last executing test programs: 2.845432237s ago: executing program 2 (id=1815): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.723042204s ago: executing program 2 (id=1818): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44851}, 0x20) 2.607280478s ago: executing program 2 (id=1820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000580)="07e669a03a8172df304dd761647831dfaf75c663c21c146b1c8b15b5c5d1e0de7e5610765e2f365e739ff18667738450abcf8aaad8eac3223fbe265e79645c6e02919d7e251d11ff379ef378efd28b2a408e60b540dc97f1da96c4601c8e7c7da92983b7d15a9b8501a82eaf146471bdae2be19f9ba6b1f94b2157b846455cb6434e05ef7bbd11f9dd76ad229c181cd61a7ce2ccf6829271c4360bb1155fc10f5aa1be3d33e6e8bbe9d13818e9de4ccfe40bbf0eb1a1a313415556fd857c1ef2ba2c9131f0f014c1d78c7680a7cc65b927b11ad4c8c240f22b44b9fb4b4d3082b7cfcb22f38a65d018ac9eb520e66264a1c8065f19a569eeba5d6e39ede87bacfa7803e59d4c3ef62112163a65eceec1ebdb60e0d6bfaf9373a999f004acbf1e3f4f79f81e2afbc456101d1ecaf999ca58e9e87ca5c2587d974ee683f0c65576b5871692fc1239533d96ed44447ea640e0dd5a92679343ee046c3bbc2a10c121e21f4d337908f863f0145bf847cb53ce547d5464dbb9ec99418c80cc5ab469414cef19ca41a3a9c5fd915f3cd7e779f93afa449f4830023cc46cd87818c36881212e3a517ebf7b7fd49a5923b3671837765ca2ab97c2f3b3adeaa9a0122dee292c9886ea4555e81467fb0c30787cd6dd4b55c8bba590f001f5ccfbb405026b20946aace8fdcde153f7fc7175150fc5907d995eb26e7cde81d70f1f28dfa17544270405b0eb123ec71509ebab430556db45a207c9c6289539ec6676c34827d66da217bd689458db9b4c6ab61f7ba2d40a652e60fa6a4464b327dac349af24e9a0e9132ec4fcd5b90f18ca012d722bd92f9a8bf9d9e0e6350d35a36c18e94cc9ad26497e9514da72743bdbcda0345bef7196a88210508e7314ef05c920ca27a9d22565f4b294121760393212e83fdf041511d79af1b505c5e98324efd8a133557c8ad7796abd5a2f39dab8e4c84aa3eea91082e47a2e16b0561699fa75b130e5c261f91374063347f45bdb99bd0484eb9c550e382290f74f3435bfb35275d5321a2c50454379b78ace78a2ee97cd21d9869c7737a26b8f3ea68902ae87d5d61f20313cd792995738c752102808072b715950e613b7518f25801d6c07702762f81107d7d4f8badae96cc562e71e90ade1fe1ebdec862ad54b06e00665026cac258bd931505485cf157c5fc68fe33012888a68f073476966c4746c8603ee15eed7d3a79e7197251fdd57204bddd205d70db589872a5554c46de61ed5ccd24cf3792ec10fa1a13a4b52c9240c23941a64f102bc0de19a75ec90aeaf20b602ae9556ba9c27699603ef58037f716834574774365ae56ae1fd004934a516740ed80cc4d0c85eb55d822679a06a7291414105ff3940b65eef2df3cd8880dba7f4726ec5388c6ed979c539bc4dc594fb8b3aefce6c1570ef8e747bf44f3a501b065b36a3fab5d7c8b562e70f1240e32561eeee0e957cd4e76f548c0ae6b2fbb13a36f5559ef2d6d0580d3aa38d7b299c7fecfe404366d0927989aadcdf38c017ec21fcce7568cba5e9530b284202527b7a11323ca22438e3bfd16350ed8c7fef6e85a556af8f6ea15e59a82eda7d573147f36cc91d75af6737bfba58c9bd970f25f9dc45afcd46efbeae2f60ba51d5f4477421fede5d220a0be69efe79a3e856d3b80304db16ead1de6f2efca879b04d282e88c4f14696004a7d39fd8da7eb8a518021f59a7fd97a7fbb7075840f73b6a86ac87e5b784b6e05ecf53b68a634925c69ead8249e3468f301455307bb93c3e7d37683d70f26608f7e8b234071b56d9cbf906b59448edaace8a4b4ce071f1966aa49dfb37c9951f7cb123d25ab3b59d792d4b06f8f9048eea29c8166c14bb9b5be2192abac2af8604f5c6ed84c2f7c12541e186c93ab130c31147855822758e50dfa826bec9f6e107891b2b244b1d9515130526edffbca7d16092ba2fdb487f69af6ffa795a226f2ee7f294b4685c859a9eb7dd1f44aa72112a9261d2ca4b5a0d3dada646cb9cd1993f93641c0b7d761f499acd80fae768fdbfb1b5e4033cc86e5408e6dcb89313b4434a2682e7c9f6316065b6b8fb72e26695b911dd984be8f298dd77f22a92ecf432956935adb45039ce3f7406b19eda9503ebf6074cac8acc05aed953180cedee092f303277195727c293120fe79bc647fd78fa2b1d9e9c4e433c6c53eaf6fd8ad32d85ae57b2ef1736e19a81132f7d31d44b3a8973d7d9add910df125ee7f76e17025024169402b2484591e1a85a4bd9a0caa346d47bab601238b2ddc833988872563b3a69d2eb31bb1f53742b554d0f787a3f3956a13c83f5fc6cf42c66a1f0921efdd9eaeefbeecf094f27d66fb342d910ca475e305b457e92ee4a187c431ccee885fde4390d79ca24f422f12a22025bb3c39933c32e894303bd110f36d47f32be8a8dd2fa1512c3cf01edc6ce88be3720e20c060c392cfe023d11af6eeede0c2244eb4e9aab76b6f3da4c51168dcffa3e3a8684e23b9249ac254627524d3484fb86248cb9d80b0c536037f035f3e0cdc3a6cb4749ac4fb401a77b6ffc43a9e7c65368e3c2b6ae5d9ce459eb92e2b4822b7e7cd9c2498baf1ca91f48037e3c959ad5adc2a99e685b6b5ac268ee181bb3577e095055013a2a75b68447a152349bd4c1beadae47a466d7dd0bcb72f222c3cf46ad2bf04d8fdfa6472d193ac20e335ad4f2fef41a59cf0cf555f8bb40dbc8a87b1295764addf7e9b411d76c74a919c6958d4f1f65ad37055c28fb593f54545440a8637299ed21f0d3ce19d221bb1d86e80ea6d8d8319e79e1accdb7084501ecee65d65263c482ce386c0035fd60b0cbe54a688b96d7e4db2181bc218009607df50f36a8a7e9245d3aa5e932bfbd635e4a45f3fb01753d072d102d805ffce64aef895155283c13f32018cb13ea372af4568e953d7b0ca56aba92ee5252e952f9a3ebb4ccb55f8bc58f0efcd8871549fb611c3139fc17bb23235abe129882288b92224a4d75941724be72df56cc114af389f522b78cc3dd3c759e201df94fad860fef5d49fc8ad0d32bb7f2b8fdd540496d9e601b1784716a376a4c967ca6597dd458cac891f36aae2f543df02967ee18cc91a6a838832399cb5c7c13461573bd0d6a08fa7f77d5e9e3245c93d1b1aa8f9eaa8b5eb444fc75650f1366e1aa355cb03ebfd35cde3dfb6e1e137fb7aa640fc6c954c23122ddd1e61ecbc388c6718b13338ab3d1156ad31549fe0f3e5ef1f67be9484422620e28802bc01b351b7126e78e0912844488fa183c5701ff82bb70c8c2837667ebfb25d0f6e753d221680d005c8ade6a791ee28c6a01dd206f0ba7e4f28650437c435611e0257a9871438471e5fe6cdc45b3d0694abcfb471d7daeb02edc125871e7775caea8c33799e4e1ced13ecef730c574b7e59a63c7d105f0eee3a203e85a27c52d175ad56d8ff0beb64750a996c6a11a897f6dbac312312f1ba6f26930ed5ec5708832561bdcbf6c222cf6b7d26308da2e130dce57d1fa356bbb18509ee64fa2e5aea75ec6a570e13ccaaad8de83fb43a28e49d56515051a5faf22da3d2beb335166c9645b7042df226c4f9fa0391c91f3bd7b306c928d17185242e051081ac70c10a33d5382a332aedf5bd2214452d1e6aa0df1c6529269359e56e15422be6aa6e5e36f57017fa9d6af14f74afaba3381e12ce4b482fd4d5768e821a65f443064488b91d690dd00a71bab2e4967d97dfbfb12e537fbdf9dca75e10fe2095ce0f096cb0cf83d585d380173f45e7c65179027c2930a628e3b60540eb9dbacab80179637ed4d1adaa9ec93b06763642fb6d429efd1eab77b61caf7715cb151e9c4753782063cfb9dd34165f4680d58120d385fef0e7756d0395144d4837bafaf7e784e20f70df557fa24b8f504eb7fb97b6ae867952416eede8f9cd5b25d5fee22adef14b67bbe82e9632a77c4cd97da1a878f66e2cc39991f70d9047822d3d2e7fe6fd0b155e05f9a81214cc26826f20dfb58b484ef0e1231ed3a3e00272dc9c7e0fa00efac0bbf5297e571b3bf921e2c78ba65ab09bb1146632b71562a18dc90425da4a5bb361e1080e21cb9371122698a6247c9e0d88748e9ff5fcd90479059a9bc1657f0b922c71bc39875446af3752d47a8ca8fb3ae211fbb87ebe049a2460e877b94b4727f9e97fb227922ea9f27ea2973684c48b2bfac72f3f3d3b6ca31a6f9a488533e3bfd47c9544da27532530f2232d923ba9a5e022d784ce9f4df6ebbe12316985c489f1a8003dbb43124576412b1e8d813f646ddd6cced5f0334e692b5bdd52524c5a525e0366c78fe7a67a21b99e7c8bcddae805583b8a22c6d4a92c9e582cf7ba5bb3c6780e6eb2bbdf0fafc3e28934015cb459971ebb8a7d9e7bc92a77b2a5fff4efc88031c8422616c462adf65f4a1160f01cacfaedfaac56f83422ec11b5c9a43a2b2cb119f36aac05dbd9e1148384d2672c3c26db151e83e7a2d9f9b4c940b362835d17111f32976f3a7bdecaa9312585572a4ec97f2d59a6b10b6ffcbff5d74d034a2c2d6aa7d24273b6c2027b1bfd6f7701cd8c8772b037075bb49f9295969cb47913d6bad34c63cc9eeec8432dc066338d946470f6622e9ca2f2b168c17c25f7621d6c95f1c6f967e742d892687a8f31949df886fb13bfd9bffff03b2cde2ea9e3e30418eca09107297a88c9086909c974cf7ce62c2ef9f2411d6d366902f0474cd8100b439a5aa71c85cd99fb4f6f010eb0c868aaa264f2bf33c2dfb3a4a743aae5d5b622344c01437db82093e7edbd24a606c72451f4b6ad15b14878a7929799f8d46a9b55cfeea34fb0aa46c0b1cb73aedf5622e99202e7ee3f197d2ce47cf962a94b35fd3872ea27e995ed5f8606645f8aedbcb0a70f48759e859e5ba4dc726647eb61f5e54d0bbb0baed35c0a0419adcebb33abf81dbe1176635c240b9143953e9fad0a565b83fac22807233691b053184fc06de824311efa5a6f9f7c9fbbe1db14a74937a9294aeeeb4ad378de76212106b952af70213289008b52fa425926cca1797ab5561044c47c6626a55ee9211e71bb06102b50afad6c88dde69f0e4ef7cf0b5c201c20d45816db4925c8cc1a785e022e586cd9860b9123edf8703ecaf4dbad20e38f114db502432182141280d609058b60a7df95cf057be546f123ec36ed6d9e73ae542aa07f2260acead3241b9a3f45816e47cf476a06fa872adae1619a36319955e47023417531867c9ab4ed27e9b1c763e99ccde88add2707372ca1b10480125406a8bfb0e58f7850d75f61f4415a2907391d70d5520e8736b632a039673987d1fed395fa36c35148b71faa5d2294ad305437c303dc6aa793a9c2724be72fa86302fcc72b80f5f6a7ed8461086d4efa4219250ae3c397d6c30aa48bc9d9fcc5653323ada5fdfbcafb0fe5ae3f52b081100bb0d7591303da1f71c0dcf1bd1fd3af1a18f2db2cef10733473beee313af9c20fd13c1993014187e539b06924fb963fafb218730cb21e8c0e3650f0ee6dfaa38e0188e1e071ca66f71798c2aa97938921685fd76e84afbac1a0d2621b6791b4ccc161098112a7f9c3e4305e3499ed9ef3156943b976fb95daa2490b3d9a235989a74fd6e61d753061706b0f5b35b20ae0a2bd60d0779a4cad3df3c602f937c069b7f0375778261149abcafc491149cc56e9c8b79504dafae49589c223fa3b6fc03eed13271b3f4aaa616ae05a5b0797583ecdb06262710bf334af2efb8e3ff0d8a182668724d2680e356fc3fd529b06fe25d4dd40cd9cf070d85fbf75d11984", 0x1000}, {&(0x7f0000001580)="0ac9098c0d914e855b4aa80b040bcdd8df7d49958b728a0f9c5fa54305cd1473617aa98ecb550f87663769e3220dfebd87ec0bdfb7a9063f6abbd46cb77239b2a4c606f478b3dbd8c96aa3c30ae8537eef0886cfb487168853c9bbc2e339cfd4e7b45524bd09b86fdebf3c84b28924d83d53a6da74133c42328d8c06c625fea78c30b1e73a5fcf", 0x87}], 0x2, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2c}}, @ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0x13, 0x2, [{0x2, 0xd, "38e42a616575a78beb0a36"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xa0}, 0x40800) r2 = socket$inet6(0x10, 0x2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 2.468613469s ago: executing program 1 (id=1822): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x2) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x10) 2.361089741s ago: executing program 1 (id=1823): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000240)=""/118, 0x76}], 0x2, 0x0, 0x0, 0x40002141}, 0x38, 0x6) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.168588027s ago: executing program 1 (id=1825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x1, 0x9, 0x8, 0x6, 0x0, 0x2, 0xfaa, 0x9}}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r8 = socket$kcm(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r8}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYBLOB="3f202c795679e9b313eb27a0f7729ead605953426e0fb60ff2c0692f3da7c92b144bbbee822f40e2230b1e858dc23f79b7d5107a8dcdef12f821702139f0ba4759a4a5c527e54a4906cc8e7cc80c924b48f49fe3b7fa656853dfc1ba37ee8a87e1599cae93894a2f86287d32c94b9eee5243dd27c88856a7ce3bb20a715a89af78eafca9874ce30a175a37ed5719cb58a7624f78d0496eff2c76381e34ce8edfa8e2643f277876756fad474789ce878defe8e1e025b8474fc941f350d8e295f46477b245f05660d617af330dfa04bf72ddb542ec2796688374d3be03", @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @void, @x25={0x3, 0x5, 0xfb, "4cf7fa9211635bb0860ce728084e276e00001835e0dd3c0f1e7b"}}, 0x1d) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.023500437s ago: executing program 2 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x20000080) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) 1.864300842s ago: executing program 3 (id=1829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.864064153s ago: executing program 0 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301edff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.863578558s ago: executing program 1 (id=1831): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000001d80)=[{&(0x7f0000000180)="5cfc2b", 0x3}, {0x0}, {0x0}], 0x3) recvfrom$packet(r3, 0x0, 0x0, 0x10140, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4040850) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @random="e278c8b9b5d9", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty=0xe0000001}, {0x8000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xfffffff7, 0xfffffffe}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r8, 0x4) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x1, 0x7800, 0x5, 0xe3, {{0xd, 0x4, 0x0, 0x16, 0x34, 0x65, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @remote, {[@generic={0x94, 0x9, "2279c672b6a922"}, @end, @noop, @generic={0x88, 0x12, "c5e6cb1972c3764a385962b4ffde1338"}]}}}}}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r5}, 0xffffffffffffff0d) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e0000000300000059cf7f3a0700000000030100", @ANYRES32=r9, @ANYBLOB="0200"/20, @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB="0400000005000000040400000100"/24, @ANYRES32=r11, @ANYBLOB], 0x50) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5b1}, &(0x7f0000000040)=0xc) 1.675792774s ago: executing program 3 (id=1832): r0 = socket$inet6(0xa, 0x4, 0x7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = socket$inet(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000002300)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x30}}], 0x18}, 0x20000050) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000200)={0x9f, 0x6, 0x3, 0x9, 0x3}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000080)=""/12}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x200800, &(0x7f0000000080)={@align=0x7, {0xb, 0xdf, 0x0, 0x5}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000180)={@local, @loopback}) 1.646058331s ago: executing program 4 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 1.596899307s ago: executing program 0 (id=1834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz2\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x14, r2, 0xd5c15c672e322a81}, 0x14}}, 0x20000008) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x19a, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x0, 0x1, 'icmp6\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 1.519063169s ago: executing program 2 (id=1835): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80001, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r1, 0x620ee000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r7, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r7) 1.419823649s ago: executing program 4 (id=1836): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000018c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000080000800074000000000080003400020100e140004800500014000000000f7e70240000000009ca2771e141f180e66aed44e62b2f0b687c503429e79e3e06c0ed92e448793bc9d6d3ac044fc5338d12976a9482dc4be445e65602dac27a88194d04c53e52d"], 0x80}}, 0x0) (async, rerun: 64) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x73) (async) r1 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$inet6(0xa, 0x3, 0x8000000003c) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000180)={@local, @empty, 0xffffffffffffffff, "47750ae95979e108c20c9f10071eb7885a6d091a2bd433f6979569980a7e95f7", 0xffffffff, 0x7, 0x4, 0x80000001}, 0x3c) 1.300489564s ago: executing program 1 (id=1837): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="ad56b6c5820fae9d6dcd3292ea54c7be857600004c90c200d63d8da40fa5e94dab", 0x21) 1.297503745s ago: executing program 0 (id=1838): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b751cf2f8044be98"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="63ce2b4a087e5496304f37ec5a1fac5f"}]}]}, 0x4c}}, 0x90) getsockopt$MRT(r1, 0x0, 0xd0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @remote, 0x1, "daf304f623f35d8564645cf8796d154fb014bb88ce7dcbd8ce5314329adabc0c", 0x10000, 0x1, 0x3, 0xbd}, 0x3c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a01018a0000000000000076eb741ac11e00000000fe800000000000000000bb00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 1.296628329s ago: executing program 3 (id=1839): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) listen(r0, 0x0) 1.183597608s ago: executing program 4 (id=1840): ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b872, 0xc574450d1af3b5bc}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x8000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) 1.130594507s ago: executing program 1 (id=1841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) accept(r1, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f00000002c0)=0x80) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xdc0}]}, @NFTA_CHAIN_USERDATA={0x6d, 0xc, "29a9643dea22b4706520fa8b80f677b36b4af8bcc66e3d7ab6b500f36f709eccd31cb8d7371d8030d88c877f5bf5be812002509245923fdcffeff0739deb9f3da8868dbb855986cd6538e0292ddd38fe8603919acb5b452bc94227b4170da91c7d93c087a7fd3eb40c"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa6ab}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x673}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r2], 0xfdef) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1.030847291s ago: executing program 3 (id=1842): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=ANY=[@ANYBLOB="14dbdf25087c00"/20], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008030) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close(0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x25dfdbf9, {}, [{0x4}]}, 0x18}}, 0x0) 704.230865ms ago: executing program 0 (id=1843): r0 = socket(0x23, 0x5, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}, 0x8009}], 0x1, 0x40, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 556.725862ms ago: executing program 4 (id=1844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0x9, 0x7, 0x7, 0x5, 0xff, 0x8, 0x6, 0x0, 0x9, [0x5, 0x9, 0x2, 0x400, 0x3, 0x7, 0x7, 0x2]}}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfffa, 0xc}, {0xffe3, 0xfff1}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040099}, 0x20000880) (async) connect$inet(r2, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) 484.836668ms ago: executing program 2 (id=1845): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x12}]}, 0x38}}, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0xffffffff}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000008400be0005000000c25952c45c3d94012c9463a1e55ee4f570bebbe572570a372a552fbe1354c18d25889e4eae156da7b1a2b8d16e0ffd7f58b0bb210a959c5602143e6d1802000000b01a5cffd57cc32ff2e93d00"/102], 0x10}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r5, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac12, 0xfac03]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 484.580999ms ago: executing program 3 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xddb6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 480.58761ms ago: executing program 0 (id=1847): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)="5add6e32dbdf67cd1e451c195d502c52df", &(0x7f0000000080)=@tcp, 0x4}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000440)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r4, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x37}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290e29bd7000fbdbdf0527000000140030003d53fe6a4edc40915724e1a6ef0813900a0001007770616e3100000005003100fc00000024003200226ea9908827954609ea2cc17d5e1163c878a322d5d4d24c6d615f7a4a8890"], 0x60}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r4, @ANYRES32=r7, @ANYBLOB="04005b"], 0x28}}, 0x8090) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x880}, 0x2000c090) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0x0) 261.188247ms ago: executing program 4 (id=1848): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xdecc}}, 0x0, 0x4, 0xfb, &(0x7f0000000440)=""/251, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0, 0x10, 0x4867}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) recvmsg$can_raw(r1, &(0x7f00000017c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000007c0)=""/4096, 0x1000}, 0x10002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r3, 0x0, 0x40800) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200000000000001"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 164.975307ms ago: executing program 0 (id=1849): syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x10000, 0x4) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 118.22217ms ago: executing program 3 (id=1850): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x810) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @private2, [], "96b24e2389907a94"}}}}}}}, 0x0) 0s ago: executing program 4 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): lan: entered promiscuous mode [ 92.064436][ T24] cfg80211: failed to load regulatory.db [ 92.143962][ T5639] veth0_macvtap: entered promiscuous mode [ 92.202944][ T5639] veth1_macvtap: entered promiscuous mode [ 92.244463][ T5624] veth0_vlan: entered promiscuous mode [ 92.292322][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.310475][ T5624] veth1_vlan: entered promiscuous mode [ 92.345180][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.415305][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.446810][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.458724][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.470997][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.584027][ T5624] veth0_macvtap: entered promiscuous mode [ 92.606438][ T5624] veth1_macvtap: entered promiscuous mode [ 92.617934][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.687607][ T5625] veth0_vlan: entered promiscuous mode [ 92.709438][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.744498][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.769903][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.794982][ T5625] veth1_vlan: entered promiscuous mode [ 92.810220][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.824732][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.850866][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.861022][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.882249][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.891372][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.926207][ T5636] Bluetooth: hci0: command tx timeout [ 92.931996][ T5627] Bluetooth: hci1: command tx timeout [ 92.946892][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.957160][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.963662][ T5637] veth0_vlan: entered promiscuous mode [ 92.992990][ T5637] veth1_vlan: entered promiscuous mode [ 92.999423][ T5627] Bluetooth: hci2: command tx timeout [ 93.077122][ T5636] Bluetooth: hci3: command tx timeout [ 93.082629][ T5627] Bluetooth: hci4: command tx timeout [ 93.090458][ T5625] veth0_macvtap: entered promiscuous mode [ 93.099834][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.153630][ T5625] veth1_macvtap: entered promiscuous mode [ 93.232908][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.242446][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.291797][ T5633] veth0_vlan: entered promiscuous mode [ 93.307031][ T5637] veth0_macvtap: entered promiscuous mode [ 93.373728][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.380421][ T5637] veth1_macvtap: entered promiscuous mode [ 93.399292][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.409440][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.419229][ T5633] veth1_vlan: entered promiscuous mode [ 93.457635][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.509278][ T3280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.540318][ T3280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.567151][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 93.568693][ T3280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.590348][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 93.591312][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.611993][ T5824] netlink: 'syz.2.7': attribute type 14 has an invalid length. [ 93.621367][ T5824] netlink: 'syz.2.7': attribute type 13 has an invalid length. [ 93.642621][ T3280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.703576][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.750846][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.783200][ T5829] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 93.798858][ T5829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.809201][ T5633] veth0_macvtap: entered promiscuous mode [ 93.818242][ T3280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828128][ T3280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.839663][ T5832] netlink: 'syz.2.8': attribute type 49 has an invalid length. [ 93.855575][ T5829] geneve2: entered promiscuous mode [ 93.861096][ T5829] geneve2: entered allmulticast mode [ 93.892157][ T5831] xt_recent: Unsupported userspace flags (000000b1) [ 93.899025][ T3280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.908267][ T3280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.918238][ T3280] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 93.944032][ T5633] veth1_macvtap: entered promiscuous mode [ 93.969318][ T3280] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 94.025118][ T3280] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 94.096499][ T3280] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 94.110605][ T5836] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 94.132114][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.145054][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.158671][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.206680][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.326710][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.339917][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.356121][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.365507][ T5839] Zero length message leads to an empty skb [ 94.402917][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.423721][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.457034][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.486455][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.531393][ T3280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.547054][ T3280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.660667][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.693221][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.898022][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.908514][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.057431][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.080465][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.097985][ T5867] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 95.245449][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 95.270206][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 95.291121][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 95.340513][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 96.033271][ T5896] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 96.124570][ T5902] syzkaller0: entered promiscuous mode [ 96.167913][ T5902] syzkaller0: entered allmulticast mode [ 96.495983][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 96.596337][ T5921] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.874988][ T5921] netlink: 'syz.2.31': attribute type 5 has an invalid length. [ 97.571090][ T5286] veth1_macvtap: left promiscuous mode [ 97.778845][ T5970] netlink: 'syz.1.43': attribute type 12 has an invalid length. [ 97.839331][ T5970] netlink: 'syz.1.43': attribute type 29 has an invalid length. [ 97.883419][ T5970] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 98.354857][ T6004] Bluetooth: MGMT ver 1.23 [ 98.573717][ T6016] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 98.721426][ T6022] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 98.772268][ T6025] __nla_validate_parse: 8 callbacks suppressed [ 98.772286][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 98.846056][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 98.908186][ T6029] openvswitch: netlink: Message has 4 unknown bytes. [ 99.089221][ T6040] netlink: 232 bytes leftover after parsing attributes in process `syz.1.63'. [ 99.409627][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 99.645208][ T6072] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 99.871774][ T6102] netlink: 'syz.1.71': attribute type 13 has an invalid length. [ 99.908305][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.025502][ T6107] netlink: 52 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.098399][ T14] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.150826][ T14] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.173977][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.197999][ T14] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.222253][ T14] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.261745][ T6125] IPv6: Can't replace route, no match found [ 100.317114][ T6121] IPv6: Can't replace route, no match found [ 100.504987][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 100.739705][ T6141] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 100.811319][ T6141] bridge1: port 1(geneve2) entered blocking state [ 100.835015][ T6141] bridge1: port 1(geneve2) entered disabled state [ 100.850663][ T6151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.84'. [ 100.869015][ T6141] geneve2: entered allmulticast mode [ 100.895590][ T6141] geneve2: entered promiscuous mode [ 101.698099][ T6190] xt_hashlimit: size too large, truncated to 1048576 [ 101.714461][ T6189] syzkaller0: entered promiscuous mode [ 101.738404][ T6189] syzkaller0: entered allmulticast mode [ 102.412492][ T6221] netlink: 84 bytes leftover after parsing attributes in process `syz.1.104'. [ 102.439285][ T6221] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 102.439596][ T6224] nftables ruleset with unbound set [ 102.456334][ T6227] netlink: 'syz.4.106': attribute type 5 has an invalid length. [ 102.688098][ T6233] netlink: 'syz.1.108': attribute type 8 has an invalid length. [ 102.812239][ T6243] Bluetooth: MGMT ver 1.23 [ 102.863443][ T6245] ip6t_srh: unknown srh match flags 4000 [ 103.066038][ T6260] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 103.098076][ T6256] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 103.244839][ T6259] bond1: (slave ip6gretap1): making interface the new active one [ 103.284157][ T6259] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 103.366605][ T6264] netlink: 'syz.4.116': attribute type 4 has an invalid length. [ 103.833404][ T6288] xt_hashlimit: size too large, truncated to 1048576 [ 103.952727][ T6295] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 104.256658][ T6305] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 104.304020][ T6305] trusted_key: syz.0.126 sent an empty control message without MSG_MORE. [ 104.423578][ T6310] __nla_validate_parse: 5 callbacks suppressed [ 104.423597][ T6310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 104.427575][ T6312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.129'. [ 104.469755][ T6311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 104.480686][ T6313] xt_cgroup: xt_cgroup: no path or classid specified [ 104.783188][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 104.896068][ T6335] bond_slave_0: entered promiscuous mode [ 104.908889][ T30] audit: type=1804 audit(1783081226.803:2): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.136" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=152 res=1 errno=0 [ 104.921710][ T6338] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 104.935294][ T6335] bond_slave_0: entered allmulticast mode [ 104.959676][ T30] audit: type=1804 audit(1783081226.853:3): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.136" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=152 res=1 errno=0 [ 104.981737][ T30] audit: type=1800 audit(1783081226.853:4): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.136" name="cgroup.controllers" dev="tmpfs" ino=152 res=0 errno=0 [ 105.191255][ T6348] sctp: [Deprecated]: syz.4.139 (pid 6348) Use of int in maxseg socket option. [ 105.191255][ T6348] Use struct sctp_assoc_value instead [ 105.240845][ T6348] netlink: 'syz.4.139': attribute type 33 has an invalid length. [ 105.322679][ T6358] netlink: 'syz.2.141': attribute type 8 has an invalid length. [ 105.350320][ T6352] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 105.407977][ T6348] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 105.448819][ T6348] bond1 (unregistering): Released all slaves [ 105.452787][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.143'. [ 105.598356][ T6372] netlink: 'syz.1.145': attribute type 7 has an invalid length. [ 105.627174][ T6372] netlink: 140 bytes leftover after parsing attributes in process `syz.1.145'. [ 105.714298][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.883911][ T6385] sctp: [Deprecated]: syz.2.147 (pid 6385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.883911][ T6385] Use struct sctp_sack_info instead [ 106.038537][ T6385] xt_hashlimit: size too large, truncated to 1048576 [ 106.102623][ T6393] netlink: 'syz.1.150': attribute type 29 has an invalid length. [ 106.173288][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 106.242619][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.151'. [ 106.426176][ T6418] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 106.501695][ T6397] netlink: 'syz.0.151': attribute type 11 has an invalid length. [ 106.534734][ T6397] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.151'. [ 107.000390][ T6434] vlan2: entered allmulticast mode [ 107.007173][ T6434] gretap0: entered allmulticast mode [ 107.014618][ T6439] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 107.035504][ T6434] bond0: option all_slaves_active: invalid value (8) [ 107.194283][ T6446] syzkaller1: entered promiscuous mode [ 107.222773][ T6446] syzkaller1: entered allmulticast mode [ 107.479566][ T6463] netlink: 'syz.3.169': attribute type 2 has an invalid length. [ 107.858168][ T6484] syzkaller0: entered promiscuous mode [ 107.883094][ T6484] syzkaller0: entered allmulticast mode [ 109.473160][ T6527] __nla_validate_parse: 13 callbacks suppressed [ 109.473179][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 109.489435][ T5627] Bluetooth: hci1: command tx timeout [ 109.610309][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 109.620186][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 112.142444][ T6480] Set syz1 is full, maxelem 65536 reached [ 113.754658][ T6515] Set syz1 is full, maxelem 65536 reached [ 132.997572][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.754878][ T6583] netlink: 'syz.4.190': attribute type 8 has an invalid length. [ 135.882038][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.191'. [ 135.970476][ T6593] pim6reg: entered allmulticast mode [ 136.000641][ T6598] pim6reg: left allmulticast mode [ 136.052843][ T6593] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 136.200692][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.271320][ T6593] bond0: (slave team0): Enslaving as an active interface with an up link [ 136.304726][ T6604] netlink: 'syz.0.193': attribute type 5 has an invalid length. [ 136.344212][ T6610] netlink: 64 bytes leftover after parsing attributes in process `syz.2.195'. [ 136.396832][ T6610] netlink: 64 bytes leftover after parsing attributes in process `syz.2.195'. [ 136.606502][ T6626] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.638744][ T6626] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.894524][ T6633] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 136.946727][ T6638] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.957816][ T6638] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.987402][ T6639] netlink: 'syz.1.201': attribute type 2 has an invalid length. [ 137.000956][ T6639] netlink: 'syz.1.201': attribute type 2 has an invalid length. [ 137.082822][ T6633] bond2: entered promiscuous mode [ 137.141430][ T6633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.275144][ T6644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.328966][ T6644] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 137.362117][ T6644] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 137.379155][ T6644] bond2: (slave vti0): making interface the new active one [ 137.390215][ T6644] vti0: entered promiscuous mode [ 137.395119][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 137.422561][ T6644] vti0: left promiscuous mode [ 138.071131][ T6686] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 138.228733][ T6686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.238343][ T6696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.219'. [ 138.280603][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.219'. [ 138.314109][ T6696] netlink: 256 bytes leftover after parsing attributes in process `syz.4.219'. [ 138.341756][ T6696] netlink: 256 bytes leftover after parsing attributes in process `syz.4.219'. [ 138.459722][ T6689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.486736][ T6689] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 138.514263][ T6689] bond3: (slave gre1): Error -95 calling set_mac_address [ 138.642280][ T6695] gretap1: entered promiscuous mode [ 138.682172][ T6695] bond3: (slave gretap1): making interface the new active one [ 138.706812][ T6695] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 138.873941][ T6685] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 139.052763][ T6716] netlink: 736 bytes leftover after parsing attributes in process `syz.0.221'. [ 139.067791][ T6716] openvswitch: netlink: Flow key attr not present in new flow. [ 139.159562][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.217499][ T6718] netlink: 56 bytes leftover after parsing attributes in process `syz.1.223'. [ 140.196057][ T5627] Bluetooth: hci2: command 0x0401 tx timeout [ 140.230855][ T6762] syzkaller0: entered promiscuous mode [ 140.246440][ T6762] syzkaller0: entered allmulticast mode [ 140.255028][ T6768] tipc: Enabling of bearer rejected, failed to enable media [ 140.409192][ T6774] bridge: RTM_NEWNEIGH with invalid ether address [ 140.447865][ T6777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.584335][ T6781] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 140.635643][ T6787] x_tables: duplicate underflow at hook 1 [ 140.645718][ T6781] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 140.854355][ T6798] netlink: 'syz.0.244': attribute type 3 has an invalid length. [ 140.894302][ T6798] __nla_validate_parse: 4 callbacks suppressed [ 140.894323][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.244'. [ 140.960200][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'. [ 141.178882][ T6810] netlink: 80 bytes leftover after parsing attributes in process `syz.4.249'. [ 141.230916][ T6813] netlink: 80 bytes leftover after parsing attributes in process `syz.4.249'. [ 141.504063][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.250'. [ 141.860356][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.074363][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 142.354243][ T6864] syz.1.260 (6864) used greatest stack depth: 17632 bytes left [ 142.594620][ T6883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.266'. [ 142.814055][ T6887] bond2: Removing last ns target with arp_interval on [ 143.054416][ T6908] syzkaller0: entered promiscuous mode [ 143.077783][ T6908] syzkaller0: entered allmulticast mode [ 143.100936][ T6908] 0: reclassify loop, rule prio 0, protocol 800 [ 143.193410][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 143.303459][ T6916] netlink: 56 bytes leftover after parsing attributes in process `syz.0.276'. [ 143.488847][ T6930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 143.521763][ T6916] bond4 (unregistering): Released all slaves [ 143.979327][ T6958] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 143.987444][ T6958] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 143.998263][ T6958] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 144.011947][ T6962] gtp0: entered allmulticast mode [ 144.021420][ T6958] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 144.031809][ T6962] team0: Device gtp0 is of different type [ 144.166361][ T6958] vlan3: entered allmulticast mode [ 144.180124][ T6958] bond0: entered allmulticast mode [ 144.189351][ T6958] bond_slave_0: entered allmulticast mode [ 144.195274][ T6958] bond_slave_1: entered allmulticast mode [ 144.422273][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.439288][ T6981] netlink: 'syz.1.295': attribute type 4 has an invalid length. [ 144.934587][ T7004] netlink: 'syz.3.303': attribute type 7 has an invalid length. [ 145.141308][ T7015] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 145.256900][ T7015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.789931][ T7043] tipc: Started in network mode [ 145.804319][ T7043] tipc: Node identity 2003, cluster identity 4711 [ 145.811424][ T7043] tipc: Node number set to 8195 [ 146.048059][ T7044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.096281][ T7044] bond_slave_0: left allmulticast mode [ 146.152569][ T7044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.234802][ T7044] bond_slave_1: left allmulticast mode [ 146.283239][ T7044] bond0 (unregistering): Released all slaves [ 146.340896][ T7076] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 146.449204][ T7076] pim6reg527: entered allmulticast mode [ 146.686859][ T7086] syzkaller1: entered promiscuous mode [ 146.697487][ T7086] syzkaller1: entered allmulticast mode [ 146.900795][ T7102] x_tables: duplicate underflow at hook 1 [ 147.155446][ T7110] __nla_validate_parse: 8 callbacks suppressed [ 147.155464][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 147.417548][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 147.853709][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.889986][ T7146] sctp: [Deprecated]: syz.2.343 (pid 7146) Use of int in maxseg socket option. [ 147.889986][ T7146] Use struct sctp_assoc_value instead [ 148.069194][ T7157] lo: entered promiscuous mode [ 148.105706][ T7157] tunl0: entered promiscuous mode [ 148.149159][ T7157] gre0: entered promiscuous mode [ 148.194297][ T7157] gretap0: entered promiscuous mode [ 148.227708][ T7157] erspan0: entered promiscuous mode [ 148.248165][ T7157] ip_vti0: entered promiscuous mode [ 148.844872][ T7190] netlink: 'syz.4.352': attribute type 58 has an invalid length. [ 148.880916][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.352'. [ 148.906909][ T7188] vlan3: entered allmulticast mode [ 148.938849][ T7188] bond0: entered allmulticast mode [ 148.944915][ T7195] xt_socket: unknown flags 0x50 [ 148.951405][ T7194] netlink: 144 bytes leftover after parsing attributes in process `syz.2.354'. [ 148.962101][ T7188] bond_slave_0: entered allmulticast mode [ 148.972918][ T7188] bond_slave_1: entered allmulticast mode [ 148.995389][ T7188] team0: entered allmulticast mode [ 149.010787][ T7188] team_slave_0: entered allmulticast mode [ 149.034555][ T7188] team_slave_1: entered allmulticast mode [ 149.187158][ T7200] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 149.252470][ T7200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.356'. [ 149.252804][ T7201] netlink: 64 bytes leftover after parsing attributes in process `syz.2.356'. [ 149.503033][ T7218] netlink: 92 bytes leftover after parsing attributes in process `syz.4.360'. [ 149.907818][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 149.975963][ T7235] macvtap1: entered promiscuous mode [ 149.983443][ T7235] macvtap1: entered allmulticast mode [ 149.989419][ T7235] erspan0: entered allmulticast mode [ 150.039445][ T7244] xt_cgroup: xt_cgroup: no path or classid specified [ 150.064582][ T7240] ipvlan2: entered promiscuous mode [ 150.100255][ T7245] netlink: 'syz.2.368': attribute type 4 has an invalid length. [ 150.135103][ T7244] netlink: 'syz.2.368': attribute type 4 has an invalid length. [ 150.173742][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 150.319232][ T7252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.372'. [ 150.330643][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.340239][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.348618][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.356783][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.364600][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.372838][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.381535][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.392822][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.407372][ T7252] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.480538][ T7261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.487886][ T7261] IPv6: NLM_F_CREATE should be set when creating new route [ 150.721772][ T7272] syzkaller0: entered promiscuous mode [ 150.743541][ T7272] syzkaller0: entered allmulticast mode [ 152.715853][ T7224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.976549][ T7296] tipc: Enabling of bearer rejected, failed to enable media [ 153.090070][ T7305] __nla_validate_parse: 65 callbacks suppressed [ 153.090091][ T7305] netlink: 64 bytes leftover after parsing attributes in process `syz.3.380'. [ 153.139085][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 154.201684][ T7377] netlink: 46 bytes leftover after parsing attributes in process `syz.2.395'. [ 156.504802][ T7329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.834693][ T7390] IPv6: sit1: Disabled Multicast RS [ 156.871167][ T7390] sit1: entered allmulticast mode [ 156.967848][ T7395] netlink: 'syz.2.402': attribute type 2 has an invalid length. [ 156.999864][ T7395] netlink: 244 bytes leftover after parsing attributes in process `syz.2.402'. [ 157.032260][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 157.178172][ T7404] net_ratelimit: 59 callbacks suppressed [ 157.178192][ T7404] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 157.372464][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 157.632799][ T7426] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 157.759142][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.923033][ T7446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.939469][ T7446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.982889][ T7446] bond0 (unregistering): Released all slaves [ 158.228466][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 158.271510][ T7461] gtp0: entered promiscuous mode [ 158.294475][ T7461] gtp0: entered allmulticast mode [ 158.316489][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'. [ 158.413017][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 158.454674][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 158.643530][ T7485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.658839][ T7485] bond4 (unregistering): Released all slaves [ 158.871204][ T7497] netlink: 420 bytes leftover after parsing attributes in process `syz.0.430'. [ 158.911934][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 159.007860][ T7501] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.039304][ T7501] bond2: (slave lo): Enslaving as an active interface with an up link [ 159.059825][ T7501] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 159.107869][ T7507] netlink: 48 bytes leftover after parsing attributes in process `syz.2.431'. [ 159.392687][ T7517] geneve2: entered promiscuous mode [ 159.487310][ T7527] netlink: 'syz.1.438': attribute type 9 has an invalid length. [ 159.567832][ T7517] geneve2: entered promiscuous mode [ 159.751163][ T7517] geneve2: entered promiscuous mode [ 159.793684][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 159.808573][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 159.853951][ T7517] geneve2: entered promiscuous mode [ 159.981887][ T7517] geneve2: entered promiscuous mode [ 160.058612][ T7517] geneve2: entered promiscuous mode [ 160.113385][ T7517] geneve2: entered promiscuous mode [ 160.423230][ T7560] block nbd3: not configured, cannot reconfigure [ 160.449617][ T7560] Cannot find set identified by id 4099 to match [ 162.966403][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 163.095362][ T7633] team0 (unregistering): Port device team_slave_0 removed [ 163.143008][ T7633] team0 (unregistering): Port device team_slave_1 removed [ 163.175636][ T7641] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 163.214661][ T7643] netlink: 'syz.1.473': attribute type 12 has an invalid length. [ 163.862488][ T7672] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.479'. [ 163.876646][ T7672] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.479'. [ 163.932118][ T7681] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.094846][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 164.120612][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 164.205427][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 164.239787][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 164.256825][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 164.286149][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 164.327758][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 164.341652][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'. [ 164.601666][ T5286] veth1_vlan: left promiscuous mode [ 165.690115][ T7767] xt_TCPMSS: Only works on TCP SYN packets [ 165.932842][ T7783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.200862][ T30] audit: type=1804 audit(1783081289.083:5): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.523" name="/newroot/103/cgroup.controllers" dev="tmpfs" ino=548 res=1 errno=0 [ 167.225010][ T7843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.232310][ T7843] IPv6: NLM_F_CREATE should be set when creating new route [ 167.253405][ T30] audit: type=1800 audit(1783081289.083:6): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.523" name="cgroup.controllers" dev="tmpfs" ino=548 res=0 errno=0 [ 167.363680][ T7856] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 167.944077][ T7879] syzkaller0: entered promiscuous mode [ 167.959228][ T7879] syzkaller0: entered allmulticast mode [ 168.200017][ T7326] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.212633][ T7326] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.224837][ T7326] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.236167][ T7326] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.365439][ T7897] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 191.149954][ T7959] syzkaller0: entered promiscuous mode [ 191.162409][ T7959] syzkaller0: entered allmulticast mode [ 191.302459][ T7968] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 191.320150][ T7968] netlink: 'syz.2.544': attribute type 3 has an invalid length. [ 191.330480][ T7968] __nla_validate_parse: 78 callbacks suppressed [ 191.330498][ T7968] netlink: 224 bytes leftover after parsing attributes in process `syz.2.544'. [ 191.766859][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'. [ 191.787088][ T7991] tipc: Invalid UDP bearer configuration [ 191.787147][ T7991] tipc: Enabling of bearer rejected, failed to enable media [ 191.808270][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.986980][ T8006] netlink: 'syz.1.556': attribute type 10 has an invalid length. [ 192.081480][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 192.258202][ T8016] netlink: 244 bytes leftover after parsing attributes in process `syz.1.556'. [ 192.360459][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029783000: rx timeout, send abort [ 192.367246][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.371444][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029783000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 192.519003][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.827792][ T8045] 8021q: VLANs not supported on ip_vti0 [ 192.901748][ T8045] bond1: option fail_over_mac: invalid value (16) [ 192.933154][ T8045] bond1 (unregistering): Released all slaves [ 193.264643][ T8067] IPv6: sit1: Disabled Multicast RS [ 193.409080][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.563770][ T8084] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 193.665695][ T8093] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 193.711391][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 193.721888][ T8093] netlink: 240 bytes leftover after parsing attributes in process `syz.1.582'. [ 193.743520][ T8093] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 193.797485][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.816781][ T8093] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 193.883362][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 193.959999][ T8093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.993939][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 194.004292][ T8106] netlink: 72 bytes leftover after parsing attributes in process `syz.2.587'. [ 194.037585][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 194.296593][ T8118] syzkaller1: entered promiscuous mode [ 194.302421][ T8118] syzkaller1: entered allmulticast mode [ 194.349854][ T8118] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 194.375880][ T8118] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 194.445343][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.453990][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.530582][ T8132] x_tables: duplicate underflow at hook 3 [ 194.742668][ T8148] netlink: 'syz.0.599': attribute type 3 has an invalid length. [ 194.815158][ T8144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.997917][ T8157] bond1: option lp_interval: invalid value (0) [ 195.009230][ T8157] bond1: option lp_interval: allowed values 1 - 2147483647 [ 195.048034][ T8157] bond1 (unregistering): Released all slaves [ 195.090846][ T8164] IPv6: sit1: Disabled Multicast RS [ 195.398278][ T8182] netlink: 'syz.1.607': attribute type 1 has an invalid length. [ 195.431333][ T8182] netlink: 'syz.1.607': attribute type 1 has an invalid length. [ 195.476871][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.557423][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.598669][ T8191] tap0: tun_chr_ioctl cmd 1074025676 [ 195.615503][ T8191] tap0: owner set to 0 [ 195.716476][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.921405][ T8206] netlink: 'syz.0.615': attribute type 15 has an invalid length. [ 195.951257][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.389762][ T8214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.430238][ T8214] bond3 (unregistering): Released all slaves [ 196.481132][ T8224] veth3: entered allmulticast mode [ 196.793460][ T8237] nbd: socks must be embedded in a SOCK_ITEM attr [ 197.004480][ T6084] net_ratelimit: 2 callbacks suppressed [ 197.004498][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.053368][ T8246] netlink: 'syz.4.625': attribute type 15 has an invalid length. [ 197.072758][ T8256] __nla_validate_parse: 13 callbacks suppressed [ 197.072777][ T8256] netlink: 284 bytes leftover after parsing attributes in process `syz.1.628'. [ 197.193164][ T8246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.231150][ T8258] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 197.559578][ T6867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.571076][ T8280] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 197.639979][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.706229][ T8282] netlink: 'syz.4.633': attribute type 12 has an invalid length. [ 197.902034][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 198.333693][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 198.369101][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.388920][ T8314] xt_cluster: node mask cannot exceed total number of nodes [ 198.454890][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.523500][ T8327] netlink: 'syz.3.648': attribute type 5 has an invalid length. [ 198.596334][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.000249][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 199.057569][ T8355] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 199.150525][ T8366] netlink: 36 bytes leftover after parsing attributes in process `syz.2.657'. [ 199.173537][ T8367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.658'. [ 199.186311][ T8367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.658'. [ 199.195537][ T8367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.658'. [ 199.258350][ T8374] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 199.283714][ T8374] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 199.285563][ T8366] syzkaller0: entered promiscuous mode [ 199.304437][ T8375] sctp: [Deprecated]: syz.0.660 (pid 8375) Use of int in max_burst socket option deprecated. [ 199.304437][ T8375] Use struct sctp_assoc_value instead [ 199.321025][ T8366] syzkaller0: entered allmulticast mode [ 199.396258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.577542][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 199.619925][ T8386] SET target dimension over the limit! [ 199.636085][ T6867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.655395][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 199.694571][ T8391] block nbd0: Unsupported socket: should be TCP or UNIX. [ 199.791079][ T8395] netlink: 'syz.3.667': attribute type 11 has an invalid length. [ 200.676247][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.684481][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.963685][ T8459] syzkaller1: entered promiscuous mode [ 200.991591][ T8459] syzkaller1: entered allmulticast mode [ 201.150437][ T8468] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.477332][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.552302][ T8486] xfrm1: entered allmulticast mode [ 201.585473][ T8488] sctp: [Deprecated]: syz.0.697 (pid 8488) Use of int in max_burst socket option. [ 201.585473][ T8488] Use struct sctp_assoc_value instead [ 201.654521][ T8489] sctp: [Deprecated]: syz.0.697 (pid 8489) Use of int in max_burst socket option. [ 201.654521][ T8489] Use struct sctp_assoc_value instead [ 201.720096][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.182441][ T8511] __nla_validate_parse: 6 callbacks suppressed [ 202.182460][ T8511] netlink: 84 bytes leftover after parsing attributes in process `syz.3.704'. [ 202.239797][ T8513] netlink: 'syz.1.705': attribute type 8 has an invalid length. [ 202.274463][ T8511] syzkaller1: entered promiscuous mode [ 202.293812][ T8511] syzkaller1: entered allmulticast mode [ 202.393557][ T6083] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.417052][ T8519] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 202.439286][ T6083] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.465138][ T6083] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.503589][ T6083] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.603251][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.712'. [ 202.756331][ T6867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.764546][ T6867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.772720][ T6867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.781870][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.796186][ T8545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.715'. [ 202.835180][ T8540] tipc: Enabling of bearer rejected, failed to enable media [ 202.851996][ T8547] netlink: 'syz.1.715': attribute type 32 has an invalid length. [ 202.872960][ T8545] netlink: 'syz.1.715': attribute type 32 has an invalid length. [ 202.891064][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 203.198087][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.280246][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 203.301199][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 203.419608][ T8572] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 203.573055][ T8576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.602619][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 203.613163][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 203.734196][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 203.859470][ T8589] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 203.940480][ T8594] netlink: 'syz.4.733': attribute type 2 has an invalid length. [ 204.325633][ T8615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.740'. [ 204.602245][ T8636] Cannot find set identified by id 65535 to match [ 205.239928][ T8677] netlink: 'syz.4.759': attribute type 30 has an invalid length. [ 205.278844][ T8677] bond1: option arp_missed_max: invalid value (0) [ 205.287834][ T8677] bond1: option arp_missed_max: allowed values 1 - 255 [ 205.298163][ T8677] bond1 (unregistering): Released all slaves [ 205.546963][ T8692] bridge0: port 3(batadv1) entered blocking state [ 205.576673][ T8692] bridge0: port 3(batadv1) entered disabled state [ 205.607371][ T8692] batadv1: entered allmulticast mode [ 205.655631][ T8692] batadv1: entered promiscuous mode [ 206.017466][ T6094] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 206.027258][ T6094] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 206.055100][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.154809][ T8726] bridge_slave_0 (unregistering): left allmulticast mode [ 206.168804][ T8726] bridge_slave_0 (unregistering): left promiscuous mode [ 206.176471][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.737326][ T8757] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 206.751102][ T8762] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 206.756096][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 206.764753][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 206.782111][ T8757] team0: entered allmulticast mode [ 206.802243][ T8757] team_slave_0: entered allmulticast mode [ 206.815856][ T8757] team_slave_1: entered allmulticast mode [ 206.829408][ T8757] bridge0: port 3(team0) entered blocking state [ 206.847065][ T8757] bridge0: port 3(team0) entered disabled state [ 206.858216][ T8758] xt_hashlimit: invalid rate [ 206.882322][ T8757] team0: entered promiscuous mode [ 206.887679][ T8757] team_slave_0: entered promiscuous mode [ 206.893846][ T8757] team_slave_1: entered promiscuous mode [ 206.901033][ T8757] bridge0: port 3(team0) entered blocking state [ 206.907561][ T8757] bridge0: port 3(team0) entered forwarding state [ 206.956476][ T30] audit: type=1804 audit(1783081328.853:7): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.782" name="/newroot/153/cgroup.controllers" dev="tmpfs" ino=804 res=1 errno=0 [ 206.989983][ T8772] sctp: [Deprecated]: syz.1.781 (pid 8772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.989983][ T8772] Use struct sctp_sack_info instead [ 207.017786][ T30] audit: type=1800 audit(1783081328.853:8): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.782" name="cgroup.controllers" dev="tmpfs" ino=804 res=0 errno=0 [ 207.113531][ T8759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.394248][ T8788] netlink: 'syz.2.787': attribute type 12 has an invalid length. [ 207.904059][ T8816] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 208.017637][ T8826] netlink: 'syz.4.797': attribute type 17 has an invalid length. [ 208.055035][ T8826] __nla_validate_parse: 6 callbacks suppressed [ 208.055053][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 208.078108][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.797'. [ 208.130302][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 208.160611][ T8829] netlink: 'syz.4.797': attribute type 6 has an invalid length. [ 208.185951][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 208.202089][ T8826] gretap0: entered promiscuous mode [ 208.237155][ T8826] gretap0: left promiscuous mode [ 208.318386][ T8835] bond0 (unregistering): Released all slaves [ 208.387391][ T7326] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.428286][ T7326] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.464640][ T7326] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.485094][ T7326] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.619555][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'. [ 208.823508][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'. [ 208.851758][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.808'. [ 208.870338][ T8863] openvswitch: netlink: Missing key (keys=40, expected=100) [ 208.904369][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.808'. [ 208.939765][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.808'. [ 208.963378][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.808'. [ 209.190227][ T8881] x_tables: duplicate underflow at hook 1 [ 209.209916][ T8882] x_tables: duplicate underflow at hook 1 [ 209.547362][ T8889] bridge1: port 1(geneve2) entered blocking state [ 209.554066][ T8889] bridge1: port 1(geneve2) entered forwarding state [ 209.599156][ T8889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.640465][ T6083] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 209.681815][ T6083] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 209.712797][ T8900] bond_slave_0: mtu less than device minimum [ 209.727470][ T8902] gretap0: mtu less than device minimum [ 209.749188][ T6083] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 209.784196][ T6083] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 210.650639][ T6092] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 211.335083][ T8981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.489560][ T8987] macvlan2: entered promiscuous mode [ 211.514335][ T8987] macvlan2: entered allmulticast mode [ 211.542169][ T8987] bond4: entered promiscuous mode [ 211.550281][ T8987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.564948][ T8987] bond4: left promiscuous mode [ 211.781550][ T9005] tipc: Started in network mode [ 211.798269][ T9005] tipc: Node identity 080211000001, cluster identity 4711 [ 211.832289][ T9005] tipc: Enabled bearer , priority 0 [ 211.869272][ T9005] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 211.877899][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 211.886258][ T5632] Bluetooth: hci2: command 0x0401 tx timeout [ 212.014468][ T9005] tipc: Resetting bearer [ 212.195403][ T9021] bridge0: port 1(bridge_slave_0) entered listening state [ 212.210674][ T9022] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.603576][ T9039] syzkaller0: entered promiscuous mode [ 212.632580][ T9039] syzkaller0: entered allmulticast mode [ 212.772473][ T9047] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.811361][ T9053] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.851670][ T9053] bond3: (slave lo): Enslaving as an active interface with an up link [ 212.862106][ T9053] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 212.881517][ T9040] tipc: Enabled bearer , priority 0 [ 212.908315][ T6866] tipc: Node number set to 134418688 [ 212.934548][ T9037] tipc: Resetting bearer [ 213.003953][ T9037] tipc: Disabling bearer [ 213.059710][ T9067] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 213.208745][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.393513][ T9071] bond5: up delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 213.420615][ T9071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.515586][ T9077] bond0: (slave geneve2): making interface the new active one [ 213.568281][ T9077] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 213.586249][ T9075] syzkaller1: entered promiscuous mode [ 213.597391][ T9075] syzkaller1: entered allmulticast mode [ 213.872471][ T9106] openvswitch: netlink: Flow key attr not present in new flow. [ 214.153015][ T9122] __nla_validate_parse: 42 callbacks suppressed [ 214.153035][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 214.338669][ T9122] bond1: Invalid ad_actor_system MAC address. [ 214.367399][ T9122] bond1: option ad_actor_system: invalid value (1) [ 214.402386][ T9122] bond1 (unregistering): Released all slaves [ 214.773161][ T9149] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 214.797976][ T9149] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 214.841450][ T9155] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 214.986081][ T9164] netlink: 256 bytes leftover after parsing attributes in process `syz.4.905'. [ 214.999295][ T9164] unsupported nlmsg_type 40 [ 215.325249][ T9175] bond0: entered allmulticast mode [ 215.338184][ T9175] geneve2: entered allmulticast mode [ 215.418646][ T6865] IPVS: starting estimator thread 0... [ 215.531128][ T9182] IPVS: using max 26 ests per chain, 62400 per kthread [ 215.670292][ T9190] syzkaller0: entered promiscuous mode [ 215.687670][ T9190] syzkaller0: entered allmulticast mode [ 215.708987][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 215.722571][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 215.943470][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 215.979547][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.920'. [ 215.989486][ T9207] netlink: 'syz.0.920': attribute type 7 has an invalid length. [ 216.005161][ T9189] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 216.016830][ T9207] netlink: 'syz.0.920': attribute type 8 has an invalid length. [ 216.020022][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803596d400: rx timeout, send abort [ 216.031435][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 216.042759][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803596d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.069632][ T9189] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 216.075564][ T9207] gretap0: entered promiscuous mode [ 216.089557][ T9189] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 216.114034][ T9207] gretap0: left promiscuous mode [ 216.125681][ T9189] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 216.266540][ T9189] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 216.348563][ T9218] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 216.415220][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 216.484304][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 216.512591][ T9225] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.533808][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'. [ 216.534298][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 216.565627][ T9225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.925'. [ 216.579412][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 216.605614][ T9225] gretap1: entered promiscuous mode [ 216.611544][ T9225] gretap1: entered allmulticast mode [ 216.623120][ T9189] syzkaller0 speed is unknown, defaulting to 1000 [ 216.789223][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'. [ 217.171390][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.932'. [ 217.181705][ T9250] nbd: must specify a size in bytes for the device [ 217.250452][ T9249] macsec2: entered allmulticast mode [ 217.259140][ T9249] bond0: entered allmulticast mode [ 217.264971][ T9249] bond_slave_0: entered allmulticast mode [ 217.272050][ T9249] bond_slave_1: entered allmulticast mode [ 217.281330][ T9249] bond_slave_0: entered promiscuous mode [ 217.288490][ T9249] bond_slave_1: entered promiscuous mode [ 217.298724][ T9249] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 217.308915][ T9249] bond0: left allmulticast mode [ 217.320048][ T9249] bond_slave_0: left allmulticast mode [ 217.334915][ T9249] bond_slave_1: left allmulticast mode [ 217.402439][ T9] bond_slave_0: left promiscuous mode [ 217.409221][ T9] bond_slave_1: left promiscuous mode [ 217.465832][ T9257] bridge3: entered allmulticast mode [ 217.609634][ T9260] netlink: 'syz.2.936': attribute type 24 has an invalid length. [ 217.627650][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.935'. [ 217.684292][ T9261] netlink: 'syz.4.935': attribute type 10 has an invalid length. [ 217.737119][ T9270] netlink: 'syz.4.935': attribute type 10 has an invalid length. [ 217.813351][ T9272] netlink: 100 bytes leftover after parsing attributes in process `syz.4.935'. [ 217.834587][ T9261] dummy0: entered promiscuous mode [ 217.847816][ T9261] dummy0: entered allmulticast mode [ 217.877337][ T9261] team0: Port device dummy0 added [ 217.963468][ T9270] dummy0 (unregistering): left promiscuous mode [ 218.001677][ T9270] dummy0 (unregistering): left allmulticast mode [ 218.029698][ T9272] IPVS: persistence engine module ip_vs_pe_… not found [ 218.080783][ T9270] team0: Port device dummy0 removed [ 218.217542][ T9283] ip6gre1: entered allmulticast mode [ 218.437843][ T9293] netlink: 'syz.4.943': attribute type 10 has an invalid length. [ 218.548489][ T9293] bridge0: port 3(team0) entered disabled state [ 218.555628][ T9293] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.669295][ T9306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.762145][ T9309] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 219.198198][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.248099][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.275954][ T9344] __nla_validate_parse: 1 callbacks suppressed [ 219.275974][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 219.294413][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.303553][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.468489][ T9354] netlink: 14 bytes leftover after parsing attributes in process `syz.3.963'. [ 220.100847][ T9377] netlink: 64 bytes leftover after parsing attributes in process `syz.2.973'. [ 220.184479][ T9382] netlink: 156 bytes leftover after parsing attributes in process `syz.4.972'. [ 220.221175][ T9379] ip6gretap0: mtu less than device minimum [ 220.252896][ T9377] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.364684][ T9388] ip6gretap0: mtu less than device minimum [ 220.419346][ T9391] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 220.451652][ T9391] netlink: 260 bytes leftover after parsing attributes in process `syz.0.975'. [ 220.741550][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 220.776946][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 221.069730][ T9424] syzkaller0 speed is unknown, defaulting to 1000 [ 221.099496][ T9431] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.987'. [ 221.121513][ T9431] netlink: 'syz.1.987': attribute type 2 has an invalid length. [ 221.326251][ T9437] xt_cgroup: xt_cgroup: no path or classid specified [ 221.683048][ T9446] ipt_rpfilter: unknown options [ 221.751644][ T9448] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 221.806219][ T9453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 221.862883][ T6867] IPVS: starting estimator thread 0... [ 221.977548][ T9457] IPVS: using max 25 ests per chain, 60000 per kthread [ 222.134129][ T9470] bridge0: port 3(veth1_to_bridge) entered blocking state [ 222.170302][ T9470] bridge0: port 3(veth1_to_bridge) entered disabled state [ 222.230519][ T9470] veth1_to_bridge: entered allmulticast mode [ 222.282461][ T9470] veth1_to_bridge: entered promiscuous mode [ 222.301127][ T9470] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.330015][ T9470] bridge0: port 3(veth1_to_bridge) entered blocking state [ 222.337369][ T9470] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 222.537894][ T9491] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 222.663810][ T9491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.747612][ T9499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.770081][ T9499] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 222.788994][ T9499] bond1: (slave gre1): Error -95 calling set_mac_address [ 222.833062][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.878890][ T9491] vxcan2: entered allmulticast mode [ 223.361155][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 223.563039][ T9554] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 223.640964][ T9554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.721784][ T9559] bond3: (slave dummy0): making interface the new active one [ 223.764363][ T9559] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 223.804895][ T9554] : renamed from dummy0 (while UP) [ 224.127337][ T9577] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 224.167177][ T9577] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 224.313228][ T9584] __nla_validate_parse: 3 callbacks suppressed [ 224.314528][ T9584] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1036'. [ 224.339863][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 224.350081][ T9585] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1036'. [ 224.359353][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 224.375905][ T9588] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1037'. [ 224.581525][ T9597] nbd: must specify a size in bytes for the device [ 224.643645][ T9597] syzkaller0: entered promiscuous mode [ 224.655870][ T9597] syzkaller0: entered allmulticast mode [ 224.829299][ T9604] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 224.885183][ T9608] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1043'. [ 225.318099][ T9627] netlink: 'syz.4.1050': attribute type 33 has an invalid length. [ 225.479842][ T9627] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 225.543146][ T9627] bond2 (unregistering): Released all slaves [ 225.570817][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 225.831771][ T9651] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1053'. [ 225.849767][ T9651] nbd: illegal input index 65508 [ 225.868645][ T9651] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1053'. [ 226.481312][ T9673] gre1: entered promiscuous mode [ 226.489246][ T9685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1063'. [ 226.501973][ T9673] gre1: entered allmulticast mode [ 226.954350][ T9695] bond6: option lp_interval: invalid value (0) [ 226.967174][ T9695] bond6: option lp_interval: allowed values 1 - 2147483647 [ 226.994454][ T9695] bond6 (unregistering): Released all slaves [ 227.682899][ T9736] xt_HMARK: spi-set and port-set can't be combined [ 227.805272][ T9748] openvswitch: netlink: IPv4 tunnel dst address is zero [ 229.547894][ T9817] syzkaller0: entered promiscuous mode [ 229.570127][ T9817] syzkaller0: entered allmulticast mode [ 229.812182][ T9847] __nla_validate_parse: 5 callbacks suppressed [ 229.812203][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'. [ 229.962240][ T9851] netlink: 'syz.0.1105': attribute type 64 has an invalid length. [ 230.018359][ T9851] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1105'. [ 230.284244][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.296731][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.309046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.321409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.333711][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.346052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.358385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.370725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.383086][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.810716][ C1] net_ratelimit: 10704 callbacks suppressed [ 232.810737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.829048][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.841377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.853585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.865914][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.878312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.890693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.902888][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.915173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.927488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 234.166276][ T9829] syzkaller0: entered promiscuous mode [ 234.193543][ T9829] syzkaller0: entered allmulticast mode [ 234.709870][ T9878] netlink: 'syz.1.1111': attribute type 4 has an invalid length. [ 235.359457][ T9886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.661517][ T9900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1116'. [ 236.483093][ T9918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1121'. [ 236.648992][ T9922] netlink: 'syz.2.1123': attribute type 10 has an invalid length. [ 236.717787][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.781283][ T9922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.873915][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.928233][ T9922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.815794][ C1] net_ratelimit: 22475 callbacks suppressed [ 237.815813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.834080][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.846468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.858784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.871264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.883555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.895864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.909388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.921713][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.934036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.010652][ T9960] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 238.076433][ T9960] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 238.150656][ T9962] netlink: 'syz.1.1134': attribute type 8 has an invalid length. [ 238.651025][ T9980] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 239.535021][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 240.264286][T10016] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 240.320662][T10016] ip6t_srh: unknown srh match flags 4000 [ 240.372528][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1147'. [ 240.985366][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 241.480139][T10053] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 241.509331][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 242.642265][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 242.825746][ C1] net_ratelimit: 22756 callbacks suppressed [ 242.825768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.843924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.856189][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.868572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.880778][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.893003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.905227][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.917453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.929683][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.941871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.498123][T10026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.100508][T10096] lo: entered allmulticast mode [ 244.135433][T10096] lo: left allmulticast mode [ 244.955278][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 244.993931][T10120] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 245.019485][T10120] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1166'. [ 245.610633][T10136] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 245.659720][T10136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.688384][T10137] bond3: (slave geneve3): making interface the new active one [ 245.699145][T10137] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 246.861939][T10097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.880130][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 247.835903][ C1] net_ratelimit: 26363 callbacks suppressed [ 247.835933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.854216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.866490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.878933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.891332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.903630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.916002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.928329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.940637][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.952951][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.255117][T10180] tipc: Can't bind to reserved service type 0 [ 248.523138][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 248.559923][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 248.634388][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 248.710363][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 248.752617][T10190] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1184'. [ 248.985432][T10204] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1189'. [ 249.022697][T10206] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1190'. [ 249.054330][T10204] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1189'. [ 249.071711][T10204] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1189'. [ 249.893509][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.006915][T10224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.017877][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.048741][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.072888][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.118137][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.170051][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.204923][T10236] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 250.281167][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.412731][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 250.485612][T10224] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 252.055349][T10284] validate_nla: 18 callbacks suppressed [ 252.055369][T10284] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 252.259703][T10290] __nla_validate_parse: 2 callbacks suppressed [ 252.259724][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 252.519895][T10284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.634205][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 252.846477][ C1] net_ratelimit: 22267 callbacks suppressed [ 252.846498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.864733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.877083][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.889369][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.901973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.914187][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.926472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.938722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.951060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.964121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.237649][T10293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1215'. [ 253.364131][T10296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1215'. [ 253.758304][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 253.882868][T10328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1220'. [ 254.276024][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 255.408796][T10345] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 255.452071][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 255.462079][T10345] netlink: 'syz.0.1225': attribute type 2 has an invalid length. [ 255.608895][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 256.052687][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.321228][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1228'. [ 256.830791][T10372] x_tables: duplicate underflow at hook 3 [ 257.353571][T10390] syzkaller1: entered promiscuous mode [ 257.419331][T10390] syzkaller1: entered allmulticast mode [ 257.859733][ C1] net_ratelimit: 23042 callbacks suppressed [ 257.859755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.878131][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.890405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.902703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.914969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.927249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.939551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.951859][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.964130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.976404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.859738][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 259.519944][T10437] 8021q: VLANs not supported on sit0 [ 261.531327][T10507] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 261.729951][T10507] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 261.898053][T10510] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1263'. [ 262.865732][ C1] net_ratelimit: 22355 callbacks suppressed [ 262.865752][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.885017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.897313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.909576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.921847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.934125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.946430][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.958700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.970963][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.983255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.209995][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1272'. [ 263.228581][T10541] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 263.252607][T10543] netlink: 'syz.2.1274': attribute type 25 has an invalid length. [ 263.327057][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 263.407091][T10547] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1275'. [ 264.153391][T10565] x_tables: duplicate underflow at hook 3 [ 265.669791][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 265.921764][T10616] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1292'. [ 266.052199][T10620] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1294'. [ 267.482329][T10650] netlink: 'syz.3.1302': attribute type 12 has an invalid length. [ 267.875906][ C1] net_ratelimit: 21902 callbacks suppressed [ 267.875928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.894212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.906479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.919171][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.931474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.943769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.956040][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.968323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.980588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.992874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.291646][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 268.930734][T10674] bond2 (unregistering): Released all slaves [ 270.333215][T10720] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 270.398334][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1316'. [ 270.475247][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1316'. [ 271.790883][T10749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1322'. [ 271.831365][T10755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.257669][T10773] xt_l2tp: v2 doesn't support IP mode [ 272.412243][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 272.603720][T10781] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 272.756400][T10781] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1331'. [ 272.885828][ C1] net_ratelimit: 22844 callbacks suppressed [ 272.885850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.904083][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.916354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.929230][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.941475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.953768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.966018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.978272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.990519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 273.002798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.628897][T10888] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 277.650508][T10887] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 277.895832][ C1] net_ratelimit: 21691 callbacks suppressed [ 277.895865][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.923252][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.935565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.947855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.960185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.972489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.984789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.997076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.009464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.021780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.418697][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 278.478328][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 278.557102][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 279.048137][T10935] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 279.093256][T10936] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 279.622755][T10938] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.658137][T10953] xt_hashlimit: size too large, truncated to 1048576 [ 279.798402][T10938] bond4: (slave bond5): making interface the new active one [ 279.870921][T10938] bond4: (slave bond5): Enslaving as an active interface with an up link [ 280.483680][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1367'. [ 280.542256][T10978] netlink: 'syz.0.1369': attribute type 3 has an invalid length. [ 281.350254][T10994] netlink: 'syz.3.1371': attribute type 33 has an invalid length. [ 281.451970][T10999] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1374'. [ 281.938080][T10994] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 282.034133][T10994] bond4 (unregistering): Released all slaves [ 282.155331][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 282.488083][T11009] netlink: 'syz.4.1375': attribute type 3 has an invalid length. [ 282.905735][ C1] net_ratelimit: 21157 callbacks suppressed [ 282.905756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.924149][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.936381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.948643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.960893][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.973173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.985419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.997675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 283.009921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 283.022220][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 283.363058][T11040] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 283.490979][T11050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1385'. [ 283.538840][T11040] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.623908][T11034] syzkaller0 speed is unknown, defaulting to 1000 [ 284.371451][T11069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.500015][T11073] syz.1.1389: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.621385][T11073] CPU: 0 UID: 0 PID: 11073 Comm: syz.1.1389 Not tainted syzkaller #0 PREEMPT(full) [ 284.621431][T11073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.621463][T11073] Call Trace: [ 284.621472][T11073] [ 284.621481][T11073] dump_stack_lvl+0xe8/0x150 [ 284.621519][T11073] warn_alloc+0x24c/0x270 [ 284.621550][T11073] ? stack_depot_save_flags+0x3ec/0x800 [ 284.621579][T11073] ? __pfx_warn_alloc+0x10/0x10 [ 284.621609][T11073] ? kasan_save_track+0x3e/0x80 [ 284.621636][T11073] ? __kasan_kmalloc+0x93/0xb0 [ 284.621666][T11073] ? xsk_setsockopt+0x52a/0x960 [ 284.621690][T11073] ? do_sock_setsockopt+0x17c/0x1b0 [ 284.621719][T11073] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 284.621749][T11073] ? do_syscall_64+0x174/0x580 [ 284.621778][T11073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.621812][T11073] __vmalloc_node_range_noprof+0x12c/0x1730 [ 284.621873][T11073] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.621905][T11073] ? __kasan_kmalloc+0x93/0xb0 [ 284.621936][T11073] ? __kmalloc_cache_noprof+0x32d/0x660 [ 284.621965][T11073] ? __kmalloc_cache_noprof+0x150/0x660 [ 284.621996][T11073] vmalloc_user_noprof+0xad/0xe0 [ 284.622023][T11073] ? xskq_create+0xbf/0x170 [ 284.622051][T11073] xskq_create+0xbf/0x170 [ 284.622081][T11073] xsk_init_queue+0x8a/0xe0 [ 284.622109][T11073] xsk_setsockopt+0x52a/0x960 [ 284.622134][T11073] ? __fget_files+0x2a/0x420 [ 284.622164][T11073] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.622189][T11073] ? __pfx_aa_sk_perm+0x10/0x10 [ 284.622228][T11073] ? aa_sock_opt_perm+0xff/0x1a0 [ 284.622254][T11073] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 284.622276][T11073] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.622303][T11073] do_sock_setsockopt+0x17c/0x1b0 [ 284.622352][T11073] __x64_sys_setsockopt+0x13d/0x1b0 [ 284.622390][T11073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.622415][T11073] do_syscall_64+0x174/0x580 [ 284.622444][T11073] ? trace_irq_disable+0x3b/0x140 [ 284.622472][T11073] ? clear_bhb_loop+0x40/0x90 [ 284.622500][T11073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.622523][T11073] RIP: 0033:0x7f222e39de59 [ 284.622545][T11073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.622563][T11073] RSP: 002b:00007f222f2c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.622586][T11073] RAX: ffffffffffffffda RBX: 00007f222e626090 RCX: 00007f222e39de59 [ 284.622602][T11073] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 284.622615][T11073] RBP: 00007f222e433e6f R08: 0000000000000004 R09: 0000000000000000 [ 284.622629][T11073] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.622643][T11073] R13: 00007f222e626128 R14: 00007f222e626090 R15: 00007ffcb54b43d8 [ 284.622679][T11073] [ 284.950815][T11073] Mem-Info: [ 284.955408][T11073] active_anon:6063 inactive_anon:0 isolated_anon:0 [ 284.955408][T11073] active_file:0 inactive_file:43226 isolated_file:0 [ 284.955408][T11073] unevictable:768 dirty:96 writeback:0 [ 284.955408][T11073] slab_reclaimable:10528 slab_unreclaimable:105796 [ 284.955408][T11073] mapped:29353 shmem:1294 pagetables:1273 [ 284.955408][T11073] sec_pagetables:0 bounce:0 [ 284.955408][T11073] kernel_misc_reclaimable:0 [ 284.955408][T11073] free:1322064 free_pcp:9917 free_cma:0 [ 285.000960][T11073] Node 0 active_anon:24252kB inactive_anon:0kB active_file:0kB inactive_file:172700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117412kB dirty:384kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13712kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 285.035648][T11073] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 285.068814][T11073] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.099963][T11073] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 285.106207][T11073] Node 0 DMA32 free:1326012kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24252kB inactive_anon:0kB active_file:0kB inactive_file:172700kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2548796kB mlocked:0kB bounce:0kB free_pcp:39524kB local_pcp:20000kB free_cma:0kB [ 285.143711][T11073] lowmem_reserve[]: 0 0 0 0 0 [ 285.148585][T11073] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.178355][T11073] lowmem_reserve[]: 0 0 0 0 0 [ 285.183143][T11073] Node 1 Normal free:3946884kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.215390][T11073] lowmem_reserve[]: 0 0 0 0 0 [ 285.220285][T11073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.233223][T11073] Node 0 DMA32: 961*4kB (M) 729*8kB (UME) 442*16kB (UM) 214*32kB (UME) 33*64kB (UME) 6*128kB (UM) 4*256kB (M) 4*512kB (UM) 2*1024kB (UE) 2*2048kB (M) 315*4096kB (UM) = 1325932kB [ 285.257780][T11073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.300383][T11073] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 9*16kB (UM) 8*32kB (UM) 13*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946884kB [ 285.329633][T11073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.380436][T11073] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.414220][T11073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.445936][T11073] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.490403][T11073] 44515 total pagecache pages [ 285.510765][T11073] 0 pages in swap cache [ 285.552432][T11073] Free swap = 124996kB [ 285.628161][T11073] Total swap = 124996kB [ 285.660660][T11073] 2097051 pages RAM [ 285.685557][T11073] 0 pages HighMem/MovableOnly [ 285.719496][T11073] 428171 pages reserved [ 285.723754][T11073] 0 pages cma reserved [ 285.848063][T11089] sctp: [Deprecated]: syz.4.1394 (pid 11089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.848063][T11089] Use struct sctp_sack_info instead [ 286.354664][T11102] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1398'. [ 286.931868][T11105] bridge3: entered allmulticast mode [ 287.042256][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 287.655192][T11142] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 [ 287.858635][T11105] bridge3: left allmulticast mode [ 287.916219][ C1] net_ratelimit: 20059 callbacks suppressed [ 287.916248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.934606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.946955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.959354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.971707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.984076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.996491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 288.008832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 288.021168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 288.033532][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 288.321699][T11147] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1407'. [ 288.408377][T11150] nbd: must specify at least one socket [ 288.685129][T11158] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1413'. [ 289.028722][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 289.092232][T11172] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1415'. [ 289.213099][T11172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1415'. [ 289.591618][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1417'. [ 289.844144][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1421'. [ 290.219410][T11203] sctp: [Deprecated]: syz.4.1422 (pid 11203) Use of int in maxseg socket option. [ 290.219410][T11203] Use struct sctp_assoc_value instead [ 291.109418][T11230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.151327][T11230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.197699][T11232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1430'. [ 291.259212][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.274294][T11230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.287206][T11230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.625389][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 291.724100][T11242] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 292.188625][T11242] bond7: entered promiscuous mode [ 292.194465][T11242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.275255][T11248] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.311880][T11248] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 292.395028][T11248] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 292.491227][T11248] bond7: (slave vti0): making interface the new active one [ 292.510242][T11248] vti0: entered promiscuous mode [ 292.596680][T11248] vti0: left promiscuous mode [ 292.925929][ C1] net_ratelimit: 21526 callbacks suppressed [ 292.925949][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.944273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.956643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.969030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.981378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.995432][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.007816][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.020233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.032640][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.045043][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.298526][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 294.354123][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1452'. [ 294.500420][T11316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1453'. [ 294.883779][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 294.900188][T11320] IPVS: Unknown mcast interface: vcan0 [ 294.909543][T11325] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 295.944490][T11352] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1462'. [ 296.163003][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'. [ 296.703724][T11374] IPVS: ip_vs_edit_dest(): server weight less than zero [ 296.711961][ T7162] IPVS: starting estimator thread 0... [ 296.758800][T11374] netlink: 'syz.2.1470': attribute type 2 has an invalid length. [ 296.816486][T11375] IPVS: using max 24 ests per chain, 57600 per kthread [ 297.579697][T11406] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 297.656197][T11406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.733682][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1479'. [ 297.840720][T11411] IPVS: Unknown mcast interface: vcan0 [ 297.936070][ C1] net_ratelimit: 22075 callbacks suppressed [ 297.936099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.954380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.966655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.978976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.991266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.003550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.015927][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.028224][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.040510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.052798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.252586][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 298.775509][T11441] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1487'. [ 298.913197][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 300.013926][T11483] blkio.reset_stats is deprecated [ 300.085329][T11486] __nla_validate_parse: 1 callbacks suppressed [ 300.085450][T11486] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1497'. [ 300.397414][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 300.548758][T11498] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 300.708131][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 301.575641][T11528] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1510'. [ 301.661933][T11528] bridge0: port 3(veth1_to_bridge) entered disabled state [ 301.669415][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.677175][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.815523][T11540] netlink: 78 bytes leftover after parsing attributes in process `syz.2.1514'. [ 301.840582][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1514'. [ 301.964816][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 301.987531][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 302.055539][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 302.178173][T11556] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 302.195296][T11556] bond4 (unregistering): Released all slaves [ 302.231476][T11559] team0: No ports can be present during mode change [ 302.482663][T11575] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1524'. [ 303.311600][T11614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.340749][T11618] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 303.432738][T11641] veth1_macvtap: left promiscuous mode [ 303.449048][T11641] macsec0: entered promiscuous mode [ 303.454721][T11641] macsec0: entered allmulticast mode [ 303.478073][T11641] veth1_macvtap: entered promiscuous mode [ 303.483908][T11641] veth1_macvtap: entered allmulticast mode [ 303.490630][T11641] macsec0: left promiscuous mode [ 303.500665][T11641] macsec0: left allmulticast mode [ 303.507812][T11641] veth1_macvtap: left allmulticast mode [ 303.589053][T11613] nbd0: detected capacity change from 0 to 63 [ 303.618807][T11641] tipc: Started in network mode [ 303.631714][T11641] tipc: Node identity ac14140f, cluster identity 4711 [ 303.648843][T11641] tipc: New replicast peer: 255.255.255.255 [ 303.664986][ T5636] block nbd0: Receive control failed (result -104) [ 303.672088][ T5627] block nbd0: Receive control failed (result -32) [ 303.697225][T11641] tipc: Enabled bearer , priority 10 [ 303.800481][T11652] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 304.154390][T11672] x_tables: duplicate underflow at hook 1 [ 304.204090][T11672] net_ratelimit: 16773 callbacks suppressed [ 304.204110][T11672] openvswitch: netlink: Flow key attr not present in new flow. [ 304.239392][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.261479][T11677] x_tables: duplicate underflow at hook 1 [ 304.336809][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.396679][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.444687][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.453450][T11682] netlink: 'syz.1.1550': attribute type 62 has an invalid length. [ 304.501361][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.585314][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.678689][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.762292][T11674] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 304.865516][ T7162] tipc: Node number set to 2886997007 [ 304.934166][T11710] team0: Device ipvlan2 is already an upper device of the team interface [ 305.198586][T11724] sctp: [Deprecated]: syz.3.1564 (pid 11724) Use of int in max_burst socket option. [ 305.198586][T11724] Use struct sctp_assoc_value instead [ 305.215101][T11724] sctp: [Deprecated]: syz.3.1564 (pid 11724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.215101][T11724] Use struct sctp_sack_info instead [ 305.454690][T11736] __nla_validate_parse: 8 callbacks suppressed [ 305.454705][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1569'. [ 305.746822][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1573'. [ 305.773570][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1574'. [ 305.797537][T11754] IPVS: set_ctl: invalid protocol: 185 172.20.20.170:20000 [ 305.933642][T11762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1576'. [ 306.893590][T11809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1591'. [ 307.037636][T11818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1592'. [ 307.183993][T11825] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1595'. [ 307.352455][T11834] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1599'. [ 307.699738][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1604'. [ 307.711002][T11849] bond9 (unregistering): Released all slaves [ 307.923175][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1607'. [ 308.497779][T11897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.511896][T11897] bond0: (slave bond3): Enslaving as an active interface with an up link [ 308.723244][T11906] vlan3: entered allmulticast mode [ 308.737393][T11906] bond0: entered allmulticast mode [ 308.751961][T11906] bond_slave_1: entered allmulticast mode [ 308.930262][T11930] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 308.953011][T11931] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 308.977471][T11931] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 309.048586][T11932] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 309.062755][T11932] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 309.223769][T11949] validate_nla: 10 callbacks suppressed [ 309.223790][T11949] netlink: 'syz.1.1630': attribute type 2 has an invalid length. [ 309.474698][T11956] netlink: 'syz.0.1632': attribute type 10 has an invalid length. [ 309.634726][T11967] tipc: Enabling of bearer rejected, failed to enable media [ 309.843596][T11976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.866519][T11978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.017757][T11988] syzkaller0 speed is unknown, defaulting to 1000 [ 310.782658][T12024] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 310.812617][T12027] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 310.837477][T12024] __nla_validate_parse: 10 callbacks suppressed [ 310.837499][T12024] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1655'. [ 310.965026][T12027] bond9: entered promiscuous mode [ 311.003519][T12027] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.094717][T12042] netlink: 'syz.3.1659': attribute type 83 has an invalid length. [ 311.109041][T12033] bond9: (slave bridge3): making interface the new active one [ 311.117145][T12033] bridge3: entered promiscuous mode [ 311.124502][T12033] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 311.588260][T12059] netlink: 6020 bytes leftover after parsing attributes in process `syz.3.1666'. [ 311.609845][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1668'. [ 311.741554][T12067] netlink: 'syz.0.1669': attribute type 39 has an invalid length. [ 311.760012][T12067] hsr_slave_0: left promiscuous mode [ 311.772389][T12067] hsr_slave_1: left promiscuous mode [ 311.801113][T12073] netlink: 'syz.3.1671': attribute type 75 has an invalid length. [ 312.272447][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 312.304662][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 312.368209][T12116] netlink: 'syz.0.1681': attribute type 2 has an invalid length. [ 312.420948][T12116] netlink: 'syz.0.1681': attribute type 2 has an invalid length. [ 312.442431][T12116] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1681'. [ 312.574294][T12127] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1682'. [ 315.165452][T12096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.418476][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 315.429269][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 315.456104][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 316.430308][T12215] __nla_validate_parse: 4 callbacks suppressed [ 316.430328][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 316.653149][T12232] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 316.815446][T12232] 8021q: adding VLAN 0 to HW filter on device bond10 [ 316.931792][T12234] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 317.146962][T12238] macvlan2: entered promiscuous mode [ 317.152562][T12238] macvlan2: entered allmulticast mode [ 317.159738][T12238] bond10: entered promiscuous mode [ 317.171802][T12238] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.180687][T12238] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 317.303271][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1721'. [ 317.330895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.678808][T12238] bond10: left promiscuous mode [ 317.923640][T12262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.970130][T12262] bond5 (unregistering): Released all slaves [ 318.604036][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 318.848255][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1733'. [ 318.937320][T12310] ip6t_srh: unknown srh invflags 4000 [ 318.953012][T12310] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1736'. [ 318.962729][T12310] nbd: illegal input index 65508 [ 318.972245][T12308] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 319.037570][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1735'. [ 319.046973][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1735'. [ 319.131943][T12308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.192758][T12317] vlan2: entered allmulticast mode [ 319.221702][T12317] bond5: entered allmulticast mode [ 319.260977][T12321] bond5: (slave geneve2): making interface the new active one [ 319.270096][T12321] geneve2: entered allmulticast mode [ 319.283237][T12321] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 319.423273][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 319.681266][T12342] netlink: 'syz.3.1745': attribute type 12 has an invalid length. [ 319.698034][T12342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1745'. [ 319.728065][T12344] openvswitch: netlink: Missing key (keys=40, expected=100) [ 319.910116][T12356] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1748'. [ 320.770065][T12406] xt_policy: neither incoming nor outgoing policy selected [ 320.835493][T12410] xt_policy: neither incoming nor outgoing policy selected [ 320.851548][T12401] syzkaller0: entered promiscuous mode [ 320.894440][T12401] syzkaller0: entered allmulticast mode [ 321.162943][T12386] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 321.240042][T12422] netlink: 'syz.2.1762': attribute type 5 has an invalid length. [ 322.202666][T12490] netlink: 'syz.1.1780': attribute type 4 has an invalid length. [ 322.217087][T12490] __nla_validate_parse: 6 callbacks suppressed [ 322.217105][T12490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1780'. [ 322.400822][T12500] veth1_to_bond: entered allmulticast mode [ 322.463917][T12506] netlink: 'syz.1.1783': attribute type 2 has an invalid length. [ 322.503233][T12506] netlink: 'syz.1.1783': attribute type 2 has an invalid length. [ 322.876126][T12527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.068844][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1793'. [ 323.224593][T12498] veth1_to_bond: left allmulticast mode [ 323.360090][T12559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1797'. [ 323.470349][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.506382][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.556216][T12572] bridge0: port 1(gretap0) entered blocking state [ 323.561577][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.589824][T12572] bridge0: port 1(gretap0) entered disabled state [ 323.615912][T12572] gretap0: entered allmulticast mode [ 323.618724][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.660916][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.679209][T12572] gretap0: entered promiscuous mode [ 323.702898][T12572] bridge0: port 1(gretap0) entered blocking state [ 323.709585][T12572] bridge0: port 1(gretap0) entered forwarding state [ 323.718231][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.758966][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.828441][T12581] bond0: entered promiscuous mode [ 323.838999][T12581] batadv0: entered promiscuous mode [ 323.903068][T12581] debugfs: 'hsr0' already exists in 'hsr' [ 323.975318][T12581] Cannot create hsr debugfs directory [ 324.007146][T12581] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 324.034554][T12581] bond0: left promiscuous mode [ 324.061768][T12581] batadv0: left promiscuous mode [ 324.177234][T12594] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 324.222567][T12594] bond6 (unregistering): Released all slaves [ 324.565194][T12605] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 324.669340][T12616] netlink: 'syz.4.1807': attribute type 7 has an invalid length. [ 324.710054][T12616] netlink: 'syz.4.1807': attribute type 8 has an invalid length. [ 324.963708][T12632] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 325.010845][T12632] netlink: 'syz.3.1810': attribute type 2 has an invalid length. [ 325.031433][ T5627] block nbd0: Receive control failed (result -107) [ 325.034493][T12638] block nbd0: reconnected socket [ 325.113564][T12640] block nbd0: reconnected socket [ 325.113599][ T5627] block nbd0: Receive control failed (result -32) [ 325.178306][T12644] netlink: 'syz.4.1814': attribute type 13 has an invalid length. [ 325.601065][T12647] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 326.003696][T12695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.768078][T12739] openvswitch: netlink: Unknown key attributes 20 [ 326.882456][T12749] netlink: 'syz.4.1840': attribute type 27 has an invalid length. [ 327.036875][T12733] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.044779][T12733] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.135404][T12743] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.142783][T12743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.150484][T12743] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.157733][T12743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.258938][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.266340][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.633697][T12786] gretap1: entered promiscuous mode [ 327.641948][T12786] batman_adv: batadv0: Adding interface: gretap1 [ 327.649739][T12786] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.691345][T12786] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 327.715309][T12787] __nla_validate_parse: 75 callbacks suppressed [ 327.715331][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 328.013227][T12779] [ 328.015624][T12779] ====================================================== [ 328.022673][T12779] WARNING: possible circular locking dependency detected [ 328.029789][T12779] syzkaller #0 Not tainted [ 328.034237][T12779] ------------------------------------------------------ [ 328.041290][T12779] syz.2.1845/12779 is trying to acquire lock: [ 328.047394][T12779] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 328.056604][T12779] [ 328.056604][T12779] but task is already holding lock: [ 328.064016][T12779] ffff8880511e9d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 328.073580][T12779] [ 328.073580][T12779] which lock already depends on the new lock. [ 328.073580][T12779] [ 328.084103][T12779] [ 328.084103][T12779] the existing dependency chain (in reverse order) is: [ 328.093166][T12779] [ 328.093166][T12779] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 328.100789][T12779] __might_fault+0xcb/0x130 [ 328.105865][T12779] _copy_from_user+0x28/0xb0 [ 328.111030][T12779] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 328.117595][T12779] ip_generic_getfrag+0x149/0x2d0 [ 328.123189][T12779] __ip6_append_data+0x3b26/0x40c0 [ 328.128953][T12779] ip6_append_data+0x108/0x270 [ 328.134261][T12779] rawv6_sendmsg+0x1298/0x18c0 [ 328.139565][T12779] sock_sendmsg_nosec+0x10e/0x180 [ 328.145147][T12779] ____sys_sendmsg+0x54e/0x850 [ 328.150466][T12779] ___sys_sendmsg+0x2a5/0x360 [ 328.155689][T12779] __x64_sys_sendmsg+0x1b1/0x290 [ 328.161177][T12779] do_syscall_64+0x174/0x580 [ 328.166321][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.172764][T12779] [ 328.172764][T12779] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 328.180521][T12779] lock_sock_nested+0x41/0x100 [ 328.185831][T12779] inet_shutdown+0x6a/0x390 [ 328.190886][T12779] nbd_mark_nsock_dead+0x2cb/0x550 [ 328.196563][T12779] recv_work+0x1cee/0x1e10 [ 328.201520][T12779] process_scheduled_works+0xa8e/0x14e0 [ 328.207609][T12779] worker_thread+0xa47/0xfb0 [ 328.212745][T12779] kthread+0x388/0x470 [ 328.217365][T12779] ret_from_fork+0x514/0xb70 [ 328.222561][T12779] ret_from_fork_asm+0x1a/0x30 [ 328.227869][T12779] [ 328.227869][T12779] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 328.235544][T12779] __mutex_lock+0x19d/0x1550 [ 328.240682][T12779] nbd_queue_rq+0x373/0x1150 [ 328.245822][T12779] blk_mq_dispatch_rq_list+0x499/0x1990 [ 328.251953][T12779] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 328.258839][T12779] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.265365][T12779] blk_mq_run_work_fn+0x16c/0x300 [ 328.270938][T12779] process_scheduled_works+0xa8e/0x14e0 [ 328.277030][T12779] worker_thread+0xa47/0xfb0 [ 328.282162][T12779] kthread+0x388/0x470 [ 328.286777][T12779] ret_from_fork+0x514/0xb70 [ 328.291915][T12779] ret_from_fork_asm+0x1a/0x30 [ 328.297254][T12779] [ 328.297254][T12779] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 328.304493][T12779] __mutex_lock+0x19d/0x1550 [ 328.309631][T12779] nbd_queue_rq+0xc1/0x1150 [ 328.314690][T12779] blk_mq_dispatch_rq_list+0x499/0x1990 [ 328.320783][T12779] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 328.327663][T12779] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.334198][T12779] blk_mq_run_work_fn+0x16c/0x300 [ 328.339822][T12779] process_scheduled_works+0xa8e/0x14e0 [ 328.345935][T12779] worker_thread+0xa47/0xfb0 [ 328.351070][T12779] kthread+0x388/0x470 [ 328.355697][T12779] ret_from_fork+0x514/0xb70 [ 328.360867][T12779] ret_from_fork_asm+0x1a/0x30 [ 328.366198][T12779] [ 328.366198][T12779] -> #3 (set->srcu){.+.+}-{0:0}: [ 328.373373][T12779] __synchronize_srcu+0xc9/0x2f0 [ 328.378895][T12779] elevator_switch+0x1e8/0x7b0 [ 328.384230][T12779] elevator_change+0x2fa/0x480 [ 328.389544][T12779] elevator_set_default+0x375/0x440 [ 328.395292][T12779] blk_register_queue+0x3f3/0x4e0 [ 328.400862][T12779] __add_disk+0x6cb/0xe30 [ 328.405731][T12779] add_disk_fwnode+0xfb/0x4b0 [ 328.410948][T12779] nbd_dev_add+0x733/0xb60 [ 328.415913][T12779] nbd_init+0x15f/0x1e0 [ 328.420647][T12779] do_one_initcall+0x250/0x870 [ 328.425960][T12779] do_initcall_level+0x10a/0x1a0 [ 328.431441][T12779] do_initcalls+0x59/0xa0 [ 328.436319][T12779] kernel_init_freeable+0x29d/0x3e0 [ 328.442060][T12779] kernel_init+0x1d/0x1d0 [ 328.446945][T12779] ret_from_fork+0x514/0xb70 [ 328.452086][T12779] ret_from_fork_asm+0x1a/0x30 [ 328.457392][T12779] [ 328.457392][T12779] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 328.465248][T12779] __mutex_lock+0x19d/0x1550 [ 328.470395][T12779] elevator_change+0x1af/0x480 [ 328.475715][T12779] elevator_set_none+0xb5/0x140 [ 328.481112][T12779] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 328.487471][T12779] nbd_start_device+0x189/0xb30 [ 328.492868][T12779] nbd_genl_connect+0x1597/0x1c10 [ 328.498525][T12779] genl_family_rcv_msg_doit+0x233/0x340 [ 328.504616][T12779] genl_rcv_msg+0x614/0x7a0 [ 328.509673][T12779] netlink_rcv_skb+0x226/0x4a0 [ 328.515006][T12779] genl_rcv+0x28/0x40 [ 328.519548][T12779] netlink_unicast+0x7bb/0x940 [ 328.524907][T12779] netlink_sendmsg+0x813/0xb40 [ 328.530233][T12779] sock_sendmsg_nosec+0x13a/0x180 [ 328.535799][T12779] ____sys_sendmsg+0x54e/0x850 [ 328.541117][T12779] ___sys_sendmsg+0x2a5/0x360 [ 328.546344][T12779] __x64_sys_sendmsg+0x1b1/0x290 [ 328.551835][T12779] do_syscall_64+0x174/0x580 [ 328.556980][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.563419][T12779] [ 328.563419][T12779] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 328.572052][T12779] blk_alloc_queue+0x544/0x690 [ 328.577368][T12779] __blk_mq_alloc_disk+0x194/0x390 [ 328.583033][T12779] nbd_dev_add+0x494/0xb60 [ 328.587995][T12779] nbd_init+0x15f/0x1e0 [ 328.592698][T12779] do_one_initcall+0x250/0x870 [ 328.598012][T12779] do_initcall_level+0x10a/0x1a0 [ 328.603495][T12779] do_initcalls+0x59/0xa0 [ 328.608369][T12779] kernel_init_freeable+0x29d/0x3e0 [ 328.614113][T12779] kernel_init+0x1d/0x1d0 [ 328.618984][T12779] ret_from_fork+0x514/0xb70 [ 328.624134][T12779] ret_from_fork_asm+0x1a/0x30 [ 328.629439][T12779] [ 328.629439][T12779] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 328.636677][T12779] __lock_acquire+0x1520/0x2cf0 [ 328.642076][T12779] lock_acquire+0x106/0x350 [ 328.647122][T12779] fs_reclaim_acquire+0x71/0x100 [ 328.652603][T12779] prepare_alloc_pages+0x15b/0x650 [ 328.658283][T12779] __alloc_frozen_pages_noprof+0x12f/0x380 [ 328.664652][T12779] alloc_pages_mpol+0x212/0x380 [ 328.670051][T12779] alloc_pages_noprof+0xac/0x2a0 [ 328.675551][T12779] pte_alloc_one+0x22/0x370 [ 328.680602][T12779] do_pte_missing+0x13c8/0x34b0 [ 328.685996][T12779] handle_mm_fault+0x1b36/0x3080 [ 328.691482][T12779] do_user_addr_fault+0x744/0x1340 [ 328.697148][T12779] exc_page_fault+0x6a/0xc0 [ 328.702217][T12779] asm_exc_page_fault+0x26/0x30 [ 328.707619][T12779] rep_movs_alternative+0xf/0xa0 [ 328.713104][T12779] _copy_from_user+0x7a/0xb0 [ 328.718246][T12779] copy_from_sockptr+0x48/0x70 [ 328.723569][T12779] ip_mroute_setsockopt+0x7d8/0x10d0 [ 328.729446][T12779] do_ip_setsockopt+0xeba/0x2e30 [ 328.734942][T12779] ip_setsockopt+0x66/0x110 [ 328.739992][T12779] do_sock_setsockopt+0x17c/0x1b0 [ 328.745565][T12779] __x64_sys_setsockopt+0x13d/0x1b0 [ 328.751309][T12779] do_syscall_64+0x174/0x580 [ 328.756451][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.762889][T12779] [ 328.762889][T12779] other info that might help us debug this: [ 328.762889][T12779] [ 328.773132][T12779] Chain exists of: [ 328.773132][T12779] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 328.773132][T12779] [ 328.785771][T12779] Possible unsafe locking scenario: [ 328.785771][T12779] [ 328.793246][T12779] CPU0 CPU1 [ 328.798633][T12779] ---- ---- [ 328.804014][T12779] rlock(&mm->mmap_lock); [ 328.808462][T12779] lock(sk_lock-AF_INET6); [ 328.815504][T12779] lock(&mm->mmap_lock); [ 328.822374][T12779] lock(fs_reclaim); [ 328.826383][T12779] [ 328.826383][T12779] *** DEADLOCK *** [ 328.826383][T12779] [ 328.834543][T12779] 2 locks held by syz.2.1845/12779: [ 328.839758][T12779] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 328.849579][T12779] #1: ffff8880511e9d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 328.859536][T12779] [ 328.859536][T12779] stack backtrace: [ 328.865445][T12779] CPU: 0 UID: 0 PID: 12779 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) [ 328.865468][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.865479][T12779] Call Trace: [ 328.865486][T12779] [ 328.865494][T12779] dump_stack_lvl+0xe8/0x150 [ 328.865523][T12779] print_circular_bug+0x2e1/0x300 [ 328.865543][T12779] check_noncircular+0x12e/0x150 [ 328.865575][T12779] __lock_acquire+0x1520/0x2cf0 [ 328.865603][T12779] ? is_bpf_text_address+0x26/0x2b0 [ 328.865631][T12779] ? is_bpf_text_address+0x292/0x2b0 [ 328.865658][T12779] ? prepare_alloc_pages+0x15b/0x650 [ 328.865684][T12779] lock_acquire+0x106/0x350 [ 328.865711][T12779] ? prepare_alloc_pages+0x15b/0x650 [ 328.865740][T12779] ? __lock_acquire+0x683/0x2cf0 [ 328.865770][T12779] fs_reclaim_acquire+0x71/0x100 [ 328.865797][T12779] ? prepare_alloc_pages+0x15b/0x650 [ 328.865825][T12779] prepare_alloc_pages+0x15b/0x650 [ 328.865857][T12779] __alloc_frozen_pages_noprof+0x12f/0x380 [ 328.865890][T12779] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 328.865923][T12779] ? __pfx_policy_nodemask+0x10/0x10 [ 328.865960][T12779] alloc_pages_mpol+0x212/0x380 [ 328.865995][T12779] alloc_pages_noprof+0xac/0x2a0 [ 328.866028][T12779] pte_alloc_one+0x22/0x370 [ 328.866052][T12779] do_pte_missing+0x13c8/0x34b0 [ 328.866082][T12779] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 328.866122][T12779] handle_mm_fault+0x1b36/0x3080 [ 328.866148][T12779] ? handle_mm_fault+0xec/0x3080 [ 328.866170][T12779] ? __pfx_handle_mm_fault+0x10/0x10 [ 328.866193][T12779] ? __lock_acquire+0x683/0x2cf0 [ 328.866220][T12779] ? lock_mm_and_find_vma+0xa7/0x340 [ 328.866244][T12779] do_user_addr_fault+0x744/0x1340 [ 328.866277][T12779] exc_page_fault+0x6a/0xc0 [ 328.866300][T12779] asm_exc_page_fault+0x26/0x30 [ 328.866326][T12779] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 328.866346][T12779] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 328.866362][T12779] RSP: 0018:ffffc9000339fab0 EFLAGS: 00050202 [ 328.866379][T12779] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 328.866391][T12779] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000339fb80 [ 328.866403][T12779] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 328.866414][T12779] R10: dffffc0000000000 R11: fffff52000673f70 R12: f8f8f8f8f8f8f2f2 [ 328.866427][T12779] R13: dffffc0000000000 R14: ffffc9000339fb80 R15: 0000200000000040 [ 328.866448][T12779] _copy_from_user+0x7a/0xb0 [ 328.866474][T12779] copy_from_sockptr+0x48/0x70 [ 328.866504][T12779] ip_mroute_setsockopt+0x7d8/0x10d0 [ 328.866535][T12779] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 328.866562][T12779] ? futex_hash+0x275/0x2b0 [ 328.866592][T12779] ? __lock_acquire+0x683/0x2cf0 [ 328.866618][T12779] do_ip_setsockopt+0xeba/0x2e30 [ 328.866647][T12779] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 328.866673][T12779] ? aa_sk_perm+0x6d5/0x900 [ 328.866699][T12779] ? __fget_files+0x2a/0x420 [ 328.866724][T12779] ? __pfx_aa_sk_perm+0x10/0x10 [ 328.866751][T12779] ? __fget_files+0x2a/0x420 [ 328.866772][T12779] ? aa_sock_opt_perm+0xff/0x1a0 [ 328.866789][T12779] ip_setsockopt+0x66/0x110 [ 328.866815][T12779] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 328.866839][T12779] do_sock_setsockopt+0x17c/0x1b0 [ 328.866866][T12779] __x64_sys_setsockopt+0x13d/0x1b0 [ 328.866892][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.866910][T12779] do_syscall_64+0x174/0x580 [ 328.866933][T12779] ? trace_irq_disable+0x3b/0x140 [ 328.866955][T12779] ? clear_bhb_loop+0x40/0x90 [ 328.866975][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.866992][T12779] RIP: 0033:0x7f2a95f9de59 [ 328.867009][T12779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.867025][T12779] RSP: 002b:00007f2a96eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.867042][T12779] RAX: ffffffffffffffda RBX: 00007f2a96225fa0 RCX: 00007f2a95f9de59 [ 328.867055][T12779] RDX: 00000000000000cf RSI: 0000000000000000 RDI: 000000000000000b [ 328.867065][T12779] RBP: 00007f2a96033e6f R08: 0000000000000004 R09: 0000000000000000 [ 328.867076][T12779] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 328.867087][T12779] R13: 00007f2a96226038 R14: 00007f2a96225fa0 R15: 00007ffe77bc97a8 [ 328.867108][T12779] [ 329.343970][T12806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.351322][T12806] IPv6: NLM_F_CREATE should be set when creating new route [ 329.358628][T12806] IPv6: NLM_F_CREATE should be set when creating new route [ 329.378621][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 333.957570][ T1614] block nbd0: Connection timed out, retrying (0/2 alive) [ 333.964759][ T1614] block nbd0: Connection timed out, retrying (0/2 alive) [ 333.972544][ T1614] block nbd0: Connection timed out, retrying (0/2 alive) [ 333.979724][ T25] block nbd0: Dead connection, failed to find a fallback [ 333.987184][ T25] block nbd0: shutting down sockets [ 333.992466][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.001783][ T1614] block nbd0: Connection timed out, retrying (0/2 alive) [ 334.009033][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 334.017293][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.026418][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 334.034173][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.043511][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 334.051748][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.060951][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 334.069258][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.070244][ T1595] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.078442][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 334.078605][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 334.078656][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 334.078696][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 334.121127][ T1595] Buffer I/O error on dev nbd0, logical block 1, async page read [ 334.129103][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.129417][ T1595] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 334.138801][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 334.155940][ T1595] Buffer I/O error on dev nbd0, logical block 1, async page read [ 334.163879][ T1595] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.175269][ T9866] ldm_validate_partition_table(): Disk read failed. [ 334.183879][ T9866] Dev nbd0: unable to read RDB block 0 [ 334.190966][ T9866] nbd0: unable to read partition table [ 334.201680][ T9866] ldm_validate_partition_table(): Disk read failed. [ 334.209850][ T9866] Dev nbd0: unable to read RDB block 0 [ 334.217275][ T9866] nbd0: unable to read partition table