.689634][T10559] xt_hashlimit: size too large, truncated to 1048576 [ 880.730837][T10563] ip6t_srh: unknown srh invflags 4000 [ 880.768618][T10565] netlink: 'syz.1.10297': attribute type 5 has an invalid length. [ 880.776544][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 880.776576][ C1] lec:lec_tx_timeout: lec0 [ 881.078224][T10578] nbd: must specify at least one socket [ 881.492241][T10597] netlink: 'syz.0.10308': attribute type 12 has an invalid length. [ 881.531934][T10600] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 881.609478][T10597] bond3: option primary_reselect: invalid value (255) [ 881.622376][T10597] bond3 (unregistering): Released all slaves [ 881.702040][T10618] netlink: 'syz.4.10310': attribute type 1 has an invalid length. [ 881.893310][T10628] lo: Caught tx_queue_len zero misconfig [ 882.113341][T10653] __nla_validate_parse: 12 callbacks suppressed [ 882.113359][T10653] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10325'. [ 882.130564][T10649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10325'. [ 882.145500][T10654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.180922][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10323'. [ 882.185649][T10654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.250720][T10655] ip6gre1: entered allmulticast mode [ 882.349192][T10666] netlink: 13 bytes leftover after parsing attributes in process `syz.1.10332'. [ 882.403029][T10667] netlink: 13 bytes leftover after parsing attributes in process `syz.1.10332'. [ 882.414787][T10666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.493474][T10678] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10335'. [ 882.510150][T10679] ip6t_rpfilter: unknown options [ 882.579198][T10684] netlink: 'syz.3.10337': attribute type 4 has an invalid length. [ 882.594584][T10686] netlink: 'syz.3.10337': attribute type 4 has an invalid length. [ 882.659394][T10693] netlink: 'syz.0.10340': attribute type 21 has an invalid length. [ 882.823958][T10703] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10343'. [ 882.874224][T10703] macvlan0: entered allmulticast mode [ 882.886643][T10703] veth1_vlan: entered allmulticast mode [ 882.893196][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10344'. [ 882.903895][T10698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10343'. [ 882.935617][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10345'. [ 882.957962][T10708] syzkaller0: entered promiscuous mode [ 882.963468][T10708] syzkaller0: entered allmulticast mode [ 883.728929][T10753] netlink: 'syz.4.10358': attribute type 1 has an invalid length. [ 883.740164][T10757] netlink: 'syz.1.10361': attribute type 2 has an invalid length. [ 883.745941][T10753] netlink: 'syz.4.10358': attribute type 1 has an invalid length. [ 883.761272][ T30] audit: type=1800 audit(1775200870.449:9): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10358" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308736671 dev="tmpfs" ino=1213 res=0 errno=0 [ 884.212798][T10787] netlink: 'syz.0.10369': attribute type 1 has an invalid length. [ 884.372171][T10802] netlink: 'syz.2.10371': attribute type 11 has an invalid length. [ 884.455662][T10803] ipt_REJECT: TCP_RESET invalid for non-tcp [ 884.465585][T10803] bridge0: Device is already in use. [ 884.575214][T10812] syzkaller0: entered promiscuous mode [ 884.598977][T10813] team0 (unregistering): Port device team_slave_0 removed [ 884.617258][T10813] team0 (unregistering): Port device team_slave_1 removed [ 884.671241][T10809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.827497][T10825] tipc: Started in network mode [ 884.844377][T10825] tipc: Node identity ac14140f, cluster identity 4711 [ 884.851405][T10825] tipc: New replicast peer: 127.0.0.1 [ 884.867793][T10825] tipc: Enabled bearer , priority 10 [ 885.144957][T10842] netlink: 'syz.4.10388': attribute type 4 has an invalid length. [ 885.354688][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.447940][T10854] tipc: Enabled bearer , priority 0 [ 885.546203][T10869] syzkaller0: entered promiscuous mode [ 885.551793][T10869] syzkaller0: entered allmulticast mode [ 885.558481][T10869] tipc: Resetting bearer [ 885.580580][T10852] tipc: Resetting bearer [ 887.202234][T10852] tipc: Disabling bearer [ 887.232221][T10111] tipc: Node number set to 2886997007 [ 887.239728][ T1225] tipc: Node number set to 1150929967 [ 887.490028][T10893] __nla_validate_parse: 13 callbacks suppressed [ 887.490049][T10893] netlink: 175008 bytes leftover after parsing attributes in process `syz.2.10401'. [ 887.616042][T10914] validate_nla: 1 callbacks suppressed [ 887.616060][T10914] netlink: 'syz.1.10406': attribute type 10 has an invalid length. [ 887.703717][T10907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.881784][T10901] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 887.901299][T10914] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 887.952604][ T10] wg1 speed is unknown, defaulting to 1000 [ 887.976271][ T10] syz2: Port: 1 Link DOWN [ 888.152676][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10411'. [ 888.161766][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10411'. [ 888.184781][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10411'. [ 888.193764][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10411'. [ 888.630915][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10423'. [ 888.669932][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10425'. [ 888.683620][T10986] netlink: 'syz.2.10423': attribute type 21 has an invalid length. [ 888.699361][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10423'. [ 888.729311][ T5715] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.729314][T10986] netlink: 'syz.2.10423': attribute type 21 has an invalid length. [ 888.729353][ T5715] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.738812][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10423'. [ 888.768194][ T5715] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.777408][ T5715] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.879606][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10428'. [ 889.191317][T11021] netlink: 'syz.3.10435': attribute type 3 has an invalid length. [ 889.220011][T11028] netlink: 'syz.0.10437': attribute type 1 has an invalid length. [ 889.229344][T11028] netlink: 'syz.0.10437': attribute type 1 has an invalid length. [ 889.245987][T11028] netlink: 'syz.0.10437': attribute type 8 has an invalid length. [ 889.550194][T11042] netlink: 'syz.2.10439': attribute type 1 has an invalid length. [ 890.104030][T11029] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 890.217425][T11047] netlink: 'syz.0.10441': attribute type 4 has an invalid length. [ 890.242210][T11047] netlink: 'syz.0.10441': attribute type 1 has an invalid length. [ 890.567147][T11077] veth0: entered promiscuous mode [ 890.599654][T11077] veth0 (unregistering): left promiscuous mode [ 890.791177][T11089] syzkaller1: entered promiscuous mode [ 890.822722][T11089] syzkaller1: entered allmulticast mode [ 890.898414][T11101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.100389][T11123] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 891.252054][T11129] pimreg: entered allmulticast mode [ 891.355892][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 891.390004][T11143] 8021q: VLANs not supported on lo [ 891.397941][T11143] openvswitch: netlink: EtherType 0 is less than min 600 [ 891.483440][T11152] delete_channel: no stack [ 891.498665][T11138] syzkaller0: entered promiscuous mode [ 891.509195][T11138] syzkaller0: entered allmulticast mode [ 891.670734][T11155] veth0: entered promiscuous mode [ 891.715799][T11154] veth0: left promiscuous mode [ 891.875120][T11179] bridge_slave_1: left allmulticast mode [ 891.895726][T11179] bridge_slave_1: left promiscuous mode [ 891.901446][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.904451][T11186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.922994][T11179] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 891.969004][T11179] Cannot find set identified by id 3 to match [ 892.952369][T11228] __nla_validate_parse: 124 callbacks suppressed [ 892.952382][T11228] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10493'. [ 893.371793][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10495'. [ 893.620976][T11246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10500'. [ 893.630222][T11246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10500'. [ 893.707222][T11253] syzkaller0: entered promiscuous mode [ 893.712849][T11253] syzkaller0: entered allmulticast mode [ 893.737795][T11252] syzkaller1: entered promiscuous mode [ 893.743341][T11252] syzkaller1: entered allmulticast mode [ 894.736652][T11189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.903139][T11263] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10507'. [ 894.976384][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10508'. [ 894.994594][T11269] ip6tnl0: Caught tx_queue_len zero misconfig [ 895.185927][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10513'. [ 895.480761][T11302] veth9: entered allmulticast mode [ 895.813956][T11331] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 895.953724][T11333] IPv6: NLM_F_REPLACE set, but no existing node found! [ 896.016215][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10532'. [ 896.028583][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10532'. [ 896.038922][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10532'. [ 896.482419][T11319] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 896.551269][T11360] netem: change failed [ 896.639279][T11360] syzkaller0: entered promiscuous mode [ 896.647605][T11360] syzkaller0: entered allmulticast mode [ 896.870327][T11376] openvswitch: netlink: Key type 30 is not supported [ 896.879502][T11376] validate_nla: 3 callbacks suppressed [ 896.879519][T11376] netlink: 'syz.2.10543': attribute type 10 has an invalid length. [ 898.349870][T11375] __nla_validate_parse: 3 callbacks suppressed [ 898.349888][T11375] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10543'. [ 898.365960][T11375] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10543'. [ 898.464991][ T796] page_pool_release_retry() stalled pool shutdown: id 59, 1 inflight 664 sec [ 898.571953][T11384] netlink: 'syz.1.10545': attribute type 1 has an invalid length. [ 898.573799][T11383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10546'. [ 898.603767][T11384] netlink: 'syz.1.10545': attribute type 2 has an invalid length. [ 898.718023][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10546'. [ 898.741841][T11345] lec:lec_atm_close: lec0: Shut down! [ 898.744114][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10546'. [ 898.856820][T11405] Bluetooth: MGMT ver 1.23 [ 898.866548][T11405] netlink: 'syz.3.10550': attribute type 23 has an invalid length. [ 898.920742][T11405] netlink: 'syz.3.10550': attribute type 50 has an invalid length. [ 898.937154][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10550'. [ 899.508460][T11448] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 899.602815][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10563'. [ 899.613229][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10563'. [ 899.662690][T11452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10561'. [ 899.767599][T11463] netlink: 288 bytes leftover after parsing attributes in process `syz.1.10564'. [ 900.432706][T11501] xt_hashlimit: invalid rate [ 900.651895][T11513] netlink: 'syz.4.10579': attribute type 29 has an invalid length. [ 900.666022][T11513] netlink: 'syz.4.10579': attribute type 29 has an invalid length. [ 900.666945][T11512] netlink: 'syz.1.10578': attribute type 11 has an invalid length. [ 900.716850][T11513] netlink: 'syz.4.10579': attribute type 32 has an invalid length. [ 900.792835][T11513] bond3 (unregistering): Released all slaves [ 901.059547][T11537] syzkaller0: entered promiscuous mode [ 901.074007][T11537] syzkaller0: entered allmulticast mode [ 901.888481][T11606] netlink: 'syz.0.10602': attribute type 1 has an invalid length. [ 901.897402][T11606] netlink: 'syz.0.10602': attribute type 2 has an invalid length. [ 902.018112][T11620] netlink: 'syz.4.10606': attribute type 1 has an invalid length. [ 902.388902][T11646] sctp: [Deprecated]: syz.3.10614 (pid 11646) Use of int in maxseg socket option. [ 902.388902][T11646] Use struct sctp_assoc_value instead [ 902.407430][T11648] sctp: [Deprecated]: syz.3.10614 (pid 11648) Use of int in maxseg socket option. [ 902.407430][T11648] Use struct sctp_assoc_value instead [ 902.471685][T11651] netlink: 'syz.2.10616': attribute type 12 has an invalid length. [ 902.488899][T11651] netlink: 'syz.2.10616': attribute type 29 has an invalid length. [ 902.572332][T11660] syzkaller0: entered promiscuous mode [ 902.580251][T11660] syzkaller0: entered allmulticast mode [ 902.784420][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 903.000381][ T5717] bond0: (slave bond_slave_0): interface is now down [ 903.017226][ T5717] bond0: (slave bond_slave_1): interface is now down [ 903.023949][ T5717] bond0: (slave wlan1): interface is now down [ 903.050400][ T5717] bond0: now running without any active interface! [ 903.138835][T11706] netlink: 'syz.4.10634': attribute type 1 has an invalid length. [ 903.147371][T11703] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 903.259642][T11710] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 903.308866][T11710] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 903.391167][T11706] bond3: (slave gretap1): making interface the new active one [ 903.403138][T11706] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 903.427077][T11729] __nla_validate_parse: 24 callbacks suppressed [ 903.427106][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10638'. [ 903.433490][T11720] macvlan2: entered promiscuous mode [ 903.450065][T11720] macvlan2: entered allmulticast mode [ 903.457140][T11720] bond3: entered promiscuous mode [ 903.462270][T11720] gretap1: entered promiscuous mode [ 903.468988][T11720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 903.480405][T11720] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 903.493330][T11720] bond3: left promiscuous mode [ 903.498210][T11720] gretap1: left promiscuous mode [ 903.644484][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10643'. [ 903.744117][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 903.752200][ C1] lec:lec_tx_timeout: lec0 [ 903.832903][ T4039] tipc: Subscription rejected, illegal request [ 903.851393][T11751] netlink: 808 bytes leftover after parsing attributes in process `syz.1.10646'. [ 903.862502][T11750] netlink: 808 bytes leftover after parsing attributes in process `syz.1.10646'. [ 904.148471][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10653'. [ 904.159921][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10654'. [ 904.212645][T11770] hsr_slave_1: left promiscuous mode [ 904.988580][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10671'. [ 905.106343][T11836] syzkaller1: entered promiscuous mode [ 905.120571][T11836] syzkaller1: entered allmulticast mode [ 905.274017][T11852] netlink: 'syz.2.10678': attribute type 1 has an invalid length. [ 905.312455][T11852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 905.353508][T11858] bond5: (slave geneve2): making interface the new active one [ 905.363941][T11858] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 905.411101][ T4039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.458766][ T4039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.471426][ T4039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.495316][ T4039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.538919][T11869] netlink: 'syz.0.10683': attribute type 1 has an invalid length. [ 905.559523][T11877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10684'. [ 905.575554][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10684'. [ 905.603216][T11869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 905.717632][T11878] bond3: (slave veth11): Enslaving as an active interface with a down link [ 905.758650][T11869] vlan3: entered allmulticast mode [ 905.763905][T11869] veth0_to_bond: entered allmulticast mode [ 905.771471][T11869] veth0_to_bond: entered promiscuous mode [ 905.779774][T11869] veth0_to_bond: left promiscuous mode [ 905.787546][T11869] bond3: (slave vlan3): making interface the new active one [ 905.796531][T11869] veth0_to_bond: entered promiscuous mode [ 905.802872][T11869] vlan3: entered promiscuous mode [ 905.808721][T11869] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 905.817589][T11888] netlink: 'syz.1.10687': attribute type 7 has an invalid length. [ 906.028857][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10692'. [ 906.190140][T11914] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 906.197710][T11914] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20002 [ 906.224680][T11916] IPVS: ip_vs_edit_dest(): server weight less than zero [ 906.517652][T11939] bond4: option resend_igmp: invalid value (32767) [ 906.569701][T11939] bond4: option resend_igmp: allowed values 0 - 255 [ 906.605704][T11939] bond4 (unregistering): Released all slaves [ 906.634036][T11950] netlink: 'syz.2.10708': attribute type 1 has an invalid length. [ 906.761117][T11957] syzkaller0: create flow: hash 2517652760 index 1 [ 906.822128][ T5714] syzkaller0: tun_net_xmit 76 [ 906.827736][ T5714] syzkaller0: tun_net_xmit 48 [ 906.846498][ T796] syzkaller0: tun_net_xmit 76 [ 906.915912][T11952] syzkaller0: delete flow: hash 2517652760 index 1 [ 907.507211][T11956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.906041][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 908.521916][T11975] batadv_slave_1: entered promiscuous mode [ 908.529421][T11978] validate_nla: 2 callbacks suppressed [ 908.529438][T11978] netlink: 'syz.2.10714': attribute type 2 has an invalid length. [ 908.588433][T11976] batadv_slave_1: left promiscuous mode [ 908.986852][T12016] __nla_validate_parse: 3 callbacks suppressed [ 908.986874][T12016] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.10721'. [ 909.065416][T12016] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 909.096190][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10723'. [ 909.117373][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10723'. [ 909.227443][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.283510][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.396003][T12033] netlink: 187468 bytes leftover after parsing attributes in process `syz.0.10727'. [ 909.936343][T12024] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 909.951292][T12024] bond4 (unregistering): Released all slaves [ 909.978532][ T4046] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.989603][ T4046] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.028255][ T4046] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.052467][ T4046] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.198532][T12058] syzkaller0: entered promiscuous mode [ 910.253006][T12055] lo speed is unknown, defaulting to 1000 [ 910.270438][T12063] netlink: 'syz.3.10734': attribute type 1 has an invalid length. [ 910.280819][T12055] wg1 speed is unknown, defaulting to 1000 [ 910.346529][T12063] 8021q: adding VLAN 0 to HW filter on device bond8 [ 910.446275][T12076] netlink: 'syz.1.10737': attribute type 1 has an invalid length. [ 910.545306][T12076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 910.668487][T12080] bond4: (slave ip6erspan0): making interface the new active one [ 910.678982][T12080] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 910.816389][T12094] syzkaller0: entered promiscuous mode [ 910.830632][T12094] syzkaller0: entered allmulticast mode [ 910.856614][T12094] 0: reclassify loop, rule prio 0, protocol 800 [ 911.045800][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10746'. [ 911.217013][T12112] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10747'. [ 911.404652][T12114] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10748'. [ 911.482975][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10746'. [ 911.666717][T12128] netlink: 'syz.0.10751': attribute type 2 has an invalid length. [ 911.772255][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10754'. [ 911.783116][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.822942][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10755'. [ 911.841872][T12138] netlink: 'syz.0.10755': attribute type 64 has an invalid length. [ 911.970053][T12145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.059771][T12156] veth1_to_batadv: mtu less than device minimum [ 912.171720][ T30] audit: type=1107 audit(1775200898.839:10): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5&UA٠0ltݕ/ 6򊨊' [ 912.456091][T12180] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 912.523257][T12188] netlink: 'syz.3.10771': attribute type 1 has an invalid length. [ 912.578530][T12188] bond9: entered promiscuous mode [ 912.587230][T12188] 8021q: adding VLAN 0 to HW filter on device bond9 [ 912.788856][T12204] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 913.244656][T12218] nbd6: detected capacity change from 0 to 63 [ 913.262635][ T5832] block nbd6: Receive control failed (result -32) [ 913.264074][ T51] block nbd6: Receive control failed (result -32) [ 913.290182][T11973] block nbd6: Dead connection, failed to find a fallback [ 913.310046][T11973] block nbd6: shutting down sockets [ 913.339227][T11973] blk_print_req_error: 135 callbacks suppressed [ 913.339246][T11973] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.369057][T12241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 913.384784][T11973] buffer_io_error: 135 callbacks suppressed [ 913.384803][T11973] Buffer I/O error on dev nbd6, logical block 0, async page read [ 913.384882][T11973] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.384906][T11973] Buffer I/O error on dev nbd6, logical block 1, async page read [ 913.384943][T11973] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.384965][T11973] Buffer I/O error on dev nbd6, logical block 2, async page read [ 913.384998][T11973] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.385021][T11973] Buffer I/O error on dev nbd6, logical block 3, async page read [ 913.385067][T11973] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.385089][T11973] Buffer I/O error on dev nbd6, logical block 0, async page read [ 913.385123][T11973] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.385145][T11973] Buffer I/O error on dev nbd6, logical block 1, async page read [ 913.385178][T11973] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.385199][T11973] Buffer I/O error on dev nbd6, logical block 2, async page read [ 913.385232][T11973] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.385254][T11973] Buffer I/O error on dev nbd6, logical block 3, async page read [ 913.385294][T11973] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.385316][T11973] Buffer I/O error on dev nbd6, logical block 0, async page read [ 913.385349][T11973] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.385369][T11973] Buffer I/O error on dev nbd6, logical block 1, async page read [ 913.387114][T11973] ldm_validate_partition_table(): Disk read failed. [ 913.565876][T11973] Dev nbd6: unable to read RDB block 0 [ 913.629112][T11973] nbd6: unable to read partition table [ 913.695627][T11973] ldm_validate_partition_table(): Disk read failed. [ 913.703066][T11973] Dev nbd6: unable to read RDB block 0 [ 913.721750][T12251] set match dimension is over the limit! [ 913.722247][T11973] nbd6: unable to read partition table [ 913.973752][T12272] netlink: 'syz.0.10798': attribute type 1 has an invalid length. [ 913.983726][T12272] netlink: 'syz.0.10798': attribute type 3 has an invalid length. [ 914.265366][T12290] tls_set_device_offload_rx: netdev not found [ 914.411100][T12298] __nla_validate_parse: 10 callbacks suppressed [ 914.411121][T12298] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10807'. [ 914.486027][T12300] bond6: entered promiscuous mode [ 914.491226][T12300] bond6: entered allmulticast mode [ 914.497235][T12300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 914.953033][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10813'. [ 915.040528][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10817'. [ 915.107298][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10818'. [ 915.127558][T12333] bond5: Invalid ad_actor_system MAC address. [ 915.135760][T12333] bond5: option ad_actor_system: invalid value (1) [ 915.157918][T12333] bond5 (unregistering): Released all slaves [ 915.189838][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10818'. [ 915.327395][T12346] tipc: Resetting bearer [ 915.355058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.355846][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10823'. [ 915.365139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.670657][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10827'. [ 915.685704][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10827'. [ 916.052898][T12385] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10832'. [ 916.065979][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.075335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.107836][T12391] netlink: 'syz.0.10834': attribute type 2 has an invalid length. [ 916.127926][T12346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 916.136212][T12346] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 916.171324][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10835'. [ 916.172697][T12346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 916.205831][T12346] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 916.259567][T12346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 916.266493][T12346] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 916.281874][T12346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 916.288255][T12346] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 916.384272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.393446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.700459][T12415] delete_channel: no stack [ 916.706269][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.716054][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.729346][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.755312][T12413] delete_channel: no stack [ 916.769057][T12423] netlink: 'syz.0.10844': attribute type 1 has an invalid length. [ 916.777439][T12423] netlink: 'syz.0.10844': attribute type 1 has an invalid length. [ 917.012305][T12434] netlink: 'syz.1.10846': attribute type 4 has an invalid length. [ 917.034414][T12432] netlink: 'syz.4.10845': attribute type 1 has an invalid length. [ 917.047989][T12434] netlink: 'syz.1.10846': attribute type 4 has an invalid length. [ 917.187343][T12432] bond5: (slave bridge1): Enslaving as a backup interface with an up link [ 917.294782][ T4039] vlan3: left promiscuous mode [ 917.424559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.815156][T12487] "syz.3.10857" (12487) uses obsolete ecb(arc4) skcipher [ 918.177437][T12454] lec:lec_atm_close: lec0: Shut down! [ 918.344632][T12516] netlink: 'syz.1.10863': attribute type 1 has an invalid length. [ 918.384482][T12516] netlink: 'syz.1.10863': attribute type 2 has an invalid length. [ 919.456093][T12582] __nla_validate_parse: 12 callbacks suppressed [ 919.456112][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10874'. [ 919.557838][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10874'. [ 919.604359][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10874'. [ 919.639494][T12576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.690116][T12585] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.10875'. [ 919.770611][T12593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10879'. [ 920.443119][T12655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10898'. [ 920.474032][T12655] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10898'. [ 920.487307][T12655] netlink: 'syz.1.10898': attribute type 6 has an invalid length. [ 920.506414][T12655] netlink: 'syz.1.10898': attribute type 5 has an invalid length. [ 920.528736][T12655] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10898'. [ 920.540013][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10901'. [ 920.554489][ C1] net_ratelimit: 12 callbacks suppressed [ 920.554507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.649916][T12663] lo speed is unknown, defaulting to 1000 [ 920.662668][T12663] wg1 speed is unknown, defaulting to 1000 [ 920.791512][T12674] xfrm1: entered allmulticast mode [ 921.109029][T12693] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10909'. [ 921.584416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.824843][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.624465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.105448][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.664364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.745039][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 923.753076][ C1] lec:lec_tx_timeout: lec0 [ 924.704412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.744500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.306602][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.784279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.864943][ T4039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.824389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.224744][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.864264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.904368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.144769][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.944238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.429953][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.984365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.065073][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.024245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.064363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.104261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.915830][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.144423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.714220][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 936.722241][ C1] lec:lec_tx_timeout: lec0 [ 937.089695][ T7709] lec:lec_start_xmit: lec0:No lecd attached [ 937.184339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.193626][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.505357][ T5588] page_pool_release_retry() stalled pool shutdown: id 266, 1 inflight 60 sec [ 937.824914][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.224336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.264235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.304615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.344283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.665201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.703988][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.305236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.315241][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.380342][T12703] netlink: 'syz.2.10912': attribute type 12 has an invalid length. [ 942.388660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.597308][T12731] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 942.685082][T12742] vcan0: tx address claim with dest, not broadcast [ 942.704130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 942.712138][ C1] lec:lec_tx_timeout: lec0 [ 942.763240][T12745] netlink: 'syz.3.10923': attribute type 2 has an invalid length. [ 942.814232][T12745] __nla_validate_parse: 1 callbacks suppressed [ 942.814250][T12745] netlink: 119 bytes leftover after parsing attributes in process `syz.3.10923'. [ 942.858706][T12751] netlink: 'syz.0.10924': attribute type 142 has an invalid length. [ 942.862123][T12755] : entered promiscuous mode [ 942.884677][T12751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10924'. [ 943.098585][T12774] netlink: 'syz.0.10931': attribute type 10 has an invalid length. [ 943.116799][T12774] bond0: (slave wlan1): Opening slave failed [ 943.168076][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10933'. [ 943.332430][T12790] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10936'. [ 943.424439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.488724][T12799] bond10: option lp_interval: invalid value (0) [ 943.496389][T12799] bond10: option lp_interval: allowed values 1 - 2147483647 [ 943.515811][T12799] bond10 (unregistering): Released all slaves [ 943.586564][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.595968][T12818] netlink: 'syz.1.10946': attribute type 2 has an invalid length. [ 943.616794][T12818] netlink: 'syz.1.10946': attribute type 2 has an invalid length. [ 943.675876][T12817] netlink: 'syz.1.10946': attribute type 1 has an invalid length. [ 943.690027][T12817] netlink: 'syz.1.10946': attribute type 1 has an invalid length. [ 943.736773][T12823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10948'. [ 943.852752][T12833] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10951'. [ 943.938513][T12845] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10955'. [ 943.961741][T12848] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10954'. [ 944.055674][T12851] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10956'. [ 944.227244][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.275398][T12874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 944.395206][T12885] syzkaller1: entered promiscuous mode [ 944.417007][T12885] syzkaller1: entered allmulticast mode [ 944.423582][T12887] tls_set_device_offload_rx: netdev not found [ 944.476380][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10965'. [ 944.488174][T12889] veth0_macvtap: left promiscuous mode [ 944.596552][T12900] xt_nat: multiple ranges no longer supported [ 944.675742][T12892] syzkaller0: entered promiscuous mode [ 944.688131][T12892] syzkaller0: entered allmulticast mode [ 944.987334][T12912] netlink: 'syz.0.10970': attribute type 1 has an invalid length. [ 946.544575][ C1] net_ratelimit: 2 callbacks suppressed [ 946.544593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.577383][T12923] netlink: 'syz.3.10972': attribute type 6 has an invalid length. [ 946.635714][ T5711] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.652024][ T5711] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.686353][ T5711] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.718216][ T5711] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.772234][T12923] bridge: RTM_NEWNEIGH with invalid ether address [ 946.789178][T12936] bond0: Error: Cannot enslave bond to itself. [ 947.490270][T12966] veth13: entered allmulticast mode [ 947.517591][T12973] veth0: entered promiscuous mode [ 947.594434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.654369][T12971] veth0: left promiscuous mode [ 947.716036][T12983] openvswitch: netlink: Key 26 has unexpected len 4 expected 16 [ 947.833713][T12995] __nla_validate_parse: 10 callbacks suppressed [ 947.833731][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10994'. [ 947.922291][T13001] validate_nla: 1 callbacks suppressed [ 947.922307][T13001] netlink: 'syz.0.10996': attribute type 1 has an invalid length. [ 947.943759][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10995'. [ 947.993207][T13002] bond7: option xmit_hash_policy: invalid value (64) [ 948.018457][T13002] bond7 (unregistering): Released all slaves [ 948.065242][ T4054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.075833][T13001] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 948.155182][T13017] tls_set_device_offload_rx: netdev not found [ 948.259069][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11002'. [ 948.496119][T13040] nbd: must specify at least one socket [ 948.624422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.633070][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.647408][T13045] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11008'. [ 948.988027][T13067] syzkaller0: entered promiscuous mode [ 949.002553][T13067] syzkaller0: entered allmulticast mode [ 949.271714][T13093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11017'. [ 949.400338][T13112] x_tables: duplicate underflow at hook 1 [ 949.456464][T13115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 949.540877][T13121] syzkaller1: entered promiscuous mode [ 949.546506][T13121] syzkaller1: entered allmulticast mode [ 949.664202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.039614][T13125] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11026'. [ 950.079702][T13128] netlink: 'syz.3.11027': attribute type 2 has an invalid length. [ 950.088436][T13128] netlink: 'syz.3.11027': attribute type 2 has an invalid length. [ 950.129033][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11028'. [ 950.704340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.264822][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.275086][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.744212][ C1] net_ratelimit: 1 callbacks suppressed [ 951.744233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.859427][T13059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.966624][T13144] batadv_slave_0: entered promiscuous mode [ 952.046244][T13144] batadv_slave_0: left promiscuous mode [ 952.153996][T13163] x_tables: duplicate underflow at hook 1 [ 952.161736][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11035'. [ 952.216617][T13159] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11034'. [ 952.399221][T13185] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11041'. [ 952.745266][T13215] lo speed is unknown, defaulting to 1000 [ 952.784300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.809735][T13215] wg1 speed is unknown, defaulting to 1000 [ 952.945338][T13231] batadv_slave_0: entered promiscuous mode [ 953.192554][T13230] batadv_slave_0: left promiscuous mode [ 953.300899][T13253] netem: change failed [ 953.489773][T13266] __nla_validate_parse: 2 callbacks suppressed [ 953.489791][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11063'. [ 953.535569][T13266] bridge0: entered promiscuous mode [ 953.541831][T13266] macsec1: entered promiscuous mode [ 953.550868][T13266] macsec1: entered allmulticast mode [ 953.557778][T13266] bridge0: entered allmulticast mode [ 953.564799][T13266] bridge0: port 4(macsec1) entered blocking state [ 953.571472][T13266] bridge0: port 4(macsec1) entered disabled state [ 953.608073][T13266] bridge0: left allmulticast mode [ 953.613489][T13266] bridge0: left promiscuous mode [ 953.824557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.834173][ T4054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.842289][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.870352][T13292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11074'. [ 953.927989][T13292] macvtap1: entered promiscuous mode [ 953.933442][T13292] vlan0: entered promiscuous mode [ 953.939713][T13292] macvtap1: entered allmulticast mode [ 953.945655][T13292] vlan0: entered allmulticast mode [ 953.948209][T13291] netlink: 'syz.3.11073': attribute type 32 has an invalid length. [ 953.950777][T13292] veth0_vlan: entered allmulticast mode [ 954.161152][T13308] syzkaller0: entered promiscuous mode [ 954.167363][T13308] syzkaller0: entered allmulticast mode [ 954.264986][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11080'. [ 954.330572][T13321] wireguard0: entered promiscuous mode [ 954.337942][T13321] wireguard0: entered allmulticast mode [ 954.379596][T13323] netlink: 'syz.3.11085': attribute type 1 has an invalid length. [ 954.403006][T13334] openvswitch: netlink: Duplicate or invalid key (type 0). [ 954.410774][T13334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.421565][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11087'. [ 954.438681][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11087'. [ 954.470574][T13325] netlink: 'syz.3.11085': attribute type 1 has an invalid length. [ 954.521433][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11088'. [ 954.540158][T13341] bridge5: entered promiscuous mode [ 954.552924][T13341] bridge5: entered allmulticast mode [ 954.704991][T13356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11091'. [ 954.793852][T13359] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11096'. [ 954.864296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.896674][T13367] syzkaller1: entered promiscuous mode [ 954.902355][T13367] syzkaller1: entered allmulticast mode [ 955.187950][T13378] syz.2.11101: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 955.220741][T13378] CPU: 1 UID: 0 PID: 13378 Comm: syz.2.11101 Not tainted syzkaller #0 PREEMPT(full) [ 955.220769][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 955.220783][T13378] Call Trace: [ 955.220792][T13378] [ 955.220806][T13378] dump_stack_lvl+0xe8/0x150 [ 955.220841][T13378] warn_alloc+0x249/0x340 [ 955.220868][T13378] ? stack_trace_save+0xa9/0x100 [ 955.220895][T13378] ? __pfx_warn_alloc+0x10/0x10 [ 955.220927][T13378] ? kasan_save_track+0x4f/0x80 [ 955.220949][T13378] ? kasan_save_track+0x3e/0x80 [ 955.220970][T13378] ? __kasan_kmalloc+0x93/0xb0 [ 955.220992][T13378] ? __kmalloc_cache_noprof+0x31c/0x660 [ 955.221013][T13378] ? xskq_create+0x56/0x170 [ 955.221035][T13378] ? xsk_setsockopt+0x54c/0x990 [ 955.221053][T13378] ? do_sock_setsockopt+0x17c/0x1b0 [ 955.221078][T13378] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 955.221100][T13378] ? do_syscall_64+0x14d/0xf80 [ 955.221129][T13378] __vmalloc_node_range_noprof+0x132/0x1730 [ 955.221185][T13378] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 955.221215][T13378] ? __kasan_kmalloc+0x93/0xb0 [ 955.221244][T13378] vmalloc_user_noprof+0xad/0xe0 [ 955.221267][T13378] ? xskq_create+0xbf/0x170 [ 955.221290][T13378] xskq_create+0xbf/0x170 [ 955.221315][T13378] xsk_init_queue+0x8a/0xe0 [ 955.221337][T13378] xsk_setsockopt+0x54c/0x990 [ 955.221361][T13378] ? __pfx_xsk_setsockopt+0x10/0x10 [ 955.221383][T13378] ? __pfx_aa_sk_perm+0x10/0x10 [ 955.221417][T13378] ? aa_sock_opt_perm+0xff/0x1a0 [ 955.221462][T13378] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 955.221485][T13378] ? __pfx_xsk_setsockopt+0x10/0x10 [ 955.221508][T13378] do_sock_setsockopt+0x17c/0x1b0 [ 955.221537][T13378] __x64_sys_setsockopt+0x13d/0x1b0 [ 955.221568][T13378] do_syscall_64+0x14d/0xf80 [ 955.221599][T13378] ? trace_irq_disable+0x3b/0x150 [ 955.221617][T13378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.221638][T13378] ? clear_bhb_loop+0x40/0x90 [ 955.221664][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.221685][T13378] RIP: 0033:0x7f05ce79c819 [ 955.221705][T13378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.221723][T13378] RSP: 002b:00007f05cf61d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 955.221744][T13378] RAX: ffffffffffffffda RBX: 00007f05cea15fa0 RCX: 00007f05ce79c819 [ 955.221760][T13378] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 955.221772][T13378] RBP: 00007f05ce832c91 R08: 0000000000000004 R09: 0000000000000000 [ 955.221785][T13378] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.221798][T13378] R13: 00007f05cea16038 R14: 00007f05cea15fa0 R15: 00007ffd9aee58c8 [ 955.221833][T13378] [ 955.221907][T13378] Mem-Info: [ 955.290427][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11101'. [ 955.298094][T13378] active_anon:6365 inactive_anon:0 isolated_anon:0 [ 955.298094][T13378] active_file:2136 inactive_file:41327 isolated_file:0 [ 955.298094][T13378] unevictable:768 dirty:38 writeback:0 [ 955.298094][T13378] slab_reclaimable:14657 slab_unreclaimable:141075 [ 955.298094][T13378] mapped:29698 shmem:1979 pagetables:1849 [ 955.298094][T13378] sec_pagetables:0 bounce:0 [ 955.298094][T13378] kernel_misc_reclaimable:0 [ 955.298094][T13378] free:1260809 free_pcp:25918 free_cma:0 [ 955.319260][T13385] netlink: 'syz.2.11101': attribute type 30 has an invalid length. [ 955.325800][T13378] Node 0 active_anon:24560kB inactive_anon:0kB active_file:8544kB inactive_file:165100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20488kB dirty:152kB writeback:0kB shmem:5480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18004kB pagetables:7148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 955.325862][T13378] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 955.325912][T13378] Node 0 DMA free:11188kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:76kB local_pcp:4kB free_cma:0kB [ 955.325975][T13378] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 955.326020][T13378] Node 0 DMA32 free:1344120kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24560kB inactive_anon:0kB active_file:8544kB inactive_file:165100kB unevictable:1536kB writepending:152kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:41768kB local_pcp:13816kB free_cma:0kB [ 955.326083][T13378] lowmem_reserve[]: 0 0 0 0 0 [ 955.326125][T13378] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 955.326184][T13378] lowmem_reserve[]: 0 0 0 0 0 [ 955.326226][T13378] Node 1 Normal free:3688928kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62400kB local_pcp:30524kB free_cma:0kB [ 955.326289][T13378] lowmem_reserve[]: 0 0 0 0 0 [ 955.326330][T13378] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11188kB [ 955.326506][T13378] Node 0 DMA32: 10390*4kB (UM) 9324*8kB (UME) 5306*16kB (UME) 299*32kB (UME) 87*64kB (UM) 384*128kB (UM) 704*256kB (UM) 385*512kB (UM) 369*1024kB (UM) 158*2048kB (UM) 0*4096kB = 1344120kB [ 955.326688][T13378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 955.326793][T13378] Node 1 Normal: 7*4kB (UM) 9*8kB (UM) 11*16kB (UM) 18*32kB (UM) 19*64kB (UM) 12*128kB (UM) 16*256kB (UM) [ 955.337576][T13381] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 955.341665][T13378] 18*512kB [ 955.374940][T13381] syzkaller1: Refused to change device type [ 955.378417][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11101'. [ 955.404592][T13380] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 955.417965][T13378] (UM) 14*1024kB (UM) 10*2048kB (U) 888*4096kB (UM) = 3688980kB [ 955.418038][T13378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.418057][T13378] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.418075][T13378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.418093][T13378] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.418111][T13378] 44838 total pagecache pages [ 955.418121][T13378] 0 pages in swap cache [ 955.418130][T13378] Free swap = 124996kB [ 955.418139][T13378] Total swap = 124996kB [ 955.418149][T13378] 2097051 pages RAM [ 955.418159][T13378] 0 pages HighMem/MovableOnly [ 955.418168][T13378] 427062 pages reserved [ 955.418177][T13378] 0 pages cma reserved [ 955.836940][T13397] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 955.838588][T13380] syzkaller1: Refused to change device type [ 955.914211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.525050][T13441] syzkaller0: entered promiscuous mode [ 956.794829][T13468] net_ratelimit: 3 callbacks suppressed [ 956.794846][T13468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.873242][T13470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 957.380885][T13506] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 957.418556][T13509] nbd: must specify an index to disconnect [ 957.504485][T13512] pimreg: entered allmulticast mode [ 957.510392][T13516] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 957.769604][T13531] IPv6: NLM_F_CREATE should be specified when creating new route [ 958.345595][T13580] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 958.366666][T13580] bond4 (unregistering): Released all slaves [ 958.427642][T13588] syz_tun: refused to change device tx_queue_len [ 958.476828][T13588] netlink: 'syz.4.11164': attribute type 5 has an invalid length. [ 958.495113][T13588] __nla_validate_parse: 16 callbacks suppressed [ 958.495132][T13588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11164'. [ 958.665612][T13607] x_tables: duplicate underflow at hook 2 [ 958.710769][T13612] veth0: entered promiscuous mode [ 958.717908][T13611] veth0: left promiscuous mode [ 958.726172][T13614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11169'. [ 958.745997][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11169'. [ 958.855159][T13621] ip6gre0: Master is either lo or non-ether device [ 958.868258][T13621] sctp: [Deprecated]: syz.3.11174 (pid 13621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 958.868258][T13621] Use struct sctp_sack_info instead [ 958.944565][T13630] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 959.008639][T13635] netlink: 'syz.4.11178': attribute type 7 has an invalid length. [ 959.028170][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11177'. [ 959.034266][T13635] netlink: 'syz.4.11178': attribute type 8 has an invalid length. [ 959.116961][ T5961] page_pool_release_retry() stalled pool shutdown: id 59, 1 inflight 725 sec [ 959.278249][T13651] netlink: 'syz.4.11181': attribute type 12 has an invalid length. [ 959.391040][T13662] netlink: 'syz.2.11184': attribute type 8 has an invalid length. [ 959.397295][T13660] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 959.465849][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11185'. [ 959.493255][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11187'. [ 959.523577][T13660] syzkaller0: entered promiscuous mode [ 959.533100][T13660] syzkaller0: entered allmulticast mode [ 959.577619][T13673] netlink: 'syz.1.11186': attribute type 1 has an invalid length. [ 959.631775][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11188'. [ 959.661258][T13681] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11188'. [ 959.677950][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11188'. [ 959.729456][T13685] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11189'. [ 959.779942][T13686] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 961.362261][T13673] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 961.491049][T13704] netlink: 'syz.4.11194': attribute type 58 has an invalid length. [ 961.509010][T13706] sctp: [Deprecated]: syz.3.11195 (pid 13706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 961.509010][T13706] Use struct sctp_sack_info instead [ 961.525214][T13709] netlink: 'syz.0.11196': attribute type 2 has an invalid length. [ 961.533592][T13706] netlink: 'syz.3.11195': attribute type 18 has an invalid length. [ 961.556644][T13709] 9: entered promiscuous mode [ 961.697662][T13718] sctp: [Deprecated]: syz.2.11198 (pid 13718) Use of int in maxseg socket option. [ 961.697662][T13718] Use struct sctp_assoc_value instead [ 961.886794][T13729] gretap1: entered promiscuous mode [ 961.892054][T13729] gretap1: entered allmulticast mode [ 962.321238][T13758] wg2: Caught tx_queue_len zero misconfig [ 962.728059][T13772] udevd[13772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 962.788379][T13771] udevd[13771]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 962.836452][T13779] netlink: 'syz.4.11213': attribute type 62 has an invalid length. [ 962.965674][T13804] "syz.1.11222" (13804) uses obsolete ecb(arc4) skcipher [ 963.052813][T13809] netlink: 'syz.2.11223': attribute type 21 has an invalid length. [ 963.128237][T13809] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 963.158690][T13809] bond7 (unregistering): Released all slaves [ 963.212269][T13826] syzkaller0: entered promiscuous mode [ 963.217941][T13826] syzkaller0: entered allmulticast mode [ 963.228092][T13826] tipc: Failed to remove unknown binding: 66,0,0/10005162:3113014037/3113014039 [ 963.254283][T13826] tipc: Failed to remove unknown binding: 66,0,0/10005162:3113014037/3113014038 [ 963.288840][T13831] tipc: Failed to remove unknown binding: 66,0,0/10005162:3113014037/3113014039 [ 963.301564][T13831] tipc: Failed to remove unknown binding: 66,0,0/10005162:3113014037/3113014038 [ 963.787190][T13867] __nla_validate_parse: 17 callbacks suppressed [ 963.787208][T13867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11240'. [ 964.167088][T13893] netlink: 'syz.1.11249': attribute type 29 has an invalid length. [ 964.196212][T13898] netlink: 'syz.1.11249': attribute type 29 has an invalid length. [ 964.229380][T13893] netlink: 'syz.1.11249': attribute type 32 has an invalid length. [ 964.234185][T13890] lo speed is unknown, defaulting to 1000 [ 964.249790][T13893] netlink: 500 bytes leftover after parsing attributes in process `syz.1.11249'. [ 964.261125][T13902] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 964.298512][T13890] wg1 speed is unknown, defaulting to 1000 [ 964.405184][T13908] netlink: 'syz.2.11250': attribute type 1 has an invalid length. [ 964.447412][T13908] bond7: (slave ip6gretap1): making interface the new active one [ 964.469247][T13908] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 964.480573][T13908] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 964.488646][T13908] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 964.500311][T13914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11254'. [ 964.541121][T13919] netlink: 276 bytes leftover after parsing attributes in process `syz.4.11256'. [ 964.735379][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11260'. [ 964.890453][T13946] netlink: 'syz.4.11264': attribute type 64 has an invalid length. [ 965.277426][T13969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.311067][T13971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.332240][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11273'. [ 965.733292][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11283'. [ 965.765792][T14008] ip6tnl3: entered promiscuous mode [ 965.872659][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11286'. [ 965.895980][T14016] netlink: 'syz.3.11286': attribute type 18 has an invalid length. [ 965.905002][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11290'. [ 965.919396][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11286'. [ 965.934958][T14016] netlink: 'syz.3.11286': attribute type 18 has an invalid length. [ 966.022669][T14032] team0: No ports can be present during mode change [ 966.095586][T14038] team0: No ports can be present during mode change [ 966.183943][T14047] netlink: 'syz.4.11294': attribute type 9 has an invalid length. [ 966.196886][T14047] netlink: 'syz.4.11294': attribute type 11 has an invalid length. [ 966.205154][T14047] netlink: 'syz.4.11294': attribute type 12 has an invalid length. [ 966.305856][T14055] netem: change failed [ 966.329296][T14060] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 966.486799][T14072] x_tables: duplicate underflow at hook 3 [ 966.567062][T14079] netlink: 'syz.1.11305': attribute type 11 has an invalid length. [ 966.607192][T14079] xt_CONNSECMARK: invalid mode: 0 [ 967.106388][T14121] geneve2: entered promiscuous mode [ 967.139778][ T5711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.150069][ T5711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.178803][ T5711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.188069][ T5711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.545219][T14162] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 967.643276][T14174] netdevsim netdevsim1: Direct firmware load for 0 failed with error -2 [ 967.679716][T14174] netdevsim netdevsim1: Falling back to sysfs fallback for: 0 [ 967.729503][T14179] macsec2: entered promiscuous mode [ 967.743410][T14179] veth1_macvtap: entered promiscuous mode [ 967.764831][T14179] veth1_macvtap: left promiscuous mode [ 968.124588][T14206] IPVS: length: 239 != 24 [ 968.426011][T14226] bond10: entered promiscuous mode [ 968.434932][T14226] 8021q: adding VLAN 0 to HW filter on device bond10 [ 968.459848][T14226] 8021q: adding VLAN 0 to HW filter on device bond10 [ 968.467889][T14226] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 968.481461][T14226] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 968.501021][T14230] IPv6: NLM_F_CREATE should be specified when creating new route [ 968.509130][T14226] bond10: (slave vti0): making interface the new active one [ 968.517685][T14226] vti0: entered promiscuous mode [ 968.525516][T14226] bond10: (slave vti0): Enslaving as an active interface with an up link [ 968.933627][T14258] 8021q: VLANs not supported on caif0 [ 969.256753][T14281] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 969.287901][T14285] validate_nla: 6 callbacks suppressed [ 969.287928][T14285] netlink: 'syz.2.11375': attribute type 3 has an invalid length. [ 969.327014][T14288] __nla_validate_parse: 25 callbacks suppressed [ 969.327059][T14288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11373'. [ 969.431130][T14294] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.11379'. [ 969.431153][T14295] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.11379'. [ 969.448856][T14297] netlink: 'syz.3.11380': attribute type 1 has an invalid length. [ 969.463319][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11379'. [ 969.463797][T14297] netlink: 'syz.3.11380': attribute type 3 has an invalid length. [ 969.486164][T14297] netlink: 172 bytes leftover after parsing attributes in process `syz.3.11380'. [ 969.499890][T14297] NCSI netlink: No device for ifindex 813332851 [ 969.633851][T14297] syzkaller0: Caught tx_queue_len zero misconfig [ 969.750340][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11383'. [ 969.771737][T14315] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 969.803259][T14315] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 969.819990][T14315] gretap1: entered promiscuous mode [ 969.829164][T14315] gretap1: entered allmulticast mode [ 970.122673][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11390'. [ 970.456772][T14368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 970.488894][T14371] netlink: 'syz.1.11400': attribute type 1 has an invalid length. [ 970.513940][T14371] netlink: 232 bytes leftover after parsing attributes in process `syz.1.11400'. [ 970.712135][T14388] IPVS: set_ctl: invalid protocol: 126 0.0.0.0:20000 [ 970.738472][T14387] IPVS: set_ctl: invalid protocol: 126 0.0.0.0:20000 [ 970.762893][T14385] syzkaller1: entered promiscuous mode [ 970.777085][T14385] syzkaller1: entered allmulticast mode [ 971.004695][T14410] netlink: 'syz.4.11412': attribute type 4 has an invalid length. [ 971.014648][T14410] netlink: 'syz.4.11412': attribute type 3 has an invalid length. [ 971.022821][T14410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11412'. [ 971.188614][T14423] bond11: option miimon: invalid value (18446744073709551585) [ 971.203361][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11416'. [ 971.293653][T14423] bond11: option miimon: allowed values 0 - 2147483647 [ 971.340019][T14423] bond11 (unregistering): Released all slaves [ 971.735310][T14452] syzkaller0: Caught tx_queue_len zero misconfig [ 972.107369][T14488] netlink: 'syz.1.11434': attribute type 16 has an invalid length. [ 972.116728][T14488] netlink: 'syz.1.11434': attribute type 1 has an invalid length. [ 972.559106][T14467] netlink: 'syz.4.11429': attribute type 1 has an invalid length. [ 972.569496][T14467] netlink: 'syz.4.11429': attribute type 3 has an invalid length. [ 972.577762][T14467] NCSI netlink: No device for ifindex 813332851 [ 972.615736][T14520] 8021q: adding VLAN 0 to HW filter on device bond9 [ 972.720528][T14532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 972.858498][T14537] 8021q: adding VLAN 0 to HW filter on device bond6 [ 973.379434][T14571] bond7: option xmit_hash_policy: invalid value (64) [ 973.405711][T14571] bond7 (unregistering): Released all slaves [ 974.813142][T14693] __nla_validate_parse: 24 callbacks suppressed [ 974.813161][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11493'. [ 974.902349][T14698] lo: entered allmulticast mode [ 974.947839][T14698] lo: left allmulticast mode [ 975.176554][T14714] x_tables: unsorted entry at hook 3 [ 975.400271][T14732] validate_nla: 12 callbacks suppressed [ 975.400288][T14732] netlink: 'syz.4.11504': attribute type 2 has an invalid length. [ 975.444380][T14732] netlink: 'syz.4.11504': attribute type 2 has an invalid length. [ 975.488970][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11510'. [ 975.513682][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11510'. [ 975.528598][T14744] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 975.570605][T14728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.641470][T14752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.657335][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11512'. [ 975.657610][T14756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11511'. [ 975.750411][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11515'. [ 975.760030][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11515'. [ 975.772751][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11515'. [ 975.783035][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11515'. [ 975.793508][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11515'. [ 976.047930][T14785] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 976.352248][T14813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.809027][T14846] syzkaller0: entered promiscuous mode [ 976.810437][T14849] x_tables: duplicate underflow at hook 1 [ 976.815174][T14846] syzkaller0: entered allmulticast mode [ 976.968531][ T30] audit: type=1800 audit(1775200963.659:11): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11542" name="memory.events" dev="tmpfs" ino=2461 res=0 errno=0 [ 977.028426][ T30] audit: type=1804 audit(1775200963.659:12): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.11542" name="/newroot/480/memory.events" dev="tmpfs" ino=2461 res=1 errno=0 [ 977.109045][T14862] xfrm1: entered promiscuous mode [ 977.124592][T14862] xfrm1: entered allmulticast mode [ 977.334785][T14882] netlink: 'syz.4.11552': attribute type 1 has an invalid length. [ 977.348041][T19048] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.353417][T14884] netlink: 'syz.1.11553': attribute type 1 has an invalid length. [ 977.356481][T19048] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.375496][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.437025][T14882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 977.515011][T14901] netlink: 'syz.3.11554': attribute type 1 has an invalid length. [ 977.525101][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.593123][T14901] bond11: entered promiscuous mode [ 977.608409][T14901] 8021q: adding VLAN 0 to HW filter on device bond11 [ 977.792816][T14908] bond11: (slave bridge6): making interface the new active one [ 977.809848][T14908] bridge6: entered promiscuous mode [ 977.821816][T14908] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 977.847159][T14917] netlink: 'syz.4.11560': attribute type 11 has an invalid length. [ 977.864367][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.933072][T14920] netlink: 'syz.3.11562': attribute type 4 has an invalid length. [ 977.953295][T14921] netlink: 'syz.3.11562': attribute type 1 has an invalid length. [ 978.246832][T14940] tls_set_device_offload_rx: netdev not found [ 978.571563][T14965] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 978.607750][T14966] xt_l2tp: v2 tid > 0xffff: 1114244 [ 978.659597][T14968] netlink: 'syz.0.11576': attribute type 2 has an invalid length. [ 978.748308][T14977] netlink: 'syz.1.11580': attribute type 8 has an invalid length. [ 979.999397][T15064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.106096][T15072] __nla_validate_parse: 83 callbacks suppressed [ 980.106109][T15072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11614'. [ 980.169516][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11615'. [ 980.181399][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11615'. [ 980.190650][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11615'. [ 980.200954][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11615'. [ 980.286983][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11617'. [ 980.299501][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11617'. [ 980.587384][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11623'. [ 980.608339][T19048] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.608451][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11623'. [ 980.618189][T19048] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.639029][T15099] validate_nla: 4 callbacks suppressed [ 980.639044][T15099] netlink: 'syz.0.11623': attribute type 12 has an invalid length. [ 980.657793][T19048] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.698281][T15099] bond5: option primary_reselect: invalid value (255) [ 980.708341][T15099] bond5 (unregistering): Released all slaves [ 980.737840][T19048] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.739534][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11626'. [ 980.980848][T15121] sctp: [Deprecated]: syz.0.11633 (pid 15121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 980.980848][T15121] Use struct sctp_sack_info instead [ 981.104300][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 981.395747][T15154] bridge0: port 2(gretap0) entered blocking state [ 981.402408][T15154] bridge0: port 2(gretap0) entered disabled state [ 981.410883][T15154] gretap0: entered allmulticast mode [ 981.418420][T15154] gretap0: entered promiscuous mode [ 981.424302][T15154] bridge0: port 2(gretap0) entered blocking state [ 981.430845][T15154] bridge0: port 2(gretap0) entered forwarding state [ 981.809822][T15184] netlink: 'syz.2.11653': attribute type 32 has an invalid length. [ 981.870985][T15188] netlink: 'syz.3.11654': attribute type 1 has an invalid length. [ 981.880414][T15188] netlink: 'syz.3.11654': attribute type 2 has an invalid length. [ 981.897593][T15188] netlink: 'syz.3.11654': attribute type 1 has an invalid length. [ 982.252447][T15211] geneve4: entered promiscuous mode [ 982.260961][ T5716] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 49113 - 0 [ 982.291548][ T5716] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 49113 - 0 [ 982.304293][ T5716] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 49113 - 0 [ 982.319651][T15221] vcan0: entered allmulticast mode [ 982.383063][T15223] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 982.414655][T15225] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 982.443819][T15229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.541522][T15240] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 982.550793][T15240] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 983.152843][T15272] veth5: entered allmulticast mode [ 983.182346][T15272] bond12: (slave veth5): Enslaving as an active interface with an up link [ 983.277338][ T30] audit: type=1107 audit(1775200969.969:13): pid=15291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' 9[<[xDiP ' [ 983.622441][T15316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.006367][T15351] netlink: 'syz.2.11707': attribute type 1 has an invalid length. [ 984.057425][T15354] mac80211_hwsim hwsim109 syzkaller0: entered promiscuous mode [ 984.073222][T15356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 984.092395][T15354] mac80211_hwsim hwsim109 syzkaller0: entered allmulticast mode [ 984.121641][T15358] netlink: 'syz.0.11710': attribute type 8 has an invalid length. [ 984.379054][T15377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 984.386357][T15377] IPv6: NLM_F_CREATE should be set when creating new route [ 984.490253][T15388] xt_cgroup: path and classid specified [ 984.649442][T15397] lo: Caught tx_queue_len zero misconfig [ 984.698132][T15399] sctp: [Deprecated]: syz.2.11721 (pid 15399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 984.698132][T15399] Use struct sctp_sack_info instead [ 985.200226][T15437] __nla_validate_parse: 23 callbacks suppressed [ 985.200246][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11728'. [ 985.232257][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11728'. [ 985.470081][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11728'. [ 985.484912][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11728'. [ 985.732608][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11737'. [ 985.918174][T15487] gretap0: left allmulticast mode [ 985.923262][T15487] gretap0: left promiscuous mode [ 985.941821][T15491] openvswitch: netlink: Multiple metadata blocks provided [ 985.949729][T15487] bridge0: port 3(gretap0) entered disabled state [ 985.982244][T15487] bridge_slave_0: left allmulticast mode [ 985.989228][T15487] bridge_slave_0: left promiscuous mode [ 985.995647][T15487] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.008743][T15487] bridge_slave_1: left allmulticast mode [ 986.014786][T15487] bridge_slave_1: left promiscuous mode [ 986.020507][T15487] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.033931][T15487] bond0: (slave bond_slave_0): Releasing backup interface [ 986.063659][T15487] bond0: (slave bond_slave_1): Releasing backup interface [ 986.086504][T15487] team0: Port device team_slave_0 removed [ 986.109010][T15487] team0: Port device team_slave_1 removed [ 986.119207][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.127295][T15487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.136646][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.149530][T15487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.159248][T15487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 986.177203][T15496] ip6tnl0: Caught tx_queue_len zero misconfig [ 986.199052][T15497] team0: Mode changed to "activebackup" [ 986.267313][T15510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11747'. [ 986.297345][ T5717] bond3: (slave vlan3): link status definitely down, disabling slave [ 986.326982][ T5717] bond3: now running without any active interface! [ 986.520414][T15515] erspan0: left promiscuous mode [ 986.562692][T15533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11750'. [ 986.645779][T15539] netlink: 'syz.3.11755': attribute type 1 has an invalid length. [ 986.725925][T15546] xt_hashlimit: size too large, truncated to 1048576 [ 987.243771][T15515] veth1_vlan: left allmulticast mode [ 987.259501][T15515] macvlan0: left allmulticast mode [ 987.389214][T15515] ip6gre1: left allmulticast mode [ 987.420871][T15515] vlan3: left allmulticast mode [ 987.430959][T15515] veth0_to_bond: left allmulticast mode [ 987.499902][T15539] bond13: entered promiscuous mode [ 987.514621][T15539] 8021q: adding VLAN 0 to HW filter on device bond13 [ 987.548662][ T5711] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.587913][ T5711] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.597805][T15561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.633859][ T5711] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.643122][ T5711] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.657370][ T5711] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.671948][ T5711] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.681209][ T5711] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.690416][ T5711] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.849028][T15581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11767'. [ 987.932275][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11768'. [ 988.025168][T15597] syzkaller1: entered promiscuous mode [ 988.030711][T15597] syzkaller1: entered allmulticast mode [ 988.065404][T15597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11770'. [ 988.098206][T15605] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 988.141505][T15609] x_tables: duplicate underflow at hook 1 [ 988.267317][T15623] netlink: ct family unspecified [ 988.277949][T15624] netlink: ct family unspecified [ 988.390346][T15633] tipc: Enabling of bearer rejected, failed to enable media [ 988.548065][ T5719] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.557499][ T5719] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.573894][ T5719] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.583323][ T5719] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.024235][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 989.138319][T15676] h: entered promiscuous mode [ 989.293799][T15685] netlink: 'syz.4.11796': attribute type 4 has an invalid length. [ 989.331560][T15685] wlan1: mtu less than device minimum [ 989.433116][T15689] can: request_module (can-proto-0) failed. [ 989.496188][T15704] IPv6: sit1: Disabled Multicast RS [ 989.553769][T15709] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 990.004273][T15741] netlink: 'syz.2.11814': attribute type 10 has an invalid length. [ 990.150153][T15754] bond0: Caught tx_queue_len zero misconfig [ 990.256488][T15766] __nla_validate_parse: 9 callbacks suppressed [ 990.256507][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11821'. [ 990.379926][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11823'. [ 990.391188][T15770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11823'. [ 990.408445][T15769] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11823'. [ 990.432182][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11824'. [ 990.461602][T15780] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11827'. [ 990.516809][T15783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11829'. [ 990.553579][T15787] syz_tun: entered allmulticast mode [ 990.556828][T15783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11829'. [ 990.834577][T15805] x_tables: duplicate underflow at hook 1 [ 990.843229][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11839'. [ 990.852761][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11839'. [ 991.016292][T15818] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 991.317017][T15838] netlink: 'syz.3.11849': attribute type 1 has an invalid length. [ 991.416563][T15844] bridge0: port 2(gretap0) entered disabled state [ 991.615143][T15844] veth7: left promiscuous mode [ 991.674315][T15844] bond6: left promiscuous mode [ 991.679123][T15844] bond6: left allmulticast mode [ 991.690791][T15844] xfrm1: left allmulticast mode [ 991.697239][T15844] veth13: left allmulticast mode [ 991.712402][T15844] gretap1: left promiscuous mode [ 991.717562][T15844] gretap1: left allmulticast mode [ 991.760934][T15844] h: left promiscuous mode [ 991.790067][T15838] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 991.800697][T15838] bond14: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 991.813770][T15838] bond14: (slave vxcan5): making interface the new active one [ 991.823413][T15838] bond14: (slave vxcan5): Enslaving as an active interface with an up link [ 991.906312][T15850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.940176][T15850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.998937][ T4054] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.027205][ T4054] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.040310][ T4054] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.060296][ T4054] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.086356][ T4054] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.095126][T15866] netlink: 'syz.0.11857': attribute type 1 has an invalid length. [ 992.095651][ T4054] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.191088][T15886] IPv6: NLM_F_CREATE should be specified when creating new route [ 992.219425][T15886] netlink: 'syz.3.11862': attribute type 1 has an invalid length. [ 992.372994][T15905] hsr_slave_0: left promiscuous mode [ 992.380346][T15905] hsr_slave_1: left promiscuous mode [ 992.408318][T15908] xt_hashlimit: size too large, truncated to 1048576 [ 992.428811][T15898] netlink: 'syz.3.11862': attribute type 1 has an invalid length. [ 992.440894][T15898] netlink: 'syz.3.11862': attribute type 2 has an invalid length. [ 992.536032][T15913] bridge8: entered promiscuous mode [ 992.554297][T15913] bridge8: entered allmulticast mode [ 992.571874][T15913] team0: Port device bridge8 added [ 992.583333][T15915] netlink: 'syz.4.11870': attribute type 12 has an invalid length. [ 992.625775][T15915] netlink: 'syz.4.11870': attribute type 12 has an invalid length. [ 992.637231][T15913] bridge0: port 3(team0) entered blocking state [ 992.643830][T15913] bridge0: port 3(team0) entered disabled state [ 992.651859][T15913] team0: entered allmulticast mode [ 992.660211][T15913] team_slave_0: entered allmulticast mode [ 992.666919][T15913] team_slave_1: entered allmulticast mode [ 992.677213][T15913] team0: entered promiscuous mode [ 992.682393][T15913] team_slave_0: entered promiscuous mode [ 992.690770][T15913] team_slave_1: entered promiscuous mode [ 992.750485][T15924] syzkaller1: entered promiscuous mode [ 992.760363][T15924] syzkaller1: entered allmulticast mode [ 992.781396][T15927] vlan2: entered promiscuous mode [ 992.787482][T15927] geneve1: entered promiscuous mode [ 992.792877][T15927] vlan2: entered allmulticast mode [ 992.798177][T15927] geneve1: entered allmulticast mode [ 992.871255][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 993.008174][T15945] vxcan2: entered allmulticast mode [ 993.028616][T15949] netlink: 'syz.3.11881': attribute type 3 has an invalid length. [ 993.093857][T15950] bond8: option lp_interval: invalid value (0) [ 993.106234][T15950] bond8: option lp_interval: allowed values 1 - 2147483647 [ 993.127265][T15950] bond8 (unregistering): Released all slaves [ 993.145906][T15961] netlink: zone id is out of range [ 993.222168][T15964] netlink: 'syz.0.11884': attribute type 1 has an invalid length. [ 993.386679][T15971] netlink: 'syz.4.11886': attribute type 7 has an invalid length. [ 993.539978][T15982] wireguard0: entered promiscuous mode [ 993.554298][T15982] wireguard0: entered allmulticast mode [ 993.596779][T15981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.663059][T15981] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 994.158471][T16018] netlink: 'syz.2.11900': attribute type 1 has an invalid length. [ 994.246648][T16018] 8021q: adding VLAN 0 to HW filter on device bond11 [ 994.365820][T16018] bond11: (slave veth15): Enslaving as an active interface with a down link [ 994.402225][T16029] syzkaller0: left promiscuous mode [ 994.410640][T16029] syzkaller0: left allmulticast mode [ 994.745453][T16054] ip6tnl2: entered allmulticast mode [ 994.752213][T16054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 994.821136][T16058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 994.852584][T16058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 995.388866][T16105] __nla_validate_parse: 19 callbacks suppressed [ 995.388887][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11925'. [ 995.407073][T16105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11925'. [ 995.417374][T16105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11925'. [ 995.650096][T16117] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 995.676340][T16119] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 995.695447][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11931'. [ 995.705126][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11931'. [ 995.825854][T16132] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11934'. [ 995.842243][T16132] NCSI netlink: No device for ifindex 813332851 [ 995.851655][T16132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11934'. [ 995.950553][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11934'. [ 996.073639][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11939'. [ 996.328481][T16150] vlan3: entered allmulticast mode [ 996.333732][T16150] bond0: entered allmulticast mode [ 996.339357][T16150] bond_slave_0: entered allmulticast mode [ 996.345394][T16150] bond_slave_1: entered allmulticast mode [ 996.351133][T16150] bridge_slave_1: entered allmulticast mode [ 996.409511][T16158] xt_hashlimit: size too large, truncated to 1048576 [ 996.722230][T16166] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11944'. [ 996.826671][T16175] syzkaller1: entered promiscuous mode [ 996.832177][T16175] syzkaller1: entered allmulticast mode [ 997.187101][T16208] validate_nla: 6 callbacks suppressed [ 997.187114][T16208] netlink: 'syz.4.11959': attribute type 1 has an invalid length. [ 997.201154][T16208] netlink: 'syz.4.11959': attribute type 2 has an invalid length. [ 997.541605][T16217] sock: sock_set_timeout: `syz.3.11962' (pid 16217) tries to set negative timeout [ 997.557860][T16218] sock: sock_set_timeout: `syz.3.11962' (pid 16218) tries to set negative timeout [ 997.821106][T16232] delete_channel: no stack [ 997.857767][T16234] bond15: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 997.884821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 997.886774][T16234] bond15 (unregistering): Released all slaves [ 997.892854][ C1] lec:lec_tx_timeout: lec0 [ 997.906277][T16238] x_tables: duplicate underflow at hook 3 [ 997.983613][T16232] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 998.146842][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 998.168988][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 998.181530][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 998.191661][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 998.200285][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 998.242928][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 998.254245][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 998.262764][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 998.307761][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 998.318794][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 998.466302][T16258] netlink: 'syz.4.11971': attribute type 3 has an invalid length. [ 998.772249][T16240] lo speed is unknown, defaulting to 1000 [ 998.802548][T16240] wg1 speed is unknown, defaulting to 1000 [ 998.949758][T16287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 999.252306][T16307] tc_dump_action: action bad kind [ 999.541247][T16340] openvswitch: netlink: Missing key (keys=40, expected=80) [ 999.558537][ T5717] gretap0: left allmulticast mode [ 999.596765][ T5717] gretap0: left promiscuous mode [ 999.602529][ T5717] bridge0: port 2(gretap0) entered disabled state [ 999.643591][ T5717] bridge_slave_0: left allmulticast mode [ 999.649400][ T5717] bridge_slave_0: left promiscuous mode [ 999.655677][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.858690][ T5717] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 1000.026567][ T5717] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1000.394211][ T5832] Bluetooth: hci1: command tx timeout [ 1000.459154][ T5717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.469809][ T5717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.480053][ T5717] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1000.490565][ T5717] bond0 (unregistering): Released all slaves [ 1000.501295][ T5717] bond1 (unregistering): Released all slaves [ 1000.515069][ T5717] bond2 (unregistering): Released all slaves [ 1000.530987][ T5717] bond3 (unregistering): Released all slaves [ 1000.547060][ T5717] bond4 (unregistering): Released all slaves [ 1000.560291][ T5717] bond5 (unregistering): Released all slaves [ 1000.572826][ T5717] bond6 (unregistering): Released all slaves [ 1000.595476][ T5717] bond7 (unregistering): Released all slaves [ 1000.608107][ T5717] bond8 (unregistering): Released all slaves [ 1000.621088][ T5717] bond9 (unregistering): Released all slaves [ 1000.633841][ T5717] bond10 (unregistering): Released all slaves [ 1000.649986][ T5717] bond11 (unregistering): (slave veth15): Releasing active interface [ 1000.667246][ T5717] bond11 (unregistering): Released all slaves [ 1000.753126][T16240] chnl_net:caif_netlink_parms(): no params data found [ 1000.901309][ T5717] 9: left promiscuous mode [ 1000.909124][T16379] openvswitch: netlink: IP tunnel dst address not specified [ 1000.919601][T16379] __nla_validate_parse: 10 callbacks suppressed [ 1000.919619][T16379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11998'. [ 1001.081435][ T5717] tipc: Left network mode [ 1001.086434][T16380] syzkaller0: entered promiscuous mode [ 1001.102580][T16380] syzkaller0: entered allmulticast mode [ 1001.166581][T16394] netlink: 'syz.4.12002': attribute type 2 has an invalid length. [ 1001.360518][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.374613][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.402999][T16240] bridge_slave_0: entered allmulticast mode [ 1001.436500][T16240] bridge_slave_0: entered promiscuous mode [ 1001.522290][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.538636][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.547291][T16240] bridge_slave_1: entered allmulticast mode [ 1001.575452][T16240] bridge_slave_1: entered promiscuous mode [ 1001.689895][T16427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.749983][T16413] dvmrp0: entered allmulticast mode [ 1001.768662][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.798017][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12008'. [ 1001.832910][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.980110][T16435] sch_tbf: peakrate 3 is lower than or equals to rate 18446744073709551614 ! [ 1002.077647][T16450] IPVS: length: 239 != 24 [ 1002.114423][ T7709] lec:lec_start_xmit: lec0:No lecd attached [ 1002.122430][T16240] team0: Port device team_slave_0 added [ 1002.148874][T16240] team0: Port device team_slave_1 added [ 1002.270146][T16460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12016'. [ 1002.283915][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12016'. [ 1002.293507][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12016'. [ 1002.302175][T16458] netlink: 'syz.1.12014': attribute type 2 has an invalid length. [ 1002.330581][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.350594][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.395783][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.422626][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.433310][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.463086][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.465510][ T5832] Bluetooth: hci1: command tx timeout [ 1002.489356][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12018'. [ 1002.500343][T16472] syzkaller0: entered promiscuous mode [ 1002.505878][T16472] syzkaller0: entered allmulticast mode [ 1002.608228][T16480] netlink: 'syz.3.12020': attribute type 10 has an invalid length. [ 1002.663150][T16480] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1002.725508][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.733568][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.747686][ T5717] vlan0: left allmulticast mode [ 1002.752629][ T5717] veth0_vlan: left allmulticast mode [ 1002.758513][ T5717] vlan0: left promiscuous mode [ 1002.780978][T16489] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12021'. [ 1002.863084][T16492] sctp: [Deprecated]: syz.0.12021 (pid 16492) Use of int in maxseg socket option. [ 1002.863084][T16492] Use struct sctp_assoc_value instead [ 1002.886635][ T5717] pimreg (unregistering): left allmulticast mode [ 1002.903352][T16492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12021'. [ 1002.928265][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12022'. [ 1003.010801][T16498] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12022'. [ 1003.432600][T16240] hsr_slave_0: entered promiscuous mode [ 1003.440664][T16240] hsr_slave_1: entered promiscuous mode [ 1003.486711][T16489] vlan6: entered allmulticast mode [ 1003.492111][T16489] gretap0: entered allmulticast mode [ 1003.505583][T16491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.526174][T16495] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1003.751857][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1003.931813][T16519] syzkaller0: entered promiscuous mode [ 1003.937585][T16519] syzkaller0: entered allmulticast mode [ 1003.968036][T16529] tipc: Enabling of bearer rejected, failed to enable media [ 1004.548226][ T5832] Bluetooth: hci1: command tx timeout [ 1005.853535][T16553] netlink: 'syz.3.12032': attribute type 1 has an invalid length. [ 1005.977910][T16557] x_tables: unsorted underflow at hook 4 [ 1005.986911][T16559] netlink: 'syz.4.12034': attribute type 1 has an invalid length. [ 1005.992346][T16560] __nla_validate_parse: 4 callbacks suppressed [ 1005.992362][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12035'. [ 1006.115899][T16559] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1006.203124][T16576] netlink: 'syz.1.12038': attribute type 4 has an invalid length. [ 1006.218189][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12037'. [ 1006.250007][T16570] bond8: (slave geneve5): making interface the new active one [ 1006.258593][T16579] netlink: 'syz.1.12038': attribute type 4 has an invalid length. [ 1006.271936][T16570] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 1006.289111][T16574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12037'. [ 1006.452059][ T5717] IPVS: stop unused estimator thread 0... [ 1006.624475][ T5832] Bluetooth: hci1: command tx timeout [ 1006.914296][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12043'. [ 1007.002127][T16617] team0: entered promiscuous mode [ 1007.007920][T16617] team0: entered allmulticast mode [ 1007.168561][T16638] netlink: 'syz.0.12050': attribute type 3 has an invalid length. [ 1007.180215][T16638] netlink: 'syz.0.12050': attribute type 3 has an invalid length. [ 1007.217483][ T5711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.226300][ T5711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.309704][T16240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1007.339005][T16240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1007.361730][T16240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1007.392778][T16240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1007.411728][T16647] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12053'. [ 1007.467073][T16657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12054'. [ 1007.489914][T16657] netlink: 'syz.0.12054': attribute type 10 has an invalid length. [ 1007.502855][T16657] netlink: 396 bytes leftover after parsing attributes in process `syz.0.12054'. [ 1007.517056][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12055'. [ 1007.621074][T16240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.674803][T16240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.708727][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.715930][ T5711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.744091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 1007.752151][ C1] lec:lec_tx_timeout: lec0 [ 1007.771373][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.778593][ T5719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.382630][T16712] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12064'. [ 1008.442585][T16240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.461463][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12066'. [ 1008.481846][T16712] netlink: 'syz.4.12064': attribute type 20 has an invalid length. [ 1008.515988][T16712] netlink: 'syz.4.12064': attribute type 20 has an invalid length. [ 1008.587171][T16240] veth0_vlan: entered promiscuous mode [ 1008.639462][T16240] veth1_vlan: entered promiscuous mode [ 1008.723309][T16240] veth0_macvtap: entered promiscuous mode [ 1008.770808][T16240] veth1_macvtap: entered promiscuous mode [ 1008.808745][T16240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.834204][T16240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.908976][ T5710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.945810][ T5710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.999479][ T5710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.012383][ T5710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.107611][T16754] netlink: 'syz.3.12077': attribute type 1 has an invalid length. [ 1009.307932][T16766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.359241][T16772] sctp: [Deprecated]: syz.4.12081 (pid 16772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1009.359241][T16772] Use struct sctp_sack_info instead [ 1009.440117][T16776] openvswitch: netlink: Message has 8 unknown bytes. [ 1009.477063][T16776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1009.489431][ T5719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.502884][ T5719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.612992][ T5710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.630711][ T5710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.710648][T16785] gre2: entered promiscuous mode [ 1009.730054][T16785] gre2: entered allmulticast mode [ 1009.880924][T16797] x_tables: duplicate underflow at hook 1 [ 1010.229986][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1010.242068][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1010.250701][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1010.260467][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1010.268568][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1010.333095][T16818] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1010.392741][T16811] lo speed is unknown, defaulting to 1000 [ 1010.478175][T16811] wg1 speed is unknown, defaulting to 1000 [ 1010.792530][T16840] netlink: 'syz.3.12098': attribute type 1 has an invalid length. [ 1011.007923][T16851] netlink: 'syz.3.12098': attribute type 1 has an invalid length. [ 1011.047513][T16851] netlink: 'syz.3.12098': attribute type 2 has an invalid length. [ 1011.061673][T16840] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1011.151889][T16843] bond16: (slave veth7): Enslaving as an active interface with a down link [ 1011.197813][T16836] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1011.275228][T16849] netlink: 'syz.0.12100': attribute type 2 has an invalid length. [ 1011.516490][ T5717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.538710][ T5717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.570480][ T5717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1011.581640][ T5717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 49113 - 0 [ 1011.608723][T16876] __nla_validate_parse: 15 callbacks suppressed [ 1011.608743][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12103'. [ 1011.814675][T16888] netlink: 276 bytes leftover after parsing attributes in process `syz.2.12106'. [ 1011.865560][T16894] netlink: 276 bytes leftover after parsing attributes in process `syz.2.12106'. [ 1011.901263][T16888] openvswitch: netlink: Flow key attr not present in new flow. [ 1011.908388][T16894] openvswitch: netlink: Flow key attr not present in new flow. [ 1012.073055][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12105'. [ 1012.092073][ T5717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.174083][ T5717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.190620][ T5717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1012.202980][ T5717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 49113 - 0 [ 1012.291075][T16895] netlink: 'syz.0.12108': attribute type 1 has an invalid length. [ 1012.305616][ T51] Bluetooth: hci4: command tx timeout [ 1012.440939][ T5717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.454863][ T5717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.469928][ T5717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1012.487802][ T5717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 49113 - 0 [ 1012.584227][T16927] lo speed is unknown, defaulting to 1000 [ 1012.640174][ T5717] batman_adv: batadv0: Removing interface: netdevsim0 [ 1012.669191][T16927] wg1 speed is unknown, defaulting to 1000 [ 1012.675363][T16811] chnl_net:caif_netlink_parms(): no params data found [ 1012.699102][T16939] mac80211_hwsim hwsim114 syzkaller0: entered promiscuous mode [ 1012.709205][T16939] mac80211_hwsim hwsim114 syzkaller0: entered allmulticast mode [ 1012.721533][T16946] netlink: 'syz.2.12113': attribute type 2 has an invalid length. [ 1012.731288][T16946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12113'. [ 1012.856090][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12115'. [ 1012.888057][T16950] block nbd0: reconnected socket [ 1012.888680][ T51] block nbd0: Receive control failed (result -107) [ 1013.127725][ T5717] [ 1013.130081][ T5717] ====================================================== [ 1013.137103][ T5717] WARNING: possible circular locking dependency detected [ 1013.144121][ T5717] syzkaller #0 Not tainted [ 1013.148526][ T5717] ------------------------------------------------------ [ 1013.155528][ T5717] kworker/u8:18/5717 is trying to acquire lock: [ 1013.161753][ T5717] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 1013.171065][ T5717] [ 1013.171065][ T5717] but task is already holding lock: [ 1013.178415][ T5717] ffffffff8f17cfc8 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 1013.187292][ T5717] [ 1013.187292][ T5717] which lock already depends on the new lock. [ 1013.187292][ T5717] [ 1013.197700][ T5717] [ 1013.197700][ T5717] the existing dependency chain (in reverse order) is: [ 1013.206711][ T5717] [ 1013.206711][ T5717] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 1013.213825][ T5717] __mutex_lock+0x19f/0x1300 [ 1013.218938][ T5717] get_device_parent+0x16f/0x3a0 [ 1013.225257][ T5717] device_add+0x2e1/0xb70 [ 1013.230095][ T5717] device_create+0x269/0x300 [ 1013.235203][ T5717] msr_device_create+0x33/0x50 [ 1013.240481][ T5717] cpuhp_invoke_callback+0x445/0x860 [ 1013.246278][ T5717] cpuhp_thread_fun+0x36b/0x780 [ 1013.251637][ T5717] smpboot_thread_fn+0x541/0xa50 [ 1013.257087][ T5717] kthread+0x388/0x470 [ 1013.261663][ T5717] ret_from_fork+0x51e/0xb90 [ 1013.266763][ T5717] ret_from_fork_asm+0x1a/0x30 [ 1013.272037][ T5717] [ 1013.272037][ T5717] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 1013.279577][ T5717] cpuhp_thread_fun+0x127/0x780 [ 1013.284949][ T5717] smpboot_thread_fn+0x541/0xa50 [ 1013.290398][ T5717] kthread+0x388/0x470 [ 1013.294970][ T5717] ret_from_fork+0x51e/0xb90 [ 1013.300068][ T5717] ret_from_fork_asm+0x1a/0x30 [ 1013.305342][ T5717] [ 1013.305342][ T5717] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 1013.313055][ T5717] cpus_read_lock+0x42/0x160 [ 1013.318153][ T5717] static_key_slow_inc+0x12/0x30 [ 1013.323598][ T5717] nbd_genl_reconfigure+0x132f/0x1ea0 [ 1013.329473][ T5717] genl_family_rcv_msg_doit+0x22a/0x330 [ 1013.335534][ T5717] genl_rcv_msg+0x61c/0x7a0 [ 1013.340546][ T5717] netlink_rcv_skb+0x232/0x4b0 [ 1013.345818][ T5717] genl_rcv+0x28/0x40 [ 1013.350326][ T5717] netlink_unicast+0x80f/0x9b0 [ 1013.355598][ T5717] netlink_sendmsg+0x813/0xb40 [ 1013.360863][ T5717] ____sys_sendmsg+0x972/0x9f0 [ 1013.366132][ T5717] ___sys_sendmsg+0x2a5/0x360 [ 1013.371312][ T5717] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1013.376761][ T5717] do_syscall_64+0x14d/0xf80 [ 1013.381857][ T5717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.388258][ T5717] [ 1013.388258][ T5717] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1013.395888][ T5717] __mutex_lock+0x19f/0x1300 [ 1013.400988][ T5717] nbd_queue_rq+0x37b/0x1100 [ 1013.406092][ T5717] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1013.412144][ T5717] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1013.418977][ T5717] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1013.425554][ T5717] blk_mq_run_hw_queue+0x348/0x4f0 [ 1013.431167][ T5717] blk_mq_dispatch_list+0xd16/0xe10 [ 1013.436871][ T5717] blk_mq_flush_plug_list+0x48d/0x570 [ 1013.442755][ T5717] __blk_flush_plug+0x3ed/0x4d0 [ 1013.448116][ T5717] __submit_bio+0x28d/0x580 [ 1013.453126][ T5717] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1013.459264][ T5717] block_read_full_folio+0x599/0x830 [ 1013.465053][ T5717] filemap_read_folio+0x137/0x3b0 [ 1013.470583][ T5717] do_read_cache_folio+0x358/0x590 [ 1013.476197][ T5717] read_part_sector+0xb6/0x2b0 [ 1013.481467][ T5717] adfspart_check_ICS+0xa5/0xa40 [ 1013.486914][ T5717] bdev_disk_changed+0x7ba/0x1550 [ 1013.492443][ T5717] blkdev_get_whole+0x380/0x510 [ 1013.497802][ T5717] bdev_open+0x31e/0xd30 [ 1013.502560][ T5717] blkdev_open+0x470/0x610 [ 1013.507484][ T5717] do_dentry_open+0x785/0x14e0 [ 1013.512756][ T5717] vfs_open+0x3b/0x340 [ 1013.517330][ T5717] path_openat+0x2e08/0x3860 [ 1013.522429][ T5717] do_file_open+0x23e/0x4a0 [ 1013.527441][ T5717] do_sys_openat2+0x113/0x200 [ 1013.532626][ T5717] __x64_sys_openat+0x138/0x170 [ 1013.537986][ T5717] do_syscall_64+0x14d/0xf80 [ 1013.543085][ T5717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.549488][ T5717] [ 1013.549488][ T5717] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1013.556680][ T5717] __mutex_lock+0x19f/0x1300 [ 1013.561778][ T5717] nbd_queue_rq+0xc6/0x1100 [ 1013.566788][ T5717] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1013.572845][ T5717] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1013.579693][ T5717] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1013.586184][ T5717] blk_mq_run_hw_queue+0x348/0x4f0 [ 1013.591807][ T5717] blk_mq_dispatch_list+0xd16/0xe10 [ 1013.597518][ T5717] blk_mq_flush_plug_list+0x48d/0x570 [ 1013.603398][ T5717] __blk_flush_plug+0x3ed/0x4d0 [ 1013.608761][ T5717] __submit_bio+0x28d/0x580 [ 1013.613770][ T5717] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1013.619907][ T5717] block_read_full_folio+0x599/0x830 [ 1013.625700][ T5717] filemap_read_folio+0x137/0x3b0 [ 1013.631233][ T5717] do_read_cache_folio+0x358/0x590 [ 1013.636847][ T5717] read_part_sector+0xb6/0x2b0 [ 1013.642119][ T5717] adfspart_check_ICS+0xa5/0xa40 [ 1013.647561][ T5717] bdev_disk_changed+0x7ba/0x1550 [ 1013.653092][ T5717] blkdev_get_whole+0x380/0x510 [ 1013.658448][ T5717] bdev_open+0x31e/0xd30 [ 1013.663197][ T5717] blkdev_open+0x470/0x610 [ 1013.668119][ T5717] do_dentry_open+0x785/0x14e0 [ 1013.673388][ T5717] vfs_open+0x3b/0x340 [ 1013.677966][ T5717] path_openat+0x2e08/0x3860 [ 1013.683063][ T5717] do_file_open+0x23e/0x4a0 [ 1013.688069][ T5717] do_sys_openat2+0x113/0x200 [ 1013.693254][ T5717] __x64_sys_openat+0x138/0x170 [ 1013.698610][ T5717] do_syscall_64+0x14d/0xf80 [ 1013.703707][ T5717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.710100][ T5717] [ 1013.710100][ T5717] -> #3 (set->srcu){.+.+}-{0:0}: [ 1013.717206][ T5717] __synchronize_srcu+0xca/0x300 [ 1013.722646][ T5717] elevator_switch+0x1e8/0x7a0 [ 1013.727913][ T5717] elevator_change+0x2cc/0x450 [ 1013.733182][ T5717] elevator_set_default+0x36c/0x430 [ 1013.738886][ T5717] blk_register_queue+0x366/0x430 [ 1013.744420][ T5717] __add_disk+0x677/0xd50 [ 1013.749256][ T5717] add_disk_fwnode+0xfb/0x480 [ 1013.754441][ T5717] nbd_dev_add+0x72c/0xb50 [ 1013.759363][ T5717] nbd_init+0x168/0x1f0 [ 1013.764022][ T5717] do_one_initcall+0x250/0x8d0 [ 1013.769295][ T5717] do_initcall_level+0x104/0x190 [ 1013.774740][ T5717] do_initcalls+0x59/0xa0 [ 1013.779576][ T5717] kernel_init_freeable+0x2a6/0x3e0 [ 1013.785280][ T5717] kernel_init+0x1d/0x1d0 [ 1013.790109][ T5717] ret_from_fork+0x51e/0xb90 [ 1013.795202][ T5717] ret_from_fork_asm+0x1a/0x30 [ 1013.800473][ T5717] [ 1013.800473][ T5717] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1013.808270][ T5717] __mutex_lock+0x19f/0x1300 [ 1013.813367][ T5717] elevator_change+0x1b3/0x450 [ 1013.818633][ T5717] elevator_set_none+0xb5/0x140 [ 1013.823986][ T5717] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1013.830394][ T5717] nbd_start_device+0x17f/0xb10 [ 1013.835754][ T5717] nbd_genl_connect+0x165b/0x1cf0 [ 1013.841287][ T5717] genl_family_rcv_msg_doit+0x22a/0x330 [ 1013.847339][ T5717] genl_rcv_msg+0x61c/0x7a0 [ 1013.852347][ T5717] netlink_rcv_skb+0x232/0x4b0 [ 1013.857611][ T5717] genl_rcv+0x28/0x40 [ 1013.862100][ T5717] netlink_unicast+0x80f/0x9b0 [ 1013.867367][ T5717] netlink_sendmsg+0x813/0xb40 [ 1013.872636][ T5717] ____sys_sendmsg+0x972/0x9f0 [ 1013.877907][ T5717] ___sys_sendmsg+0x2a5/0x360 [ 1013.883089][ T5717] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1013.888533][ T5717] do_syscall_64+0x14d/0xf80 [ 1013.893648][ T5717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.900053][ T5717] [ 1013.900053][ T5717] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1013.908641][ T5717] blk_alloc_queue+0x546/0x680 [ 1013.913909][ T5717] __blk_mq_alloc_disk+0x197/0x390 [ 1013.919524][ T5717] nbd_dev_add+0x499/0xb50 [ 1013.924444][ T5717] nbd_init+0x168/0x1f0 [ 1013.929101][ T5717] do_one_initcall+0x250/0x8d0 [ 1013.934371][ T5717] do_initcall_level+0x104/0x190 [ 1013.939817][ T5717] do_initcalls+0x59/0xa0 [ 1013.944650][ T5717] kernel_init_freeable+0x2a6/0x3e0 [ 1013.950354][ T5717] kernel_init+0x1d/0x1d0 [ 1013.955185][ T5717] ret_from_fork+0x51e/0xb90 [ 1013.960282][ T5717] ret_from_fork_asm+0x1a/0x30 [ 1013.965552][ T5717] [ 1013.965552][ T5717] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1013.972741][ T5717] __lock_acquire+0x15a5/0x2cf0 [ 1013.978108][ T5717] lock_acquire+0xf0/0x2e0 [ 1013.983052][ T5717] fs_reclaim_acquire+0x71/0x100 [ 1013.988504][ T5717] __kmalloc_cache_noprof+0x40/0x660 [ 1013.994303][ T5717] get_device_parent+0x255/0x3a0 [ 1013.999752][ T5717] device_add+0x2e1/0xb70 [ 1014.004591][ T5717] netdev_register_kobject+0x178/0x310 [ 1014.010559][ T5717] register_netdevice+0x12c0/0x1cf0 [ 1014.016263][ T5717] nsim_create+0xb92/0x1100 [ 1014.021269][ T5717] __nsim_dev_port_add+0x72a/0xb50 [ 1014.026883][ T5717] nsim_dev_port_add_all+0x37/0xf0 [ 1014.032500][ T5717] nsim_dev_reload_up+0x45f/0x7c0 [ 1014.038030][ T5717] devlink_reload+0x505/0x8d0 [ 1014.043223][ T5717] devlink_pernet_pre_exit+0x1ea/0x3f0 [ 1014.049206][ T5717] ops_undo_list+0x187/0x940 [ 1014.054314][ T5717] cleanup_net+0x56b/0x800 [ 1014.059239][ T5717] process_scheduled_works+0xb6e/0x18c0 [ 1014.065296][ T5717] worker_thread+0xa53/0xfc0 [ 1014.070406][ T5717] kthread+0x388/0x470 [ 1014.074977][ T5717] ret_from_fork+0x51e/0xb90 [ 1014.080074][ T5717] ret_from_fork_asm+0x1a/0x30 [ 1014.085348][ T5717] [ 1014.085348][ T5717] other info that might help us debug this: [ 1014.085348][ T5717] [ 1014.095560][ T5717] Chain exists of: [ 1014.095560][ T5717] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 1014.095560][ T5717] [ 1014.107556][ T5717] Possible unsafe locking scenario: [ 1014.107556][ T5717] [ 1014.114983][ T5717] CPU0 CPU1 [ 1014.120328][ T5717] ---- ---- [ 1014.125672][ T5717] lock(gdp_mutex); [ 1014.129557][ T5717] lock(cpuhp_state-up); [ 1014.136414][ T5717] lock(gdp_mutex); [ 1014.142819][ T5717] lock(fs_reclaim); [ 1014.146791][ T5717] [ 1014.146791][ T5717] *** DEADLOCK *** [ 1014.146791][ T5717] [ 1014.154913][ T5717] 7 locks held by kworker/u8:18/5717: [ 1014.160261][ T5717] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1014.171124][ T5717] #1: ffffc90004a7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1014.181637][ T5717] #2: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1014.190926][ T5717] #3: ffff888034953130 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x11b/0x3f0 [ 1014.200918][ T5717] #4: ffff888021b84250 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x3f0 [ 1014.211777][ T5717] #5: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x839/0x1100 [ 1014.220719][ T5717] #6: ffffffff8f17cfc8 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 1014.230031][ T5717] [ 1014.230031][ T5717] stack backtrace: [ 1014.235907][ T5717] CPU: 0 UID: 0 PID: 5717 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1014.235924][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1014.235933][ T5717] Workqueue: netns cleanup_net [ 1014.235951][ T5717] Call Trace: [ 1014.235957][ T5717] [ 1014.235963][ T5717] dump_stack_lvl+0xe8/0x150 [ 1014.235982][ T5717] print_circular_bug+0x2e1/0x300 [ 1014.236005][ T5717] check_noncircular+0x12e/0x150 [ 1014.236025][ T5717] __lock_acquire+0x15a5/0x2cf0 [ 1014.236042][ T5717] ? rcu_is_watching+0x15/0xb0 [ 1014.236061][ T5717] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.236080][ T5717] lock_acquire+0xf0/0x2e0 [ 1014.236095][ T5717] ? __kmalloc_cache_noprof+0x40/0x660 [ 1014.236114][ T5717] fs_reclaim_acquire+0x71/0x100 [ 1014.236129][ T5717] ? __kmalloc_cache_noprof+0x40/0x660 [ 1014.236143][ T5717] __kmalloc_cache_noprof+0x40/0x660 [ 1014.236157][ T5717] ? get_device_parent+0x255/0x3a0 [ 1014.236173][ T5717] ? do_raw_spin_unlock+0xf5/0x210 [ 1014.236187][ T5717] get_device_parent+0x255/0x3a0 [ 1014.236205][ T5717] device_add+0x2e1/0xb70 [ 1014.236220][ T5717] ? device_initialize+0x26a/0x460 [ 1014.236236][ T5717] netdev_register_kobject+0x178/0x310 [ 1014.236254][ T5717] register_netdevice+0x12c0/0x1cf0 [ 1014.236271][ T5717] ? dput+0x37/0x1a0 [ 1014.236293][ T5717] ? __pfx_register_netdevice+0x10/0x10 [ 1014.236310][ T5717] ? __debugfs_create_file+0x34f/0x400 [ 1014.236325][ T5717] ? debugfs_create_file_full+0x3f/0x60 [ 1014.236341][ T5717] nsim_create+0xb92/0x1100 [ 1014.236359][ T5717] __nsim_dev_port_add+0x72a/0xb50 [ 1014.236379][ T5717] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 1014.236400][ T5717] ? queue_delayed_work_on+0x171/0x1e0 [ 1014.236421][ T5717] nsim_dev_port_add_all+0x37/0xf0 [ 1014.236438][ T5717] nsim_dev_reload_up+0x45f/0x7c0 [ 1014.236457][ T5717] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1014.236478][ T5717] devlink_reload+0x505/0x8d0 [ 1014.236496][ T5717] ? __pfx_devlink_reload+0x10/0x10 [ 1014.236510][ T5717] ? xa_get_mark+0x6fc/0x7b0 [ 1014.236532][ T5717] devlink_pernet_pre_exit+0x1ea/0x3f0 [ 1014.236547][ T5717] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1014.236563][ T5717] ? class_remove_file_ns+0x121/0x160 [ 1014.236578][ T5717] ops_undo_list+0x187/0x940 [ 1014.236593][ T5717] ? __pfx_ops_undo_list+0x10/0x10 [ 1014.236608][ T5717] ? idr_destroy+0x218/0x290 [ 1014.236621][ T5717] ? do_raw_spin_unlock+0xf5/0x210 [ 1014.236635][ T5717] cleanup_net+0x56b/0x800 [ 1014.236649][ T5717] ? __pfx_cleanup_net+0x10/0x10 [ 1014.236665][ T5717] ? process_scheduled_works+0xa8d/0x18c0 [ 1014.236680][ T5717] ? process_scheduled_works+0xa8d/0x18c0 [ 1014.236696][ T5717] process_scheduled_works+0xb6e/0x18c0 [ 1014.236722][ T5717] ? __pfx_process_scheduled_works+0x10/0x10 [ 1014.236745][ T5717] ? assign_work+0x3d5/0x5e0 [ 1014.236762][ T5717] worker_thread+0xa53/0xfc0 [ 1014.236787][ T5717] kthread+0x388/0x470 [ 1014.236800][ T5717] ? __pfx_worker_thread+0x10/0x10 [ 1014.236815][ T5717] ? __pfx_kthread+0x10/0x10 [ 1014.236828][ T5717] ret_from_fork+0x51e/0xb90 [ 1014.236845][ T5717] ? __pfx_ret_from_fork+0x10/0x10 [ 1014.236860][ T5717] ? __switch_to+0xc7d/0x1450 [ 1014.236875][ T5717] ? __pfx_kthread+0x10/0x10 [ 1014.236887][ T5717] ret_from_fork_asm+0x1a/0x30 [ 1014.236910][ T5717] [ 1014.568255][ T51] Bluetooth: hci4: command tx timeout [ 1014.613041][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.640496][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.657070][T16811] bridge_slave_0: entered allmulticast mode [ 1014.664673][T16811] bridge_slave_0: entered promiscuous mode [ 1014.672500][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.680451][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.688752][T16811] bridge_slave_1: entered allmulticast mode [ 1014.695832][T16811] bridge_slave_1: entered promiscuous mode [ 1014.722179][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.733856][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.773032][ T5717] bridge_slave_1: left promiscuous mode [ 1014.790528][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.803596][ T5717] bridge_slave_0: left allmulticast mode [ 1014.810803][ T5717] bridge_slave_0: left promiscuous mode [ 1014.816676][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.942377][ T5717] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1014.962006][ T5717] dvmrp0 (unregistering): left allmulticast mode [ 1014.972003][ T5717] bond8 (unregistering): (slave geneve5): Releasing active interface [ 1014.986346][ T5717] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1015.031118][ T5717] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 1015.257150][ T5717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.268143][ T5717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.277932][ T5717] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1015.287463][ T5717] bond0 (unregistering): Released all slaves [ 1015.296079][ T5717] bond1 (unregistering): Released all slaves [ 1015.305014][ T5717] bond2 (unregistering): Released all slaves [ 1015.313581][ T5717] bond3 (unregistering): Released all slaves [ 1015.327720][ T5717] bond4 (unregistering): Released all slaves [ 1015.336539][ T5717] bond5 (unregistering): Released all slaves [ 1015.346005][ T5717] bond6 (unregistering): Released all slaves [ 1015.355476][ T5717] bond7 (unregistering): Released all slaves [ 1015.368131][ T5717] bond8 (unregistering): Released all slaves [ 1015.387855][T16811] team0: Port device team_slave_0 added [ 1015.395474][T16811] team0: Port device team_slave_1 added [ 1015.412174][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.420419][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.455774][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.482276][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.489829][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.516301][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.544827][ T5717] : left promiscuous mode [ 1015.566152][T16811] hsr_slave_0: entered promiscuous mode [ 1015.572239][T16811] hsr_slave_1: entered promiscuous mode [ 1015.579003][T16811] debugfs: 'hsr0' already exists in 'hsr' [ 1015.587519][T16811] Cannot create hsr debugfs directory [ 1015.971719][T16811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1015.983133][T16811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1015.996417][T16811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1016.009156][T16811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1016.094376][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.101787][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.113076][ T5717] veth1_macvtap: left promiscuous mode [ 1016.122795][ T5717] veth1_vlan: left promiscuous mode [ 1016.321370][T16811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.339765][T16811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.349943][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.357028][ T4054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.369082][T19039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.376215][T19039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.531543][T16811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.624348][ T5832] Bluetooth: hci4: command tx timeout [ 1016.672886][T16811] veth0_vlan: entered promiscuous mode [ 1016.682252][T16811] veth1_vlan: entered promiscuous mode [ 1016.703226][T16811] veth0_macvtap: entered promiscuous mode [ 1016.713141][T16811] veth1_macvtap: entered promiscuous mode [ 1016.726853][T16811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.741465][T16811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.752793][T19039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.761716][T19039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.772110][T19039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.781827][T19039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.805720][T16811] ieee80211 phy141: Selected rate control algorithm 'minstrel_ht' [ 1016.831024][ T5716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.832486][T16811] ieee80211 phy142: Selected rate control algorithm 'minstrel_ht' [ 1016.846659][ T5716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.870092][T19039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.878237][T19039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.704904][ T5832] Bluetooth: hci4: command tx timeout [ 1019.744849][ T796] page_pool_release_retry() stalled pool shutdown: id 59, 1 inflight 786 sec