last executing test programs: 2.837441477s ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r1, 0x20, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x40}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.535231566s ago: executing program 2 (id=2666): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3, 0x2, 0x10}, &(0x7f0000000240)=0xc) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r6, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r4, &(0x7f0000000080), 0x1a1, 0x0) (async) sendmmsg(r4, &(0x7f0000000080), 0x1a1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 2.296129999s ago: executing program 3 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 32) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.240820288s ago: executing program 2 (id=2668): r0 = socket(0x2, 0xa, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r2}, &(0x7f0000000080)=0x8) (async) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061100c00000000009500000000000000989648fbc9747542daa1b98da916879dc5e62d3340e459e9d4f618c2eaf9f9d240249f2c989630fd94d285e03878d91758d73a91cab8f596ab2ece397886843d6b5a1c484d6af15f6c273b9ebf5d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.111325743s ago: executing program 3 (id=2671): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000030016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000000"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0xa, 0x3) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000008fdffffff4400000008000300", @ANYRES32=r9, @ANYBLOB="0c002380060019"], 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x10}}], 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x6}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) 1.914063829s ago: executing program 0 (id=2674): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a09274506ec60853df9ca40b59166853c6019bd046e19", 0x92}, {&(0x7f0000003cc0)="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", 0xf6e}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0000000"], 0x110, 0x4000}], 0x1, 0x8081) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00", @ANYRESDEC=r4, @ANYRES16=r4], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.596301918s ago: executing program 3 (id=2676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x40804) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x40804) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r8, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) 1.44717986s ago: executing program 0 (id=2677): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20008080) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x17) (async) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000680)="6e396043c7f73cdb24daad17f83ce74b34cd63b8facb5c284d61010075bfdbc35cfe8116ba2125d355b852159de6df41715a3e9d41970b39c9293403d0e740dd1fd8e8b590936714c68252a41c8876cefdd8a3b4e05edd64fafd10e7ab0feabc0e", 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r6, 0x1, 0x12, 0x0, &(0x7f0000001ec0)) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000009b80)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000010900020073797a31000000000900010004000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x20048014) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x5, 0x40, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b036814e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r13 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="03000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r8, @ANYBLOB="000125bd7000bcdbdf2506000000340001801400020076657468315f766972745f030066690008000100da39641ca06f0a709e441c750b7c70e54263e960afa9ad236bde31319110321c87147207cf49b90b00415caa7602b998ab49c00d3b5f029d7a2d5fb1ea187ad9ec", @ANYRES32=r14, @ANYBLOB="140002006d6163767461703000000000000000007000018014000200636169663000000000000000000000001400020076657468315f746f5f6873720000000008000300020000001400020076657468315f6d61637674617000000014000200626f6e64300000000000000000000000140002006772653000"/132], 0xb8}, 0x1, 0x0, 0x0, 0x4044080}, 0x20004904) 1.434682195s ago: executing program 1 (id=2679): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57ec7d56}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}]}, @NFT_MSG_NEWTABLE={0xa4, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x87, 0x6, "a534bfae8519bb968ff03ff11d9b00e9a7d9ecb41dcde782813656af3504b0cfc0dc000e40a67026c61592d328e98145adedbb71974d65dd796466de1b3ac00156cc8f3e01af2bf169684c7d802bdd142171a28f6f593f566ed495d45838e5edd272dc44e7c90281b6d2b15e9c482b81cc2c782e9f3f7b4b012982795630c8a0a556e0"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x148}, 0x1, 0x0, 0x0, 0x24008040}, 0x8040) 1.336620453s ago: executing program 3 (id=2680): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'vlan1\x00', 0x2}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x84, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5c}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x881) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) close(r0) 1.232205567s ago: executing program 2 (id=2681): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080013400000000108000640200000000500010006000000050005000200000405000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f4ffcd"], 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x3, 'ip6tnl0\x00', {0xffffffff}, 0x8}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x4, 0x7, 0x311c9c03, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000006c0)={0x0, 0x4, 0x8, 0x7f, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000700020000001b26347976d748530000"], 0x14}}, 0x0) 1.221022201s ago: executing program 0 (id=2682): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xff\xff\xff\xff\xff\xff'}]}, 0x3c}}, 0x4050) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000004000)={'wpan1\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x51483}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newpolicy={0x2a4, 0x13, 0x200, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e24, 0x7, 0x4e21, 0x6, 0x2, 0x80, 0x80, 0x62, r5, 0xffffffffffffffff}, {0x206, 0x5, 0x2, 0x0, 0x7fff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x2}, {0x2, 0xfffffffffffff274, 0x5, 0xf}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x13f, 0x14, {{'vmac(aes-aesni)\x00'}, 0x798, 0x180, "e247a80853cbdc09bb791216c849426076045fb8ab2191823d6b7f4bcdde7cff006c4c7843dd58169c1faefa85d7c32ba598fc2a27e15dcf7be206be6283afc2f6edc90c9d753210e145bcf224f7fd79b37e5956e8e6af3e793a9da293d4cb84eda56692f8934b3bdd9b629140038bc2b915c879cc9ca7e50311f58b99810a06a13ea5f831763b0246036aa6964d9dfe18c909876fd4f16a567fd4e8d4375f95a829f1274310fac0f1d1a1d8996b2fe7e6166ed24bcfb63b6e58fe22505d881acebe3888cce58a78657795956183d3db2e6e24c389873a6ee037fa2392008dd92835745da5e22a1e2302ff6f318680a21ac10f"}}, @mark={0xc, 0x15, {0x35075b, 0x4}}, @replay_thresh={0x8}, @algo_aead={0x95, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x248, 0x60, "ced6df0bda4da3d8a4e4c8a71c8fb4d43308ad372d8ac862d74b9831de58739f4d66c196cf2e301aa2eb427f7b9ac590ecf28a7fce3f4ce7fc4376aa4ab4e567938139b09ae17052c1"}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.175785402s ago: executing program 3 (id=2683): r0 = socket(0x1e, 0xa, 0x4) recvmsg$kcm(r0, &(0x7f0000001100)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/27, 0x1b}, 0x40002140) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001140)={0x3}, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001180)={0x0, 0x6, 0x2c5d2ed2e6076a19}, &(0x7f00000011c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x5, 0x0, 0x2, 0x80000001, 0x9, 0x4, 0xd77b, 0x3, 0x200, 0x40, 0x3, 0x162940c9, 0x9, 0x7, 0x6]}, &(0x7f0000001300)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001340)={r1, 0x8, 0x4, 0x8, 0xfff8, 0x3, 0x5, 0x7, {r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x49e5, 0x800, 0x8, 0x77f8, 0x9}}, &(0x7f0000001400)=0xb0) getsockopt(r0, 0x7f, 0x10, &(0x7f0000001440)=""/20, &(0x7f0000001480)=0x14) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000014c0)={r0, 0x9, 0x9, 0x8001}) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001500)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x5, 0x8, 0x3, 0x5, 0x4c}, &(0x7f00000015c0)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001600)={r7, @in={{0x2, 0x4e21, @local}}, 0x7, 0x5}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r9, 0x10, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000d5}, 0x8004) accept4$inet6(r0, 0x0, &(0x7f0000001800), 0x800) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x280101}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, 0x1407, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x44}}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$cgroup_ro(r5, &(0x7f0000001980)='blkio.bfq.time_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000019c0)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0xc9, 0x6311, 0x0, 0x6, 0x45, 0x4, 0x3}, &(0x7f0000001a80)=0x9c) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r12, 0x40047452, &(0x7f0000001ac0)=0x8001) bind$inet(r10, &(0x7f0000001b00)={0x2, 0x4e21, @private=0xa010101}, 0x10) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000001b40)={0x40, 0x2f6, 0x5, 0x6}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x5c, r13, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40) pread64(r11, &(0x7f0000001d00)=""/164, 0xa4, 0x303) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x6, 0x2, 0x7, 0xffff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) 1.104256428s ago: executing program 2 (id=2684): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r2, 0x1) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.104006128s ago: executing program 1 (id=2685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.018383366s ago: executing program 4 (id=2686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x114, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6}, {0x9, 0x5}, {0xa, 0x5}, {0xf9, 0x6}, {0x7, 0x6}, {0x8, 0x7}, {0xd, 0x3}, {0x1, 0x3}, {0x9, 0x1}, {0x11, 0x2}, {0x4f, 0x3}, {0x1, 0x1}], "611b6bec3594d12f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3, 0x4}, {0xd, 0x3}, {0x1, 0x6}, {0x40}, {0x8, 0x4}, {0x69, 0x5}, {0x8a, 0x1}, {0x2, 0x5}, {0x1, 0x2}, {0xac, 0x3}, {0xa1}, {0x9, 0x4}, {0xb7, 0x7}, {0x6, 0x4}, {0xff}, {0x1, 0x2}, {0x7}, {0x34}, {0xff, 0x1}], "2fbfe5fc31b01fbc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x6, 0x3}, {0x2, 0x2}, {0xfc, 0x7}, {0xf, 0x5}, {0xc, 0x4}, {0x2, 0x3}, {0x1, 0x6}], "92959be4c7e79077"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x3}, {0x2, 0x3}, {0xb}, {0x5, 0x5}, {0xf9}, {0xb7, 0x5}, {0x7b, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x5, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x3, 0x5}, {0xe, 0x7}, {0x3, 0x6}, {0x9, 0x3}], "f619657b3dd358b8"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3, 0x3}, {0x2, 0x1}, {0x2, 0x5}, {0x8, 0x6}, {0x8, 0x1}, {0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x8, 0x3}, {0x86, 0x1}, {0x9, 0x5}, {0x3f, 0x6}, {0xa}, {0x9}, {0x9, 0x2}, {0x7, 0x1}, {0x3}, {0x9, 0x5}, {0x2, 0x4}], "9c7b450837002301"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x1, 0x2}, {0x1}, {0x1, 0x4}, {0xb2, 0x2}, {0xe2, 0x3}], "bc44920e20f2632f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "89be7502b5bc15ec"}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000001}, 0x8811) 962.394564ms ago: executing program 0 (id=2687): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000006000000000000000000000000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 961.698466ms ago: executing program 3 (id=2688): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0xfffffffd, 0x71, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b5d4c67}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000dc0)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0xffff, 0x2}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x300, 0x0, 0x2, 0x0, 0x805, 0x346}, 0x20) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0xd8, 0x30, 0x1, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x24}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x44, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x17, 0x6, "511d2e4c075eca24e21530fa4d4ab9eb53bf37"}, {0xfffffffffffffe17}, {0xc, 0x8, {0x2, 0xeb804a98c420662d}}}}]}]}, 0xd8}}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000040), 0x4) r6 = socket$inet(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r7, &(0x7f0000000140)=ANY=[], 0xc2) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[], 0xffdd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) 907.555792ms ago: executing program 1 (id=2689): syz_init_net_socket$x25(0x9, 0x5, 0x4000000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 872.259091ms ago: executing program 0 (id=2690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4df, 0x0, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRESDEC=r8, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xa) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="94fd479f", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x94, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x300, 0x2, 0x1, 0x0, {0x7, 0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}, 0xf03, 0x9, 0x40}}]}]]}, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfbad, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x4e24, @multicast2}}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100000a0000000000000100000000030006000000000002000000ac1414aa0000000000000000030005000000000002000000ffffffff0000000000000000020013000200"/80], 0x50}, 0x1, 0x7}, 0x0) ioctl(r11, 0x8b2a, &(0x7f0000000040)) socket$inet6(0xa, 0xa, 0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090630000000000500016e76000000280007800c000180080001400a83d75d1da8d4fa0fc7fa9c11ac0a8a6c9811e4d2208749c50b0101010c00028008000140e00000020c00148048255b57"], 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 846.772216ms ago: executing program 4 (id=2691): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x8f, 0xfffffffc, 0x6}) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) 780.115658ms ago: executing program 4 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 724.104616ms ago: executing program 1 (id=2693): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth1_to_batadv\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x460000, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000540)) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000090000c400000000c82936d900000800000000000000000000000000000611a712bad712d96522fd928c08c3822df00f7d32e1c646f3ccfda23387916100abf51ea08694719aaa7f5985e1629cedd0426034da4c1584051bbdbdce321a3ad71a62b33910efac5b81f2083674552d6dc13e354617fae4e89966fe8fec0a9a6817e10f3bea7ceed758b73fdd"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 606.796444ms ago: executing program 4 (id=2694): socket(0x25, 0x5, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 481.081769ms ago: executing program 4 (id=2695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x80000, 0x6) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0xa6, "fe8c835fd55212d0b9e5d748eb4452f4113ddc7e33e4d44cb92c3098521d6f1a4606e2c1bf0cef12f404cec6faf1f866ab1299dcfb5c2c30d931fc5898ffd7be1edc3288f8e9ce53bec6ca6876132e4ece4cf033de20525887613e660e58b5a14ec2a1b3bbe7fe7da0d6a08c8c54a517567a028dce633a630fe7901051ebe2cc7da644ea6b17dc9b303621268d8420b4d26044878dee8c95dabb84580c713660208afe464110"}, &(0x7f0000000100)=0xca) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) recvmsg$can_bcm(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20) 287.483079ms ago: executing program 0 (id=2696): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000140), 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x20000000) 283.136579ms ago: executing program 1 (id=2697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 216.535543ms ago: executing program 2 (id=2698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) 54.151143ms ago: executing program 1 (id=2699): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) 0s ago: executing program 4 (id=2700): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40095}, 0x8004) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00004ff5f22ac374dd3cc0bd75f632bf9a0012", @ANYRES32=0x0, @ANYRES64=r11, @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): attr not present in new flow. [ 174.655531][ T7216] pim6reg1: entered allmulticast mode [ 174.674610][ T7222] team0: Cannot enslave team device to itself [ 174.756674][ T7227] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 174.766006][ T7227] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.353'. [ 174.877819][ T7224] bridge0: Caught tx_queue_len zero misconfig [ 175.042941][ T7237] netem: change failed [ 175.277440][ T7246] netlink: 'syz.3.359': attribute type 17 has an invalid length. [ 175.321531][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 175.380399][ T7249] bond1: invalid ARP target 0.0.0.0 specified for addition [ 175.410317][ T7249] bond1: option arp_ip_target: invalid value (0) [ 175.420674][ T7252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.460026][ T7249] bond1 (unregistering): Released all slaves [ 175.517565][ T7246] gretap0: entered promiscuous mode [ 175.604670][ T7246] gretap0: left promiscuous mode [ 175.938447][ T7280] netlink: 'syz.1.368': attribute type 11 has an invalid length. [ 176.062956][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.071301][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.216249][ T7298] netlink: 'syz.4.372': attribute type 21 has an invalid length. [ 176.387694][ T7307] bond2: Unable to set down delay as MII monitoring is disabled [ 176.397720][ T7307] bond2 (unregistering): Released all slaves [ 176.837287][ T7328] tipc: Enabled bearer , priority 0 [ 176.973470][ T7328] syzkaller0: entered promiscuous mode [ 176.981030][ T7328] syzkaller0: entered allmulticast mode [ 177.000972][ T7328] tipc: Resetting bearer [ 177.067254][ T7327] tipc: Resetting bearer [ 177.141827][ T7347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.326064][ T7327] tipc: Disabling bearer [ 178.356139][ T9] tipc: Node number set to 3758096385 [ 178.369365][ T7342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.577429][ T7355] gretap0: entered promiscuous mode [ 178.613796][ T7364] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 178.626545][ T7361] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 178.637838][ T7355] __nla_validate_parse: 9 callbacks suppressed [ 178.637855][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 178.695380][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.386'. [ 178.837573][ T7371] : entered promiscuous mode [ 178.938693][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.392'. [ 179.013401][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 179.063382][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 179.075510][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 179.646969][ T7418] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.405'. [ 179.655928][ T7420] IPv6: addrconf: prefix option has invalid lifetime [ 179.685271][ T7405] netlink: 144 bytes leftover after parsing attributes in process `syz.2.401'. [ 180.271115][ T7436] netlink: 52 bytes leftover after parsing attributes in process `syz.1.410'. [ 181.109991][ T7422] netem: incorrect gi model size [ 181.115679][ T7422] netem: change failed [ 181.128045][ T7430] netlink: 128 bytes leftover after parsing attributes in process `syz.0.407'. [ 181.142308][ T7435] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 181.319850][ T7438] syzkaller0: entered promiscuous mode [ 181.340312][ T7438] syzkaller0: entered allmulticast mode [ 181.374040][ T7449] nbd: couldn't find a device at index 0 [ 181.383334][ T7444] netlink: 'syz.0.414': attribute type 29 has an invalid length. [ 181.408194][ T7449] nbd: couldn't find a device at index 0 [ 181.462989][ T7444] netlink: 'syz.0.414': attribute type 4 has an invalid length. [ 181.508033][ T7444] netlink: 'syz.0.414': attribute type 29 has an invalid length. [ 181.653613][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.672495][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.752561][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.784473][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.959798][ T7473] sctp: [Deprecated]: syz.3.423 (pid 7473) Use of int in max_burst socket option deprecated. [ 181.959798][ T7473] Use struct sctp_assoc_value instead [ 182.225962][ T7477] syzkaller0: entered promiscuous mode [ 182.231822][ T7477] syzkaller0: entered allmulticast mode [ 183.249552][ T7521] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 184.218064][ T7533] __nla_validate_parse: 10 callbacks suppressed [ 184.218085][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'. [ 184.285549][ T7532] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 184.308325][ T7533] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 184.317749][ T7532] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 184.482264][ T7549] netlink: 'syz.4.442': attribute type 21 has an invalid length. [ 184.501791][ T7549] netlink: 168 bytes leftover after parsing attributes in process `syz.4.442'. [ 184.541394][ T7553] netlink: 'syz.2.444': attribute type 28 has an invalid length. [ 184.559024][ T7553] netlink: 'syz.2.444': attribute type 3 has an invalid length. [ 184.594526][ T7554] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 184.630005][ T7553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.444'. [ 184.632785][ T7554] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 184.674607][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 184.731968][ T7553] bond3: Unable to set up delay as MII monitoring is disabled [ 184.782485][ T7553] bond3 (unregistering): Released all slaves [ 184.833376][ T7566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.447'. [ 185.020277][ T7569] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 185.227299][ T7579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.503865][ T7595] veth0: entered promiscuous mode [ 185.551719][ T7603] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 185.561555][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.453'. [ 185.596477][ T7586] veth0: left promiscuous mode [ 185.693577][ T7603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.767470][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 185.789069][ T7605] bond2: (slave veth3): Enslaving as an active interface with a down link [ 185.809610][ T7614] IPv6: addrconf: prefix option has invalid lifetime [ 185.810255][ T7608] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 185.823719][ T7608] bond2: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 186.323823][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 186.463567][ T7656] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 186.559554][ T7660] netlink: 'syz.3.470': attribute type 15 has an invalid length. [ 186.581297][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 186.597759][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 187.228460][ T7693] netlink: 'syz.3.478': attribute type 7 has an invalid length. [ 187.397271][ T7693] syzkaller0: entered promiscuous mode [ 187.403363][ T7693] syzkaller0: entered allmulticast mode [ 187.493836][ T7705] sctp: [Deprecated]: syz.1.481 (pid 7705) Use of int in max_burst socket option. [ 187.493836][ T7705] Use struct sctp_assoc_value instead [ 187.725436][ T7711] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 187.849620][ T7718] netlink: 'syz.1.486': attribute type 11 has an invalid length. [ 187.917125][ T7721] netlink: 'syz.1.486': attribute type 11 has an invalid length. [ 188.004619][ T7725] netlink: 'syz.4.487': attribute type 75 has an invalid length. [ 188.306445][ T7735] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 188.339333][ T7738] blkio.reset_stats is deprecated [ 188.741325][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 188.802955][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 188.859834][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 188.901539][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 188.920086][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 188.933465][ T7778] netlink: 'syz.3.501': attribute type 2 has an invalid length. [ 188.959892][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 188.995613][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.036966][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.073675][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.112057][ T7766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.632524][ T7823] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 189.684859][ T7823] netlink: 'syz.0.507': attribute type 3 has an invalid length. [ 189.704541][ T7823] __nla_validate_parse: 8 callbacks suppressed [ 189.704560][ T7823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.507'. [ 189.929745][ T7837] netlink: 14 bytes leftover after parsing attributes in process `syz.2.511'. [ 190.780711][ T7870] trusted_key: syz.4.514 sent an empty control message without MSG_MORE. [ 190.811460][ T7866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.356244][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 192.949661][ T7906] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 192.973418][ T7906] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.068573][ T7907] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 193.076476][ T7907] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.465652][ T7925] xt_hashlimit: size too large, truncated to 1048576 [ 193.517443][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'. [ 193.568429][ T7932] netlink: 132 bytes leftover after parsing attributes in process `syz.0.536'. [ 193.884753][ T7942] sctp: [Deprecated]: syz.1.540 (pid 7942) Use of int in max_burst socket option deprecated. [ 193.884753][ T7942] Use struct sctp_assoc_value instead [ 194.299349][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 194.459532][ T7959] netlink: 516 bytes leftover after parsing attributes in process `syz.2.548'. [ 194.491154][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.500347][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.083733][ T7994] netlink: 300 bytes leftover after parsing attributes in process `syz.4.552'. [ 195.102002][ T7995] tipc: Enabling of bearer rejected, failed to enable media [ 195.382118][ T8006] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 195.404689][ T8006] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 195.486026][ T8010] netlink: 84 bytes leftover after parsing attributes in process `syz.1.559'. [ 195.540642][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 195.611637][ T8016] bond3: option xmit_hash_policy: invalid value (64) [ 195.642812][ T8016] bond3 (unregistering): Released all slaves [ 195.959982][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 195.982547][ T8030] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 195.992427][ T8030] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 196.082841][ T8032] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 196.385760][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 196.436088][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 196.560093][ T8046] netlink: 'syz.1.570': attribute type 10 has an invalid length. [ 196.625812][ T8046] veth0_macvtap: left promiscuous mode [ 196.677905][ T8050] netlink: 104 bytes leftover after parsing attributes in process `syz.2.573'. [ 196.738985][ T8049] syzkaller0: entered promiscuous mode [ 196.745801][ T8049] syzkaller0: entered allmulticast mode [ 196.871298][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.576'. [ 196.962593][ T8063] netlink: 'syz.4.579': attribute type 10 has an invalid length. [ 197.149968][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 197.163497][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 197.245187][ T8082] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 198.739147][ T8111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.118888][ T8074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.286457][ T8113] __nla_validate_parse: 2 callbacks suppressed [ 200.286513][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 200.347273][ T8113] openvswitch: netlink: Unknown nsh attribute 0 [ 200.409679][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 200.430295][ T8121] openvswitch: netlink: Unknown nsh attribute 0 [ 200.444832][ T8120] syzkaller0: entered promiscuous mode [ 200.452607][ T8120] syzkaller0: entered allmulticast mode [ 200.491115][ T8120] tipc: Enabled bearer , priority 0 [ 200.503004][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 200.522522][ T8118] tipc: Resetting bearer [ 200.643285][ T8118] tipc: Disabling bearer [ 200.786509][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 200.994854][ T8137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.023445][ T8150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.032555][ T8150] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.046929][ T8157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.058239][ T8150] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 201.082173][ T8155] syz_tun: entered allmulticast mode [ 201.091311][ T8154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.172238][ T8156] dvmrp8: entered allmulticast mode [ 201.197608][ T8157] wireguard1: entered promiscuous mode [ 201.244250][ T8157] wireguard1: entered allmulticast mode [ 201.276024][ T8157] team0: Device wireguard1 is of different type [ 201.320131][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 201.337586][ T8146] syz_tun: left allmulticast mode [ 201.352104][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 201.395107][ T8168] gretap0: entered promiscuous mode [ 201.400391][ T8168] gretap0: entered allmulticast mode [ 201.706420][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'. [ 202.150529][ T8203] C: renamed from lo [ 202.187653][ T8203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 202.289009][ T8212] netlink: 224 bytes leftover after parsing attributes in process `syz.0.616'. [ 202.522728][ T8229] netlink: 'syz.1.620': attribute type 2 has an invalid length. [ 202.691838][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 202.704644][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.3.621'. [ 202.952965][ T8241] netlink: 'syz.2.625': attribute type 2 has an invalid length. [ 202.977138][ T8241] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 203.101014][ T8256] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 203.146297][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.182908][ T8256] bridge_slave_1: left allmulticast mode [ 203.226498][ T8256] bridge_slave_1: left promiscuous mode [ 203.272736][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.346161][ T8256] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 203.496013][ T8279] syzkaller0: entered promiscuous mode [ 203.525180][ T8279] syzkaller0: entered allmulticast mode [ 203.542057][ T5823] hid-generic 0005:0006:5509.0002: unknown main item tag 0x7 [ 203.571760][ T5823] hid-generic 0005:0006:5509.0002: reserved main item tag 0xd [ 203.617228][ T5823] hid-generic 0005:0006:5509.0002: item fetching failed at offset 8/95 [ 203.637520][ T5823] hid-generic 0005:0006:5509.0002: probe with driver hid-generic failed with error -22 [ 203.665598][ T8297] syzkaller0: entered promiscuous mode [ 203.671140][ T8297] syzkaller0: entered allmulticast mode [ 203.878186][ T8311] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 204.399240][ T8346] chnl_net:caif_netlink_parms(): no params data found [ 204.701390][ T8356] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.077920][ T8368] syzkaller0: entered promiscuous mode [ 205.093290][ T8368] syzkaller0: entered allmulticast mode [ 205.364971][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 206.703768][ T8384] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.770608][ T8395] tipc: Enabling of bearer rejected, failed to enable media [ 206.790978][ T8401] __nla_validate_parse: 7 callbacks suppressed [ 206.791001][ T8401] netlink: 68 bytes leftover after parsing attributes in process `syz.3.664'. [ 206.838437][ T8405] netlink: 68 bytes leftover after parsing attributes in process `syz.3.664'. [ 206.990675][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 207.053584][ T8416] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.670'. [ 207.136747][ T8410] bond2: option xmit_hash_policy: invalid value (64) [ 207.189652][ T8410] bond2 (unregistering): Released all slaves [ 207.262872][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 207.272238][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 207.304753][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 207.333310][ T8428] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.674'. [ 207.350636][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 207.411530][ T8425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.201124][ T8470] dvmrp6: entered allmulticast mode [ 208.313707][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.692'. [ 208.584219][ T8491] hsr_slave_0: left promiscuous mode [ 208.613664][ T8491] hsr_slave_1: left promiscuous mode [ 208.937733][ T8518] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 209.134326][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.209107][ T8537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.262572][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.305408][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.322754][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.335643][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.353485][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.517847][ T8549] xfrm1: entered promiscuous mode [ 209.523639][ T8549] xfrm1: entered allmulticast mode [ 209.860456][ T8562] netlink: 'syz.1.715': attribute type 6 has an invalid length. [ 210.878032][ T8617] bridge_slave_1: left allmulticast mode [ 210.919456][ T8617] bridge_slave_1: left promiscuous mode [ 210.936884][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.016956][ T8617] bridge_slave_0: left allmulticast mode [ 211.041996][ T8617] bridge_slave_0: left promiscuous mode [ 211.058999][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.562571][ T8653] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 211.924398][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 211.924469][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.932596][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 212.057711][ T8680] IPv6: addrconf: prefix option has invalid lifetime [ 212.058342][ T8676] batadv_slave_1: entered promiscuous mode [ 212.064509][ T8680] IPv6: addrconf: prefix option has invalid lifetime [ 212.140726][ T8672] batadv_slave_1: left promiscuous mode [ 212.154770][ T8681] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 212.612749][ T8706] __nla_validate_parse: 15 callbacks suppressed [ 212.612770][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 212.650764][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 212.925903][ T8722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.761'. [ 213.000835][ T5893] IPVS: starting estimator thread 0... [ 213.028141][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 213.149607][ T8730] IPVS: using max 33 ests per chain, 79200 per kthread [ 213.287717][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.449737][ T8733] syzkaller0: entered promiscuous mode [ 213.455404][ T8733] syzkaller0: entered allmulticast mode [ 215.521553][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 215.598950][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 216.531239][ T8813] bond2: option all_slaves_active: invalid value (222) [ 216.540368][ T8813] bond2 (unregistering): Released all slaves [ 216.714363][ T8765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.986054][ T8830] syzkaller0: entered promiscuous mode [ 216.991607][ T8830] syzkaller0: entered allmulticast mode [ 217.263744][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 217.711346][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 217.913840][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 217.942256][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.802'. [ 218.056480][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 218.061052][ T8885] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.804'. [ 218.127742][ T8843] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 218.928058][ T8937] tipc: Trying to set illegal importance in message [ 219.318421][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 219.341087][ T8958] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.507668][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 219.556632][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 219.566543][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.826'. [ 219.604339][ T5927] IPVS: starting estimator thread 0... [ 219.715783][ T8974] IPVS: using max 24 ests per chain, 57600 per kthread [ 219.750322][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.827'. [ 219.867002][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.901085][ T8988] netlink: 'syz.3.832': attribute type 4 has an invalid length. [ 220.225992][ T9012] sctp: [Deprecated]: syz.3.839 (pid 9012) Use of int in maxseg socket option. [ 220.225992][ T9012] Use struct sctp_assoc_value instead [ 220.578663][ T9022] bridge2: entered promiscuous mode [ 220.600835][ T9022] bridge2: entered allmulticast mode [ 221.306863][ T9058] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 221.429805][ T9058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.560534][ T9060] : entered promiscuous mode [ 221.827983][ T9087] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.852894][ T9087] SET target dimension over the limit! [ 222.476973][ T9117] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.753970][ T9136] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 222.811576][ T9136] team0: Device ipvlan1 failed to register rx_handler [ 223.039777][ T9143] syzkaller0: entered promiscuous mode [ 223.048027][ T9143] syzkaller0: entered allmulticast mode [ 223.182406][ T9143] __nla_validate_parse: 15 callbacks suppressed [ 223.182427][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 223.198379][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 223.457704][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.888'. [ 223.539823][ T9179] xt_hashlimit: size too large, truncated to 1048576 [ 223.749575][ T9180] xt_hashlimit: size too large, truncated to 1048576 [ 224.614854][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 224.745944][ T9229] netlink: 'syz.1.904': attribute type 5 has an invalid length. [ 225.043698][ T9244] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 225.064072][ T9242] syzkaller1: entered promiscuous mode [ 225.070353][ T9242] syzkaller1: entered allmulticast mode [ 225.079550][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 225.507916][ T9265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.556977][ T9269] netlink: 'syz.3.919': attribute type 13 has an invalid length. [ 225.563868][ T9275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.920'. [ 225.794558][ T9283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.109213][ T9302] netlink: 'syz.0.929': attribute type 9 has an invalid length. [ 226.328319][ T9314] netlink: 84 bytes leftover after parsing attributes in process `syz.3.934'. [ 226.509439][ T9321] netlink: 492 bytes leftover after parsing attributes in process `syz.1.937'. [ 226.520266][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 226.542813][ T9321] netlink: 64 bytes leftover after parsing attributes in process `syz.1.937'. [ 226.544983][ T9318] bond2: option resend_igmp: invalid value (32767) [ 226.559988][ T9318] bond2: option resend_igmp: allowed values 0 - 255 [ 226.596621][ T9318] bond2 (unregistering): Released all slaves [ 226.993506][ T9353] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 227.327000][ T9362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.362231][ T9364] bond2: option mode: unable to set because the bond device is up [ 228.206142][ T9414] ip6tnl0: Caught tx_queue_len zero misconfig [ 228.608291][ T9434] syzkaller0: entered promiscuous mode [ 228.618742][ T9434] syzkaller0: entered allmulticast mode [ 228.648200][ T9445] netlink: 'syz.2.972': attribute type 8 has an invalid length. [ 228.738197][ T9449] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 228.754328][ T9449] __nla_validate_parse: 7 callbacks suppressed [ 228.754348][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 228.778677][ T9449] netlink: 658 bytes leftover after parsing attributes in process `syz.3.973'. [ 228.789173][ T9449] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 228.805361][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 229.356702][ T9469] netlink: 276 bytes leftover after parsing attributes in process `syz.4.976'. [ 230.401601][ T9471] netlink: 'syz.4.977': attribute type 3 has an invalid length. [ 230.710677][ T9489] netlink: 'syz.0.982': attribute type 2 has an invalid length. [ 231.034509][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 231.077937][ T9506] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.985'. [ 231.108433][ T9506] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.985'. [ 231.519752][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 231.624840][ T9537] netlink: 'syz.3.993': attribute type 10 has an invalid length. [ 231.632950][ T9537] bridge0: port 2(team0) entered blocking state [ 231.646533][ T9538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.659033][ T9537] bridge0: port 2(team0) entered disabled state [ 231.679061][ T9537] team0: entered allmulticast mode [ 231.713728][ T9537] team_slave_0: entered allmulticast mode [ 231.721700][ T9537] team_slave_1: entered allmulticast mode [ 231.728116][ T9537] batadv0: entered allmulticast mode [ 231.743909][ T9537] team0: entered promiscuous mode [ 231.749566][ T9537] team_slave_0: entered promiscuous mode [ 231.755907][ T9537] team_slave_1: entered promiscuous mode [ 231.761802][ T9537] batadv0: entered promiscuous mode [ 231.865369][ T7634] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 231.875582][ T7634] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 232.534841][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1006'. [ 232.555279][ T9586] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1007'. [ 232.931635][ T9603] netlink: 'syz.3.1011': attribute type 3 has an invalid length. [ 232.984278][ T9603] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 233.764478][ T9652] __nla_validate_parse: 10 callbacks suppressed [ 233.764499][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 233.916206][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 234.547074][ T9696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.939509][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 235.041479][ T9720] Can't find ip_set type hash:ip, [ 235.285219][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 235.396065][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 235.449703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.517350][ T9691] lec:lec_atm_close: lec0: Shut down! [ 235.572272][ T9750] netlink: 'syz.1.1052': attribute type 1 has an invalid length. [ 235.635451][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 235.749148][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 235.761054][ T9764] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1055'. [ 235.788067][ T9765] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 235.799475][ T9759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1053'. [ 236.196733][ T9787] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.486311][ T9802] block nbd1: Unsupported socket: should be TCP or UNIX. [ 236.587644][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1062'. [ 236.861127][ T9813] bond4: Unable to set up delay as MII monitoring is disabled [ 236.899150][ T9813] bond4 (unregistering): Released all slaves [ 237.090174][ T9824] syz.0.1069 (9824) used greatest stack depth: 15584 bytes left [ 237.183486][ T9836] netlink: 'syz.0.1072': attribute type 10 has an invalid length. [ 237.227097][ T9836] bridge0: port 3(team0) entered blocking state [ 237.235845][ T9836] bridge0: port 3(team0) entered disabled state [ 237.264384][ T9836] team0: entered allmulticast mode [ 237.277973][ T9836] team_slave_0: entered allmulticast mode [ 237.284013][ T9836] team_slave_1: entered allmulticast mode [ 237.307320][ T9836] team0: entered promiscuous mode [ 237.322861][ T9836] team_slave_0: entered promiscuous mode [ 237.342218][ T9836] team_slave_1: entered promiscuous mode [ 237.351127][ T9844] nbd: couldn't find device at index 0 [ 237.859868][ T9877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1079'. [ 237.915664][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.251831][ T9885] team0 (unregistering): Port device team_slave_1 removed [ 238.490081][ T9906] sctp: [Deprecated]: syz.0.1088 (pid 9906) Use of int in maxseg socket option. [ 238.490081][ T9906] Use struct sctp_assoc_value instead [ 238.524356][ T9907] netlink: 'syz.2.1087': attribute type 3 has an invalid length. [ 238.533210][ T9907] netlink: 'syz.2.1087': attribute type 3 has an invalid length. [ 238.563898][ T9906] sctp: [Deprecated]: syz.0.1088 (pid 9906) Use of int in maxseg socket option. [ 238.563898][ T9906] Use struct sctp_assoc_value instead [ 238.624423][ T9911] netlink: 'syz.3.1089': attribute type 3 has an invalid length. [ 238.661479][ T9911] netlink: 'syz.3.1089': attribute type 3 has an invalid length. [ 238.692751][ T9911] netlink: 'syz.3.1089': attribute type 3 has an invalid length. [ 238.733656][ T9911] netlink: 'syz.3.1089': attribute type 3 has an invalid length. [ 238.784825][ T9911] netlink: 'syz.3.1089': attribute type 3 has an invalid length. [ 238.811388][ T9924] __nla_validate_parse: 4 callbacks suppressed [ 238.811408][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 238.840743][ T9926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 238.866561][ T9926] netlink: 'syz.0.1091': attribute type 7 has an invalid length. [ 238.884362][ T9911] netlink: 'syz.3.1089': attribute type 3 has an invalid length. [ 238.903579][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 238.992270][ T9926] erspan0: entered promiscuous mode [ 239.011264][ T9926] erspan0: left promiscuous mode [ 239.189688][ T9940] erspan0: entered promiscuous mode [ 239.201233][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 239.513050][ T9912] Bluetooth: MGMT ver 1.23 [ 239.543040][ T9954] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 239.639310][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 239.652897][ T9954] bond3 (unregistering): Released all slaves [ 239.660032][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1096'. [ 239.690356][ T9964] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 243.403110][T10012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.611487][T10070] gre0: entered promiscuous mode [ 243.660278][T10070] gre0: entered allmulticast mode [ 243.661859][T10075] validate_nla: 44 callbacks suppressed [ 243.661875][T10075] netlink: 'syz.1.1121': attribute type 64 has an invalid length. [ 243.789611][T10079] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 244.067782][T10092] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1126'. [ 244.214152][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 244.222547][ C1] lec:lec_tx_timeout: lec0 [ 244.227632][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 244.282541][T10103] nbd: socks must be embedded in a SOCK_ITEM attr [ 244.408878][T10109] netlink: 'syz.1.1133': attribute type 11 has an invalid length. [ 244.426738][T10109] netlink: 'syz.1.1133': attribute type 11 has an invalid length. [ 244.466558][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 244.474716][T10109] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1133'. [ 244.485943][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 244.655350][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1137'. [ 244.691921][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1137'. [ 244.692009][T10129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1137'. [ 245.048629][T10141] veth5: entered promiscuous mode [ 245.053731][T10141] veth5: entered allmulticast mode [ 245.152906][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1144'. [ 245.379004][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 245.718194][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1152'. [ 246.050848][T10179] syzkaller0: entered promiscuous mode [ 246.068268][T10179] syzkaller0: entered allmulticast mode [ 247.823577][T10229] sctp: [Deprecated]: syz.3.1165 (pid 10229) Use of int in maxseg socket option. [ 247.823577][T10229] Use struct sctp_assoc_value instead [ 247.836503][T10227] openvswitch: netlink: Missing key (keys=40, expected=80) [ 247.921583][T10237] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 248.413097][T10270] netlink: 'syz.3.1175': attribute type 21 has an invalid length. [ 248.513463][T10278] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 248.574873][T10277] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 248.591826][ T24] IPVS: starting estimator thread 0... [ 248.664728][T10284] CA: renamed from lo [ 248.688714][T10284] A link change request failed with some changes committed already. Interface CA may have been left with an inconsistent configuration, please check. [ 248.716281][T10281] IPVS: using max 30 ests per chain, 72000 per kthread [ 248.778481][T10294] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 249.234167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 249.242246][ C1] lec:lec_tx_timeout: lec0 [ 249.246973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 249.301670][T10325] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 249.492551][T10324] __nla_validate_parse: 9 callbacks suppressed [ 249.492576][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 249.522089][T10339] netlink: 'syz.4.1193': attribute type 58 has an invalid length. [ 249.551842][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1193'. [ 250.042355][T10362] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1199'. [ 250.054784][T10362] netlink: ct family unspecified [ 250.430574][T10381] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1206'. [ 250.528560][T10393] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1209'. [ 250.700775][T10396] tipc: Enabled bearer , priority 0 [ 250.780109][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1212'. [ 250.794433][T10407] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1213'. [ 250.808659][T10407] netlink: 'syz.2.1213': attribute type 9 has an invalid length. [ 250.821643][T10409] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1213'. [ 250.838158][T10409] netlink: 'syz.2.1213': attribute type 9 has an invalid length. [ 250.873319][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1212'. [ 251.065939][T10396] tipc: Disabling bearer [ 251.172112][T10427] SET target dimension over the limit! [ 251.248384][T10427] team_slave_1: Caught tx_queue_len zero misconfig [ 251.367869][T10434] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 251.418401][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 251.902605][T10466] sctp: [Deprecated]: syz.2.1228 (pid 10466) Use of int in maxseg socket option. [ 251.902605][T10466] Use struct sctp_assoc_value instead [ 251.965773][T10469] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 252.042165][T10469] bond4: entered promiscuous mode [ 252.049602][T10469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.126410][T10470] bond4: (slave bridge3): making interface the new active one [ 252.133947][T10470] bridge3: entered promiscuous mode [ 252.142905][T10470] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 252.889900][T10516] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 252.944772][T10518] netlink: 'syz.1.1242': attribute type 6 has an invalid length. [ 252.976940][T10517] netlink: 'syz.1.1242': attribute type 6 has an invalid length. [ 253.566139][T10566] syzkaller1: entered promiscuous mode [ 253.571807][T10566] syzkaller1: entered allmulticast mode [ 254.254535][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.262573][ C1] lec:lec_tx_timeout: lec0 [ 254.267713][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.928184][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934835][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.089405][T10534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.300465][T10575] __nla_validate_parse: 14 callbacks suppressed [ 256.300488][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'. [ 256.332724][T10577] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 256.357757][T10579] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 256.362184][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1259'. [ 256.367114][T10575] netlink: 'syz.0.1256': attribute type 6 has an invalid length. [ 256.389121][T10577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.389748][T10579] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 256.446338][T10583] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1259'. [ 256.483129][T10583] bond0: Caught tx_queue_len zero misconfig [ 256.510592][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 256.536387][T10588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 256.545724][T10583] bridge_slave_1: left allmulticast mode [ 256.545754][T10583] bridge_slave_1: left promiscuous mode [ 256.546037][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.577044][T10583] bridge_slave_0: left allmulticast mode [ 256.583034][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.733386][T10598] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1263'. [ 256.898519][T10604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1265'. [ 256.939054][T10608] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1266'. [ 257.003274][T10616] C: Caught tx_queue_len zero misconfig [ 257.227166][T10633] openvswitch: netlink: Message has 8 unknown bytes. [ 257.262051][T10633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.372148][T10638] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 257.412829][T10619] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 257.416842][T10642] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 257.468955][T10638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.550425][T10644] bond2: (slave geneve2): making interface the new active one [ 257.578084][T10644] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 259.125221][T10653] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 259.348010][T10672] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.367459][T10675] tunl0: Caught tx_queue_len zero misconfig [ 259.376132][T10675] netlink: 'syz.1.1283': attribute type 2 has an invalid length. [ 259.513236][T10687] raw_sendmsg: syz.4.1284 forgot to set AF_INET. Fix it! [ 259.843061][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'. [ 259.942155][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 260.084200][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 260.092298][ C1] lec:lec_tx_timeout: lec0 [ 260.097012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.170779][T10773] Driver unsupported XDP return value 0 on prog (id 294) dev N/A, expect packet loss! [ 261.236599][T10779] geneve3: entered promiscuous mode [ 261.242111][T10779] geneve3: entered allmulticast mode [ 261.382674][T10782] pim6reg: entered allmulticast mode [ 261.384722][T10737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.425476][T10737] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 261.462069][T10790] __nla_validate_parse: 6 callbacks suppressed [ 261.462090][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 261.538273][T10737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.556321][T10737] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 261.593108][T10737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.613556][T10737] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 261.638097][T10737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.647763][T10737] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 261.682895][T10802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1314'. [ 261.702213][T10800] netlink: 'syz.2.1311': attribute type 5 has an invalid length. [ 261.714640][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 262.012369][T10814] tipc: Started in network mode [ 262.035749][T10814] tipc: Node identity 7ece1db1ca52, cluster identity 4711 [ 262.043579][T10814] tipc: Enabled bearer , priority 0 [ 262.109231][T10816] syzkaller0: entered promiscuous mode [ 262.124593][T10816] syzkaller0: entered allmulticast mode [ 262.213186][T10832] x_tables: duplicate underflow at hook 2 [ 262.233163][T10832] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1320'. [ 262.477452][T10814] tipc: Resetting bearer [ 262.575873][T10814] tipc: Disabling bearer [ 262.797564][T10857] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 262.824291][T10857] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1325'. [ 262.838315][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1326'. [ 262.874542][T10857] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 262.913309][T10857] netlink: 'syz.3.1325': attribute type 8 has an invalid length. [ 262.957552][T10857] netlink: 606 bytes leftover after parsing attributes in process `syz.3.1325'. [ 263.608761][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 263.621932][T10898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.642266][T10902] netlink: 'syz.1.1338': attribute type 83 has an invalid length. [ 263.659149][T10903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1336'. [ 263.671338][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 264.651348][T10949] netlink: 'syz.1.1347': attribute type 24 has an invalid length. [ 265.104169][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 265.112265][ C1] lec:lec_tx_timeout: lec0 [ 265.117394][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 265.327192][T10988] nbd: couldn't find a device at index 0 [ 266.202058][T11035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.479875][T11103] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 267.552534][T11111] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 267.593305][T11103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.716967][T11112] bond3: (slave veth9): Enslaving as an active interface with a down link [ 267.757587][T11103] vlan3: entered allmulticast mode [ 267.762944][T11103] veth1: entered allmulticast mode [ 267.769555][T11103] veth1: entered promiscuous mode [ 267.795921][T11103] veth1: left promiscuous mode [ 267.833806][T11103] bond3: (slave vlan3): making interface the new active one [ 267.852944][T11103] veth1: entered promiscuous mode [ 267.859638][T11103] vlan3: entered promiscuous mode [ 267.867915][T11103] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 267.933815][T11129] bond4 (unregistering): Released all slaves [ 268.179595][T11138] netlink: 'syz.0.1387': attribute type 21 has an invalid length. [ 268.225106][T11138] __nla_validate_parse: 6 callbacks suppressed [ 268.225124][T11138] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1387'. [ 268.564081][T11155] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 268.594987][T11155] bond5 (unregistering): Released all slaves [ 269.216856][T11182] Bluetooth: MGMT ver 1.23 [ 269.274748][T11190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1402'. [ 269.321021][T11190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1402'. [ 269.593539][T11204] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1408'. [ 269.632780][T11204] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 269.654771][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'. [ 269.672411][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1409'. [ 269.851865][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 269.883375][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 270.069654][T11236] team0: Device wireguard0 is of different type [ 270.124159][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 270.132333][ C1] lec:lec_tx_timeout: lec0 [ 270.137296][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 270.560047][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1423'. [ 270.672928][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1423'. [ 270.726803][T11262] nbd: device at index 64 is going down [ 270.756786][T11267] netlink: 'syz.0.1425': attribute type 7 has an invalid length. [ 270.767508][T11267] netlink: 'syz.0.1425': attribute type 8 has an invalid length. [ 270.961068][T11274] bond0: entered promiscuous mode [ 270.987413][ T6893] udevd[6893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.998839][T11274] bond_slave_0: entered promiscuous mode [ 271.024542][T11274] bond_slave_1: entered promiscuous mode [ 271.033209][T11274] bridge_slave_1: entered promiscuous mode [ 271.334770][T11288] IPVS: Scheduler module ip_vs_sip not found [ 271.610183][T11317] netlink: 'syz.2.1436': attribute type 21 has an invalid length. [ 271.781142][T11317] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 271.821928][T11317] bond5 (unregistering): Released all slaves [ 271.835707][T11330] netlink: 'syz.4.1439': attribute type 30 has an invalid length. [ 272.087860][T11330] bond3: option arp_missed_max: invalid value (0) [ 272.124222][T11330] bond3: option arp_missed_max: allowed values 1 - 255 [ 272.140235][T11330] bond3 (unregistering): Released all slaves [ 272.187149][T11340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.243139][T11338] nbd: must specify a size in bytes for the device [ 272.785389][T11368] sctp: [Deprecated]: syz.0.1453 (pid 11368) Use of int in max_burst socket option. [ 272.785389][T11368] Use struct sctp_assoc_value instead [ 273.560586][T11409] netlink: 'syz.2.1464': attribute type 17 has an invalid length. [ 273.582408][T11409] __nla_validate_parse: 14 callbacks suppressed [ 273.582428][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 273.607615][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1464'. [ 273.612432][T11412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1465'. [ 273.630980][T11409] gretap0: entered promiscuous mode [ 273.638483][T11409] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 274.014189][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 274.138322][T11438] netlink: 'syz.1.1475': attribute type 10 has an invalid length. [ 274.156581][T11438] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 274.176968][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 274.189801][T11438] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 274.234359][T11443] netlink: 'syz.2.1474': attribute type 7 has an invalid length. [ 274.293165][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'. [ 274.420599][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 274.443808][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 275.144170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 275.152246][ C1] lec:lec_tx_timeout: lec0 [ 275.156904][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.749542][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1491'. [ 275.834244][T11503] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 275.852395][T11503] dvmrp6: left allmulticast mode [ 276.155315][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 276.183976][T11509] bridge6: entered promiscuous mode [ 276.196082][T11509] bridge6: entered allmulticast mode [ 276.208783][T11514] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 276.432508][T11529] gretap0: left allmulticast mode [ 276.447817][T11529] gretap0: left promiscuous mode [ 276.478107][T11529] bridge0: port 2(team0) entered blocking state [ 276.484664][T11529] bridge0: port 2(team0) entered listening state [ 276.491379][T11529] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.498649][T11529] bridge0: port 1(bridge_slave_0) entered listening state [ 276.517192][T11529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.658390][T11541] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 276.736052][T11541] bond5: entered promiscuous mode [ 276.742437][T11541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.760460][T11546] bond5: (slave bridge9): making interface the new active one [ 276.770340][T11546] bridge9: entered promiscuous mode [ 276.776723][T11546] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 276.803444][T11547] tipc: Started in network mode [ 276.814339][T11547] tipc: Node identity 9eed65beaf27, cluster identity 4711 [ 276.821823][T11547] tipc: Enabled bearer , priority 0 [ 276.843373][T11545] tipc: Disabling bearer [ 277.044310][T11562] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.067575][T11564] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.141762][T11566] netlink: 'syz.2.1510': attribute type 1 has an invalid length. [ 277.821847][T11586] pim6reg527: entered allmulticast mode [ 278.065057][T11601] netlink: 'syz.0.1520': attribute type 3 has an invalid length. [ 278.133131][T11606] netlink: 'syz.1.1523': attribute type 5 has an invalid length. [ 278.256847][T11606] geneve2: entered promiscuous mode [ 278.262189][T11606] geneve2: entered allmulticast mode [ 278.315598][T11609] veth0: entered promiscuous mode [ 278.333067][T11614] veth0: left promiscuous mode [ 278.352128][ T7633] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 278.376846][ T7633] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 278.486184][ T7633] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 278.498210][ T7633] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 278.659004][T11634] __nla_validate_parse: 8 callbacks suppressed [ 278.659024][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 278.691726][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'. [ 278.783923][T11637] bond4: entered promiscuous mode [ 278.789626][T11637] bond4: entered allmulticast mode [ 278.795405][T11637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.939908][T11648] xt_connbytes: Forcing CT accounting to be enabled [ 278.976284][ T13] vlan3: left promiscuous mode [ 279.001053][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 279.140409][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1540'. [ 279.156305][T11665] syz_tun: entered allmulticast mode [ 279.175208][T11670] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.1539'. [ 279.211443][T11670] netlink: Unknown conntrack attr (type=2304, max=9) [ 279.330368][T11669] syz_tun: left allmulticast mode [ 279.610637][T11684] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 279.637154][T11684] bond6 (unregistering): Released all slaves [ 279.821889][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1548'. [ 280.166284][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 280.174395][ C1] lec:lec_tx_timeout: lec0 [ 280.179509][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.201153][T11722] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1553'. [ 280.226258][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 280.256611][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 280.665996][T11754] sctp: [Deprecated]: syz.2.1561 (pid 11754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.665996][T11754] Use struct sctp_sack_info instead [ 280.873632][T11761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 280.953926][T11766] wg1: entered promiscuous mode [ 280.959929][T11766] wg1: entered allmulticast mode [ 281.502528][T11792] dvmrp6: entered allmulticast mode [ 281.813040][T11805] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 281.821840][T11809] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 282.007407][T11810] bond6: (slave veth9): Enslaving as an active interface with a down link [ 282.055166][T11809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.292760][T11838] erspan0: entered promiscuous mode [ 282.330153][T11838] erspan0: left promiscuous mode [ 282.500303][T11845] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 283.475572][T11899] netlink: 'syz.4.1607': attribute type 11 has an invalid length. [ 283.483546][T11899] netlink: 'syz.4.1607': attribute type 4 has an invalid length. [ 283.514308][T11899] netlink: 'syz.4.1607': attribute type 5 has an invalid length. [ 283.536499][T11899] netlink: 'syz.4.1607': attribute type 6 has an invalid length. [ 283.710995][T11910] __nla_validate_parse: 17 callbacks suppressed [ 283.711016][T11910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1610'. [ 283.822570][T11918] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 284.105658][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 284.554764][T11967] sctp: [Deprecated]: syz.4.1626 (pid 11967) Use of int in maxseg socket option. [ 284.554764][T11967] Use struct sctp_assoc_value instead [ 284.628125][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'. [ 284.670416][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 284.717129][T11977] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 284.740931][T11977] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.1630'. [ 285.132355][T11984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1632'. [ 285.195415][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 285.203534][ C1] lec:lec_tx_timeout: lec0 [ 285.208508][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.322011][T11994] netlink: 'syz.4.1635': attribute type 6 has an invalid length. [ 285.322438][T11998] netlink: 'syz.4.1635': attribute type 6 has an invalid length. [ 285.380216][T11995] syzkaller0: entered promiscuous mode [ 285.402743][T11995] syzkaller0: entered allmulticast mode [ 285.556326][T12007] openvswitch: netlink: Key type 105 is out of range max 32 [ 285.705769][T12012] netlink: 'syz.4.1641': attribute type 11 has an invalid length. [ 285.742434][T12012] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1641'. [ 285.965458][T12027] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1648'. [ 285.975278][T12026] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1648'. [ 286.137100][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 286.171555][T12034] syzkaller0: entered promiscuous mode [ 286.177682][T12034] syzkaller0: entered allmulticast mode [ 286.610784][T12061] sctp: [Deprecated]: syz.1.1658 (pid 12061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.610784][T12061] Use struct sctp_sack_info instead [ 286.916111][T12079] pim6reg1: entered promiscuous mode [ 286.921599][T12079] pim6reg1: entered allmulticast mode [ 286.991201][T12081] gre0: entered promiscuous mode [ 286.998218][T12081] gre0: entered allmulticast mode [ 289.955780][T12230] netlink: 'syz.3.1700': attribute type 21 has an invalid length. [ 289.963862][T12230] __nla_validate_parse: 10 callbacks suppressed [ 289.963882][T12230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1700'. [ 290.035407][T12230] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1700'. [ 290.066018][T12233] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 290.169472][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1703'. [ 290.195649][T12240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.202959][T12240] IPv6: NLM_F_CREATE should be set when creating new route [ 290.224509][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 290.232596][ C1] lec:lec_tx_timeout: lec0 [ 290.238399][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.476467][T12258] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1706'. [ 290.534592][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1708'. [ 290.558169][T12257] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1706'. [ 290.706448][T12274] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 293.092884][T12324] netlink: 'syz.3.1724': attribute type 10 has an invalid length. [ 293.096652][T12310] syzkaller0: entered promiscuous mode [ 293.134241][T12310] syzkaller0: entered allmulticast mode [ 293.270984][T12324] bridge0: port 2(team0) entered disabled state [ 293.334941][T12324] team0 (unregistering): left allmulticast mode [ 293.341445][T12324] team_slave_0: left allmulticast mode [ 293.356424][T12324] team_slave_1: left allmulticast mode [ 293.366834][T12339] netlink: 'syz.2.1728': attribute type 1 has an invalid length. [ 293.368624][T12324] batadv0: left allmulticast mode [ 293.381079][T12324] team0 (unregistering): left promiscuous mode [ 293.387818][T12324] team_slave_0: left promiscuous mode [ 293.393486][T12324] team_slave_1: left promiscuous mode [ 293.399183][T12324] batadv0: left promiscuous mode [ 293.408492][T12324] bridge0: port 2(team0) entered disabled state [ 293.452162][T12324] team0 (unregistering): Port device team_slave_0 removed [ 293.467853][T12324] team0 (unregistering): Port device team_slave_1 removed [ 293.493980][T12324] team0 (unregistering): Port device batadv0 removed [ 293.637219][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1730'. [ 295.254187][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 295.262262][ C1] lec:lec_tx_timeout: lec0 [ 295.263854][ T7641] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.274427][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.375294][T12373] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.428319][T12373] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.154600][ T7641] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.163550][ T7641] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.194445][T12396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1740'. [ 297.203548][T12396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1740'. [ 297.234763][ T7641] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.606142][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 297.624330][T12421] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.659583][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 297.673673][T12424] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1750'. [ 297.828972][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 297.848104][T12429] bridge_slave_0: entered promiscuous mode [ 297.963066][T12440] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1754'. [ 297.995682][T12429] vlan1: entered promiscuous mode [ 298.015455][T12429] bridge0: entered promiscuous mode [ 298.022176][T12440] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 298.038888][T12440] 0ªî{X¹¦: entered allmulticast mode [ 298.045474][T12440] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 298.278893][T12461] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 298.288189][T12463] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 298.312285][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1759'. [ 298.594802][T12478] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1762'. [ 298.703094][T12487] netlink: 'syz.0.1764': attribute type 4 has an invalid length. [ 298.997739][T12499] pimreg: entered allmulticast mode [ 299.013527][T12497] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1768'. [ 299.030992][T12497] 0ªî{X¹¦: entered promiscuous mode [ 299.036968][T12497] 0ªî{X¹¦: left allmulticast mode [ 299.083406][T12504] 0ªî{X¹¦: left promiscuous mode [ 299.161181][T12504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.333859][T12480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.529465][T12493] lec:lec_atm_send: lec0: Unknown message type -1431655766 [ 299.570137][T12492] lec:lec_atm_close: lec0: Shut down! [ 299.745442][T12528] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 300.125745][T12538] nbd1: detected capacity change from 0 to 127 [ 300.149259][ T5824] block nbd1: Receive control failed (result -32) [ 300.164777][ T6893] block nbd1: Send control failed (result -32) [ 300.195878][ T6893] block nbd1: Request send failed, requeueing [ 300.236096][ T95] block nbd1: Dead connection, failed to find a fallback [ 300.245634][ T95] block nbd1: shutting down sockets [ 300.252549][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.266220][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.278826][ T6893] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.289832][ T6893] Buffer I/O error on dev nbd1, logical block 1, async page read [ 300.297837][ T6893] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.308499][ T6893] Buffer I/O error on dev nbd1, logical block 2, async page read [ 300.319805][ T6893] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.331013][ T6893] Buffer I/O error on dev nbd1, logical block 3, async page read [ 300.342696][ T6893] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.355343][ T6893] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.359015][T12559] netlink: 'syz.3.1782': attribute type 1 has an invalid length. [ 300.368697][ T6893] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.374994][T12562] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 300.383319][ T6893] Buffer I/O error on dev nbd1, logical block 1, async page read [ 300.396976][ T6893] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.406929][ T6893] Buffer I/O error on dev nbd1, logical block 2, async page read [ 300.444312][ T6893] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.472515][ T6893] Buffer I/O error on dev nbd1, logical block 3, async page read [ 300.485622][ T6893] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.498555][ T6893] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.524496][ T6893] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.535216][ T6893] Buffer I/O error on dev nbd1, logical block 1, async page read [ 300.543781][ T6893] ldm_validate_partition_table(): Disk read failed. [ 300.551543][ T6893] Dev nbd1: unable to read RDB block 0 [ 300.558035][ T6893] nbd1: unable to read partition table [ 300.571478][ T6893] ldm_validate_partition_table(): Disk read failed. [ 300.578868][ T6893] Dev nbd1: unable to read RDB block 0 [ 300.585299][ T6893] nbd1: unable to read partition table [ 300.587243][T12564] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 300.632053][T12564] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 300.649599][T12564] bond4: (slave xfrm1): making interface the new active one [ 300.659095][T12564] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 300.687362][T12559] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 300.708463][T12559] bond4 (unregistering): Released all slaves [ 300.999740][T12581] netlink: 'syz.2.1789': attribute type 11 has an invalid length. [ 301.336423][T12586] team0: Port device team_slave_0 removed [ 301.575956][T12600] syzkaller0: entered promiscuous mode [ 301.581499][T12600] syzkaller0: entered allmulticast mode [ 302.032007][T12629] netlink: 'syz.1.1802': attribute type 21 has an invalid length. [ 303.253878][T12629] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 303.595519][T12652] IPv6: addrconf: prefix option has invalid lifetime [ 303.618138][T12655] vlan2: entered allmulticast mode [ 303.653198][T12655] geneve1: entered allmulticast mode [ 303.682962][T12659] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20002 [ 303.718287][T12659] __nla_validate_parse: 13 callbacks suppressed [ 303.718308][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'. [ 303.937900][T12679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1815'. [ 303.989297][T12677] : entered promiscuous mode [ 304.153546][T12681] netlink: 'syz.1.1816': attribute type 16 has an invalid length. [ 304.165084][T12681] netlink: 'syz.1.1816': attribute type 17 has an invalid length. [ 304.173338][T12681] C: left promiscuous mode [ 304.196894][T12681] gre0: left promiscuous mode [ 304.208667][T12681] gre0: left allmulticast mode [ 304.238242][T12681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.275413][T12689] nbd: must specify at least one socket [ 304.287708][T12689] sctp: [Deprecated]: syz.0.1818 (pid 12689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.287708][T12689] Use struct sctp_sack_info instead [ 304.390458][T12695] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1820'. [ 304.400781][T12695] gretap0: entered promiscuous mode [ 304.483075][T12697] tipc: Enabling of bearer rejected, failed to enable media [ 304.711966][T12705] netlink: 'syz.0.1825': attribute type 8 has an invalid length. [ 304.875411][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 304.914876][T12714] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.044381][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5480 ms [ 305.052531][ C1] lec:lec_tx_timeout: lec0 [ 305.057727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.229514][T12716] wireguard0: entered promiscuous mode [ 305.238724][T12716] wireguard0: entered allmulticast mode [ 305.258115][T12716] team0: Device wireguard0 is of different type [ 305.371979][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'. [ 305.384983][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'. [ 305.601634][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 305.657965][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 305.861465][T12760] netlink: 'syz.0.1843': attribute type 21 has an invalid length. [ 305.894601][T12760] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1843'. [ 306.014565][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 306.038060][T12769] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 306.050305][T12769] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 306.060135][T12769] team0: Failed to send options change via netlink (err -105) [ 306.074576][T12769] team0: Port device batadv2 added [ 306.223546][T12777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.543407][T12794] netlink: 'syz.3.1851': attribute type 3 has an invalid length. [ 306.816726][T12805] netlink: 'syz.4.1855': attribute type 19 has an invalid length. [ 306.845751][T12805] netlink: 'syz.4.1855': attribute type 19 has an invalid length. [ 307.127006][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 307.169400][T12815] 8021q: VLANs not supported on ip6gre0 [ 308.151896][T12875] tipc: Enabled bearer , priority 10 [ 308.173494][T12875] bond0: entered allmulticast mode [ 308.273935][T12885] IPVS: length: 139 != 8 [ 308.896513][T12921] __nla_validate_parse: 13 callbacks suppressed [ 308.896535][T12921] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1888'. [ 308.923676][T12917] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1888'. [ 308.954773][T12920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1889'. [ 309.037590][T12929] netlink: 'syz.0.1892': attribute type 11 has an invalid length. [ 309.061776][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1892'. [ 309.129568][ T6977] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.171728][ T6977] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.206992][ T6977] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.234705][ T6977] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.410113][T12944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1896'. [ 309.804013][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 310.084176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 310.087493][T12967] can: request_module (can-proto-0) failed. [ 310.092354][ C1] lec:lec_tx_timeout: lec0 [ 310.092920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.102437][T12965] delete_channel: no stack [ 310.141666][T12977] xt_bpf: check failed: parse error [ 310.262853][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 311.109225][T13020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 311.151413][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 311.447326][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 311.746659][T13048] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 311.823814][T13057] netlink: 'syz.2.1929': attribute type 16 has an invalid length. [ 311.848216][T13057] netlink: 'syz.2.1929': attribute type 17 has an invalid length. [ 313.408917][T13057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.358184][ T1166] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.394574][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.403572][ T1166] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.445514][ T1166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.507019][ T1166] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.517907][T13122] __nla_validate_parse: 6 callbacks suppressed [ 314.517926][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1939'. [ 314.532387][ T1166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.565165][ T1166] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.594653][ T1166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.636929][T13122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.665027][T13122] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 314.699053][T13137] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1943'. [ 314.711589][T13122] bond0: (slave gre0): Error -95 calling set_mac_address [ 314.750732][T13134] netlink: 'syz.3.1942': attribute type 4 has an invalid length. [ 314.868043][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 314.897240][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 314.925428][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 314.954684][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 315.104243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 315.112392][ C1] lec:lec_tx_timeout: lec0 [ 315.117466][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.279266][T13163] team0: left allmulticast mode [ 315.284300][T13163] team_slave_0: left allmulticast mode [ 315.289803][T13163] team_slave_1: left allmulticast mode [ 315.307935][T13163] team0: left promiscuous mode [ 315.312772][T13163] team_slave_0: left promiscuous mode [ 315.334509][T13163] team_slave_1: left promiscuous mode [ 315.340419][T13163] bridge0: port 3(team0) entered disabled state [ 315.399027][T13163] team0: Cannot enslave team device to itself [ 315.431030][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1951'. [ 315.737848][T13184] netlink: 'syz.0.1952': attribute type 7 has an invalid length. [ 315.784404][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1953'. [ 315.793333][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 316.558512][T13222] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 316.671974][T13233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1964'. [ 316.948930][T13236] veth1_macvtap: renamed from veth0_macvtap [ 317.371968][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.596705][T13277] tipc: Enabling of bearer rejected, failed to enable media [ 317.648373][T13278] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 317.690494][T13278] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 317.707987][T13278] gretap1: entered promiscuous mode [ 317.713523][T13278] gretap1: entered allmulticast mode [ 317.738157][T13285] netlink: 'syz.3.1975': attribute type 3 has an invalid length. [ 317.749405][T13280] tipc: Enabling of bearer rejected, failed to enable media [ 317.749565][T13282] netlink: 'syz.4.1976': attribute type 13 has an invalid length. [ 317.774576][T13283] nbd: couldn't find device at index 0 [ 317.870089][T13282] netlink: 'syz.4.1976': attribute type 13 has an invalid length. [ 317.971401][T13294] xt_l2tp: unknown flags: 10 [ 318.039505][T13294] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 318.157079][T13305] netlink: 'syz.1.1981': attribute type 2 has an invalid length. [ 318.482699][T13322] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 319.296136][T13357] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 319.437860][T13365] netlink: 'syz.3.1997': attribute type 15 has an invalid length. [ 319.486040][T13365] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 319.512033][T13374] x_tables: duplicate underflow at hook 2 [ 319.552469][T13364] can: request_module (can-proto-4) failed. [ 320.036459][T13397] __nla_validate_parse: 13 callbacks suppressed [ 320.036483][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 320.094180][T13394] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2004'. [ 320.124402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 320.132496][ C1] lec:lec_tx_timeout: lec0 [ 320.137857][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 320.172190][T13395] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2004'. [ 320.186505][T13402] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 320.265310][T13402] team0: Device veth1_macvtap failed to register rx_handler [ 320.425247][T13418] netlink: 'syz.4.2010': attribute type 4 has an invalid length. [ 320.561708][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'. [ 320.631385][T13427] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 320.806027][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 320.854180][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 320.979625][T13448] netlink: 'syz.2.2014': attribute type 13 has an invalid length. [ 321.039536][ T7635] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.066768][T13448] netlink: 'syz.2.2014': attribute type 17 has an invalid length. [ 321.114015][T13431] gre0: left promiscuous mode [ 321.133052][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 321.170022][T13431] gre0: left allmulticast mode [ 321.177306][T13458] nbd: couldn't find a device at index 0 [ 321.429908][T13431] bond0: left promiscuous mode [ 321.435586][T13431] bond_slave_0: left promiscuous mode [ 321.443756][T13431] bond_slave_1: left promiscuous mode [ 321.463311][T13431] bridge_slave_1: left promiscuous mode [ 321.475769][T13431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.485871][T13431] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.509488][T13431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.536448][ T7635] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.620310][T13448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.664274][ T7635] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.697815][ T5489] veth1_macvtap: left promiscuous mode [ 321.775279][ T7635] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.806979][T13477] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2021'. [ 321.941841][T13481] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 322.075628][T13493] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 322.285089][T13501] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2026'. [ 322.385061][T13498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.407144][T13503] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 322.413821][T13503] syzkaller1: linktype set to 772 [ 322.539962][T13509] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2029'. [ 322.584590][T13509] NCSI netlink: No device for ifindex 0 [ 322.923504][T13533] validate_nla: 6 callbacks suppressed [ 322.923525][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.137538][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.157030][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.288111][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.329547][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.382187][T13548] netlink: 'syz.4.2037': attribute type 4 has an invalid length. [ 323.423237][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.474567][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.482797][T13533] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 323.492309][T13552] netlink: 'syz.1.2038': attribute type 2 has an invalid length. [ 323.588363][T13558] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 323.608157][T13548] bridge_slave_0: entered promiscuous mode [ 323.878383][T13572] xt_hashlimit: size too large, truncated to 1048576 [ 323.957052][T13564] bond6 (unregistering): Released all slaves [ 324.169040][T13583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.849188][T13617] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 325.144167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 325.152228][ C1] lec:lec_tx_timeout: lec0 [ 325.157480][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 330.164405][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 330.172457][ C1] lec:lec_tx_timeout: lec0 [ 330.177400][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.184435][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 335.192485][ C1] lec:lec_tx_timeout: lec0 [ 335.197071][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.204362][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.211615][ C1] bridge0: topology change detected, propagating [ 340.204370][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 340.212402][ C1] lec:lec_tx_timeout: lec0 [ 340.217063][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.224495][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 345.232671][ C1] lec:lec_tx_timeout: lec0 [ 345.237418][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.244503][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 350.252570][ C1] lec:lec_tx_timeout: lec0 [ 350.257169][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.264319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.272456][ C1] lec:lec_tx_timeout: lec0 [ 355.277230][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.524355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 361.532487][ C1] lec:lec_tx_timeout: lec0 [ 361.537560][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.284305][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 367.292462][ C1] lec:lec_tx_timeout: lec0 [ 367.297403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.740112][T13650] validate_nla: 57 callbacks suppressed [ 372.740133][T13650] netlink: 'syz.0.2060': attribute type 75 has an invalid length. [ 372.757223][T13654] __nla_validate_parse: 5 callbacks suppressed [ 372.757244][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 372.764215][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2064'. [ 372.797425][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 372.828016][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 372.872900][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 372.885082][T13664] netlink: 'syz.0.2065': attribute type 5 has an invalid length. [ 372.893268][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2065'. [ 373.031872][T13664] geneve2: entered promiscuous mode [ 373.044172][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 373.052154][T13664] geneve2: entered allmulticast mode [ 373.052294][ C1] lec:lec_tx_timeout: lec0 [ 373.059503][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 373.062785][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 373.073722][ T6975] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 373.117473][ T6975] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 373.139920][ T6975] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 373.156678][ T6975] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 373.170254][T13679] netlink: 'syz.1.2067': attribute type 1 has an invalid length. [ 373.207010][T13679] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2067'. [ 373.235109][T13685] bpq0: entered allmulticast mode [ 373.240290][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 373.492475][T13696] netlink: 'syz.4.2074': attribute type 28 has an invalid length. [ 373.503268][T13696] netlink: 'syz.4.2074': attribute type 3 has an invalid length. [ 373.535446][T13696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2074'. [ 373.551447][T13696] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 373.779296][T13714] syzkaller0: entered promiscuous mode [ 373.804325][T13714] syzkaller0: entered allmulticast mode [ 374.356033][T13740] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 374.400227][T13740] netlink: 'syz.1.2081': attribute type 4 has an invalid length. [ 374.957618][T13766] syzkaller0: entered promiscuous mode [ 375.373287][T13784] bond6: entered promiscuous mode [ 375.380467][T13784] bond6: entered allmulticast mode [ 375.386411][T13784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.411567][T13785] macvlan0: entered promiscuous mode [ 375.431180][T13785] macvlan0: entered allmulticast mode [ 375.948824][T13834] tipc: Started in network mode [ 375.957200][T13834] tipc: Node identity ac14140f, cluster identity 4711 [ 375.965917][T13834] tipc: New replicast peer: 255.255.255.255 [ 375.973882][T13834] tipc: Enabled bearer , priority 10 [ 376.898324][T13884] netlink: 'syz.2.2123': attribute type 1 has an invalid length. [ 376.978733][T13887] IPVS: length: 229 != 24 [ 377.084706][ T5823] tipc: Node number set to 2886997007 [ 377.294589][T13895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.295548][T13897] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 377.597017][ T30] audit: type=1804 audit(1770627695.621:3): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2137" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2281 res=1 errno=0 [ 377.704250][ T30] audit: type=1800 audit(1770627695.641:4): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2137" name="cgroup.controllers" dev="tmpfs" ino=2281 res=0 errno=0 [ 377.790436][ T30] audit: type=1800 audit(1770627695.651:5): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2137" name="cgroup.controllers" dev="tmpfs" ino=2281 res=0 errno=0 [ 377.796641][T13919] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 378.038899][T13937] __nla_validate_parse: 23 callbacks suppressed [ 378.038923][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2143'. [ 378.084183][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 378.092318][ C1] lec:lec_tx_timeout: lec0 [ 378.097281][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.258436][T13945] netlink: 'syz.0.2146': attribute type 3 has an invalid length. [ 378.296768][T13945] netlink: 'syz.0.2146': attribute type 3 has an invalid length. [ 378.613610][T13972] ipvlan2: entered allmulticast mode [ 378.622892][T13972] batadv_slave_1: entered allmulticast mode [ 378.637738][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 378.656596][T13972] batman_adv: batadv0: Adding interface: ipvlan2 [ 378.673383][T13972] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.740468][T13972] batman_adv: batadv0: Interface activated: ipvlan2 [ 378.815550][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.972506][T13993] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 379.024681][T13949] wireguard0: entered promiscuous mode [ 379.030236][T13949] wireguard0: entered allmulticast mode [ 379.123538][T14000] syzkaller0: entered promiscuous mode [ 379.129518][T14000] syzkaller0: entered allmulticast mode [ 379.237355][T13992] can: request_module (can-proto-0) failed. [ 379.674977][T14015] syzkaller0: entered promiscuous mode [ 379.684472][T14015] syzkaller0: entered allmulticast mode [ 379.796099][T14034] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 380.138297][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2167'. [ 381.804360][T14051] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 381.812448][T14051] netlink: 'syz.3.2167': attribute type 2 has an invalid length. [ 382.047725][T14079] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 382.095310][T14079] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 382.212624][T14089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2176'. [ 382.249142][T14092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2177'. [ 382.335262][T14085] vlan4: entered promiscuous mode [ 382.340462][T14085] geneve1: entered promiscuous mode [ 382.347219][T14085] vlan4: entered allmulticast mode [ 382.352935][T14085] geneve1: entered allmulticast mode [ 382.367575][T14095] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 382.839613][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2179'. [ 383.104642][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 383.112709][ C1] lec:lec_tx_timeout: lec0 [ 383.117300][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.271654][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 385.652668][T14121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2186'. [ 385.662248][T14121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2186'. [ 385.679050][T14121] erspan0: entered promiscuous mode [ 385.686462][T14121] 0ªî{X¹¦: entered promiscuous mode [ 386.236742][T14155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2194'. [ 386.276956][T14145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2192'. [ 386.463092][T14166] sctp: [Deprecated]: syz.1.2198 (pid 14166) Use of int in maxseg socket option. [ 386.463092][T14166] Use struct sctp_assoc_value instead [ 386.635706][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2200'. [ 386.758260][T14181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2202'. [ 386.935856][T14190] bridge0: entered allmulticast mode [ 387.319816][T14211] openvswitch: netlink: Actions may not be safe on all matching packets [ 387.411864][T14216] pim6reg1: entered promiscuous mode [ 387.430721][T14218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2213'. [ 387.450873][T14216] pim6reg1: entered allmulticast mode [ 388.124348][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 388.132425][ C1] lec:lec_tx_timeout: lec0 [ 388.138408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.149732][T14264] netlink: 'syz.4.2223': attribute type 14 has an invalid length. [ 388.192760][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 388.226419][T14269] netlink: 'syz.4.2223': attribute type 14 has an invalid length. [ 388.251616][T14264] netlink: 'syz.4.2223': attribute type 14 has an invalid length. [ 388.281391][T14266] syzkaller0: entered promiscuous mode [ 388.287574][ T30] audit: type=1800 audit(1770627706.301:6): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2224" name="memory.events" dev="tmpfs" ino=2319 res=0 errno=0 [ 388.294631][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 388.367281][T14266] syzkaller0: entered allmulticast mode [ 388.394407][ T30] audit: type=1804 audit(1770627706.341:7): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2224" name="/newroot/453/memory.events" dev="tmpfs" ino=2319 res=1 errno=0 [ 388.428776][T14282] bond7: entered promiscuous mode [ 388.434222][T14282] bond7: entered allmulticast mode [ 388.439990][T14282] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.653760][T14294] netlink: 'syz.3.2230': attribute type 1 has an invalid length. [ 388.688837][T14295] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 388.849630][T14300] veth0: entered promiscuous mode [ 388.964816][T14294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.993184][T14294] bond4: (slave bond5): making interface the new active one [ 389.025208][T14294] bond4: (slave bond5): Enslaving as an active interface with an up link [ 389.128205][T14299] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 389.168312][T14299] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 389.369687][T14331] bridge5: entered promiscuous mode [ 389.380857][T14331] bridge5: entered allmulticast mode [ 389.408282][T14293] veth0: left promiscuous mode [ 390.703119][T14405] __nla_validate_parse: 5 callbacks suppressed [ 390.703140][T14405] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2267'. [ 390.729234][T14406] tipc: Enabling of bearer rejected, media not registered [ 390.747081][T14405] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 390.762768][T14405] 0ªî{X¹¦: entered allmulticast mode [ 390.784907][T14405] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 390.802804][T14409] netlink: 'syz.0.2268': attribute type 1 has an invalid length. [ 390.855829][T14409] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.925591][T14411] bond5: (slave veth11): Enslaving as an active interface with a down link [ 390.963267][T14409] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 391.007098][T14409] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 391.410155][T14429] netlink: 'syz.1.2274': attribute type 10 has an invalid length. [ 391.497345][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'. [ 391.633575][T14444] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2279'. [ 391.652472][T14450] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 391.681805][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 391.718623][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 391.769757][T14452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.793380][T14450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.824294][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 391.833839][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 391.863479][T14452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.877276][T14450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.889055][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 391.899172][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 391.908613][T14452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.918343][T14450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.928644][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 391.947900][T14452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.969538][T14452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.956472][T14479] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 393.054791][T14480] bridge11: port 1(veth11) entered blocking state [ 393.091811][T14480] bridge11: port 1(veth11) entered disabled state [ 393.134678][T14480] veth11: entered allmulticast mode [ 393.154018][T14480] veth11: entered promiscuous mode [ 393.154344][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 393.167588][ C1] lec:lec_tx_timeout: lec0 [ 393.172845][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 393.202535][T14481] bridge11: port 2(veth0_to_bond) entered blocking state [ 393.212309][T14481] bridge11: port 2(veth0_to_bond) entered disabled state [ 393.221323][T14481] veth0_to_bond: entered allmulticast mode [ 393.229970][T14481] veth0_to_bond: entered promiscuous mode [ 393.380521][T14494] syzkaller1: entered promiscuous mode [ 393.386820][T14494] syzkaller1: entered allmulticast mode [ 394.654885][T14541] syzkaller0: entered promiscuous mode [ 394.660428][T14541] syzkaller0: entered allmulticast mode [ 396.060392][T14616] __nla_validate_parse: 135 callbacks suppressed [ 396.060415][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2335'. [ 396.176347][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2337'. [ 396.233447][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2336'. [ 396.263120][T14626] netlink: 'syz.4.2339': attribute type 2 has an invalid length. [ 396.271719][T14626] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 396.280681][T14626] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 396.289850][T14626] netlink: 'syz.4.2339': attribute type 2 has an invalid length. [ 396.295619][T14623] net_ratelimit: 121 callbacks suppressed [ 396.295642][T14623] openvswitch: netlink: Missing key (keys=40, expected=80) [ 396.298590][T14626] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 396.363346][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'. [ 396.387147][T14626] netlink: 'syz.4.2339': attribute type 2 has an invalid length. [ 396.404800][T14628] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 396.413112][T14628] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 396.425534][T14628] netlink: 'syz.4.2339': attribute type 2 has an invalid length. [ 396.433528][T14628] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2339'. [ 396.523769][T14630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.718569][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 396.821398][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 396.831116][T14646] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 396.839284][T14646] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2344'. [ 396.922101][T14648] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2345'. [ 397.295074][T14660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2348'. [ 397.378942][T14660] syzkaller0: entered promiscuous mode [ 397.394820][T14660] syzkaller0: entered allmulticast mode [ 397.657478][ T30] audit: type=1800 audit(1770627715.681:8): pid=14663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2349" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2495 res=0 errno=0 [ 397.846026][ T30] audit: type=1800 audit(1770627715.871:9): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2349" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2495 res=0 errno=0 [ 398.058684][T14680] netlink: 'syz.2.2354': attribute type 11 has an invalid length. [ 398.184137][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 398.192246][ C1] lec:lec_tx_timeout: lec0 [ 398.196917][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.251570][T14707] xt_hashlimit: size too large, truncated to 1048576 [ 399.298024][T14708] xt_limit: Overflow, try lower: 271964/0 [ 401.260219][T14717] __nla_validate_parse: 2 callbacks suppressed [ 401.260237][T14717] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2364'. [ 401.563816][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2369'. [ 401.568366][T14725] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 401.608546][T14725] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 401.966959][T14751] addrtype_mt_checkentry_v1: 55 callbacks suppressed [ 401.966981][T14751] xt_addrtype: ipv6 does not support BROADCAST matching [ 402.298580][T14763] block nbd3: Unsupported socket: should be TCP or UNIX. [ 402.719173][T14784] IPv6: addrconf: prefix option has invalid lifetime [ 403.204169][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 403.212321][ C1] lec:lec_tx_timeout: lec0 [ 403.217209][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 403.449339][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 403.457204][T14815] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2391'. [ 403.468063][T14815] xt_policy: neither incoming nor outgoing policy selected [ 403.475862][T14813] ip6gre0: Master is either lo or non-ether device [ 403.526596][T14818] openvswitch: netlink: Flow actions attr not present in new flow. [ 404.012295][T14837] tipc: Enabling of bearer rejected, media not registered [ 404.077022][T14831] wg0: entered promiscuous mode [ 404.126647][T14831] wg0: entered allmulticast mode [ 404.307889][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 404.332989][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 404.687944][T14860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2403'. [ 404.986863][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2406'. [ 405.277413][T14877] syzkaller0: entered promiscuous mode [ 405.282954][T14877] syzkaller0: entered allmulticast mode [ 405.352729][T14877] netlink: 211408 bytes leftover after parsing attributes in process `syz.4.2408'. [ 407.892206][T14924] netlink: 'syz.4.2418': attribute type 3 has an invalid length. [ 407.932231][T14924] netlink: 'syz.4.2418': attribute type 1 has an invalid length. [ 407.961631][T14924] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2418'. [ 408.010687][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 408.020743][T14924] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2418'. [ 408.030510][T14924] netlink: 'syz.4.2418': attribute type 5 has an invalid length. [ 408.224359][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 408.232458][ C1] lec:lec_tx_timeout: lec0 [ 408.243914][T14940] xt_CT: No such helper "pptp" [ 408.244149][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 408.439284][T14943] pim6reg1: entered promiscuous mode [ 408.445993][T14943] pim6reg1: entered allmulticast mode [ 408.539178][T14949] veth13: entered allmulticast mode [ 408.616793][T14959] syzkaller0: entered promiscuous mode [ 408.622841][T14959] syzkaller0: entered allmulticast mode [ 408.691955][T14959] tipc: Enabled bearer , priority 0 [ 408.705715][T14962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2430'. [ 408.725543][T14958] tipc: Resetting bearer [ 408.771330][T14958] tipc: Disabling bearer [ 408.799313][T14967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2432'. [ 408.811005][T14967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2432'. [ 408.938149][T14965] bond3: Unable to set down delay as MII monitoring is disabled [ 408.961360][T14965] bond3 (unregistering): Released all slaves [ 409.898001][T15007] syzkaller0: entered promiscuous mode [ 409.903572][T15007] syzkaller0: entered allmulticast mode [ 409.919278][T15007] netlink: 'syz.4.2443': attribute type 15 has an invalid length. [ 410.054836][T15015] netlink: 181328 bytes leftover after parsing attributes in process `syz.3.2444'. [ 410.066919][T15016] netlink: 181328 bytes leftover after parsing attributes in process `syz.3.2444'. [ 410.203417][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 410.270581][T15022] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 410.287135][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'. [ 410.380527][T15027] bond8: invalid ARP target 0.0.0.0 specified for addition [ 410.388047][T15027] bond8: option arp_ip_target: invalid value (0) [ 410.411075][T15027] bond8 (unregistering): Released all slaves [ 410.868863][T15047] bond6: Invalid ad_actor_system MAC address. [ 410.915810][T15047] bond6: option ad_actor_system: invalid value (1) [ 410.927311][T15047] bond6 (unregistering): Released all slaves [ 411.033817][T15061] syzkaller0: entered promiscuous mode [ 411.070813][T15061] syzkaller0: entered allmulticast mode [ 411.638365][T15096] macsec1: entered promiscuous mode [ 411.675109][T15096] bridge0: entered promiscuous mode [ 411.680586][T15096] macsec1: entered allmulticast mode [ 411.749332][T15096] bridge0: entered allmulticast mode [ 411.781493][T15096] bridge0: port 1(macsec1) entered blocking state [ 411.797950][ T10] IPVS: starting estimator thread 0... [ 411.804339][T15096] bridge0: port 1(macsec1) entered disabled state [ 411.831097][T15096] bridge0: left allmulticast mode [ 411.842567][T15096] bridge0: left promiscuous mode [ 411.920596][T15106] IPVS: using max 35 ests per chain, 84000 per kthread [ 412.095696][T15110] netlink: 'syz.2.2467': attribute type 12 has an invalid length. [ 412.115168][T15110] netlink: 'syz.2.2467': attribute type 12 has an invalid length. [ 412.418294][T15122] x_tables: duplicate underflow at hook 3 [ 412.771346][T15144] netlink: 'syz.0.2480': attribute type 4 has an invalid length. [ 413.015034][T15166] __nla_validate_parse: 5 callbacks suppressed [ 413.015054][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 413.148605][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 413.264134][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 413.272275][ C1] lec:lec_tx_timeout: lec0 [ 413.277025][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 413.305677][T15169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.393892][T15177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.455542][T15177] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 413.482876][T15190] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001 [ 413.482967][T15177] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 413.673096][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 413.695154][T15195] netlink: 'syz.4.2493': attribute type 6 has an invalid length. [ 413.702946][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'. [ 413.717997][T15196] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 413.735546][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 413.754509][T15195] netlink: 'syz.4.2493': attribute type 6 has an invalid length. [ 413.785656][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'. [ 414.058312][T15203] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2494'. [ 414.235294][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 414.261250][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 414.418988][T15229] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 414.453785][T15229] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2502'. [ 414.476545][T15229] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 414.701985][T15243] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 414.720404][T15243] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 414.744695][T15243] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 414.794286][T15243] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 414.844218][T15249] openvswitch: netlink: Message has 93 unknown bytes. [ 414.859010][T15249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.886435][T15249] tipc: Enabled bearer , priority 2 [ 414.968593][T15254] syzkaller1: entered promiscuous mode [ 414.986329][T15254] syzkaller1: entered allmulticast mode [ 415.081172][T15262] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 415.431417][T15280] IPv6: addrconf: prefix option has invalid lifetime [ 415.884237][ T5907] tipc: Node number set to 1539411840 [ 416.589497][T15330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 416.653039][T15330] bond8: (slave bridge12): making interface the new active one [ 416.663150][T15330] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 416.967548][T15356] bond4: entered promiscuous mode [ 416.985924][T15356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.099876][T15370] syzkaller0: entered promiscuous mode [ 417.127689][T15370] syzkaller0: entered allmulticast mode [ 418.055601][T15398] __nla_validate_parse: 18 callbacks suppressed [ 418.055624][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2548'. [ 418.101090][T15404] bond0: (slave wlan1): Opening slave failed [ 418.186998][T15404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.244731][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.351549][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.378125][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.494441][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.538427][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.568052][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.580104][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.590565][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.625566][T15410] netlink: 852 bytes leftover after parsing attributes in process `syz.1.2550'. [ 418.954784][T15457] validate_nla: 7 callbacks suppressed [ 418.954805][T15457] netlink: 'syz.1.2561': attribute type 5 has an invalid length. [ 419.125106][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 419.133174][ C1] lec:lec_tx_timeout: lec0 [ 419.138335][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.200607][T15470] IPVS: length: 8 != 1152 [ 419.358434][T15475] openvswitch: netlink: EtherType 50a is less than min 600 [ 419.750171][T15501] netlink: 'syz.1.2575': attribute type 1 has an invalid length. [ 419.853442][T15501] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.943192][T15501] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 420.011930][T15502] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 420.030138][T15511] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 420.050745][T15511] team0: Device veth1_macvtap failed to register rx_handler [ 420.189208][T15522] sctp: [Deprecated]: syz.4.2581 (pid 15522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.189208][T15522] Use struct sctp_sack_info instead [ 420.211167][T15522] sctp: [Deprecated]: syz.4.2581 (pid 15522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.211167][T15522] Use struct sctp_sack_info instead [ 420.264466][ T7635] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 420.375153][ T7635] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.383293][ T7635] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 420.408180][T15528] netlink: 'syz.1.2584': attribute type 3 has an invalid length. [ 420.503320][T15530] bond0: (slave rose0): Enslaving as an active interface with an up link [ 420.544721][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.575968][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.604268][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.624395][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.709874][ T7635] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.747492][T15542] syzkaller0: entered promiscuous mode [ 420.754358][T15542] syzkaller0: entered allmulticast mode [ 420.755461][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.799884][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 420.976673][T15556] : entered promiscuous mode [ 421.845885][T15600] ipt_REJECT: TCP_RESET invalid for non-tcp [ 421.971437][T15617] netlink: 'syz.2.2613': attribute type 1 has an invalid length. [ 422.067246][T15617] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.124778][T15615] nbd3: detected capacity change from 0 to 63 [ 422.156591][T15624] block nbd3: NBD_DISCONNECT [ 422.177900][T15624] block nbd3: Disconnected due to user request. [ 422.184926][T15624] block nbd3: shutting down sockets [ 422.192579][ C1] blk_print_req_error: 138 callbacks suppressed [ 422.192602][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.208591][ C1] buffer_io_error: 138 callbacks suppressed [ 422.208694][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 422.222512][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.232094][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 422.239954][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.249538][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 422.257386][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.266939][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 422.289823][T13991] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.313819][T13991] Buffer I/O error on dev nbd3, logical block 0, async page read [ 422.330502][T13991] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.344732][T13991] Buffer I/O error on dev nbd3, logical block 1, async page read [ 422.354934][T13991] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.414472][T13991] Buffer I/O error on dev nbd3, logical block 2, async page read [ 422.422339][T13991] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.445856][T13991] Buffer I/O error on dev nbd3, logical block 3, async page read [ 422.474231][T13991] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.485922][T13991] Buffer I/O error on dev nbd3, logical block 0, async page read [ 422.506302][T13991] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.544589][T13991] Buffer I/O error on dev nbd3, logical block 1, async page read [ 422.553320][T13991] ldm_validate_partition_table(): Disk read failed. [ 422.623232][T13991] Dev nbd3: unable to read RDB block 0 [ 422.654813][T13991] nbd3: unable to read partition table [ 422.727315][T13991] ldm_validate_partition_table(): Disk read failed. [ 422.758959][T13991] Dev nbd3: unable to read RDB block 0 [ 422.791577][T13991] nbd3: unable to read partition table [ 422.907501][T15657] netlink: 'syz.2.2622': attribute type 39 has an invalid length. [ 423.226340][T15678] __nla_validate_parse: 88 callbacks suppressed [ 423.226363][T15678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2630'. [ 423.360259][T15693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2634'. [ 423.487648][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'. [ 423.965777][T15721] netlink: 'syz.0.2643': attribute type 28 has an invalid length. [ 423.993790][T15721] netlink: 'syz.0.2643': attribute type 3 has an invalid length. [ 424.009183][T15721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2643'. [ 424.154103][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.162182][ C1] lec:lec_tx_timeout: lec0 [ 424.167225][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.712376][T15766] netlink: 'syz.3.2658': attribute type 8 has an invalid length. [ 425.374616][ T60] net_ratelimit: 108 callbacks suppressed [ 425.374639][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 425.434481][ T60] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 425.574856][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 425.592974][ T60] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 425.691390][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 425.708390][T15831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'. [ 425.721103][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 425.731362][T15831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'. [ 425.746736][ T7635] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 425.767552][ T7635] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 425.894178][ T7635] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 425.911860][ T7635] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 426.035846][ T7635] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 426.061961][ T7635] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 426.081181][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 426.145889][T15857] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2679'. [ 426.377937][T15863] nbd: couldn't find a device at index 0 [ 426.451864][T15870] netlink: 'syz.2.2684': attribute type 10 has an invalid length. [ 426.495585][T15870] veth1_macvtap: left promiscuous mode [ 426.529981][T15870] team0: Device veth1_macvtap failed to register rx_handler [ 426.793412][T15891] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 427.447192][T15908] [ 427.449582][T15908] ====================================================== [ 427.456609][T15908] WARNING: possible circular locking dependency detected [ 427.463635][T15908] syzkaller #0 Not tainted [ 427.468071][T15908] ------------------------------------------------------ [ 427.475103][T15908] syz.0.2696/15908 is trying to acquire lock: [ 427.481179][T15908] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 427.490764][T15908] [ 427.490764][T15908] but task is already holding lock: [ 427.498127][T15908] ffff888025013008 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 427.508414][T15908] [ 427.508414][T15908] which lock already depends on the new lock. [ 427.508414][T15908] [ 427.518837][T15908] [ 427.518837][T15908] the existing dependency chain (in reverse order) is: [ 427.527866][T15908] [ 427.527866][T15908] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 427.536484][T15908] blk_alloc_queue+0x52f/0x610 [ 427.541776][T15908] __blk_mq_alloc_disk+0x197/0x390 [ 427.547409][T15908] nbd_dev_add+0x499/0xb50 [ 427.552368][T15908] nbd_init+0x168/0x1f0 [ 427.557076][T15908] do_one_initcall+0x250/0x840 [ 427.562377][T15908] do_initcall_level+0x104/0x190 [ 427.567841][T15908] do_initcalls+0x59/0xa0 [ 427.572706][T15908] kernel_init_freeable+0x2a6/0x3d0 [ 427.578461][T15908] kernel_init+0x1d/0x1d0 [ 427.583339][T15908] ret_from_fork+0x51b/0xa40 [ 427.588540][T15908] ret_from_fork_asm+0x1a/0x30 [ 427.593851][T15908] [ 427.593851][T15908] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 427.601090][T15908] fs_reclaim_acquire+0x71/0x100 [ 427.606572][T15908] prepare_alloc_pages+0x152/0x650 [ 427.612210][T15908] __alloc_frozen_pages_noprof+0x12f/0x380 [ 427.618542][T15908] __alloc_pages_noprof+0xa/0x30 [ 427.623999][T15908] pcpu_populate_chunk+0x182/0xb30 [ 427.629630][T15908] pcpu_alloc_noprof+0xc4a/0x18d0 [ 427.635173][T15908] xt_percpu_counter_alloc+0x161/0x220 [ 427.641160][T15908] translate_table+0x134a/0x2110 [ 427.646706][T15908] ipt_register_table+0x11b/0x7f0 [ 427.652251][T15908] iptable_nat_table_init+0x43/0x2e0 [ 427.658061][T15908] xt_find_table_lock+0x30c/0x3e0 [ 427.663699][T15908] xt_request_find_table_lock+0x26/0x100 [ 427.669855][T15908] do_ipt_get_ctl+0x716/0x1240 [ 427.675189][T15908] nf_getsockopt+0x26e/0x290 [ 427.680326][T15908] ip_getsockopt+0x19e/0x230 [ 427.685458][T15908] do_sock_getsockopt+0x2d3/0x3f0 [ 427.691014][T15908] __x64_sys_getsockopt+0x1a4/0x240 [ 427.696760][T15908] do_syscall_64+0xe2/0xf80 [ 427.701816][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.708249][T15908] [ 427.708249][T15908] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 427.715998][T15908] __lock_acquire+0x15a5/0x2cf0 [ 427.721391][T15908] lock_acquire+0x106/0x330 [ 427.726447][T15908] __mutex_lock+0x19f/0x1300 [ 427.731576][T15908] pcpu_alloc_noprof+0x272/0x18d0 [ 427.737126][T15908] sbitmap_init_node+0x1e1/0x640 [ 427.742592][T15908] sbitmap_queue_init_node+0x3e/0x4d0 [ 427.748576][T15908] blk_mq_init_tags+0x15c/0x2d0 [ 427.753952][T15908] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 427.759931][T15908] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 427.766259][T15908] nbd_start_device+0x17f/0xb10 [ 427.771637][T15908] nbd_genl_connect+0x165b/0x1cf0 [ 427.777186][T15908] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.783428][T15908] genl_rcv_msg+0x61c/0x7a0 [ 427.788455][T15908] netlink_rcv_skb+0x232/0x4b0 [ 427.793739][T15908] genl_rcv+0x28/0x40 [ 427.798240][T15908] netlink_unicast+0x80f/0x9b0 [ 427.803537][T15908] netlink_sendmsg+0x813/0xb40 [ 427.808836][T15908] ____sys_sendmsg+0xa68/0xad0 [ 427.814156][T15908] ___sys_sendmsg+0x2a5/0x360 [ 427.819396][T15908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.824883][T15908] do_syscall_64+0xe2/0xf80 [ 427.829919][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.836349][T15908] [ 427.836349][T15908] other info that might help us debug this: [ 427.836349][T15908] [ 427.846579][T15908] Chain exists of: [ 427.846579][T15908] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 427.846579][T15908] [ 427.860238][T15908] Possible unsafe locking scenario: [ 427.860238][T15908] [ 427.867685][T15908] CPU0 CPU1 [ 427.873053][T15908] ---- ---- [ 427.878410][T15908] lock(&q->q_usage_counter(io)#52); [ 427.883793][T15908] lock(fs_reclaim); [ 427.890338][T15908] lock(&q->q_usage_counter(io)#52); [ 427.898235][T15908] lock(pcpu_alloc_mutex); [ 427.902747][T15908] [ 427.902747][T15908] *** DEADLOCK *** [ 427.902747][T15908] [ 427.910892][T15908] 6 locks held by syz.0.2696/15908: [ 427.916082][T15908] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.924275][T15908] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 427.933418][T15908] #2: ffff8880251a31d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 427.944817][T15908] #3: ffff8880251a30d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 427.955789][T15908] #4: ffff888025013008 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 427.966520][T15908] #5: ffff888025013040 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 427.977503][T15908] [ 427.977503][T15908] stack backtrace: [ 427.983390][T15908] CPU: 0 UID: 0 PID: 15908 Comm: syz.0.2696 Not tainted syzkaller #0 PREEMPT(full) [ 427.983419][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 427.983428][T15908] Call Trace: [ 427.983435][T15908] [ 427.983441][T15908] dump_stack_lvl+0xe8/0x150 [ 427.983461][T15908] print_circular_bug+0x2e1/0x300 [ 427.983479][T15908] check_noncircular+0x12e/0x150 [ 427.983496][T15908] __lock_acquire+0x15a5/0x2cf0 [ 427.983523][T15908] ? kernel_text_address+0xa5/0xe0 [ 427.983543][T15908] ? pcpu_alloc_noprof+0x272/0x18d0 [ 427.983557][T15908] lock_acquire+0x106/0x330 [ 427.983576][T15908] ? pcpu_alloc_noprof+0x272/0x18d0 [ 427.983595][T15908] __mutex_lock+0x19f/0x1300 [ 427.983612][T15908] ? pcpu_alloc_noprof+0x272/0x18d0 [ 427.983626][T15908] ? stack_depot_save_flags+0x3f3/0x810 [ 427.983646][T15908] ? kasan_save_track+0x4f/0x80 [ 427.983660][T15908] ? kasan_save_track+0x3e/0x80 [ 427.983673][T15908] ? pcpu_alloc_noprof+0x272/0x18d0 [ 427.983685][T15908] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 427.983700][T15908] ? blk_mq_init_tags+0x83/0x2d0 [ 427.983719][T15908] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 427.983734][T15908] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 427.983752][T15908] ? __pfx___mutex_lock+0x10/0x10 [ 427.983767][T15908] ? genl_rcv+0x28/0x40 [ 427.983785][T15908] ? ____sys_sendmsg+0xa68/0xad0 [ 427.983804][T15908] ? ___sys_sendmsg+0x2a5/0x360 [ 427.983835][T15908] pcpu_alloc_noprof+0x272/0x18d0 [ 427.983856][T15908] sbitmap_init_node+0x1e1/0x640 [ 427.983880][T15908] sbitmap_queue_init_node+0x3e/0x4d0 [ 427.983903][T15908] blk_mq_init_tags+0x15c/0x2d0 [ 427.983924][T15908] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 427.983940][T15908] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.983956][T15908] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 427.983973][T15908] ? kfree+0x1be/0x650 [ 427.983991][T15908] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 427.984010][T15908] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 427.984037][T15908] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 427.984061][T15908] ? sysfs_add_file_mode_ns+0x259/0x300 [ 427.984083][T15908] nbd_start_device+0x17f/0xb10 [ 427.984105][T15908] ? device_create_file+0xf4/0x1b0 [ 427.984127][T15908] nbd_genl_connect+0x165b/0x1cf0 [ 427.984150][T15908] ? __pfx_nbd_genl_connect+0x10/0x10 [ 427.984174][T15908] ? rcu_is_watching+0x15/0xb0 [ 427.984190][T15908] ? __nla_parse+0x40/0x60 [ 427.984210][T15908] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 427.984233][T15908] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.984255][T15908] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 427.984277][T15908] ? __lock_acquire+0x6b5/0x2cf0 [ 427.984300][T15908] genl_rcv_msg+0x61c/0x7a0 [ 427.984321][T15908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.984339][T15908] ? __pfx_nbd_genl_connect+0x10/0x10 [ 427.984362][T15908] netlink_rcv_skb+0x232/0x4b0 [ 427.984378][T15908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.984397][T15908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.984410][T15908] ? genl_rcv+0x19/0x40 [ 427.984433][T15908] ? down_read+0x272/0x2e0 [ 427.984448][T15908] ? genl_rcv+0xd/0x40 [ 427.984466][T15908] genl_rcv+0x28/0x40 [ 427.984483][T15908] netlink_unicast+0x80f/0x9b0 [ 427.984509][T15908] ? __pfx_netlink_unicast+0x10/0x10 [ 427.984529][T15908] ? __alloc_skb+0x193/0x390 [ 427.984546][T15908] ? netlink_sendmsg+0x650/0xb40 [ 427.984560][T15908] ? skb_put+0x11b/0x210 [ 427.984579][T15908] netlink_sendmsg+0x813/0xb40 [ 427.984598][T15908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.984614][T15908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.984633][T15908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.984650][T15908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.984664][T15908] ____sys_sendmsg+0xa68/0xad0 [ 427.984683][T15908] ? __might_fault+0xaf/0x130 [ 427.984706][T15908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.984727][T15908] ? import_iovec+0x73/0xa0 [ 427.984750][T15908] ___sys_sendmsg+0x2a5/0x360 [ 427.984768][T15908] ? __lock_acquire+0x6b5/0x2cf0 [ 427.984789][T15908] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.984810][T15908] ? futex_wake+0x4ac/0x580 [ 427.984841][T15908] ? __fget_files+0x2a/0x420 [ 427.984857][T15908] ? __fget_files+0x3a0/0x420 [ 427.984876][T15908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.984896][T15908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.984918][T15908] ? rcu_is_watching+0x15/0xb0 [ 427.984936][T15908] do_syscall_64+0xe2/0xf80 [ 427.984952][T15908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.984966][T15908] ? trace_irq_disable+0x37/0x100 [ 427.984982][T15908] ? clear_bhb_loop+0x60/0xb0 [ 427.984998][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.985012][T15908] RIP: 0033:0x7f61cc99aeb9 [ 427.985026][T15908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.985040][T15908] RSP: 002b:00007f61cd871028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.985055][T15908] RAX: ffffffffffffffda RBX: 00007f61ccc15fa0 RCX: 00007f61cc99aeb9 [ 427.985067][T15908] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 427.985077][T15908] RBP: 00007f61cca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 427.985086][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.985095][T15908] R13: 00007f61ccc16038 R14: 00007f61ccc15fa0 R15: 00007ffc008f91b8 [ 427.985112][T15908] [ 428.526664][T15923] xt_hashlimit: size too large, truncated to 1048576 [ 428.543584][ T5824] block nbd3: Receive control failed (result -32) [ 428.553169][ T5146] block nbd3: Receive control failed (result -32) [ 428.553169][ T5837] block nbd3: Receive control failed (result -32) [ 428.574218][T15908] nbd3: detected capacity change from 0 to 127 [ 428.632903][T13991] block nbd3: Dead connection, failed to find a fallback [ 428.640114][T13991] block nbd3: shutting down sockets [ 428.645848][T13991] blk_print_req_error: 138 callbacks suppressed [ 428.645875][T13991] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.663176][T13991] buffer_io_error: 138 callbacks suppressed [ 428.663196][T13991] Buffer I/O error on dev nbd3, logical block 0, async page read [ 428.677014][T13991] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.686788][T13991] Buffer I/O error on dev nbd3, logical block 1, async page read [ 428.694660][T13991] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.704432][T13991] Buffer I/O error on dev nbd3, logical block 2, async page read [ 428.712350][T13991] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.722639][T13991] Buffer I/O error on dev nbd3, logical block 3, async page read [ 428.730781][T13991] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.740386][T13991] Buffer I/O error on dev nbd3, logical block 0, async page read [ 428.748456][T13991] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.759392][T13991] Buffer I/O error on dev nbd3, logical block 1, async page read [ 428.768195][T13991] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.778163][T13991] Buffer I/O error on dev nbd3, logical block 2, async page read [ 428.786422][T13991] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.796525][T13991] Buffer I/O error on dev nbd3, logical block 3, async page read [ 428.804825][T13991] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.814834][T13991] Buffer I/O error on dev nbd3, logical block 0, async page read [ 428.822654][T13991] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.833273][T13991] Buffer I/O error on dev nbd3, logical block 1, async page read [ 428.844741][T13991] ldm_validate_partition_table(): Disk read failed. [ 428.851772][T13991] Dev nbd3: unable to read RDB block 0 [ 428.858235][T13991] nbd3: unable to read partition table [ 428.869043][T13991] ldm_validate_partition_table(): Disk read failed. [ 428.876270][T13991] Dev nbd3: unable to read RDB block 0 [ 428.882316][T13991] nbd3: unable to read partition table [ 428.902079][T15922] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 429.184287][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 429.192337][ C1] lec:lec_tx_timeout: lec0 [ 429.197375][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.434407][ T60] net_ratelimit: 79 callbacks suppressed [ 430.434431][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 430.447945][ T60] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 430.564907][T11020] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 430.572729][T11020] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 430.694212][T11020] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 430.702161][T11020] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 430.814163][ T6977] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 430.821932][ T6977] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 430.944329][ T6977] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 430.952210][ T6977] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 434.204122][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 434.212203][ C1] lec:lec_tx_timeout: lec0 [ 434.216940][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 435.514330][ T60] net_ratelimit: 80 callbacks suppressed [ 435.514354][ T60] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 435.527936][ T60] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 435.644395][ T6977] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 435.652364][ T6977] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 435.765088][T11020] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 435.772875][T11020] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 435.884216][ T7635] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 435.892057][ T7635] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 436.004460][T11020] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 436.012270][T11020] bond7: (slave ip6gretap0): failed to get link speed/duplex