last executing test programs: 7m18.23238146s ago: executing program 1 (id=3885): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)={0x368, 0x44, 0x100, 0x70bd29, 0x4, {0x2}, [@nested={0x2e3, 0x89, 0x0, 0x1, [@nested={0x98, 0xf1, 0x0, 0x1, [@nested={0x86, 0xe2, 0x0, 0x1, [@generic="64576e6e642477f47daedc6dd78d05c8f97483b8ee2e75924e46116d91e0bed2681c7bbc6ec25f6067849de58c56e779aefe8339cf64a2e988bea7d591cf36cb8fdfabff26c7579a20ff35eee3352596005b0f7bb951a12f867c179ea300075aa928b81be0e4", @typed={0x14, 0xba, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=r2}]}, @typed={0x8, 0x13e, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x140}]}, @generic="3810961d839436b04ddfdf490e5157ed349c931aa412557eae0ffab53ed82269a897835305cf23b38eaeb60fe42dfaec4cb5a8ac0aad05644957ec656f1cee0919f89f1ad5fde98e48ddbc50841ea4a9a6686ad0288713c7fd3708674d3c3d4c4def365cf347801bb87d5c469a3990dc0b5cf408b78ffc05c5f1dc73d00f2766c7c1a988d8464dedde34ee0c14113459ce1175d2f0b746ac4835cb8d49f871a1bb0661c57d0f350e1ff9ab4bf1b10fec047741e1afc9b1796ebf35248ce5c4885bf2570584ece5166896ddb4d4d7c0a2b16d798a85af0a", @generic="bef17f5aa74e0401c3c7ba247e3e3fa2298df4e738e603fb67de889c3374f62aa992260e7467587f5987be5457f0239ee4", @generic="e98f21ee06fee6e312a0cdc53d532932c2e35fdcf5ea6e11ea77ce2fde29ad92f3421161a9c6340106e89666616a7c6a50d32e8d88bf04628577afe1a94ee7e2cf26a16d2c310ceef459fc0924f877c360c2bc2756dc6032b1862390a8c6674277110213788391e8bd22bb4731806e7b3a6eb9eab2be35ad53e5b001ac1df9d6fe394e04859ceec0959cd75232835741e05f2708ec5d5c16069bcfcd2e979795eedfee2bdac7bb750ec4665a5f10a35f2073107b6bbf90", @nested={0x4, 0x5}, @generic="a64c955a77f7266946d04f942f6511cee10e2294962ebaab6df0039476b3a7eb4b8561fa100e766eb86ca0e75ead5b9687ddbd8b16aa1cc0a9ee368a2db8faafdf03d6f2faf02af88eb2c1d2c9748716f9bb1bd94b21725705ac880599c8e907055b0bf612d2c475ff0fd858b67a9cff7ba1df19600b11721afc47335a071863589bc882"]}, @nested={0x70, 0x1, 0x0, 0x1, [@nested={0x6c, 0x75, 0x0, 0x1, [@nested={0x60, 0x80, 0x0, 0x1, [@typed={0x5c, 0x63, 0x0, 0x0, @binary="58d8714a9751628273b33798543392f218f76f6dc1473c273e421d1281ed72900a2a725b9371befff43bd4b5c5884c35f576a19f8eb42428e000dddcdf55c92cf5c3e8aa3cbb418605ef11e83cc3f366e74f4fe973fd954b"}]}, @typed={0x8, 0x117, 0x0, 0x0, @fd}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 7m18.230975182s ago: executing program 1 (id=3887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100282260ca6492f7620e91e4000002000000082000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f0000000280)="d6d493f7c39b632cc1cd1797b4191fc8432020e57b20274bdd2f1d472fc06377688a2d208a12f4e01058cbb0bef64c5402bb1d63e5fbbd115f73d75936f9b48728"}, 0x20) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={r3, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x48}}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m18.224936553s ago: executing program 1 (id=3888): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000200081dc0000000000000000020000d4ae00"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='@}\\),%\x00', 0x0, &(0x7f00000000c0)={@align=0x800, {0x2, 0x75a6, 0x5, 0xe0}}, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x2}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0x1, 0x4000, 0x3c, 0xfffb}, 0x8) (async, rerun: 64) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x10, 0x70bd28, 0x25dfdbfd, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40042) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4008000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) 7m18.046089642s ago: executing program 1 (id=3891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000004f00), 0x256200, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000aff020000000000000000010000000900010073797a3100000000080002400000000340000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xc0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) close(0x4) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008f00e0000400000003000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) 7m17.720418125s ago: executing program 1 (id=3896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x400, 0x4353}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2}, 0x8) 7m17.5167706s ago: executing program 1 (id=3899): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000003600010100bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x9c8fd353ad5b145a}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003620000000228000b8024000180090001006d6574610000000014000280080800024000000013140000001000010000000000000000000084000a00000000000000"], 0xe8}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) 6m10.204707864s ago: executing program 32 (id=3899): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000003600010100bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x9c8fd353ad5b145a}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003620000000228000b8024000180090001006d6574610000000014000280080800024000000013140000001000010000000000000000000084000a00000000000000"], 0xe8}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) 2.190190154s ago: executing program 5 (id=6684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040605000000000000000000070000090500010007000000497cfc1c4d03ada10585047eb606af6d4d4e5af8387409566fb7a57282ebdd60439877c2e1e8cda4e8ddc4ae030ac3d2098f405a73eec5884dbdf5ef8a62ca5b1d419f8da7e0e574f58af01318d768944816856bd20e1ab61770f3347d1ac05ab8bea76ee88a2fee9b9808d11500a94cb8b1b0251a1d3ef4eb706b2130bb72e2d4bb5eb189c2926562f3a66737e19bff207d7081bdc3b12fa0dc5605fe5943c6c4523787f8a029dd9ca9e8f9f97b8359bfb773c12ae340dca1984eaabb1d000c1fa60f2417ba768cc86911ae7dc09178d200"/249], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.189973296s ago: executing program 5 (id=6685): r0 = socket$kcm(0x2, 0x1, 0x84) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010102}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@empty, 0xfffffffd}]}]}}}}}}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 1.928570736s ago: executing program 2 (id=6691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.928161993s ago: executing program 4 (id=6692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000280), 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) close(r1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdb032300000000", @ANYRES32=0x0, @ANYBLOB="0c01000000000000180012800b000100697036746e6c0000080002800400130008001f0005000000"], 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001105d94f460a5036e17ac20b558ba2b98061a1c03ee4ba99340bc651450f01f3063ed384a0c5c36d7e36bc409457f0bac637ad422a9f9a309eb5d"], 0x94}}, 0x20044824) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400ff0200000000000000000000000000010c000280051b01cbc322b9a600000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400000020de6da7b1035f7826d33167c3edb60000000000000000000001080007400000000018000d8014000400ff01000000000000000000"], 0xac}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xffff0000, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000280), 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_PIM(r2, 0x0, 0xcf, 0x0, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) (async) close(r1) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdb032300000000", @ANYRES32=0x0, @ANYBLOB="0c01000000000000180012800b000100697036746e6c0000080002800400130008001f0005000000"], 0x40}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001105d94f460a5036e17ac20b558ba2b98061a1c03ee4ba99340bc651450f01f3063ed384a0c5c36d7e36bc409457f0bac637ad422a9f9a309eb5d"], 0x94}}, 0x20044824) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400ff0200000000000000000000000000010c000280051b01cbc322b9a600000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400000020de6da7b1035f7826d33167c3edb60000000000000000000001080007400000000018000d8014000400ff01000000000000000000"], 0xac}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xffff0000, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 1.565369441s ago: executing program 2 (id=6696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) close(r0) 1.547604291s ago: executing program 4 (id=6698): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000800000000085000000110000009500000000000000", @ANYBLOB="d3a088ed3bcad02baa8ea75c03f2b2dc25ce86e2439bd88a1a7c657e95b5f702bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000101}, 0x94) (rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000034dc0000000000000040034000dc"}}}]}, 0x48}}, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (rerun: 64) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x20040084) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc8}}}, 0x6) 1.404401541s ago: executing program 0 (id=6699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.404083547s ago: executing program 4 (id=6700): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f0000001200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 1.403850466s ago: executing program 3 (id=6701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb8a1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_CARRIER={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1050, 0x8130}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x42}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 1.337083124s ago: executing program 5 (id=6702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r9, 0x64e98, 0x12ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$DEVLINK_CMD_PORT_GET(r10, 0x0, 0x4000000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) tee(r4, r4, 0x7fffffffffffffff, 0xa) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r4], 0x7c}}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1dc087ff967d9480}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000000b0605000000000000000000010000000900020073797a30000000000900020073797a3000000000080009403c379530180007800c000280080001407f00000108000b40000000030900020073797a31000000000500010007000000700008801c0007801800168014000240ff0200000000000000000000000000010c00078006001a0022000000100007710900130073797a31000000000c00078008000a400000bdab0c000780050007002e000000100007800c00194000000000000000020c0007800800064000000fff"], 0xd0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc000) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000b00000001000006040000000b000000cfaa00000a0000000000000e050000000000000000007fc25f002e000041b8dd2737536c753f2c7f5e1c4ddbeb4d2c7bd5c8d3836a62742cd1c8b8ffbdfcd72b4624e41cdf6472e882e013fd5cffb7085dea64cd585e719898cd0f99494d4ce9c74978fc19139d937dacbfcff77206efc521b8445eaf877bc4642bd3f870829edafce67a5a8aef11353694267b23d0420532d6b2e5ff472b91aa2dac4e2815a3eb6920edd1618d4eae78c2cc10b0905c123f"], &(0x7f00000002c0), 0x45, 0x0, 0x1, 0x5}, 0x28) 1.319691301s ago: executing program 2 (id=6703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000470007011aff1e00ffffffff017c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe}, 0x11) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x0, @multicast, 'veth0\x00'}}, 0x1e) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) ioctl$sock_ifreq(r4, 0x8919, &(0x7f0000000480)={'pimreg0\x00', @ifru_addrs=@generic={0x18, "f34f2b9a52eb79494e54c4069762"}}) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000240)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000180)={'macsec0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000580)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001014010029bd7000fedbdf2508004b00130000000800030001000000080001000000000008004a00010002"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc0) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000)) 1.235818911s ago: executing program 4 (id=6704): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000047000701feffffffffffffff017c000008000380a400c980"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x25a5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getnetconf={0x24, 0x52, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9d7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040005}, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x7, 0x7, 0x9, 0x100, "81e87c67f2b816baa227aeef609a421c23e67d13338d4264f1b656c8735adaf9e3af8dae3485f4aafaa6327a73b9def27264156e5e1bd2aceed9e325360179eba28b2ce108602278ba58e88296c79dc04cc00b47d8edb8010921eecd0c06d447899c05c40b4a3940fcf35a844c83a72412aaf77c4a82dc5493eb5eff31063d89"}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000a40)={0x6, {{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x0, @local, 0x5}}, {{0xa, 0x4e23, 0x3, @local, 0x1}}, {{0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1f54}}, {{0xa, 0x4e22, 0x7, @local, 0x8}}, {{0xa, 0x4e22, 0x6, @private1, 0x3ff}}]}, 0x310) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.234894748s ago: executing program 3 (id=6705): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x8010, r2, 0x3fbba000) 1.047257937s ago: executing program 0 (id=6706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000e4ea2b37a7362338d5178c4c9c815275fe387fb1e5e4f50a6d05c192ca565ef0ebd279a4737b007a4cb777e8ce015788b69894d675b63faf6a349c2c125f7dff2d855e8cfa272bafb6b255e6be94cab8ccd6d72a1d7ebcc691e2a5bd317cd75018672ce8f42e4142", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000480040003000000000008000200020000000800010000000000"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x18800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 864.879213ms ago: executing program 2 (id=6707): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 820.379361ms ago: executing program 3 (id=6708): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000940)={&(0x7f0000000400), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/4, 0x4}], 0x3}, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) (async) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) (async) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\b\b'}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\b\b'}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x84}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000280)={0x1, 0xfa, "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"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12021) 626.905951ms ago: executing program 2 (id=6709): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b872, 0xc574450d1af3b5bc}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x8000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) 548.408333ms ago: executing program 3 (id=6710): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7f, 0xfffffffffffffffa}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) 414.339272ms ago: executing program 3 (id=6711): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000007c0), 0x2, 0x42, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) 413.942063ms ago: executing program 0 (id=6712): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x82, 0x2, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x5, 0x40, 0x1, 'o'}]}}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) 394.974865ms ago: executing program 2 (id=6713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYBLOB="38622df7440f89fa60f76cd9d2a9c806625c0789a574cac557d2e3a538cca7c351766b8f5d50ab4843bbb26a38df5ea9d683f0b0fde22653112882b073a075f9f507306a5111ed5a9ca272e088159e75dfc57b94e5a2a83b926d6bd8104c1352f1763679c21f63f37fa7589e6c67f32405a95ba53ecb09e8bbe01bd8e0e5b992c097ee52b49223b0632df5fa23061b40aa0df9e6dcd499a79e17369feaec6c305aad4784890e5dfb", @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@deltfilter={0xe10, 0x2d, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff9, 0xffe0}, {0x5, 0xa}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_CHAIN={0x8, 0xb, 0x9f}, @filter_kind_options=@f_route={{0xa}, {0xdd0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}, @TCA_ROUTE4_POLICE={0xc54, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x2, 0x1, 0x1, {0x4, 0x1, 0x8, 0x8, 0x3, 0x6}, {0x5, 0x0, 0x120, 0x2, 0x101, 0x2b24}, 0x8, 0x9, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x200, 0x1, 0x5d63e5cf, 0x101, 0x7fff, 0x1, 0x7, 0x7, 0xfffffffa, 0x3, 0xe1, 0x7fff, 0x59, 0x0, 0x8526, 0x9, 0xf9e, 0x7, 0xa, 0x3, 0x2, 0xa0000000, 0x4, 0x3, 0x3, 0x6, 0x9, 0x6, 0x1000, 0x4, 0xfffffffb, 0xffff, 0x5, 0x80, 0xa5f7, 0x9, 0x7f, 0x4, 0x3ff, 0xff, 0x401, 0x9, 0xfffffff0, 0x7f, 0x8, 0x81, 0x3, 0x7fff, 0x6, 0x3a, 0x200, 0x9, 0x2b, 0x5, 0x0, 0xb7ebc56, 0x6, 0x61dd, 0x2, 0x5, 0x1, 0x6, 0x2, 0x3ff, 0x4, 0x4, 0x6, 0x5, 0xfffffff9, 0x17e, 0x3, 0x80000001, 0x5f78, 0x28, 0x401, 0x66611104, 0x101, 0x9, 0x200, 0xd98, 0x4, 0x5, 0xca4, 0x9, 0xffffffff, 0x6, 0x6, 0xf23, 0x0, 0xfffffffe, 0x10001, 0xffffffff, 0x40, 0x10000, 0xfffffffc, 0xbb49, 0x0, 0x5, 0xff, 0x6, 0xffff, 0x5, 0x0, 0x8, 0x3, 0xd6, 0x0, 0x1, 0xe0b, 0x0, 0x7, 0x5, 0xb4, 0x1, 0x0, 0x0, 0x1, 0x9, 0x5, 0x800, 0x7, 0x8, 0xf, 0x4, 0xffffffff, 0x0, 0x3, 0x1, 0x9, 0xc, 0x0, 0x0, 0x9, 0xfe30, 0x8, 0x5, 0x5f, 0x9, 0x6, 0x1, 0x451f, 0x9, 0x10, 0x7f, 0x7f, 0x7, 0x8001, 0x6, 0x0, 0x38, 0x0, 0x1ff, 0xe9, 0x0, 0xa6e, 0x6, 0x8, 0x8, 0xe6, 0x8, 0x1, 0x10, 0x5, 0x10000, 0x3, 0x4, 0x3, 0x36, 0x6, 0x5, 0x9, 0xb, 0x4, 0xc, 0x2, 0x200, 0x6, 0xb, 0x0, 0x6, 0x7, 0x401, 0x80000000, 0x10000, 0x81, 0x4, 0x200, 0x14975f85, 0xffffffff, 0x0, 0x1, 0x400, 0x5, 0x6, 0x3, 0x101, 0x8001, 0x3948, 0x4a81ad09, 0x8, 0x93ef, 0x4, 0x6, 0xfe0, 0x9, 0x200, 0xfff, 0x9, 0x6, 0x8, 0x7, 0xb4, 0xfffffffd, 0x101, 0xa00000, 0x3, 0x2269, 0x1ff, 0x2000000, 0x5780, 0x9, 0x9, 0xfe, 0x0, 0x5, 0x6, 0x7, 0xe, 0x200, 0x9, 0x7, 0x10000, 0x401, 0xfffffff8, 0x4, 0x1, 0x200, 0x7fffffff, 0x3, 0x0, 0x2, 0x0, 0x2, 0x9, 0x2, 0x2, 0x1ff, 0x6, 0x40, 0x2, 0x5, 0x8, 0x40, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xffff30ae, 0x0, 0xe5, 0x7aa8, 0x1000, 0x8000, 0x7, 0x6, 0x7, 0x2, 0x9, 0x40, 0x10000, 0x2, 0x9, 0xffffffaf, 0xfff, 0x57c, 0x7, 0x400, 0x7fffffff, 0x40, 0x1, 0x1, 0x83, 0x300000, 0x7, 0x4, 0x6, 0x1, 0x3, 0x9, 0x9, 0x4, 0x52c, 0x7, 0x8001, 0x982c, 0x6, 0x8001, 0x5, 0x7, 0x9, 0x2, 0x7, 0xffff, 0x3, 0x7, 0xfb, 0x40, 0xe2f, 0x5, 0x2, 0xe0, 0x8, 0x6e35, 0x7fff, 0x0, 0x800, 0x6, 0x401, 0x6, 0x4, 0x200, 0x3, 0x9, 0x100, 0xf98, 0x7fffffff, 0x3, 0x3, 0xffff, 0x3, 0x6, 0xa13, 0x6, 0x8, 0x10000, 0xc7, 0x3, 0x7, 0x3, 0x7, 0x5, 0x2, 0x1, 0x3, 0xd, 0x5, 0x1000, 0xb0, 0x3, 0x0, 0x4, 0x0, 0x6e, 0xfffffffb, 0x0, 0x6, 0xfffff000, 0xf7, 0x6, 0x30, 0x6, 0x6, 0x3, 0x7, 0x7, 0x1000, 0x1, 0x8, 0x4, 0x4, 0x47b, 0x8, 0x5, 0x23, 0x1, 0x4, 0x3e9d, 0x8, 0x9, 0x2, 0x7ff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5, 0x200, 0x7, 0x7, 0x92, 0x6, 0x7fff, 0x9, 0x0, 0x7, 0xfffffffe, 0x5, 0x56b0, 0x7fff, 0x8, 0x100, 0x1, 0x5, 0xfffffffa, 0x40, 0x8, 0x8, 0x1000, 0x0, 0x7f, 0x200, 0xbea1, 0x5, 0x3, 0x9, 0x81, 0x1, 0x9, 0x400, 0x10001, 0x800, 0xf, 0xf, 0x80000001, 0x6f66, 0x1800, 0x40, 0xc2, 0x7, 0x0, 0x7, 0x7, 0xe2, 0xd0d, 0x1000, 0x1, 0x9, 0xfffffffe, 0x3, 0x10000, 0xb8a4, 0x80000001, 0x629d, 0x800, 0x3, 0x401, 0x2, 0x200, 0x10000, 0x200, 0x8000, 0x5, 0x2100, 0xcb, 0x2, 0xa60, 0x0, 0x9, 0x1, 0x6, 0x4, 0x7fffffff, 0xd, 0x401, 0x7cf, 0x401, 0xfffffff9, 0xfffffffc, 0x3, 0xff, 0x0, 0x800, 0x1, 0xffff, 0xffff, 0x7fff, 0x6186, 0x3ff, 0x3, 0xb6, 0x6f, 0x1, 0x661c3e96, 0x5, 0x8, 0x9, 0x2, 0x9, 0x6, 0x55b6, 0x401, 0x4, 0x2, 0x7, 0x9, 0x5, 0x800, 0x7, 0x3, 0xb, 0xb82c, 0x5, 0x2, 0x5, 0x8, 0x0, 0x3, 0x4, 0x0, 0x81]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xd9, 0xfffff2c5, 0x4, 0x6944, 0xb29, 0x80000000, 0x9, 0x0, 0x9, 0x1, 0x9, 0x0, 0x76a660d2, 0x5, 0x4, 0x8, 0x6, 0x3, 0x101, 0x4, 0x3, 0x67, 0xf2fe, 0x8000, 0x7, 0xfffffffe, 0x2, 0x9, 0x66a2, 0x7fff, 0x0, 0x978, 0x1, 0x4, 0x101, 0xb9b, 0x1, 0x7, 0x6, 0x3000000, 0x1, 0x80, 0x3ff, 0x9, 0x2, 0x8, 0xbc34, 0x9592, 0x1, 0x7, 0x5, 0x9, 0x8, 0xc0000000, 0x4d, 0x1, 0x6, 0xe, 0x9, 0x8001, 0x0, 0x8, 0xffff, 0xfffff000, 0x0, 0x34d00000, 0xce50, 0xb22f, 0x8, 0xf1a50000, 0xb, 0x7, 0x6, 0x0, 0x7c1, 0x2, 0x2, 0x2, 0x27, 0xb1, 0xffffffff, 0x3, 0x5, 0x0, 0xfff, 0x6669850c, 0x5, 0x19, 0xcd59, 0x5, 0x8, 0x1a5, 0xfff, 0x80, 0x1, 0x495, 0x58, 0x2, 0x435, 0x7, 0x3, 0x3, 0x2, 0xa, 0x2, 0x101, 0x0, 0x101, 0x3b45, 0x401, 0x80000000, 0xe, 0x40, 0x1, 0x5, 0xf, 0x1000, 0x4a5, 0x1, 0x401, 0x7fff, 0x7, 0x5, 0x1, 0x8, 0xe8, 0x0, 0x606b, 0xffffffff, 0x3, 0x51, 0x10000, 0x8000, 0x4, 0xffffff64, 0x5, 0x2, 0x10001, 0x2, 0x1, 0x5, 0x2, 0x9, 0x4a21, 0x401, 0x8000, 0x2, 0x4c6, 0x1, 0x101, 0xfffffff8, 0xb, 0x1d3, 0x0, 0x8, 0x1, 0x3, 0x1, 0x93, 0x401, 0x1, 0xffffffff, 0x9, 0x5, 0xfffff1d8, 0x6, 0x6, 0x3ff, 0xf, 0x47af, 0x4, 0x3, 0xb, 0xd0, 0x2, 0x318, 0x7f, 0x10000, 0x3, 0xac, 0x9, 0x5, 0x1, 0x2, 0x1000, 0x0, 0x40, 0x8, 0x6, 0x9, 0x646b, 0xa, 0x8, 0x9, 0x4f, 0x8, 0x7, 0x10001, 0x3, 0x8, 0xfffffff9, 0x79d, 0x800, 0x3, 0xfff, 0x2, 0x9, 0x800, 0x4, 0x6, 0x538, 0xf3, 0xd9, 0x3, 0x1, 0xc7, 0x10001, 0x5, 0xc, 0x7fff, 0xffffffff, 0x4, 0x5, 0x1, 0x8, 0xffff42a3, 0xd358, 0x8, 0x2, 0xaca0, 0x9, 0x2, 0x0, 0x1, 0x0, 0x7, 0x526, 0x0, 0x8, 0x8, 0xc, 0x6, 0x4, 0xdd7, 0x7, 0x1, 0x6, 0xa, 0x7fffffff, 0x944, 0x2bb, 0xfffffffe, 0x1, 0xa8f, 0x5]}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_POLICE={0x24, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}]}, @TCA_ROUTE4_POLICE={0x144, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x20000000, 0x1, 0x0, 0x9, {0x0, 0x1, 0x5, 0xfff, 0x5, 0xc5}, {0x7, 0x0, 0x9, 0x1ff, 0x8, 0x8}, 0x9, 0x2f5195af, 0xe}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x4df, 0x9, 0xe, {0xce, 0x1, 0xffff, 0x5, 0xfff9, 0x800}, {0x39, 0x2, 0x0, 0x7fff, 0x2, 0x2}, 0x7, 0xfffffffb, 0x7f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x5, 0x6, 0x0, {0x1, 0x2, 0x5135, 0xe, 0x7, 0x2}, {0x9, 0x0, 0x380, 0x4, 0x9, 0x100}, 0xc184, 0x3ff, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x59, 0x4, 0x9, 0x2, 0x1, {0x4, 0x2, 0x3, 0x9, 0x0, 0x91f}, {0xc, 0x0, 0x4, 0x7, 0x8, 0x5dd}, 0x6, 0x100000, 0x8b}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x1, 0x20000000, 0x1, {0x8, 0x0, 0x401, 0x7, 0x8000, 0x7fff}, {0x5, 0x2, 0x64f5, 0x3, 0x5, 0x2}, 0xa, 0xe83, 0x1}}]}]}}]}, 0xe10}, 0x1, 0x0, 0x0, 0x8890}, 0x24004084) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000007864010100ac1414aa030d9078000301014574ffff00640007fb32fffcac1414aaac141435"], 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r10, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r12, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}}, 0x28}}, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r14, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) 363.107166ms ago: executing program 5 (id=6714): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000340), &(0x7f0000000140)=r1}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x330, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9fe}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1295}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c081}, 0x4000004) 315.892966ms ago: executing program 3 (id=6715): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x21, 0x1ff, 0xffff38ce, 0x5, 0x6, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb6, 0x3, 0xa, [0x9, 0x1]}}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="39042cbd7000fedbdf255d00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040) syz_emit_ethernet(0xd2, &(0x7f0000000080)={@local, @multicast, @void, {@generic={0xec13, "96a9495e95e61d55000f49fe76b34810938d9aad5f8461e4351bf082ae3c711b6da9c7813eb3fc18a5d2bd83e4c9475bee527cc0f337d872a12a1f3b0ba1c96249760ba1e93b12474baf038e20096c8d8d37751d0678b373b2c0750eb3d3da135dc9716522f04a3850363303e02057bb0d202916d3c11bb5e74762573c926d3e109c6f7affbd4edf257fa4f2b99b9a7eeb7f605ff243790749b5ccea6123f50093be11a345794f926c2dac7bd43840deb62769586f855dba58b2eb83fe9411c05ba97edb"}}}, &(0x7f0000000180)={0x1, 0x3, [0x652, 0xf20, 0x147, 0x756]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7], 0x7c}}, 0x20000000) 303.491483ms ago: executing program 4 (id=6716): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x9, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000}, 0x18) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0xfffffffffffffff2, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_PACKETS_PER_SLAVE={0x0, 0x14, 0x7}]}}}]}, 0x44}}, 0x0) 224.127356ms ago: executing program 0 (id=6717): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x9}], 0x2, 0x20, 0x0) 140.248012ms ago: executing program 5 (id=6718): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "dd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4ac3dcc9c3273b39a1"}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000008510000003000000180000000000000000000000fc0100009500000000000000bf00ffff010000cf7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) 98.963401ms ago: executing program 0 (id=6719): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) (async) 98.790584ms ago: executing program 5 (id=6720): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000040000010000000000000001410000000600170000030000000000657468387665744ed8c186af298c309286c4c13f68305f746fff3ac0533631c5b4"], 0x34}}, 0x0) 91.299897ms ago: executing program 4 (id=6721): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x20000010) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 0 (id=6722): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140e, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffeae}, 0x94) kernel console output (not intermixed with test programs): lid length. [ 642.833096][T23047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4825'. [ 642.844432][T23047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4825'. [ 643.024705][T23056] netlink: 'syz.5.4828': attribute type 1 has an invalid length. [ 643.039343][T23056] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4828'. [ 643.370264][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.531486][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.546395][T23072] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 644.013445][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.539260][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.829744][T23120] __nla_validate_parse: 4 callbacks suppressed [ 644.829763][T23120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4839'. [ 644.850351][T22279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.979569][T23131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4841'. [ 645.565628][T23168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4849'. [ 645.611331][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.660770][T23171] syzkaller0: entered promiscuous mode [ 645.671116][T23172] netlink: 'syz.4.4851': attribute type 21 has an invalid length. [ 645.679699][T23171] syzkaller0: entered allmulticast mode [ 645.751536][T23178] syzkaller1: entered promiscuous mode [ 645.775653][T23178] syzkaller1: entered allmulticast mode [ 645.846243][T23180] IPVS: persistence engine module ip_vs_pe_ not found [ 646.087504][T23198] netlink: 344 bytes leftover after parsing attributes in process `syz.0.4858'. [ 646.414703][T23221] netlink: 'syz.2.4864': attribute type 1 has an invalid length. [ 646.441360][T23226] tc_dump_action: action bad kind [ 646.582387][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4868'. [ 646.652821][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.732992][T22280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.780036][T23252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4876'. [ 646.890737][ T4942] Bluetooth: hci2: command 0x0406 tx timeout [ 646.967067][T23260] IPv6: sit1: Disabled Multicast RS [ 647.059012][T23266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4880'. [ 647.130233][T23268] netlink: 'syz.5.4879': attribute type 1 has an invalid length. [ 647.145667][T23268] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4879'. [ 647.171302][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4879'. [ 647.191822][T23275] netlink: 'syz.2.4882': attribute type 1 has an invalid length. [ 647.198811][T23268] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4879'. [ 647.232667][T23268] netlink: 'syz.5.4879': attribute type 5 has an invalid length. [ 647.323030][T23272] siw: device registration error -23 [ 647.545120][T23275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.581649][T23285] bond3: (slave geneve2): making interface the new active one [ 647.610173][T23285] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 647.693902][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.987776][T23303] syzkaller0: entered promiscuous mode [ 648.009980][T23303] syzkaller0: entered allmulticast mode [ 648.754724][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.783523][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.791703][ T8521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.593797][T22279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.820420][ T8507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.748665][T23355] __nla_validate_parse: 2 callbacks suppressed [ 651.748684][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4896'. [ 651.765359][T23359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4896'. [ 651.970549][T23374] syzkaller1: entered promiscuous mode [ 651.991397][T23374] syzkaller1: entered allmulticast mode [ 652.023117][T23370] can: request_module (can-proto-0) failed. [ 652.032914][T23376] netlink: 'syz.4.4898': attribute type 3 has an invalid length. [ 652.067377][T23384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4902'. [ 652.146980][T23376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 652.254184][T23395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4904'. [ 652.299194][T23395] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4904'. [ 652.333081][T23395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4904'. [ 652.386768][T23401] netlink: 'syz.3.4904': attribute type 12 has an invalid length. [ 652.543813][T23409] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4908'. [ 652.577604][T23397] netlink: 'syz.3.4904': attribute type 12 has an invalid length. [ 652.604311][T23409] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.611842][T23409] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.672060][T23413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4909'. [ 652.696855][T23413] netlink: 'syz.0.4909': attribute type 7 has an invalid length. [ 652.713964][T23413] netlink: 'syz.0.4909': attribute type 8 has an invalid length. [ 652.732619][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 652.748700][T23417] syzkaller0: entered promiscuous mode [ 652.761585][T23417] syzkaller0: entered allmulticast mode [ 653.193785][T23440] sctp: [Deprecated]: syz.4.4920 (pid 23440) Use of int in max_burst socket option deprecated. [ 653.193785][T23440] Use struct sctp_assoc_value instead [ 653.312000][T23453] syzkaller0: entered promiscuous mode [ 653.317619][T23453] syzkaller0: entered allmulticast mode [ 653.327620][T23450] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4922'. [ 654.402290][T23507] syzkaller0: entered promiscuous mode [ 654.408074][T23507] syzkaller0: entered allmulticast mode [ 655.053887][T23515] netlink: 'syz.2.4938': attribute type 1 has an invalid length. [ 655.063385][T23515] 8021q: VLANs not supported on gre0 [ 655.828090][T23514] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 655.972249][T23535] netlink: 'syz.2.4943': attribute type 1 has an invalid length. [ 655.994732][T23535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.022165][T23535] bond4: (slave veth3): Enslaving as an active interface with a down link [ 656.047651][T23535] bond4: (slave veth5): Enslaving as an active interface with a down link [ 656.058304][T23535] netlink: 'syz.2.4943': attribute type 1 has an invalid length. [ 656.698856][T23470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.896407][T23555] __nla_validate_parse: 5 callbacks suppressed [ 656.896423][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4947'. [ 656.945840][T23555] team0: entered promiscuous mode [ 656.963190][T23555] team_slave_0: entered promiscuous mode [ 656.976116][T23555] team_slave_1: entered promiscuous mode [ 657.005554][T23555] team0: left promiscuous mode [ 657.021174][T23555] team_slave_0: left promiscuous mode [ 657.034011][T23555] team_slave_1: left promiscuous mode [ 657.051956][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 657.279051][T23571] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4955'. [ 657.308460][T23571] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.315932][T23571] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.403932][T23572] syzkaller0: entered promiscuous mode [ 657.427504][T23572] syzkaller0: entered allmulticast mode [ 657.635240][T23593] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 657.794463][T23604] bond5: option min_links: invalid value (18446744073709551595) [ 657.804406][T23604] bond5: option min_links: allowed values 0 - 2147483647 [ 657.822741][T23604] bond5 (unregistering): Released all slaves [ 657.964583][T23618] netlink: 'syz.4.4966': attribute type 9 has an invalid length. [ 657.985633][T23618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4966'. [ 658.150753][T23631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4969'. [ 658.162389][T23631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4969'. [ 658.172847][T23631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4969'. [ 658.272806][T23635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4971'. [ 658.292425][T23637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4972'. [ 658.376472][T23641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4972'. [ 658.414422][T23641] nbd: device at index 64 is going down [ 658.655793][T23654] netlink: 'syz.2.4976': attribute type 11 has an invalid length. [ 658.686116][T23654] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4976'. [ 658.954366][T23678] xt_limit: Overflow, try lower: 271964/0 [ 659.200216][T23690] netlink: 'syz.3.4985': attribute type 10 has an invalid length. [ 659.248599][T23690] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 659.272127][T23691] netlink: 'syz.0.4987': attribute type 1 has an invalid length. [ 659.441045][T23691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 659.901606][T23719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.404711][T23751] netlink: 'syz.2.5004': attribute type 16 has an invalid length. [ 660.425658][T23751] veth0_macvtap: entered allmulticast mode [ 660.445651][T23751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.446504][T23754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.253970][T23804] netlink: 'syz.4.5019': attribute type 2 has an invalid length. [ 661.679934][T23826] netlink: 'syz.5.5027': attribute type 1 has an invalid length. [ 661.741731][T23826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.787842][T23829] bond4: (slave gretap1): making interface the new active one [ 661.804409][T23829] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 661.883920][T23837] netlink: 'syz.5.5031': attribute type 8 has an invalid length. [ 662.080742][T23850] __nla_validate_parse: 7 callbacks suppressed [ 662.080759][T23850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5035'. [ 662.287272][T23870] netlink: 'syz.2.5037': attribute type 4 has an invalid length. [ 662.325824][T23872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5040'. [ 662.456390][T23878] netlink: 'syz.2.5042': attribute type 19 has an invalid length. [ 662.512805][T23878] netlink: 'syz.2.5042': attribute type 19 has an invalid length. [ 662.536852][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.555298][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.568676][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.626314][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.736598][T23890] syzkaller0: entered promiscuous mode [ 662.749766][T23890] syzkaller0: entered allmulticast mode [ 662.807143][T23890] bridge_slave_1: left allmulticast mode [ 662.825309][T23890] bridge_slave_1: left promiscuous mode [ 662.847955][T23890] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.888118][T23890] bridge_slave_0: left allmulticast mode [ 662.897719][T23890] bridge_slave_0: left promiscuous mode [ 662.917249][T23890] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.071600][T23910] netlink: 'syz.4.5050': attribute type 29 has an invalid length. [ 663.100987][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5050'. [ 663.126765][T23910] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.355134][T23914] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5052'. [ 663.567089][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5053'. [ 663.723142][T23938] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5055'. [ 664.062285][T23949] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 664.154684][T23955] netlink: 'syz.5.5063': attribute type 1 has an invalid length. [ 664.187563][T23955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 664.205291][T23956] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 664.625878][T23984] netlink: 'syz.2.5072': attribute type 15 has an invalid length. [ 664.636038][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'. [ 664.646543][T23984] netlink: 'syz.2.5072': attribute type 15 has an invalid length. [ 664.656258][T23986] xt_hashlimit: overflow, try lower: 3/0 [ 664.680963][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'. [ 664.693887][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5072'. [ 664.740171][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5076'. [ 664.951136][T24008] openvswitch: netlink: IP tunnel dst address not specified [ 665.324684][T24021] netlink: 'syz.2.5083': attribute type 10 has an invalid length. [ 665.352493][T24021] dummy0: left promiscuous mode [ 665.550392][T24037] syzkaller1: entered promiscuous mode [ 665.570048][T24037] syzkaller1: entered allmulticast mode [ 665.593296][T24043] netlink: 'syz.0.5089': attribute type 23 has an invalid length. [ 665.692852][T24049] netlink: 'syz.0.5089': attribute type 23 has an invalid length. [ 666.094975][T24072] netlink: 'syz.3.5098': attribute type 10 has an invalid length. [ 666.131295][T24072] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.155506][T24072] bond0: (slave team0): Enslaving as an active interface with an up link [ 666.205775][T24069] syzkaller0: entered promiscuous mode [ 666.221653][T24069] syzkaller0: entered allmulticast mode [ 666.574393][T24106] netlink: 'syz.0.5107': attribute type 11 has an invalid length. [ 666.917146][T24116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.382060][T24133] __nla_validate_parse: 11 callbacks suppressed [ 667.382080][T24133] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5113'. [ 667.548110][T24141] netlink: 'syz.5.5115': attribute type 62 has an invalid length. [ 667.581105][T24142] netlink: 'syz.4.5116': attribute type 1 has an invalid length. [ 667.581545][T24133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5113'. [ 667.590235][T24142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5116'. [ 667.657922][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5117'. [ 667.987577][T24167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5126'. [ 668.037110][T24167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5126'. [ 668.053738][T24172] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 668.099382][T24167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5126'. [ 668.146420][T24167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5126'. [ 668.197335][T24167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5126'. [ 668.228516][T24167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5126'. [ 668.257153][T24182] IPv6: addrconf: prefix option has invalid lifetime [ 668.263994][T24182] IPv6: addrconf: prefix option has invalid lifetime [ 668.329922][T24189] validate_nla: 1 callbacks suppressed [ 668.329939][T24189] netlink: 'syz.0.5132': attribute type 1 has an invalid length. [ 668.352534][T24183] netlink: 'syz.2.5129': attribute type 1 has an invalid length. [ 668.372441][T24183] xt_socket: unknown flags 0x8 [ 668.408594][T24189] 8021q: adding VLAN 0 to HW filter on device bond7 [ 668.436960][T24193] bond7: (slave geneve2): making interface the new active one [ 668.451145][T24193] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 668.461866][T22277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.472538][T22277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.502971][T22277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.523616][T19900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.170930][T24232] netlink: 'syz.0.5144': attribute type 11 has an invalid length. [ 669.179788][T24232] netlink: 'syz.0.5144': attribute type 1 has an invalid length. [ 669.330103][T24240] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 672.886840][T24259] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 673.064494][T24270] SET target dimension over the limit! [ 673.137579][T24282] __nla_validate_parse: 34 callbacks suppressed [ 673.137597][T24282] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5159'. [ 673.167006][T24282] bridge0: port 3(batadv1) entered blocking state [ 673.173642][T24282] bridge0: port 3(batadv1) entered listening state [ 673.180530][T24282] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.187831][T24282] bridge0: port 2(bridge_slave_1) entered listening state [ 673.195278][T24282] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.202499][T24282] bridge0: port 1(bridge_slave_0) entered listening state [ 673.259061][T24282] bridge0: left promiscuous mode [ 673.300207][T24287] bridge3: entered allmulticast mode [ 673.416159][T24298] openvswitch: netlink: Duplicate or invalid key (type 0). [ 673.434434][T24298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.542507][T24309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5165'. [ 673.883148][T24325] syzkaller0: entered promiscuous mode [ 673.891441][T24325] syzkaller0: entered allmulticast mode [ 673.958950][T24331] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5175'. [ 674.427033][T24360] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 674.622592][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5190'. [ 674.677361][T24373] vcan1: entered promiscuous mode [ 674.687525][T24373] vcan1: entered allmulticast mode [ 674.994514][T24394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5197'. [ 675.080408][T24394] syzkaller0: entered promiscuous mode [ 675.083755][T24403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5197'. [ 675.099967][T24394] syzkaller0: entered allmulticast mode [ 682.236891][T24440] netlink: 'syz.5.5209': attribute type 39 has an invalid length. [ 682.557363][T24462] netlink: 'syz.0.5216': attribute type 21 has an invalid length. [ 682.578786][T24462] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5216'. [ 682.678026][T24462] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5216'. [ 683.002044][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5218'. [ 683.195545][T24484] netlink: 'syz.2.5219': attribute type 11 has an invalid length. [ 683.233985][T24484] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.5219'. [ 683.741599][T24520] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5229'. [ 683.959727][T24527] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5231'. [ 683.990490][T24529] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5232'. [ 684.316190][T24547] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5238'. [ 684.438436][T24555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5240'. [ 684.480999][T24559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5242'. [ 684.776201][T24574] netlink: 'syz.4.5245': attribute type 2 has an invalid length. [ 684.804717][T24573] netlink: 'syz.4.5245': attribute type 2 has an invalid length. [ 685.266992][ T3315] nci: nci_rsp_packet: unknown rsp opcode 0xd00 [ 685.664461][T24616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.700733][T24630] netlink: 'syz.3.5260': attribute type 25 has an invalid length. [ 685.750999][T24629] netlink: 'syz.5.5259': attribute type 1 has an invalid length. [ 685.774562][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.784637][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 685.840458][T24629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 685.917817][T24637] openvswitch: netlink: Missing key (keys=40, expected=100) [ 685.977171][T24605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.553185][T24661] syzkaller0: entered promiscuous mode [ 686.558711][T24661] syzkaller0: entered allmulticast mode [ 686.617902][T24671] ip6tnl1: entered allmulticast mode [ 687.528690][T24714] netlink: 'syz.4.5285': attribute type 1 has an invalid length. [ 687.703048][T24714] __nla_validate_parse: 13 callbacks suppressed [ 687.703068][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5285'. [ 687.731635][T24729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5288'. [ 687.743714][T24729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5288'. [ 687.748898][T24718] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 687.766803][T24723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5285'. [ 687.888339][T24714] veth11: entered promiscuous mode [ 687.911255][T24723] 8021q: adding VLAN 0 to HW filter on device bond9 [ 687.911764][T19901] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 688.059911][T24737] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5293'. [ 688.100124][T22281] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 688.131123][T24737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5293'. [ 688.329275][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 688.336608][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 688.343949][ C1] bridge0: port 3(batadv1) entered learning state [ 688.681821][T24765] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 688.822653][T24765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 688.844482][T24761] bond10: (slave geneve4): making interface the new active one [ 688.855922][T24761] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 688.894651][T24777] bridge: RTM_NEWNEIGH with invalid ether address [ 689.248468][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5311'. [ 689.261710][T24796] netlink: 'syz.4.5311': attribute type 3 has an invalid length. [ 689.321001][T24802] netlink: 'syz.3.5313': attribute type 49 has an invalid length. [ 689.335998][T24794] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5310'. [ 689.440626][T24810] ipt_REJECT: ECHOREPLY no longer supported. [ 689.460431][T24802] ip6gretap0: entered promiscuous mode [ 689.486684][T24802] ip6gretap0: entered allmulticast mode [ 689.588991][T24817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5316'. [ 689.686764][T24820] xt_hashlimit: size too large, truncated to 1048576 [ 690.176575][T24840] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 694.121657][T24856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5328'. [ 694.293537][T24860] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5330'. [ 694.403780][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5333'. [ 694.582314][T24882] netlink: 'syz.3.5338': attribute type 1 has an invalid length. [ 694.618301][T24883] netlink: 'syz.3.5338': attribute type 4 has an invalid length. [ 694.637545][T24882] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5338'. [ 694.684158][T24883] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5338'. [ 694.704994][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5338'. [ 695.317904][T24883] .`: renamed from bond0 (while UP) [ 695.342441][T24912] bond0: entered promiscuous mode [ 695.347796][T24912] bond_slave_0: entered promiscuous mode [ 695.354811][T24912] bond_slave_1: entered promiscuous mode [ 695.362376][T24912] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 695.723890][T24930] netlink: 'syz.0.5348': attribute type 12 has an invalid length. [ 695.935295][T24940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5352'. [ 696.206920][T24947] openvswitch: netlink: Missing key (keys=40, expected=100) [ 696.220192][T24949] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5355'. [ 696.740053][T24971] tipc: Started in network mode [ 696.764241][T24971] tipc: Node identity 6a337f1106b2, cluster identity 4711 [ 696.792196][T24971] tipc: Enabled bearer , priority 0 [ 696.842836][T24973] syzkaller0: entered promiscuous mode [ 696.862351][T24973] syzkaller0: entered allmulticast mode [ 696.890149][T24981] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 697.005109][T24985] bond11: entered promiscuous mode [ 697.031530][T24985] bond11: entered allmulticast mode [ 697.095834][T24973] tipc: Resetting bearer [ 697.133850][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5366'. [ 697.171085][T24970] tipc: Resetting bearer [ 697.285196][T24970] tipc: Disabling bearer [ 697.294242][T25003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5368'. [ 697.622251][T25019] veth0_to_bridge: entered promiscuous mode [ 697.662808][T25018] veth0_to_bridge: left promiscuous mode [ 697.716961][T25024] netlink: 'syz.0.5374': attribute type 10 has an invalid length. [ 697.821526][T25024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.852714][T25024] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 697.900974][T25024] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 698.149389][T25039] IPVS: ip_vs_add_dest(): server weight less than zero [ 698.156408][ T809] IPVS: starting estimator thread 0... [ 698.246792][T25047] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 698.293316][T25045] IPVS: using max 38 ests per chain, 91200 per kthread [ 698.605784][T25064] netlink: 'syz.5.5385': attribute type 27 has an invalid length. [ 698.639792][T25064] netlink: 'syz.5.5385': attribute type 4 has an invalid length. [ 698.720688][T25068] netlink: 'syz.3.5388': attribute type 2 has an invalid length. [ 698.880175][T25073] vlan1: entered allmulticast mode [ 698.907058][T25073] veth0_vlan: entered allmulticast mode [ 698.988109][T25080] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 699.005472][T25080] bond0 (unregistering): Released all slaves [ 699.308856][T25101] __nla_validate_parse: 2 callbacks suppressed [ 699.308874][T25101] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5395'. [ 699.399843][T25107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5398'. [ 699.410827][T25099] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5395'. [ 699.462914][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5400'. [ 699.494919][T25114] gtp2: entered promiscuous mode [ 699.517317][T25114] gtp2: entered allmulticast mode [ 699.571146][T25123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5402'. [ 699.641116][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5402'. [ 700.097997][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5410'. [ 700.258574][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 700.294559][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5413'. [ 700.503699][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5415'. [ 703.689305][ C1] bridge0: port 3(batadv1) entered forwarding state [ 703.695945][ C1] bridge0: topology change detected, propagating [ 703.702593][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.709852][ C1] bridge0: topology change detected, propagating [ 703.716349][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.723588][ C1] bridge0: topology change detected, propagating [ 706.250438][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 711.369713][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 747.211745][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.218374][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 762.208237][T25233] __nla_validate_parse: 2 callbacks suppressed [ 762.208256][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5422'. [ 762.234383][T25235] erspan0: entered promiscuous mode [ 762.260232][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5423'. [ 762.356931][T25243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5426'. [ 762.518553][T25255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.612336][T25257] bridge0: port 4(vlan0) entered blocking state [ 762.639661][T25257] bridge0: port 4(vlan0) entered disabled state [ 762.670795][T25257] vlan0: entered allmulticast mode [ 762.695636][T25257] vlan0: entered promiscuous mode [ 762.741525][T25258] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.770944][T25258] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.788886][T25258] team0: Port device team_slave_0 removed [ 762.807155][T25258] team0: Port device team_slave_1 removed [ 762.817681][T25258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.825940][T25258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.835229][T25258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.844523][T25258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.856394][T25258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 762.995168][T25268] nbd: couldn't find device at index 1694498816 [ 763.297194][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5438'. [ 763.327151][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5438'. [ 763.506002][T25299] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5440'. [ 763.546847][T25302] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 763.637762][T25307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5443'. [ 763.927342][T25315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5443'. [ 763.937847][T25315] nbd: device at index 64 is going down [ 763.944564][T25325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5445'. [ 764.249053][T25239] udevd[25239]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 764.390481][T25343] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 764.422789][T25342] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 764.916642][T25370] sctp: [Deprecated]: syz.5.5462 (pid 25370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 764.916642][T25370] Use struct sctp_sack_info instead [ 765.133460][T25384] openvswitch: netlink: Actions may not be safe on all matching packets [ 765.304380][T25394] bridge0: port 3(vlan0) entered blocking state [ 765.335648][T25394] bridge0: port 3(vlan0) entered disabled state [ 765.358294][T25394] vlan0: entered allmulticast mode [ 765.392982][T25394] vlan0: entered promiscuous mode [ 765.408075][T25397] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.438279][T25397] bridge_slave_1: left allmulticast mode [ 765.455410][T25397] bridge_slave_1: left promiscuous mode [ 765.470471][T25397] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.488863][T25397] vlan0: left promiscuous mode [ 765.501226][T25397] bridge_slave_0: left promiscuous mode [ 765.527354][T25397] bond0: (slave bond_slave_0): Releasing backup interface [ 765.536201][T25397] bond_slave_0: left promiscuous mode [ 765.553776][T25397] bond0: (slave bond_slave_1): Releasing backup interface [ 765.562626][T25397] bond_slave_1: left promiscuous mode [ 765.568863][T25397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.640843][T25407] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.659995][T25407] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.828371][T25407] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.879719][T25407] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.096695][T25407] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.140061][T25407] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.233084][T25438] netlink: 'syz.4.5480': attribute type 1 has an invalid length. [ 766.276106][T25407] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.317450][T25407] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.431165][T25453] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20000 [ 766.615041][T25458] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5486'. [ 766.667662][T25457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.362213][T25512] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 767.421438][T25515] netlink: 'syz.0.5495': attribute type 1 has an invalid length. [ 767.744872][T25502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.034487][T25502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 768.058908][T25502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.131750][T25502] veth1_macvtap: left promiscuous mode [ 768.143901][T25502] veth0_macvtap: left promiscuous mode [ 768.156970][T25502] veth0_macvtap: entered promiscuous mode [ 768.166006][T25502] veth1_macvtap: entered promiscuous mode [ 768.208337][T25502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.221392][T25502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.231976][T25502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.243303][T25502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.254498][T25502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 768.264110][T25502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 768.273524][T25502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 768.282885][T25502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 768.299036][T25502] bridge_slave_0: entered promiscuous mode [ 768.311362][ T24] lo speed is unknown, defaulting to 1000 [ 768.346849][T10729] bridge0: port 3(vlan0) entered blocking state [ 768.350378][ T24] sz1: Port: 1 Link ACTIVE [ 768.353265][T10729] bridge0: port 3(vlan0) entered listening state [ 768.507496][T25536] 8021q: VLANs not supported on wg1 [ 768.618581][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 768.625388][T25557] netlink: 'syz.5.5503': attribute type 21 has an invalid length. [ 768.634556][T22277] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.647927][ T8522] lo speed is unknown, defaulting to 1000 [ 768.744857][T22277] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.775970][T22277] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.825382][T10731] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.888153][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5505'. [ 768.910841][T25563] netlink: 'syz.4.5505': attribute type 10 has an invalid length. [ 768.929956][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5505'. [ 769.004068][T25570] netlink: 'syz.5.5506': attribute type 75 has an invalid length. [ 769.088646][T25578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5508'. [ 769.244901][T25589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5510'. [ 769.422856][T25595] netlink: 'syz.2.5512': attribute type 2 has an invalid length. [ 769.447145][T25595] netlink: 'syz.2.5512': attribute type 2 has an invalid length. [ 769.476286][T25595] netlink: 67 bytes leftover after parsing attributes in process `syz.2.5512'. [ 769.641655][T25609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5515'. [ 769.692707][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'. [ 769.784606][T25619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5518'. [ 770.152769][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 770.160350][T25635] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5522'. [ 770.341365][T25604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 770.359032][T25604] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 770.540427][T25604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 770.550366][T25604] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 770.643263][T25659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5526'. [ 770.765487][T25660] netlink: 'syz.2.5527': attribute type 3 has an invalid length. [ 771.030235][T25674] bond5: entered promiscuous mode [ 771.035868][T25674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 771.406331][T25691] netlink: 'syz.5.5535': attribute type 1 has an invalid length. [ 771.426223][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 771.515161][T25689] syzkaller0: entered promiscuous mode [ 771.533293][T25689] syzkaller0: entered allmulticast mode [ 771.553910][T25700] macvlan0: entered promiscuous mode [ 771.930306][T25720] syzkaller0: entered promiscuous mode [ 771.967544][T25720] syzkaller0: entered allmulticast mode [ 772.568595][T25752] tipc: Cannot configure node identity twice [ 772.587087][T25755] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 772.619983][T25755] syzkaller0: entered promiscuous mode [ 772.637573][T25755] syzkaller0: entered allmulticast mode [ 772.696683][T25744] bond0: entered promiscuous mode [ 772.714801][T25744] bond0: entered allmulticast mode [ 772.775047][T25768] xt_hashlimit: size too large, truncated to 1048576 [ 773.213254][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 773.358734][T25789] netlink: 'syz.5.5559': attribute type 11 has an invalid length. [ 773.446539][T22281] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.478499][T22281] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.501799][T10729] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.539902][T25797] netlink: 'syz.0.5564': attribute type 32 has an invalid length. [ 773.558764][T10729] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.670331][T25797] bond8: option coupled_control: invalid value (192) [ 773.686375][T25797] bond8 (unregistering): Released all slaves [ 773.971822][T25824] __nla_validate_parse: 12 callbacks suppressed [ 773.971854][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5567'. [ 774.027103][T25827] netlink: 'syz.2.5566': attribute type 1 has an invalid length. [ 774.093696][T25810] syzkaller0: entered promiscuous mode [ 774.106163][T25810] syzkaller0: entered allmulticast mode [ 774.129619][T25824] IPVS: sed: FWM 3 0x00000003 - no destination available [ 774.183496][T25827] 8021q: adding VLAN 0 to HW filter on device bond6 [ 777.950798][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 778.457263][T25849] 8021q: VLANs not supported on ip6_vti0 [ 778.484284][T25856] IPv6: sit2: Disabled Multicast RS [ 778.762910][T25868] block nbd0: reconnected socket [ 778.762927][ T50] block nbd0: Receive control failed (result -107) [ 778.982778][T25889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5580'. [ 779.021329][T22279] bridge_slave_1: left allmulticast mode [ 779.048750][T22279] bridge_slave_1: left promiscuous mode [ 779.056622][T22279] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.067334][T22279] bridge_slave_0: left allmulticast mode [ 779.075908][T22279] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.182270][T22279] batman_adv: batadv0: Interface deactivated: gretap2 [ 779.314483][T25899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5583'. [ 779.485071][T22279] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 779.670911][T22279] batman_adv: batadv0: Removing interface: gretap2 [ 779.765945][T22279] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 779.896279][T22279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.906469][T22279] bond_slave_0: left allmulticast mode [ 779.916066][T22279] bond0 (unregistering): Released all slaves [ 779.926939][T22279] bond1 (unregistering): Released all slaves [ 779.946823][T22279] bond2 (unregistering): Released all slaves [ 779.960927][T22279] bond3 (unregistering): Released all slaves [ 779.982419][T22279] bond4 (unregistering): Released all slaves [ 779.998603][T22279] bond5 (unregistering): Released all slaves [ 780.034448][T22279] bond6 (unregistering): Released all slaves [ 780.055402][T22279] bond7 (unregistering): Released all slaves [ 780.071361][T22279] bond8 (unregistering): Released all slaves [ 780.087733][T22279] bond9 (unregistering): Released all slaves [ 780.111018][T22279] bond10 (unregistering): (slave ): Releasing active interface [ 780.127071][T22279] bond10 (unregistering): Released all slaves [ 780.158986][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5584'. [ 780.516560][T25922] xt_l2tp: unknown flags: 10 [ 780.594814][T22279] tipc: Left network mode [ 780.892486][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5593'. [ 780.916286][T25938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5593'. [ 781.253557][T25944] netlink: 'syz.0.5595': attribute type 1 has an invalid length. [ 781.428028][T25956] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5599'. [ 781.437117][T25958] netlink: 'syz.4.5600': attribute type 49 has an invalid length. [ 781.477992][T25962] netlink: 808 bytes leftover after parsing attributes in process `syz.5.5599'. [ 781.635351][T25969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5601'. [ 781.925099][T25985] tipc: Enabled bearer , priority 0 [ 781.940575][T25977] syzkaller0: entered promiscuous mode [ 781.944854][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5608'. [ 781.968705][T25977] syzkaller0: entered allmulticast mode [ 782.042373][T25977] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 782.064418][T25967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5603'. [ 782.185655][T25998] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 782.201870][T25972] netlink: 'syz.0.5603': attribute type 12 has an invalid length. [ 782.342024][T25977] tipc: Resetting bearer [ 782.372246][T25976] tipc: Resetting bearer [ 782.449004][T26007] netlink: 'syz.0.5613': attribute type 1 has an invalid length. [ 782.468349][T26007] netlink: 'syz.0.5613': attribute type 2 has an invalid length. [ 782.484740][T25976] tipc: Disabling bearer [ 783.113984][T26034] netlink: 'syz.4.5620': attribute type 8 has an invalid length. [ 783.554391][T26045] xt_bpf: check failed: parse error [ 783.689710][ C0] bridge0: port 3(vlan0) entered learning state [ 783.953272][T22279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.965790][T22279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.977923][T22279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.986526][T22279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.012459][T22279] veth1_macvtap: left promiscuous mode [ 784.035497][T22279] veth1_vlan: left promiscuous mode [ 784.043246][T22279] veth0_vlan: left promiscuous mode [ 784.549551][T22279] team0 (unregistering): Port device team_slave_1 removed [ 784.564181][T22279] team0 (unregistering): Port device team_slave_0 removed [ 784.778188][T19901] smbdirect: ib_dev[sy2] removed [ 784.850775][ T5748] lo speed is unknown, defaulting to 1000 [ 784.897716][ T5748] infiniband sy2: ib_query_port failed (-19) [ 784.920913][T26088] __nla_validate_parse: 2 callbacks suppressed [ 784.920932][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5632'. [ 784.996200][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5632'. [ 785.120828][T26093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5633'. [ 785.314881][T26094] nbd5: detected capacity change from 0 to 63 [ 785.331196][T26099] block nbd0: NBD_DISCONNECT [ 785.343624][T22279] IPVS: stop unused estimator thread 0... [ 785.420148][T26099] block nbd0: Send disconnect failed -32 [ 785.476643][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5634'. [ 785.530032][T26099] block nbd0: shutting down sockets [ 785.930882][T26139] gretap0: entered promiscuous mode [ 785.969785][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5644'. [ 785.988825][T26139] gretap0: left promiscuous mode [ 786.136258][T26151] netlink: 'syz.5.5647': attribute type 20 has an invalid length. [ 786.194190][ T50] block nbd5: Receive control failed (result -104) [ 786.196395][T26151] IPv6: NLM_F_CREATE should be specified when creating new route [ 786.540714][T26167] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 786.652156][T26177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5656'. [ 786.658212][T26173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 786.709795][T26182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5654'. [ 787.170022][T26220] netlink: 'syz.2.5662': attribute type 1 has an invalid length. [ 787.224770][T26227] netlink: 'syz.4.5664': attribute type 2 has an invalid length. [ 787.284263][T26220] bond7: entered promiscuous mode [ 787.291572][T26220] 8021q: adding VLAN 0 to HW filter on device bond7 [ 787.300044][T26223] syzkaller0: entered promiscuous mode [ 787.305857][T26223] syzkaller0: entered allmulticast mode [ 787.385153][T26223] tipc: Enabled bearer , priority 0 [ 787.443778][T26237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.471141][T26222] tipc: Resetting bearer [ 787.581388][T26222] tipc: Disabling bearer [ 787.945180][T26276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5675'. [ 787.996323][T26279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5676'. [ 788.181662][T26279] syzkaller0: entered promiscuous mode [ 788.217044][T26279] syzkaller0: entered allmulticast mode [ 789.281601][T26284] lo speed is unknown, defaulting to 1000 [ 789.306540][T26284] lo speed is unknown, defaulting to 1000 [ 789.762737][T26354] netlink: 'syz.2.5690': attribute type 12 has an invalid length. [ 790.016625][T26364] netlink: 'syz.0.5693': attribute type 29 has an invalid length. [ 790.041730][T26364] __nla_validate_parse: 2 callbacks suppressed [ 790.041748][T26364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5693'. [ 790.257190][T26373] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5696'. [ 790.522362][T26391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5700'. [ 790.846758][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5703'. [ 790.908972][T26408] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5704'. [ 790.920605][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5703'. [ 791.266608][T26421] tipc: Enabled bearer , priority 0 [ 791.319626][T26421] syzkaller0: entered promiscuous mode [ 791.333749][T26421] syzkaller0: entered allmulticast mode [ 791.342226][T26434] xt_hashlimit: size too large, truncated to 1048576 [ 791.506729][T26435] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 791.690485][T26439] tipc: Resetting bearer [ 791.772893][T26420] tipc: Resetting bearer [ 791.877558][T26420] tipc: Disabling bearer [ 792.116733][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5715'. [ 792.172966][T26463] nbd: couldn't find a device at index 0 [ 792.248219][T26464] ip6gre0: Master is either lo or non-ether device [ 792.274584][T26466] tipc: Enabled bearer , priority 0 [ 792.299726][T26465] tipc: Enabling of bearer rejected, already enabled [ 792.348060][T26466] syzkaller0: entered promiscuous mode [ 792.380735][T26466] syzkaller0: entered allmulticast mode [ 792.477959][T26465] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 792.501445][T26465] tipc: Resetting bearer [ 792.529888][T26462] tipc: Resetting bearer [ 792.618261][T26462] tipc: Disabling bearer [ 792.920727][T26501] netlink: 'syz.4.5727': attribute type 11 has an invalid length. [ 792.945464][T26501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5727'. [ 793.435485][T26528] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:29 [ 793.574223][T26538] netlink: 'syz.5.5734': attribute type 2 has an invalid length. [ 793.693676][T26542] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 793.780398][T26549] veth0: entered promiscuous mode [ 793.814898][T26548] veth0: left promiscuous mode [ 793.942236][T26557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5739'. [ 793.964489][T26557] tipc: Invalid UDP bearer configuration [ 793.964546][T26557] tipc: Enabling of bearer rejected, failed to enable media [ 794.021691][T26562] netlink: 'syz.2.5739': attribute type 1 has an invalid length. [ 794.064367][T26557] netlink: 'syz.2.5739': attribute type 1 has an invalid length. [ 794.108443][T26563] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 794.506977][T26592] sctp: [Deprecated]: syz.2.5748 (pid 26592) Use of int in max_burst socket option. [ 794.506977][T26592] Use struct sctp_assoc_value instead [ 794.618832][T26601] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5752'. [ 794.888000][T26606] netlink: 'syz.5.5750': attribute type 1 has an invalid length. [ 795.033509][T26628] netlink: 'syz.4.5757': attribute type 1 has an invalid length. [ 795.171331][T26637] __nla_validate_parse: 1 callbacks suppressed [ 795.171352][T26637] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5759'. [ 795.178252][T26628] 8021q: adding VLAN 0 to HW filter on device bond13 [ 795.188995][T26637] x_tables: unsorted underflow at hook 4 [ 795.324160][T26649] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 795.333837][T26649] netlink: 'syz.3.5762': attribute type 3 has an invalid length. [ 795.343206][T26649] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5762'. [ 795.353466][T26649] NCSI netlink: No device for ifindex 813332851 [ 795.415581][T26641] bond8: (slave ip6gretap2): making interface the new active one [ 795.467486][T26641] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 795.480641][T26658] openvswitch: netlink: Duplicate or invalid key (type 0). [ 795.488638][T26658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.750301][T26662] syzkaller0: entered promiscuous mode [ 795.778739][T26662] syzkaller0: entered allmulticast mode [ 795.893204][T26680] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 796.523800][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5778'. [ 796.536645][T26719] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 796.536645][T26719] Please contact the netfilter-devel mailing list or update your nftables rules. [ 796.610750][T26719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5778'. [ 796.873598][T26735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5785'. [ 796.896828][T26735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5785'. [ 797.148303][T26753] netlink: 'syz.2.5788': attribute type 1 has an invalid length. [ 797.177928][T26753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5788'. [ 797.399476][T26770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5793'. [ 797.699558][T26782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5795'. [ 797.955055][T26793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5799'. [ 798.802712][T26832] ieee802154 phy0 wpan0: encryption failed: -22 [ 798.833879][T26832] veth0: entered promiscuous mode [ 798.874398][T26831] veth0: left promiscuous mode [ 799.059401][ C0] bridge0: port 3(vlan0) entered forwarding state [ 799.065916][ C0] bridge0: topology change detected, propagating [ 799.168104][T26850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.126749][T26916] netlink: 'syz.2.5835': attribute type 10 has an invalid length. [ 800.184509][T26916] team0: left promiscuous mode [ 800.374947][T26926] __nla_validate_parse: 8 callbacks suppressed [ 800.374965][T26926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5838'. [ 800.396099][T26926] syzkaller1: entered promiscuous mode [ 800.408457][T26926] syzkaller1: entered allmulticast mode [ 800.426589][T26926] syzkaller1: left promiscuous mode [ 800.434298][T26926] syzkaller1: left allmulticast mode [ 800.533175][T26938] ip6_vti0: Master is either lo or non-ether device [ 800.840999][T26947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5845'. [ 800.885573][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'. [ 800.894168][T26948] can: request_module (can-proto-5) failed. [ 801.195875][T26974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.206851][T26974] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 801.216654][T26974] netlink: 'syz.3.5852': attribute type 2 has an invalid length. [ 801.226353][T26974] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.5852'. [ 801.241427][T26974] netlink: 'syz.3.5852': attribute type 1 has an invalid length. [ 801.465179][T26984] syzkaller0: entered promiscuous mode [ 801.471070][T26984] syzkaller0: entered allmulticast mode [ 801.485259][T26984] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5856'. [ 801.902740][T27006] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 801.911287][T27006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.123321][T27015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5864'. [ 802.123326][T27014] x_tables: duplicate entry at hook 3 [ 802.152772][T27017] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5865'. [ 802.165571][T27017] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5865'. [ 802.444138][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5870'. [ 802.583464][T27036] bond8: Removing last arp target with arp_interval on [ 802.601702][T27044] netlink: 'syz.5.5873': attribute type 1 has an invalid length. [ 802.694710][T27044] netlink: 'syz.5.5873': attribute type 28 has an invalid length. [ 802.696261][T27052] netlink: 'syz.5.5873': attribute type 28 has an invalid length. [ 802.740965][T27052] IPv6: NLM_F_CREATE should be specified when creating new route [ 802.774598][T27044] IPv6: NLM_F_CREATE should be specified when creating new route [ 803.113940][T27067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5881'. [ 803.237421][T26147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 803.257464][T26147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 803.272021][T26147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 803.284272][T26147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 803.299966][T26147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 803.405855][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 803.421318][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 803.430389][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 803.443647][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 803.451587][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 803.944422][T27098] netlink: 'syz.3.5889': attribute type 1 has an invalid length. [ 803.960828][T27100] netlink: 'syz.3.5889': attribute type 1 has an invalid length. [ 804.674323][T27071] lo speed is unknown, defaulting to 1000 [ 804.692981][T27071] lo speed is unknown, defaulting to 1000 [ 805.213278][T27153] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 805.529841][T26147] Bluetooth: hci6: command tx timeout [ 805.974574][T27071] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.981979][T27071] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.989950][T27071] bridge_slave_0: entered allmulticast mode [ 805.998086][T27071] bridge_slave_0: entered promiscuous mode [ 806.001645][T27197] __nla_validate_parse: 5 callbacks suppressed [ 806.001664][T27197] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5915'. [ 806.009168][T27071] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.027543][T27071] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.035379][T27071] bridge_slave_1: entered allmulticast mode [ 806.043701][T27071] bridge_slave_1: entered promiscuous mode [ 806.131444][T27071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.152797][T27071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.162369][T27198] syzkaller0: entered promiscuous mode [ 806.168645][T27198] syzkaller0: entered allmulticast mode [ 806.291603][T27071] team0: Port device team_slave_0 added [ 806.317183][T27071] team0: Port device team_slave_1 added [ 806.393401][T27071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.393539][T27210] netlink: 'syz.3.5918': attribute type 1 has an invalid length. [ 806.402962][T27071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.408545][T27210] netlink: 'syz.3.5918': attribute type 11 has an invalid length. [ 806.439269][T27071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.461269][T27071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.468304][T27071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.495277][T27071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.496021][T27210] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5918'. [ 806.713982][T27071] hsr_slave_0: entered promiscuous mode [ 806.759872][T27071] hsr_slave_1: entered promiscuous mode [ 806.784048][T27071] debugfs: 'hsr0' already exists in 'hsr' [ 806.792506][T27071] Cannot create hsr debugfs directory [ 806.940285][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5922'. [ 807.044171][T27236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5924'. [ 807.507025][T27071] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.542493][T27071] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.611380][T26147] Bluetooth: hci6: command tx timeout [ 807.794784][T27071] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.822782][T27071] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.066925][T27071] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.107337][T27071] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.182847][T27287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5939'. [ 808.234494][T27294] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 808.246909][T27287] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 808.260736][T27287] bond7 (unregistering): Released all slaves [ 808.304361][T27071] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.338983][T27071] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.370001][T27299] netlink: 'syz.2.5941': attribute type 1 has an invalid length. [ 808.401878][T27301] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5943'. [ 808.656088][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.666002][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 808.695454][T27306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5945'. [ 808.705296][T27306] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5945'. [ 808.715781][T27306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5945'. [ 808.725691][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5945'. [ 808.824495][T27071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 808.863281][T27071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.888549][T27071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 808.922297][T27071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 808.933348][T27071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 808.946337][T27315] netlink: 'syz.3.5948': attribute type 7 has an invalid length. [ 808.947398][T27071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 808.984189][T27317] RDS: rds_bind could not find a transport for ::ffff:0.0.0.5, load rds_tcp or rds_rdma? [ 808.984496][T27071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 809.004759][T27071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.694258][T26147] Bluetooth: hci6: command tx timeout [ 811.780405][T26147] Bluetooth: hci6: command tx timeout [ 813.234871][T27335] __nla_validate_parse: 1 callbacks suppressed [ 813.234886][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5952'. [ 813.556921][T27071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.681314][T27071] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.726822][T27365] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5960'. [ 813.752569][T26207] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.753329][T27367] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 813.759774][T26207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.766166][T27367] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 813.810720][T26207] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.817942][T26207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.875198][T27372] syzkaller0: entered promiscuous mode [ 813.889726][T27372] syzkaller0: entered allmulticast mode [ 814.303465][T27386] openvswitch: netlink: IP tunnel dst address not specified [ 814.320720][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5967'. [ 814.808718][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5977'. [ 814.835956][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5977'. [ 815.015028][T27440] netlink: 'syz.5.5982': attribute type 12 has an invalid length. [ 815.094054][T27444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5983'. [ 815.105426][T27444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5983'. [ 815.138605][T27444] geneve3: entered promiscuous mode [ 815.238225][T27440] xt_hashlimit: size too large, truncated to 1048576 [ 815.334546][T27455] netlink: 'syz.2.5984': attribute type 1 has an invalid length. [ 815.348551][T27071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.360459][T27456] rdma_rxe: rxe_newlink: failed to add team0 [ 815.448833][T27460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5986'. [ 815.582016][T27464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5988'. [ 815.700895][ T25] block nbd5: Possible stuck request ffff888027727000: control (read@0,1024B). Runtime 30 seconds [ 815.717630][ T25] block nbd5: Possible stuck request ffff8880277271c0: control (read@1024,1024B). Runtime 30 seconds [ 815.729728][ T25] block nbd5: Possible stuck request ffff888027727380: control (read@2048,1024B). Runtime 30 seconds [ 815.742588][ T25] block nbd5: Possible stuck request ffff888027727540: control (read@3072,1024B). Runtime 30 seconds [ 815.906105][T27477] netlink: 4088 bytes leftover after parsing attributes in process `syz.3.5991'. [ 816.047628][T27071] veth0_vlan: entered promiscuous mode [ 816.143002][T27071] veth1_vlan: entered promiscuous mode [ 816.167426][T27497] netlink: 'syz.3.5996': attribute type 21 has an invalid length. [ 816.199999][T27497] netlink: 'syz.3.5996': attribute type 5 has an invalid length. [ 816.208480][T27497] netlink: 'syz.3.5996': attribute type 6 has an invalid length. [ 816.288389][T27071] veth0_macvtap: entered promiscuous mode [ 816.314638][T27505] netlink: 'syz.0.5998': attribute type 1 has an invalid length. [ 816.326783][T27071] veth1_macvtap: entered promiscuous mode [ 816.391101][T27505] bond9: entered promiscuous mode [ 816.396714][T27505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 816.424705][T27508] netlink: 'syz.3.5999': attribute type 49 has an invalid length. [ 816.445385][T27071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.447936][T27510] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 816.478602][T27071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.479871][T27514] Bluetooth: hci2: Opcode 0x080f failed: -22 [ 816.512490][T26207] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.560937][T27516] bond9: (slave bridge4): making interface the new active one [ 816.573720][T27516] bridge4: entered promiscuous mode [ 816.586201][T27516] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 816.620407][T26207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.653407][T26207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.663675][T26207] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.935573][T27482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.170635][T27523] __nla_validate_parse: 5 callbacks suppressed [ 819.170656][T27523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6002'. [ 819.274944][T26212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.299958][T26212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.413851][T26211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.431805][T26211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.488110][T27539] SET target dimension over the limit! [ 819.548146][T27544] netlink: 'syz.2.6010': attribute type 33 has an invalid length. [ 819.636302][T27552] netlink: 'syz.5.6011': attribute type 21 has an invalid length. [ 819.646635][T27552] IPv6: NLM_F_CREATE should be specified when creating new route [ 819.656398][T27552] netlink: 'syz.5.6011': attribute type 1 has an invalid length. [ 819.657612][T27544] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 819.679643][T27544] bond8 (unregistering): Released all slaves [ 820.076082][T27574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6017'. [ 820.302160][T27589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6021'. [ 820.920078][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 820.935165][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 820.946588][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 820.955284][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 820.966246][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 821.388696][T27628] validate_nla: 128 callbacks suppressed [ 821.388716][T27628] netlink: 'syz.4.6030': attribute type 10 has an invalid length. [ 821.448559][T27628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.502759][T27628] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 821.910671][T27650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6037'. [ 821.950272][T27652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6037'. [ 822.188002][T27661] netlink: 'syz.5.6040': attribute type 3 has an invalid length. [ 822.470673][T27671] netlink: 'syz.4.6044': attribute type 9 has an invalid length. [ 822.940033][T27610] lo speed is unknown, defaulting to 1000 [ 822.965331][T27610] lo speed is unknown, defaulting to 1000 [ 823.006387][T27693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6050'. [ 823.052711][T26147] Bluetooth: hci0: command tx timeout [ 823.404274][T27703] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 823.643301][T27714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6058'. [ 823.667332][T27709] netlink: 'syz.0.6056': attribute type 3 has an invalid length. [ 823.751121][T27709] netlink: 'syz.0.6056': attribute type 1 has an invalid length. [ 823.796222][T27709] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6056'. [ 824.142064][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6060'. [ 824.642817][T27743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'. [ 824.955614][T27749] tipc: Enabling of bearer rejected, failed to enable media [ 825.133632][T26147] Bluetooth: hci0: command tx timeout [ 825.310546][T27610] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.358319][T27610] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.384831][T27610] bridge_slave_0: entered allmulticast mode [ 825.412299][T27610] bridge_slave_0: entered promiscuous mode [ 825.443221][T27610] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.479618][T27610] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.507493][T27610] bridge_slave_1: entered allmulticast mode [ 825.533492][T27610] bridge_slave_1: entered promiscuous mode [ 825.734684][T27610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.790971][T27610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.048943][T27788] gre2: entered promiscuous mode [ 826.067723][T27788] gre2: entered allmulticast mode [ 826.097986][T27795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6078'. [ 826.136353][T27795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6078'. [ 826.196165][T27610] team0: Port device team_slave_0 added [ 826.232446][T27610] team0: Port device team_slave_1 added [ 826.322676][T27803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6079'. [ 826.391220][T27802] veth1_to_bond: entered allmulticast mode [ 826.486351][T27803] veth1_to_bond (unregistering): left allmulticast mode [ 826.513043][T27808] sctp: [Deprecated]: syz.4.6081 (pid 27808) Use of int in max_burst socket option. [ 826.513043][T27808] Use struct sctp_assoc_value instead [ 826.540892][T27610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.548226][T27610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.600877][T27610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.614852][T27610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.666508][T27610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.727884][T27610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.007951][T27816] bond10: option fail_over_mac: invalid value (16) [ 827.031790][T27816] bond10 (unregistering): Released all slaves [ 827.216960][T26147] Bluetooth: hci0: command tx timeout [ 827.514326][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6089'. [ 827.537603][T27821] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 827.893251][T27854] sctp: [Deprecated]: syz.5.6091 (pid 27854) Use of int in max_burst socket option deprecated. [ 827.893251][T27854] Use struct sctp_assoc_value instead [ 827.946454][T27610] hsr_slave_0: entered promiscuous mode [ 827.964032][T27610] hsr_slave_1: entered promiscuous mode [ 827.980257][T27610] debugfs: 'hsr0' already exists in 'hsr' [ 827.994458][T27610] Cannot create hsr debugfs directory [ 828.070567][T27861] netlink: 'syz.4.6095': attribute type 1 has an invalid length. [ 828.137240][T27861] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6095'. [ 828.445224][T27878] netlink: 'syz.5.6101': attribute type 10 has an invalid length. [ 828.751428][T27867] bridge0: port 3(vlan0) entered disabled state [ 828.780336][T27867] bond0: left promiscuous mode [ 828.789507][T27867] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 828.800852][T27867] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 829.292286][T26147] Bluetooth: hci0: command tx timeout [ 829.369692][T27867] bridge3: left allmulticast mode [ 829.411569][T27867] bond9: left promiscuous mode [ 829.417554][T27867] bridge4: left promiscuous mode [ 829.481944][ T8522] lo speed is unknown, defaulting to 1000 [ 829.498949][ T8522] sz1: Port: 1 Link DOWN [ 829.525291][ T14] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.559385][ T14] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.582342][T27893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6104'. [ 829.594298][ T14] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.619530][ T14] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.628544][T27893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6104'. [ 829.654055][ T8521] lo speed is unknown, defaulting to 1000 [ 829.668608][ T14] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.678285][ T14] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.724493][T27899] netlink: 'syz.4.6106': attribute type 27 has an invalid length. [ 829.745071][T27899] netlink: 'syz.4.6106': attribute type 4 has an invalid length. [ 829.768989][T27899] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6106'. [ 829.800263][T26211] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.818993][T27906] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6108'. [ 829.840629][T26211] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.853175][T27898] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6104'. [ 829.868177][T26211] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.895005][T26211] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.095859][T27926] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6112'. [ 830.116735][T27926] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6112'. [ 830.571303][T27921] syzkaller0: entered promiscuous mode [ 830.582905][T27921] syzkaller0: entered allmulticast mode [ 835.154680][T27959] gre3: entered promiscuous mode [ 835.450014][T27994] Bluetooth: MGMT ver 1.23 [ 835.476055][T27998] netlink: 'syz.4.6121': attribute type 1 has an invalid length. [ 835.491097][T27998] netlink: 756 bytes leftover after parsing attributes in process `syz.4.6121'. [ 835.503369][T27999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'. [ 835.915910][T28020] --map-set only usable from mangle table [ 836.043073][T28027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6128'. [ 836.167643][T28032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6129'. [ 836.275018][T28034] xt_hashlimit: invalid rate [ 836.578561][T27610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 836.622602][T27610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 836.673642][T27610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 836.716176][T27610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 836.737120][T28055] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6134'. [ 836.748474][T27610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 836.780080][T27610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.832636][T27610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 836.887586][T27610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.946936][T28059] syzkaller0: entered promiscuous mode [ 836.975996][T28059] syzkaller0: entered allmulticast mode [ 837.014998][T28059] simple: basic_1 [ 837.256261][T28081] xt_hashlimit: size too large, truncated to 1048576 [ 837.672291][T27610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.725297][T27610] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.746596][T26212] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.753832][T26212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.787652][T26212] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.794964][T26212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.903371][T28108] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 837.932226][T28109] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6144'. [ 838.200527][T28117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6145'. [ 838.286696][T28117] syzkaller0: entered promiscuous mode [ 838.306024][T28117] syzkaller0: entered allmulticast mode [ 839.254412][T27610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.369346][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.518283][T28163] syzkaller0: entered promiscuous mode [ 839.532756][T28163] syzkaller0: entered allmulticast mode [ 844.278746][T27610] veth0_vlan: entered promiscuous mode [ 844.344744][T27610] veth1_vlan: entered promiscuous mode [ 844.548662][T27610] veth0_macvtap: entered promiscuous mode [ 844.583205][T27610] veth1_macvtap: entered promiscuous mode [ 844.593923][T28244] block nbd4: NBD_DISCONNECT [ 844.619053][T28244] block nbd4: Send disconnect failed -32 [ 844.638955][T28244] block nbd4: shutting down sockets [ 844.684249][T27610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.717234][T27610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.803513][T26207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.837650][T26207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.882122][T28261] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6169'. [ 844.904896][T26207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.931747][T26207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.426243][T26209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.468240][T26209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.604666][T26210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.636832][T26210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.777314][ T25] block nbd5: Possible stuck request ffff888027727000: control (read@0,1024B). Runtime 60 seconds [ 845.792918][ T25] block nbd5: Possible stuck request ffff8880277271c0: control (read@1024,1024B). Runtime 60 seconds [ 845.804493][ T25] block nbd5: Possible stuck request ffff888027727380: control (read@2048,1024B). Runtime 60 seconds [ 845.816295][ T25] block nbd5: Possible stuck request ffff888027727540: control (read@3072,1024B). Runtime 60 seconds [ 846.027175][T28323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6024'. [ 846.038759][T28326] netlink: 'syz.5.6188': attribute type 58 has an invalid length. [ 846.048279][T28326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6188'. [ 846.373359][T28340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6190'. [ 846.534962][T28355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6194'. [ 846.854592][T28373] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20002 [ 847.485271][T28376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.614501][T28396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 847.668425][T28396] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 847.701857][T28396] gretap2: entered promiscuous mode [ 847.721377][T28396] gretap2: entered allmulticast mode [ 847.763334][T28419] netlink: 'syz.4.6206': attribute type 21 has an invalid length. [ 848.162299][T28376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.366552][T28452] Cannot find add_set index 4 as target [ 848.554584][ T4993] udevd[4993]: worker [25925] /devices/virtual/block/nbd5 is taking a long time [ 848.599386][T28376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.839687][T28376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.332392][T26212] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.425832][T28491] sit2: entered promiscuous mode [ 849.432966][T28491] sit2: entered allmulticast mode [ 849.495545][T26212] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.636430][T28516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6227'. [ 849.649939][T26212] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.743479][T26209] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.027667][T28541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6231'. [ 850.093113][T28532] syzkaller0: entered promiscuous mode [ 850.098819][T28532] syzkaller0: entered allmulticast mode [ 850.118394][T28540] tipc: Enabling of bearer rejected, failed to enable media [ 850.141240][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6236'. [ 850.159971][T28549] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6236'. [ 850.201367][T28549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6236'. [ 850.271016][T28551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.397561][T28564] SET target dimension over the limit! [ 850.555042][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6241'. [ 854.883752][T28606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6246'. [ 854.903888][T28606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6246'. [ 854.928017][T28606] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6246'. [ 854.947117][T28606] netlink: 'syz.5.6246': attribute type 49 has an invalid length. [ 854.995605][ T8522] IPVS: starting estimator thread 0... [ 855.031770][T28617] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6250'. [ 855.092060][T28613] IPVS: using max 30 ests per chain, 72000 per kthread [ 855.285512][T28635] sit0: entered promiscuous mode [ 855.320730][T28635] netlink: 'syz.4.6255': attribute type 1 has an invalid length. [ 855.358471][T28635] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6255'. [ 855.400932][T28646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.462781][T28648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6259'. [ 855.707303][T28671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6265'. [ 855.802648][T28659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6262'. [ 855.841477][T28680] xt_time: unknown flags 0xf4 [ 855.846567][T28674] syzkaller0: entered promiscuous mode [ 855.866558][T28674] syzkaller0: entered allmulticast mode [ 855.884600][T28659] tipc: Enabled bearer , priority 0 [ 855.900306][T28684] xt_time: unknown flags 0xf4 [ 855.995986][T28658] tipc: Resetting bearer [ 856.075693][T28658] tipc: Disabling bearer [ 856.236733][T28701] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6271'. [ 856.333997][T28706] syzkaller0: entered promiscuous mode [ 856.352706][T28706] syzkaller0: entered allmulticast mode [ 856.474717][T28706] tipc: Started in network mode [ 856.487673][T28706] tipc: Node identity 42291a58ddc6, cluster identity 4711 [ 856.516809][T28706] tipc: Enabled bearer , priority 0 [ 856.555492][T28719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6277'. [ 856.582492][T28705] tipc: Resetting bearer [ 856.677384][T28722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 856.703353][T28705] tipc: Disabling bearer [ 856.757131][T28719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6277'. [ 856.869951][T28727] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6282'. [ 857.701704][T28782] netlink: 'syz.2.6297': attribute type 13 has an invalid length. [ 857.989901][ T8516] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 858.039030][T28788] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.127196][T28800] netlink: 'syz.5.6300': attribute type 178 has an invalid length. [ 858.293410][T28804] syzkaller1: entered promiscuous mode [ 858.315486][T28804] syzkaller1: entered allmulticast mode [ 858.337038][T26147] Bluetooth: hci0: command tx timeout [ 858.356902][T28804] IPv6: NLM_F_CREATE should be specified when creating new route [ 858.541359][T28822] nbd: must specify an index to disconnect [ 858.674538][T28829] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 858.691747][T28829] bond10 (unregistering): Released all slaves [ 858.728162][T28832] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.756041][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 858.890383][T28841] netlink: 'syz.5.6313': attribute type 3 has an invalid length. [ 858.924501][T28841] netlink: 'syz.5.6313': attribute type 39 has an invalid length. [ 859.058070][T28854] netlink: 'syz.5.6317': attribute type 1 has an invalid length. [ 859.074785][T28855] netlink: 'syz.5.6317': attribute type 1 has an invalid length. [ 859.097925][T28855] netlink: 'syz.5.6317': attribute type 1 has an invalid length. [ 859.569891][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 859.593991][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 859.606891][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 859.618484][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 859.641268][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 860.766697][T28931] netlink: 'syz.3.6342': attribute type 16 has an invalid length. [ 860.806536][T28931] __nla_validate_parse: 14 callbacks suppressed [ 860.806554][T28931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6342'. [ 860.833965][T28931] veth0_macvtap: entered allmulticast mode [ 860.995237][T28879] lo speed is unknown, defaulting to 1000 [ 861.105305][T28938] syzkaller0: entered promiscuous mode [ 861.114273][T28938] syzkaller0: entered allmulticast mode [ 861.145446][T28879] lo speed is unknown, defaulting to 1000 [ 861.197834][T28951] xt_hashlimit: overflow, try lower: 3/0 [ 861.709639][ T50] Bluetooth: hci5: command tx timeout [ 863.777338][ T50] Bluetooth: hci5: command tx timeout [ 865.199041][T28953] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6349'. [ 865.215265][T28959] pim6reg: entered allmulticast mode [ 865.367669][T28965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6353'. [ 865.390640][T28965] netlink: 'syz.4.6353': attribute type 1 has an invalid length. [ 865.398459][T28965] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6353'. [ 865.408630][T28965] netlink: 'syz.4.6353': attribute type 1 has an invalid length. [ 865.570934][T28968] netlink: 'syz.3.6355': attribute type 1 has an invalid length. [ 865.633775][T28973] bond10 (unregistering): Released all slaves [ 865.755530][T28968] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 865.868855][ T50] Bluetooth: hci5: command tx timeout [ 866.075789][T28989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6358'. [ 866.135848][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6358'. [ 866.345211][T28879] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.363725][T28879] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.364959][ T30] audit: type=1107 audit(1782846410.775:17): pid=29000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 866.395850][T28879] bridge_slave_0: entered allmulticast mode [ 866.424376][T28879] bridge_slave_0: entered promiscuous mode [ 866.462610][T28879] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.481419][T28879] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.502707][T28879] bridge_slave_1: entered allmulticast mode [ 866.526432][T28879] bridge_slave_1: entered promiscuous mode [ 866.666847][T28879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.694282][T28879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.715841][T29021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6366'. [ 866.786356][T28879] team0: Port device team_slave_0 added [ 866.805097][T28879] team0: Port device team_slave_1 added [ 866.938641][T28879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.946579][T28879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.975235][T28879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.991430][T28879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.998443][T28879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.025440][T28879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.044660][T29034] netlink: 'syz.4.6369': attribute type 1 has an invalid length. [ 867.199035][T28879] hsr_slave_0: entered promiscuous mode [ 867.215062][T28879] hsr_slave_1: entered promiscuous mode [ 867.230942][T28879] debugfs: 'hsr0' already exists in 'hsr' [ 867.249666][T28879] Cannot create hsr debugfs directory [ 867.468488][T29051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6376'. [ 867.507863][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6376'. [ 867.536138][T29051] netlink: 'syz.0.6376': attribute type 14 has an invalid length. [ 867.556056][T29051] netlink: 'syz.0.6376': attribute type 13 has an invalid length. [ 867.560981][T29053] netlink: 'syz.5.6377': attribute type 2 has an invalid length. [ 867.586546][T29053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6377'. [ 867.698506][T29058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6378'. [ 867.929961][ T50] Bluetooth: hci5: command tx timeout [ 868.002973][T28879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.042426][T28879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.290718][T29079] vlan0: entered promiscuous mode [ 868.526874][T29103] netlink: 'syz.5.6390': attribute type 1 has an invalid length. [ 868.565337][T29103] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6390'. [ 868.580585][T29104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.591520][T28879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.625994][T28879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.747709][T29105] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 868.784532][T29118] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6394'. [ 868.837715][T29118] xt_policy: neither incoming nor outgoing policy selected [ 868.900351][T28879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.931583][T28879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.192122][T28879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.203586][T28879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.294289][T29130] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 869.338622][T29130] bond10 (unregistering): Released all slaves [ 869.450240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.837314][T29161] netlink: 'syz.0.6410': attribute type 24 has an invalid length. [ 870.093619][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.101044][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 870.232428][T29186] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 870.235910][T29184] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 870.266707][T28879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 870.274364][T29185] netlink: 'syz.3.6418': attribute type 1 has an invalid length. [ 870.288449][T29187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6417'. [ 870.315413][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.327044][T28879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 870.354213][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.363548][T29191] sctp: [Deprecated]: syz.5.6419 (pid 29191) Use of int in maxseg socket option. [ 870.363548][T29191] Use struct sctp_assoc_value instead [ 870.379596][T29186] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 870.391244][T29184] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 870.524373][T29185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.584040][T28879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.599006][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.637789][T29199] bond1: (slave geneve2): making interface the new active one [ 870.667713][T29211] netlink: 'syz.4.6424': attribute type 17 has an invalid length. [ 870.691858][T29199] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 870.766532][T28879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 870.795704][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.845915][T29219] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 871.216230][T28879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.224462][T29248] __nla_validate_parse: 3 callbacks suppressed [ 871.224480][T29248] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6433'. [ 871.301016][T28879] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.302373][T29248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 871.333256][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.340486][T10729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.397633][T26209] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.404993][T26209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.474404][T29248] x_tables: duplicate underflow at hook 2 [ 871.496096][T29256] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6433'. [ 872.148087][T29292] validate_nla: 2 callbacks suppressed [ 872.148106][T29292] netlink: 'syz.0.6444': attribute type 1 has an invalid length. [ 872.356690][T29292] bond10: entered promiscuous mode [ 872.394297][T29292] 8021q: adding VLAN 0 to HW filter on device bond10 [ 872.480759][T29304] Cannot find add_set index 4 as target [ 872.854232][T28879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.036812][T29336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6453'. [ 873.104379][T29342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6456'. [ 873.137606][T28879] veth0_vlan: entered promiscuous mode [ 873.193711][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6456'. [ 873.221788][T29342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6456'. [ 873.243034][T28879] veth1_vlan: entered promiscuous mode [ 873.245627][T29342] netlink: 'syz.0.6456': attribute type 12 has an invalid length. [ 873.268811][T29342] netlink: 'syz.0.6456': attribute type 11 has an invalid length. [ 873.284231][T29348] netlink: 'syz.5.6457': attribute type 1 has an invalid length. [ 873.485325][T29360] ip6gretap3: entered promiscuous mode [ 873.502577][T29360] ip6gretap3: entered allmulticast mode [ 873.532760][T29360] bond10: (slave ip6gretap3): making interface the new active one [ 873.560893][T29360] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 873.571786][T29360] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 873.581390][T29360] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link [ 873.670935][T28879] veth0_macvtap: entered promiscuous mode [ 873.713914][T28879] veth1_macvtap: entered promiscuous mode [ 873.760960][T28879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.781967][T28879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.831172][T26209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.840601][T26209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.857780][T26209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.871046][T26209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.306327][T29363] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 874.319972][T29363] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 874.366722][T29363] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.389931][T29363] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 874.474301][T29363] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.481466][T29363] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 874.543015][T29389] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6467'. [ 874.658563][T26208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.711790][T26208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.840502][T29398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6470'. [ 874.860252][T22277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.886756][T22277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.930626][T29402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6471'. [ 875.030420][T29404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6472'. [ 875.155504][T29411] bond11: option lp_interval: invalid value (0) [ 875.163040][T29411] bond11: option lp_interval: allowed values 1 - 2147483647 [ 875.200987][T29411] bond11 (unregistering): Released all slaves [ 875.735428][T26147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 875.755849][T26147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 875.773129][T26147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 875.785059][T26147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 875.793686][T26147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 875.853042][ T25] block nbd5: Possible stuck request ffff888027727000: control (read@0,1024B). Runtime 90 seconds [ 875.867708][ T25] block nbd5: Possible stuck request ffff8880277271c0: control (read@1024,1024B). Runtime 90 seconds [ 875.881226][ T25] block nbd5: Possible stuck request ffff888027727380: control (read@2048,1024B). Runtime 90 seconds [ 875.893193][ T25] block nbd5: Possible stuck request ffff888027727540: control (read@3072,1024B). Runtime 90 seconds [ 876.083859][T29439] syzkaller0: entered promiscuous mode [ 876.115397][T29439] syzkaller0: entered allmulticast mode [ 876.127578][T29445] netlink: 'syz.3.6482': attribute type 13 has an invalid length. [ 876.153225][T29445] netlink: 'syz.3.6482': attribute type 58 has an invalid length. [ 876.252964][T17062] syz_tun (unregistering): left allmulticast mode [ 876.416786][T29445] syzkaller1: entered promiscuous mode [ 876.427490][T29445] syzkaller1: entered allmulticast mode [ 876.597850][T29466] __nla_validate_parse: 3 callbacks suppressed [ 876.597870][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6488'. [ 876.647070][T29466] gretap1: entered promiscuous mode [ 876.653963][T29471] syzkaller0: entered promiscuous mode [ 876.666926][T29471] syzkaller0: entered allmulticast mode [ 877.364562][T29508] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6500'. [ 877.375561][T29487] syzkaller0: entered promiscuous mode [ 877.427724][T29487] syzkaller0: entered allmulticast mode [ 877.513722][T29426] lo speed is unknown, defaulting to 1000 [ 877.540511][T29426] lo speed is unknown, defaulting to 1000 [ 877.852115][T26147] Bluetooth: hci2: command tx timeout [ 879.937027][T26147] Bluetooth: hci2: command tx timeout [ 880.187015][T29508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.364775][T29530] netlink: 'syz.4.6504': attribute type 23 has an invalid length. [ 882.009377][T26147] Bluetooth: hci2: command tx timeout [ 882.318638][T29560] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 882.635079][T29426] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.637440][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6517'. [ 882.643101][T29426] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.660454][T29426] bridge_slave_0: entered allmulticast mode [ 882.668312][T29426] bridge_slave_0: entered promiscuous mode [ 882.678369][T29426] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.687322][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.695713][T29426] bridge_slave_1: entered allmulticast mode [ 882.704422][T29426] bridge_slave_1: entered promiscuous mode [ 882.758614][T29426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.781596][T29426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.831308][T29426] team0: Port device team_slave_0 added [ 882.841754][T29426] team0: Port device team_slave_1 added [ 882.894723][T29426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.913258][T29426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.961953][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6521'. [ 882.971957][T29426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.978379][T29584] netlink: 'syz.4.6521': attribute type 5 has an invalid length. [ 882.992987][T29584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6521'. [ 883.017779][T29426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.026107][T29426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.055353][T29426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.246840][T29426] hsr_slave_0: entered promiscuous mode [ 883.268605][T29426] hsr_slave_1: entered promiscuous mode [ 883.300853][T29426] debugfs: 'hsr0' already exists in 'hsr' [ 883.313758][T29426] Cannot create hsr debugfs directory [ 883.812801][T29426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.998017][T29426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.100846][T26147] Bluetooth: hci2: command tx timeout [ 884.149862][T29426] bond0: (slave netdevsim1): Releasing backup interface [ 884.169047][T29426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.451613][T29426] bond0: (slave netdevsim0): Releasing backup interface [ 884.484416][T29426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.667545][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6539'. [ 884.846791][T29652] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 884.901279][T29660] openvswitch: netlink: Missing key (keys=40, expected=100) [ 885.537587][T29690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6544'. [ 885.893310][T29702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6552'. [ 885.914674][T29702] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6552'. [ 885.926505][T29703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6552'. [ 885.937212][T29703] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6552'. [ 885.954027][T29702] netlink: 'syz.3.6552': attribute type 1 has an invalid length. [ 886.013289][T29703] netlink: 'syz.3.6552': attribute type 1 has an invalid length. [ 886.765986][T29706] xt_CONNSECMARK: invalid mode: 0 [ 887.788833][T29713] sctp: [Deprecated]: syz.3.6556 (pid 29713) Use of int in maxseg socket option. [ 887.788833][T29713] Use struct sctp_assoc_value instead [ 887.813661][ T30] audit: type=1804 audit(1782846432.225:18): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6556" name="/newroot/87/cgroup.controllers" dev="tmpfs" ino=461 res=1 errno=0 [ 887.837927][ T30] audit: type=1800 audit(1782846432.225:19): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6556" name="cgroup.controllers" dev="tmpfs" ino=461 res=0 errno=0 [ 887.886607][T29713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6556'. [ 887.893332][T29665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.954983][T29426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 888.026491][T29426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.083305][T29426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 888.131383][T29426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.153300][T29717] bond0: option miimon: invalid value (18446744071829782528) [ 888.181189][T29717] bond0: option miimon: allowed values 0 - 2147483647 [ 888.189959][T29426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 888.224010][T29426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.257265][T29426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 888.305372][T29426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.758481][T29426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.812752][T29426] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.843087][T22282] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.850319][T22282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.882149][T22282] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.889363][T22282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.900973][T29426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.972806][T29426] veth0_vlan: entered promiscuous mode [ 889.990411][T29426] veth1_vlan: entered promiscuous mode [ 890.036885][T29426] veth0_macvtap: entered promiscuous mode [ 890.053866][T29426] veth1_macvtap: entered promiscuous mode [ 890.098583][T29426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.122709][T29426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.146910][T26216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.172037][T26216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.185444][T26216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.200614][T26216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.324239][T26216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.342510][T26216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.367087][T19901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.375427][T19901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.436929][T29801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6475'. [ 890.448020][T29801] netlink: 'syz.0.6475': attribute type 3 has an invalid length. [ 902.094718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 905.934324][ T25] block nbd5: Possible stuck request ffff888027727000: control (read@0,1024B). Runtime 120 seconds [ 905.945816][ T25] block nbd5: Possible stuck request ffff8880277271c0: control (read@1024,1024B). Runtime 120 seconds [ 905.957641][ T25] block nbd5: Possible stuck request ffff888027727380: control (read@2048,1024B). Runtime 120 seconds [ 905.969844][ T25] block nbd5: Possible stuck request ffff888027727540: control (read@3072,1024B). Runtime 120 seconds [ 912.374504][T29859] netlink: 'syz.3.6575': attribute type 4 has an invalid length. [ 912.402114][T29859] netlink: 'syz.3.6575': attribute type 4 has an invalid length. [ 912.546421][T29870] FAULT_INJECTION: forcing a failure. [ 912.546421][T29870] name failslab, interval 1, probability 0, space 0, times 1 [ 912.596901][T29870] CPU: 0 UID: 0 PID: 29870 Comm: syz.5.6579 Not tainted syzkaller #0 PREEMPT(full) [ 912.596929][T29870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 912.596941][T29870] Call Trace: [ 912.596948][T29870] [ 912.596956][T29870] dump_stack_lvl+0xe8/0x150 [ 912.596987][T29870] should_fail_ex+0x40c/0x560 [ 912.597057][T29870] should_failslab+0xa8/0x100 [ 912.597083][T29870] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 912.597109][T29870] ? local_lock_release+0x9c/0x160 [ 912.597198][T29870] ? __alloc_skb+0x1d7/0x7a0 [ 912.597214][T29870] ? __alloc_skb+0x1d7/0x7a0 [ 912.597236][T29870] __alloc_skb+0x1d7/0x7a0 [ 912.597258][T29870] alloc_skb_with_frags+0xc6/0x760 [ 912.597318][T29870] ? __lock_acquire+0x683/0x2cf0 [ 912.597354][T29870] sock_alloc_send_pskb+0x878/0x990 [ 912.597393][T29870] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 912.597432][T29870] tun_get_user+0x9a6/0x4370 [ 912.597563][T29870] ? aa_file_perm+0x18b/0x15f0 [ 912.597592][T29870] ? aa_file_perm+0x4ed/0x15f0 [ 912.597614][T29870] ? __pfx_tun_get_user+0x10/0x10 [ 912.597642][T29870] ? __lock_acquire+0x683/0x2cf0 [ 912.597663][T29870] ? kstrtoull+0x12f/0x1d0 [ 912.597738][T29870] ? ref_tracker_alloc+0x341/0x4b0 [ 912.597762][T29870] ? get_pid_task+0x20/0x1f0 [ 912.597794][T29870] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 912.597819][T29870] ? tun_get+0x1c/0x2f0 [ 912.597842][T29870] ? tun_get+0x1c/0x2f0 [ 912.597869][T29870] ? tun_get+0x1c/0x2f0 [ 912.597893][T29870] ? tun_get+0x1c/0x2f0 [ 912.597922][T29870] tun_chr_write_iter+0x113/0x200 [ 912.597952][T29870] vfs_write+0x612/0xba0 [ 912.597988][T29870] ? __pfx_vfs_write+0x10/0x10 [ 912.598019][T29870] ? __fget_files+0x2a/0x420 [ 912.598047][T29870] ksys_write+0x150/0x270 [ 912.598072][T29870] ? __pfx_ksys_write+0x10/0x10 [ 912.598103][T29870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.598124][T29870] do_syscall_64+0x174/0x580 [ 912.598144][T29870] ? trace_irq_disable+0x3b/0x140 [ 912.598163][T29870] ? clear_bhb_loop+0x40/0x90 [ 912.598186][T29870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.598205][T29870] RIP: 0033:0x7fc22d35d68e [ 912.598222][T29870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 912.598239][T29870] RSP: 002b:00007fc22e2d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 912.598258][T29870] RAX: ffffffffffffffda RBX: 00007fc22e2d56c0 RCX: 00007fc22d35d68e [ 912.598271][T29870] RDX: 000000000000fcbb RSI: 00002000000002c0 RDI: 00000000000000c8 [ 912.598281][T29870] RBP: 00007fc22e2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 912.598293][T29870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.598303][T29870] R13: 00007fc22d616038 R14: 00007fc22d615fa0 R15: 00007ffe5ac0b968 [ 912.598332][T29870] [ 912.952356][T29884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6584'. [ 913.077820][T29883] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6586'. [ 913.190364][T29897] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 913.232036][T29899] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 913.390279][T29909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'. [ 913.460180][T29915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6598'. [ 913.521434][T29904] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.529041][T29904] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.631720][T29904] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 913.649005][T29911] erspan0: entered allmulticast mode [ 913.663747][T29916] bridge_slave_1: left allmulticast mode [ 913.678170][T29916] bridge_slave_1: left promiscuous mode [ 913.688166][T29916] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.701249][T29916] bridge_slave_0: left allmulticast mode [ 913.707043][T29916] bridge_slave_0: left promiscuous mode [ 913.713422][T29916] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.892072][T29931] syzkaller1: entered promiscuous mode [ 913.909047][T29931] syzkaller1: entered allmulticast mode [ 913.917119][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6605'. [ 914.057817][T29942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6606'. [ 914.126784][T29943] netlink: 'syz.4.6607': attribute type 21 has an invalid length. [ 914.135588][T29943] IPv6: NLM_F_CREATE should be specified when creating new route [ 914.296529][T29957] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6610'. [ 914.310189][T29959] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6610'. [ 914.327569][T29956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6612'. [ 914.371281][T29962] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6614'. [ 914.751487][T29986] vlan2: entered allmulticast mode [ 914.782030][T29986] bond0: entered allmulticast mode [ 914.810739][T29986] bond_slave_0: entered allmulticast mode [ 914.824405][T29986] bond_slave_1: entered allmulticast mode [ 914.846128][T29986] batadv0: entered allmulticast mode [ 915.624599][T30045] FAULT_INJECTION: forcing a failure. [ 915.624599][T30045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 915.655241][T30043] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 915.702192][T30045] CPU: 1 UID: 0 PID: 30045 Comm: syz.5.6640 Not tainted syzkaller #0 PREEMPT(full) [ 915.702218][T30045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.702229][T30045] Call Trace: [ 915.702237][T30045] [ 915.702245][T30045] dump_stack_lvl+0xe8/0x150 [ 915.702273][T30045] should_fail_ex+0x40c/0x560 [ 915.702304][T30045] prepare_alloc_pages+0x230/0x650 [ 915.702333][T30045] __alloc_frozen_pages_noprof+0x12f/0x380 [ 915.702358][T30045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 915.702381][T30045] ? __pfx_policy_nodemask+0x10/0x10 [ 915.702407][T30045] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 915.702442][T30045] alloc_pages_mpol+0x212/0x380 [ 915.702470][T30045] alloc_pages_noprof+0xac/0x2a0 [ 915.702492][T30045] alloc_skb_with_frags+0x264/0x760 [ 915.702524][T30045] sock_alloc_send_pskb+0x878/0x990 [ 915.702567][T30045] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 915.702605][T30045] tun_get_user+0x9a6/0x4370 [ 915.702650][T30045] ? aa_file_perm+0x18b/0x15f0 [ 915.702680][T30045] ? aa_file_perm+0x4ed/0x15f0 [ 915.702703][T30045] ? __pfx_tun_get_user+0x10/0x10 [ 915.702734][T30045] ? __lock_acquire+0x683/0x2cf0 [ 915.702758][T30045] ? kstrtoull+0x12f/0x1d0 [ 915.702791][T30045] ? ref_tracker_alloc+0x341/0x4b0 [ 915.702815][T30045] ? get_pid_task+0x20/0x1f0 [ 915.702837][T30045] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 915.702863][T30045] ? tun_get+0x1c/0x2f0 [ 915.702888][T30045] ? tun_get+0x1c/0x2f0 [ 915.702918][T30045] ? tun_get+0x1c/0x2f0 [ 915.702944][T30045] ? tun_get+0x1c/0x2f0 [ 915.702975][T30045] tun_chr_write_iter+0x113/0x200 [ 915.703005][T30045] vfs_write+0x612/0xba0 [ 915.703043][T30045] ? __pfx_vfs_write+0x10/0x10 [ 915.703076][T30045] ? __fget_files+0x2a/0x420 [ 915.703104][T30045] ksys_write+0x150/0x270 [ 915.703129][T30045] ? __pfx_ksys_write+0x10/0x10 [ 915.703158][T30045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.703178][T30045] do_syscall_64+0x174/0x580 [ 915.703195][T30045] ? trace_irq_disable+0x3b/0x140 [ 915.703213][T30045] ? clear_bhb_loop+0x40/0x90 [ 915.703236][T30045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.703255][T30045] RIP: 0033:0x7fc22d35d68e [ 915.703272][T30045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 915.703289][T30045] RSP: 002b:00007fc22e2d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 915.703310][T30045] RAX: ffffffffffffffda RBX: 00007fc22e2d56c0 RCX: 00007fc22d35d68e [ 915.703323][T30045] RDX: 000000000000fcbb RSI: 00002000000002c0 RDI: 00000000000000c8 [ 915.703336][T30045] RBP: 00007fc22e2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 915.703348][T30045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.703359][T30045] R13: 00007fc22d616038 R14: 00007fc22d615fa0 R15: 00007ffe5ac0b968 [ 915.703390][T30045] [ 916.225813][T30062] syzkaller0: entered promiscuous mode [ 916.232293][T30062] syzkaller0: entered allmulticast mode [ 916.254554][T30063] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 916.374642][T30071] netlink: 'syz.5.6647': attribute type 58 has an invalid length. [ 916.405425][T30069] syzkaller0: entered promiscuous mode [ 916.422043][T30069] syzkaller0: entered allmulticast mode [ 916.437578][T30069] netlink: 'syz.3.6646': attribute type 33 has an invalid length. [ 916.437594][T30072] netlink: 'syz.3.6646': attribute type 33 has an invalid length. [ 916.684502][T30083] Cannot find del_set index 0 as target [ 916.700827][T30086] x_tables: unsorted underflow at hook 4 [ 916.817720][T30094] x_tables: duplicate underflow at hook 3 [ 916.904244][T30089] bridge1: entered promiscuous mode [ 916.912021][T30089] bridge1: entered allmulticast mode [ 916.972172][T30100] netlink: 'syz.0.6656': attribute type 1 has an invalid length. [ 921.048690][T30084] syzkaller0: entered promiscuous mode [ 921.054913][T30084] syzkaller0: entered allmulticast mode [ 921.073914][T30111] 8021q: VLANs not supported on lo [ 925.778341][T30164] netlink: 'syz.2.6669': attribute type 3 has an invalid length. [ 925.973114][T30171] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 925.998945][T30171] __nla_validate_parse: 9 callbacks suppressed [ 925.998963][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6675'. [ 926.041442][T30171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6675'. [ 926.134015][T30183] netlink: 'syz.0.6679': attribute type 1 has an invalid length. [ 926.145399][T30183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6679'. [ 926.233208][T30187] netlink: 'syz.5.6680': attribute type 2 has an invalid length. [ 926.289017][T30192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6682'. [ 926.331944][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6682'. [ 926.436480][T30192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.715083][T30217] netlink: 'syz.3.6690': attribute type 12 has an invalid length. [ 926.732136][T30217] netlink: 'syz.3.6690': attribute type 29 has an invalid length. [ 926.758919][T30217] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6690'. [ 926.776927][T30217] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6690'. [ 926.786204][T30225] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.802374][T30218] geneve2: entered promiscuous mode [ 926.808611][T30218] geneve2: entered allmulticast mode [ 926.824361][T30223] bond0: entered promiscuous mode [ 926.832177][T30223] bond_slave_0: entered promiscuous mode [ 926.844696][T30223] bond_slave_1: entered promiscuous mode [ 926.868023][T30221] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6692'. [ 926.870072][T30223] bond0: entered allmulticast mode [ 926.891026][T30221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6692'. [ 926.899820][T30223] bond_slave_0: entered allmulticast mode [ 926.922368][T30223] bond_slave_1: entered allmulticast mode [ 926.951864][T30223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.978009][T26209] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 927.006767][T30229] ip6tnl2: entered promiscuous mode [ 927.013975][T26209] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 927.086104][T26209] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 927.101899][T26209] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 927.515364][T30270] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 927.590584][T30277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6702'. [ 927.898853][T30291] netlink: 'syz.2.6707': attribute type 2 has an invalid length. [ 927.924674][T30291] netlink: 'syz.2.6707': attribute type 11 has an invalid length. [ 928.501334][T30312] syzkaller0: entered promiscuous mode [ 928.512771][T30312] syzkaller0: entered allmulticast mode [ 928.723839][T30318] [ 928.726217][T30318] ====================================================== [ 928.733242][T30318] WARNING: possible circular locking dependency detected [ 928.740288][T30318] syzkaller #0 Not tainted [ 928.744717][T30318] ------------------------------------------------------ [ 928.751741][T30318] syz.3.6715/30318 is trying to acquire lock: [ 928.757798][T30318] ffff8880274ca178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 928.767293][T30318] [ 928.767293][T30318] but task is already holding lock: [ 928.774649][T30318] ffff8880274c9c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 928.784826][T30318] [ 928.784826][T30318] which lock already depends on the new lock. [ 928.784826][T30318] [ 928.795220][T30318] [ 928.795220][T30318] the existing dependency chain (in reverse order) is: [ 928.800684][T26218] tipc: Subscription rejected, illegal request [ 928.804225][T30318] [ 928.804225][T30318] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 928.804265][T30318] blk_alloc_queue+0x544/0x690 [ 928.824258][T30318] __blk_mq_alloc_disk+0x194/0x390 [ 928.829961][T30318] nbd_dev_add+0x494/0xb60 [ 928.834997][T30318] nbd_init+0x15f/0x1e0 [ 928.839761][T30318] do_one_initcall+0x250/0x870 [ 928.845040][T30318] do_initcall_level+0x10a/0x1a0 [ 928.850630][T30318] do_initcalls+0x59/0xa0 [ 928.855473][T30318] kernel_init_freeable+0x29d/0x3e0 [ 928.861191][T30318] kernel_init+0x1d/0x1d0 [ 928.866118][T30318] ret_from_fork+0x514/0xb70 [ 928.871286][T30318] ret_from_fork_asm+0x1a/0x30 [ 928.876564][T30318] [ 928.876564][T30318] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 928.883763][T30318] fs_reclaim_acquire+0x71/0x100 [ 928.889246][T30318] __kmalloc_cache_node_noprof+0x66/0x630 [ 928.895516][T30318] create_worker+0x112/0x7b0 [ 928.900712][T30318] workqueue_prepare_cpu+0xe4/0x170 [ 928.906421][T30318] cpuhp_invoke_callback+0x434/0x810 [ 928.912240][T30318] _cpu_up+0x2ce/0x5b0 [ 928.916838][T30318] cpu_up+0x1d2/0x220 [ 928.921363][T30318] cpuhp_bringup_mask+0xb2/0x1a0 [ 928.926890][T30318] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 928.933261][T30318] bringup_nonboot_cpus+0x17/0x30 [ 928.938808][T30318] smp_init+0x32/0x110 [ 928.943470][T30318] kernel_init_freeable+0x27f/0x3e0 [ 928.949212][T30318] kernel_init+0x1d/0x1d0 [ 928.954052][T30318] ret_from_fork+0x514/0xb70 [ 928.959149][T30318] ret_from_fork_asm+0x1a/0x30 [ 928.964421][T30318] [ 928.964421][T30318] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 928.972135][T30318] cpus_read_lock+0x42/0x160 [ 928.977263][T30318] static_key_slow_inc+0x12/0x30 [ 928.982747][T30318] nbd_genl_reconfigure+0x1301/0x1e80 [ 928.988687][T30318] genl_family_rcv_msg_doit+0x233/0x340 [ 928.994844][T30318] genl_rcv_msg+0x614/0x7a0 [ 928.999868][T30318] netlink_rcv_skb+0x226/0x4a0 [ 929.005140][T30318] genl_rcv+0x28/0x40 [ 929.009634][T30318] netlink_unicast+0x7bb/0x940 [ 929.014909][T30318] netlink_sendmsg+0x813/0xb40 [ 929.020192][T30318] sock_sendmsg_nosec+0x13a/0x180 [ 929.025742][T30318] ____sys_sendmsg+0x54e/0x850 [ 929.031083][T30318] ___sys_sendmsg+0x2a5/0x360 [ 929.036304][T30318] __x64_sys_sendmsg+0x1b1/0x290 [ 929.041778][T30318] do_syscall_64+0x174/0x580 [ 929.046881][T30318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.053285][T30318] [ 929.053285][T30318] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 929.060941][T30318] __mutex_lock+0x19d/0x1550 [ 929.066039][T30318] nbd_queue_rq+0x373/0x1150 [ 929.071332][T30318] blk_mq_dispatch_rq_list+0x499/0x1990 [ 929.077458][T30318] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 929.084384][T30318] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 929.090906][T30318] blk_mq_run_work_fn+0x16c/0x300 [ 929.096468][T30318] process_scheduled_works+0xa8e/0x14e0 [ 929.102604][T30318] worker_thread+0xa47/0xfb0 [ 929.107728][T30318] kthread+0x388/0x470 [ 929.112308][T30318] ret_from_fork+0x514/0xb70 [ 929.117411][T30318] ret_from_fork_asm+0x1a/0x30 [ 929.122745][T30318] [ 929.122745][T30318] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 929.129947][T30318] __mutex_lock+0x19d/0x1550 [ 929.135103][T30318] nbd_queue_rq+0xc1/0x1150 [ 929.140137][T30318] blk_mq_dispatch_rq_list+0x499/0x1990 [ 929.146298][T30318] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 929.153149][T30318] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 929.159638][T30318] blk_mq_run_work_fn+0x16c/0x300 [ 929.165221][T30318] process_scheduled_works+0xa8e/0x14e0 [ 929.171371][T30318] worker_thread+0xa47/0xfb0 [ 929.176477][T30318] kthread+0x388/0x470 [ 929.181053][T30318] ret_from_fork+0x514/0xb70 [ 929.186151][T30318] ret_from_fork_asm+0x1a/0x30 [ 929.191426][T30318] [ 929.191426][T30318] -> #1 (set->srcu){.+.+}-{0:0}: [ 929.198544][T30318] __synchronize_srcu+0xc9/0x2f0 [ 929.204115][T30318] elevator_switch+0x1e8/0x7b0 [ 929.209395][T30318] elevator_change+0x2fa/0x480 [ 929.214679][T30318] elevator_set_default+0x375/0x440 [ 929.220402][T30318] blk_register_queue+0x3f3/0x4e0 [ 929.226012][T30318] __add_disk+0x6cb/0xe30 [ 929.230871][T30318] add_disk_fwnode+0xfb/0x4b0 [ 929.236079][T30318] nbd_dev_add+0x733/0xb60 [ 929.241269][T30318] nbd_init+0x15f/0x1e0 [ 929.245935][T30318] do_one_initcall+0x250/0x870 [ 929.251207][T30318] do_initcall_level+0x10a/0x1a0 [ 929.256667][T30318] do_initcalls+0x59/0xa0 [ 929.261529][T30318] kernel_init_freeable+0x29d/0x3e0 [ 929.267249][T30318] kernel_init+0x1d/0x1d0 [ 929.272093][T30318] ret_from_fork+0x514/0xb70 [ 929.277194][T30318] ret_from_fork_asm+0x1a/0x30 [ 929.282476][T30318] [ 929.282476][T30318] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 929.290287][T30318] __lock_acquire+0x1520/0x2cf0 [ 929.295651][T30318] lock_acquire+0x106/0x350 [ 929.300669][T30318] __mutex_lock+0x19d/0x1550 [ 929.305767][T30318] elevator_change+0x1af/0x480 [ 929.311072][T30318] elevator_set_none+0xb5/0x140 [ 929.316442][T30318] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 929.322761][T30318] nbd_start_device+0x189/0xb30 [ 929.328124][T30318] nbd_genl_connect+0x1597/0x1c10 [ 929.333660][T30318] genl_family_rcv_msg_doit+0x233/0x340 [ 929.339730][T30318] genl_rcv_msg+0x614/0x7a0 [ 929.344835][T30318] netlink_rcv_skb+0x226/0x4a0 [ 929.350105][T30318] genl_rcv+0x28/0x40 [ 929.354600][T30318] netlink_unicast+0x7bb/0x940 [ 929.359869][T30318] netlink_sendmsg+0x813/0xb40 [ 929.365142][T30318] sock_sendmsg_nosec+0x13a/0x180 [ 929.370675][T30318] ____sys_sendmsg+0x54e/0x850 [ 929.375958][T30318] ___sys_sendmsg+0x2a5/0x360 [ 929.381147][T30318] __x64_sys_sendmsg+0x1b1/0x290 [ 929.386594][T30318] do_syscall_64+0x174/0x580 [ 929.391691][T30318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.398093][T30318] [ 929.398093][T30318] other info that might help us debug this: [ 929.398093][T30318] [ 929.408304][T30318] Chain exists of: [ 929.408304][T30318] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 929.408304][T30318] [ 929.422123][T30318] Possible unsafe locking scenario: [ 929.422123][T30318] [ 929.429565][T30318] CPU0 CPU1 [ 929.434922][T30318] ---- ---- [ 929.440274][T30318] lock(&q->q_usage_counter(io)#53); [ 929.445643][T30318] lock(fs_reclaim); [ 929.452504][T30318] lock(&q->q_usage_counter(io)#53); [ 929.460411][T30318] lock(&q->elevator_lock); [ 929.464997][T30318] [ 929.464997][T30318] *** DEADLOCK *** [ 929.464997][T30318] [ 929.473127][T30318] 6 locks held by syz.3.6715/30318: [ 929.478306][T30318] #0: ffffffff8fe5b3e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 929.486495][T30318] #1: ffffffff8fe5b220 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 929.495465][T30318] #2: ffff8880275a79c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 929.506946][T30318] #3: ffff8880275a78d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 929.517925][T30318] #4: ffff8880274c9c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 929.528658][T30318] #5: ffff8880274c9c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 929.539553][T30318] [ 929.539553][T30318] stack backtrace: [ 929.545963][T30318] CPU: 1 UID: 0 PID: 30318 Comm: syz.3.6715 Not tainted syzkaller #0 PREEMPT(full) [ 929.545982][T30318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 929.545992][T30318] Call Trace: [ 929.546001][T30318] [ 929.546009][T30318] dump_stack_lvl+0xe8/0x150 [ 929.546032][T30318] print_circular_bug+0x2e1/0x300 [ 929.546053][T30318] check_noncircular+0x12e/0x150 [ 929.546075][T30318] __lock_acquire+0x1520/0x2cf0 [ 929.546099][T30318] ? elevator_change+0x1af/0x480 [ 929.546121][T30318] lock_acquire+0x106/0x350 [ 929.546135][T30318] ? elevator_change+0x1af/0x480 [ 929.546162][T30318] __mutex_lock+0x19d/0x1550 [ 929.546177][T30318] ? elevator_change+0x1af/0x480 [ 929.546199][T30318] ? rcu_is_watching+0x15/0xb0 [ 929.546220][T30318] ? elevator_change+0x1af/0x480 [ 929.546242][T30318] ? __pfx___mutex_lock+0x10/0x10 [ 929.546255][T30318] ? enable_work+0x17f/0x230 [ 929.546270][T30318] ? lockdep_hardirqs_on+0x7a/0x110 [ 929.546295][T30318] ? __cancel_work_sync+0xf7/0x110 [ 929.546310][T30318] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 929.546328][T30318] elevator_change+0x1af/0x480 [ 929.546353][T30318] elevator_set_none+0xb5/0x140 [ 929.546375][T30318] ? __pfx_elevator_set_none+0x10/0x10 [ 929.546399][T30318] ? xa_load+0x1db/0x210 [ 929.546418][T30318] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 929.546436][T30318] ? kernfs_add_one+0x480/0x5e0 [ 929.546493][T30318] ? nbd_start_device+0x17d/0xb30 [ 929.546513][T30318] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 929.546535][T30318] ? sysfs_add_file_mode_ns+0x258/0x300 [ 929.546559][T30318] nbd_start_device+0x189/0xb30 [ 929.546578][T30318] ? device_create_file+0xf4/0x1b0 [ 929.546649][T30318] nbd_genl_connect+0x1597/0x1c10 [ 929.546669][T30318] ? __pfx_nbd_genl_connect+0x10/0x10 [ 929.546687][T30318] ? rcu_is_watching+0x15/0xb0 [ 929.546704][T30318] ? trace_kmalloc+0x2a/0xf0 [ 929.546727][T30318] ? __kmalloc_noprof+0x396/0x720 [ 929.546750][T30318] ? __nla_parse+0x40/0x60 [ 929.546775][T30318] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 929.546799][T30318] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 929.546824][T30318] genl_family_rcv_msg_doit+0x233/0x340 [ 929.546848][T30318] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 929.546873][T30318] ? __lock_acquire+0x683/0x2cf0 [ 929.546892][T30318] genl_rcv_msg+0x614/0x7a0 [ 929.546915][T30318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 929.546934][T30318] ? __pfx_nbd_genl_connect+0x10/0x10 [ 929.546962][T30318] netlink_rcv_skb+0x226/0x4a0 [ 929.546979][T30318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 929.547000][T30318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 929.547021][T30318] ? down_read+0x2be/0x330 [ 929.547038][T30318] genl_rcv+0x28/0x40 [ 929.547057][T30318] netlink_unicast+0x7bb/0x940 [ 929.547076][T30318] netlink_sendmsg+0x813/0xb40 [ 929.547096][T30318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.547114][T30318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 929.547135][T30318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.547152][T30318] sock_sendmsg_nosec+0x13a/0x180 [ 929.547174][T30318] ____sys_sendmsg+0x54e/0x850 [ 929.547193][T30318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.547212][T30318] ? import_iovec+0x73/0xa0 [ 929.547260][T30318] ___sys_sendmsg+0x2a5/0x360 [ 929.547276][T30318] ? __lock_acquire+0x683/0x2cf0 [ 929.547292][T30318] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.547310][T30318] ? futex_wake+0x51b/0x5f0 [ 929.547347][T30318] ? __fget_files+0x2a/0x420 [ 929.547361][T30318] ? __fget_files+0x3a2/0x420 [ 929.547380][T30318] __x64_sys_sendmsg+0x1b1/0x290 [ 929.547397][T30318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.547420][T30318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.547437][T30318] do_syscall_64+0x174/0x580 [ 929.547451][T30318] ? trace_irq_disable+0x3b/0x140 [ 929.547467][T30318] ? clear_bhb_loop+0x40/0x90 [ 929.547484][T30318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.547500][T30318] RIP: 0033:0x7f464319ce59 [ 929.547516][T30318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.547530][T30318] RSP: 002b:00007f4643fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.547547][T30318] RAX: ffffffffffffffda RBX: 00007f4643415fa0 RCX: 00007f464319ce59 [ 929.547559][T30318] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 929.547570][T30318] RBP: 00007f4643232e6f R08: 0000000000000000 R09: 0000000000000000 [ 929.547579][T30318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.547589][T30318] R13: 00007f4643416038 R14: 00007f4643415fa0 R15: 00007ffebdf43d48 [ 929.547607][T30318] [ 930.164737][T26147] block nbd4: Receive control failed (result -32) [ 930.171620][T26147] block nbd4: Receive control failed (result -32) [ 930.245644][T30318] nbd4: detected capacity change from 0 to 63 [ 930.253725][ T10] block nbd4: Dead connection, failed to find a fallback [ 930.271672][ T10] block nbd4: shutting down sockets [ 930.277052][T30333] netlink: 'syz.4.6721': attribute type 1 has an invalid length. [ 930.285630][ T10] blk_print_req_error: 138 callbacks suppressed [ 930.285647][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.301524][ T10] buffer_io_error: 138 callbacks suppressed [ 930.301540][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 930.317125][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 930.325796][ T10] Buffer I/O error on dev nbd4, logical block 2, async page read [ 930.337312][ T10] Buffer I/O error on dev nbd4, logical block 3, async page read [ 930.359367][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.368646][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 930.376795][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 930.385364][ T10] Buffer I/O error on dev nbd4, logical block 2, async page read [ 930.394314][ T10] Buffer I/O error on dev nbd4, logical block 3, async page read [ 930.403460][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.413023][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 930.421212][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 930.430610][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.440162][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.450412][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.461318][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.471001][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 930.480520][T27080] ldm_validate_partition_table(): Disk read failed. [ 930.498953][T30348] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.508953][T30348] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 930.534136][T27080] Dev nbd4: unable to read RDB block 0 [ 930.541358][T27080] nbd4: unable to read partition table [ 930.555556][T27080] ldm_validate_partition_table(): Disk read failed. [ 930.563923][T27080] Dev nbd4: unable to read RDB block 0 [ 930.571568][T27080] nbd4: unable to read partition table [ 931.541679][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.548195][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 936.011810][ T25] block nbd5: Possible stuck request ffff888027727000: control (read@0,1024B). Runtime 150 seconds [ 936.024178][ T25] block nbd5: Possible stuck request ffff8880277271c0: control (read@1024,1024B). Runtime 150 seconds [ 936.035629][ T25] block nbd5: Possible stuck request ffff888027727380: control (read@2048,1024B). Runtime 150 seconds [ 936.047165][ T25] block nbd5: Possible stuck request ffff888027727540: control (read@3072,1024B). Runtime 150 seconds