last executing test programs: 2.385653532s ago: executing program 4 (id=6134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x600}}, {0x6, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.177648805s ago: executing program 4 (id=6136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000004c80)=[{{&(0x7f0000000080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f00000004c0)=""/60, 0x3c}], 0x6, &(0x7f0000000740)=""/24, 0x18}, 0x4}, {{&(0x7f0000000780)=@qipcrtr, 0x80, &(0x7f0000002880)=[{&(0x7f0000002840)=""/53, 0x35}], 0x1, &(0x7f00000028c0)=""/23, 0x17}, 0x400000}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/150, 0x96}], 0x1, &(0x7f0000002a00)=""/8, 0x8}, 0x9}, {{&(0x7f0000002a40)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002ac0)=""/58, 0x3a}, {&(0x7f0000002b00)=""/231, 0xe7}, {&(0x7f0000002c00)=""/205, 0xcd}, {&(0x7f0000002d00)=""/149, 0x95}, {&(0x7f0000002dc0)=""/58, 0x3a}, {&(0x7f0000004ec0)=""/98, 0xfffffffffffffdd5}], 0x6, &(0x7f0000002f00)=""/19, 0x13}}, {{&(0x7f0000002f40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002fc0)=""/92, 0x5c}], 0x1, &(0x7f0000003080)=""/233, 0xe9}, 0x10000}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000003180)=""/87, 0x57}, {&(0x7f0000003200)=""/29, 0x1d}, {&(0x7f0000003240)=""/224, 0xe0}, {&(0x7f0000003340)=""/202, 0xca}, {&(0x7f0000003440)=""/101, 0x65}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/146, 0x92}, {&(0x7f0000004580)=""/255, 0xff}], 0x8, &(0x7f0000004700)=""/153, 0x99}, 0x7}, {{&(0x7f00000047c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004840)=""/78, 0x4e}, {&(0x7f00000048c0)=""/225, 0xe1}, {&(0x7f00000049c0)=""/185, 0xb9}, {&(0x7f0000004a80)=""/82, 0x52}, {&(0x7f0000004b00)=""/211, 0xd3}], 0x5}, 0x4}], 0x8, 0x2123, &(0x7f0000004e80)={0x77359400}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf25f38b41423085e02b0000000a0001007770616e310000000c00050002"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10000080) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000002"], 0xb8}}, 0x4040080) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000008e80)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xb, 'sit0\x00'}) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x18, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffffffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x844) 1.913303762s ago: executing program 3 (id=6140): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@setlink={0x30, 0x13, 0xb23, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x35400, 0xa}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x30}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140), 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @initdev}, &(0x7f00000003c0)=0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x81, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xa, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000001c0)='GPL\x00', 0xd97, 0x8d, &(0x7f0000000440)=""/141, 0x41000, 0x12, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x4, 0x80000000, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r1, r1, r1, r5], &(0x7f0000000600)=[{0x0, 0x5, 0x3, 0x7}, {0x3, 0x1, 0x0, 0x5}, {0x0, 0x2, 0x6, 0xb}, {0x4, 0x1, 0xe, 0x9}, {0x5, 0x4, 0x2, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002d0001000000000000000000020100800c0011002000000000000000140001000000100000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0dd12df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd0000"], 0x114}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@setlink={0x30, 0x13, 0xb23, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x35400, 0xa}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x30}}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140), 0x4) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @initdev}, &(0x7f00000003c0)=0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x81, 0x8}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xa, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000001c0)='GPL\x00', 0xd97, 0x8d, &(0x7f0000000440)=""/141, 0x41000, 0x12, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x4, 0x80000000, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r1, r1, r1, r5], &(0x7f0000000600)=[{0x0, 0x5, 0x3, 0x7}, {0x3, 0x1, 0x0, 0x5}, {0x0, 0x2, 0x6, 0xb}, {0x4, 0x1, 0xe, 0x9}, {0x5, 0x4, 0x2, 0x5}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) 1.72703542s ago: executing program 3 (id=6143): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 1.547229241s ago: executing program 1 (id=6146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x7f, 0x1ff, {{0x12, 0x4, 0x3, 0x38, 0x48, 0x65, 0x0, 0x24, 0x4, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0xe3, [@broadcast]}, @generic={0x7, 0x3, "1f"}, @rr={0x7, 0xf, 0x76, [@rand_addr=0x64010101, @local, @multicast1]}, @rr={0x7, 0x1b, 0x7d, [@empty, @loopback, @multicast1, @multicast2, @rand_addr=0x64010102, @empty]}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x8, 0x4e24, 0x8, 0x8, 0x0, 0x80, 0x2, r2, r3}, {0x8001, 0xb2, 0x7, 0x0, 0x1446e16e, 0x3ff, 0x2, 0x9}, {0x2, 0x3, 0x1c00, 0xb84}, 0x66, 0x6e6bbc, 0x1, 0x0, 0x4}, {{@in6=@private2, 0x4d6, 0x2b}, 0xa, @in=@loopback, 0x3503, 0x4, 0x1, 0x3, 0xc, 0x1, 0x8}}, 0xe8) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x30}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x1d, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x1d, &(0x7f0000000000), 0x4) r10 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, 0xc) writev(r10, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) (async) writev(r10, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) 1.478342652s ago: executing program 3 (id=6148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100f000000000000000000000000000a58000000060a0b0400000000000000000a0000002c0004802800018008000100666962001c00028008000240000000020800014000000000080003410000002f0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000af9e1dbd995c635c12c6ba8f2350ad1acb7418b82f15232a96f"], 0x80}}, 0x0) 1.477713207s ago: executing program 0 (id=6149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) (async) 1.362526961s ago: executing program 2 (id=6150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1.312421335s ago: executing program 0 (id=6151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x76, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000480)={r3}, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000480)={r3}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e22, 0x10, @mcast2, 0x9}}, 0x4960, 0xf, 0x10001, 0xfffffffa, 0x89, 0x6, 0x6}, &(0x7f0000000100)=0x9c) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0xe0, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x76, 0xa9, @random="05a41e94be457f334d5b00de23066c79c765210dba49ee98442460b3fd980bac710ddc3bc1507d925dfe55770ccbe567aa137d320f56b90247fc452c1d5d89d042980c172cc78eb4d353f8fec13840512af57dd74259a870b149356b4848e4774aa6df82aba82b2fc6a99925c383864c5008"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0xe0, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x76, 0xa9, @random="05a41e94be457f334d5b00de23066c79c765210dba49ee98442460b3fd980bac710ddc3bc1507d925dfe55770ccbe567aa137d320f56b90247fc452c1d5d89d042980c172cc78eb4d353f8fec13840512af57dd74259a870b149356b4848e4774aa6df82aba82b2fc6a99925c383864c5008"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) 1.23849476s ago: executing program 2 (id=6152): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0x11) (async) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0x11) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400a0}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) listen(r0, 0x40) 1.237952902s ago: executing program 3 (id=6153): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0xff, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x1, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000000000010731143000000ff008510000002000000b7850000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) 1.179636884s ago: executing program 1 (id=6154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f0000000140)) accept$alg(r1, 0x0, 0x0) close(0x4) 1.164842866s ago: executing program 4 (id=6155): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) 944.622354ms ago: executing program 1 (id=6156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x2}, {0xe0000, 0xffffff81, 0x0, 0xa, 0xa, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x7d0, 0x2, 0xffff}, {0x6, 0x0, 0x2}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) 944.160872ms ago: executing program 2 (id=6157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) 943.850262ms ago: executing program 4 (id=6158): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) 942.895659ms ago: executing program 3 (id=6159): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) accept$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x884) 818.413455ms ago: executing program 2 (id=6160): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x7fffffffa, 0x0, 0x103, 0xfffefffffffffffb, 0x4, 0x1, 0x2880040000000009, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 742.530145ms ago: executing program 0 (id=6161): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="08c2e7e751812fb13f5e68f9e856ea2727b7fdde8ec2ebe330a03ad7f168d440a4fc56c25192444363403cc57fee965b628417955380e0806742aecc8ae52c225e2a01d3d9a225b760e23e9d4390d14eba18665ec19eb34c99e54136da4dfd49949540f0f75259b4f48328076351f351fca165bb9c055c617e4d8c8293142be0bb23bc89ea22764eae7a2e944d", 0x8d}], 0x1) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f00000007c0), &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r8, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) 742.117247ms ago: executing program 3 (id=6162): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1412, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x400e011}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) 716.708936ms ago: executing program 4 (id=6163): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1}, [@CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa04}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x606}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4e}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4a0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb07}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000100)={'syztnl1\x00', r4, 0x20, 0x40, 0x5, 0x9, {{0x37, 0x4, 0x0, 0x0, 0xdc, 0x66, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x18, 0x3, 0x8, [{@broadcast, 0x44c6}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x1}, {@multicast1, 0x34b}, {@broadcast, 0x6}, {@broadcast, 0xfb}]}, @cipso={0x86, 0x23, 0x3, [{0x5, 0x3, 'M'}, {0x1, 0x5, "bbfaa9"}, {0x7, 0x2}, {0x0, 0xb, "ea9130fbf8077e4282"}, {0x5, 0x8, "2f8862343d84"}]}, @generic={0x83, 0x9, "6cba44bb16080b"}, @timestamp={0x44, 0xc, 0xbc, 0x0, 0x9, [0x32eb, 0x2]}, @generic={0x0, 0x11, "9bb6862d353381759c1be30d0e9c5b"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0x25, [@private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @private=0xa010100, @broadcast, @multicast1, @multicast2, @private=0xa010100]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x64, 0x0, 0x8, [0x0, 0xfffe]}]}}}}}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x9, r5, 0x1, 0x6e, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) socket(0x11, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x2000000015, 0x80005, 0x0) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1}, [@CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa04}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x606}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4e}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4a0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb07}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000100)={'syztnl1\x00', r4, 0x20, 0x40, 0x5, 0x9, {{0x37, 0x4, 0x0, 0x0, 0xdc, 0x66, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x18, 0x3, 0x8, [{@broadcast, 0x44c6}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x1}, {@multicast1, 0x34b}, {@broadcast, 0x6}, {@broadcast, 0xfb}]}, @cipso={0x86, 0x23, 0x3, [{0x5, 0x3, 'M'}, {0x1, 0x5, "bbfaa9"}, {0x7, 0x2}, {0x0, 0xb, "ea9130fbf8077e4282"}, {0x5, 0x8, "2f8862343d84"}]}, @generic={0x83, 0x9, "6cba44bb16080b"}, @timestamp={0x44, 0xc, 0xbc, 0x0, 0x9, [0x32eb, 0x2]}, @generic={0x0, 0x11, "9bb6862d353381759c1be30d0e9c5b"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0x25, [@private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @private=0xa010100, @broadcast, @multicast1, @multicast2, @private=0xa010100]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x64, 0x0, 0x8, [0x0, 0xfffe]}]}}}}}) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x9, r5, 0x1, 0x6e, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) socket$kcm(0x10, 0x0, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) (async) 642.833018ms ago: executing program 1 (id=6164): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x9, 0x10, [0x7f86, 0x8, 0x9, 0x1], &(0x7f0000000040)=[0x0, 0x0]}) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000100)={r2, 0x4, 0x4, "9d3f"}) listen(r1, 0x0) shutdown(r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073795d32000000000900010073797a30000000000800054000000021140011800a0001006d6174636800000004000280140000001000010000000000000000000000000a"], 0x98}}, 0x0) listen(r2, 0x1ed2) 563.760151ms ago: executing program 2 (id=6166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}]}}}]}, 0x44}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) 539.138094ms ago: executing program 0 (id=6167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 438.213521ms ago: executing program 4 (id=6168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0xa, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r5 = socket(0x1e, 0x1, 0x9) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) listen(r6, 0x3) (async, rerun: 32) accept$nfc_llcp(r6, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) 434.67451ms ago: executing program 1 (id=6169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=r0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x85) 417.092868ms ago: executing program 2 (id=6170): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 271.164039ms ago: executing program 0 (id=6171): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x8, 0x7, 0xfdc6, 0x2, 0xf, 0x8, 0x4f}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x24000044) 190.774713ms ago: executing program 1 (id=6172): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x1, 0x8044) (async) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x1, 0x8044) r1 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendto(r2, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 0s ago: executing program 0 (id=6173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth0_vlan\x00'}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)="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", 0xff}], 0x1, &(0x7f0000000440)=[{0xf8, 0x101, 0x8001, "6d1c71e03c4e3e10ef54ae82cd5ab51d1a61628ac6908c160b70cde96c8920070bedc65455e4ee13e10e06f7aafc6d40b0d2a2dad7aa52ffcc5520134a2138ea7a029a032a30467b8d33d1dda74b47e34cb313089ce423b85b2e25eeac0096fa8d8cc0afc0efec172f27310ac84752ba092c4028e96a2ae4f93ea15e85e4b34849d61dd90d7f811a69a0d4a899363f3fdbd085f176ca304cfe91bcf953124a81031d19d59e50b3f79c29d0a2e8634a8ef43ad8f8bdf5377bfe098ba14807593a3e78bceb9e25953719bbacb4e34b25edebac8eeb6b313099fe3e52364064ef89fb9cc3ae118a81"}, {0xc0, 0x117, 0x3, "a2b80dfdcb6ae296d3efee4ed4aeb29a425854b31de394fd27d9291caf6974539dd4ca88a04c6dec7c11f1d68a65b1f3e5c419df04ffa6d2045b2be45e0c11cd4c767b258a8c81fdecb34b2125a0cbf6c8d329eacd254a5780ede24beafc71d577a847586bfffd49661cc7014c416d6e3b5aa44806b1376c0cb940e7031996d383ac5790b457503339a32e02d1853a10c97bb4ddd4547c64f5bacc183ac9b8ebccfa56e6735220ac85fb8823"}, {0x100, 0x109, 0x3, "2fb42623b3ab4422a1495dd185e400fb3df33050667a2923b354d57754df1c81beccc72054f67af021d8da4472dd7c43b7dd18c6781e88e5fbbe2688088c7e32599c2c9b6153be25e03e2f0a15e019ed1109ccbeaec03de46fad6b8125ff37e2766bec5847bf33a0f1446fd12a4931d1ded6090340b2c3c9ad66a77314d840cd40f4759edf729f83f4f103f01446810b4a625974fc2630d0800762fd8861b5533f00fc8218fe9e3122ef90cd14f6ce3afa2fac81d550675cddad24b6b837ad1981cba31b39e162aecc34ffc771afb9d39aa4f52dc04cd4c96eecb872c0389eba4efa2fa7e4dfd5745f"}], 0x2b8}, 0x8080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x30, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x40}, @calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0x80}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): 89.729401][T23080] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.251260][T23114] netlink: 'syz.1.4458': attribute type 1 has an invalid length. [ 590.636614][T23114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 590.709137][T23127] xt_hashlimit: size too large, truncated to 1048576 [ 590.809847][T23130] : renamed from vxcan1 (while UP) [ 590.898254][T23132] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4461'. [ 590.989740][T23132] vlan1: entered allmulticast mode [ 590.994944][T23132] erspan0: entered allmulticast mode [ 591.041279][T23134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4462'. [ 591.093419][T23135] netlink: 'syz.0.4462': attribute type 10 has an invalid length. [ 591.284930][T23137] netlink: 'syz.1.4463': attribute type 4 has an invalid length. [ 591.733803][T23149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4468'. [ 591.918742][T23162] geneve3: entered promiscuous mode [ 591.962611][ T1060] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 41164 - 0 [ 591.994507][ T1060] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 41164 - 0 [ 592.054757][ T1060] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 41164 - 0 [ 592.079899][ T1060] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 41164 - 0 [ 592.160219][T23174] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4474'. [ 592.348709][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 592.436028][T23178] macvlan2: entered allmulticast mode [ 592.453312][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4477'. [ 592.506619][T23178] hsr0: entered allmulticast mode [ 592.528357][T23178] hsr_slave_0: entered allmulticast mode [ 592.875351][T23201] netlink: 'syz.0.4480': attribute type 9 has an invalid length. [ 592.924959][T23201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4480'. [ 592.939413][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4481'. [ 593.252973][T23218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4486'. [ 593.290852][T23219] netlink: 'syz.1.4486': attribute type 9 has an invalid length. [ 594.410082][T23260] netlink: 'syz.0.4499': attribute type 17 has an invalid length. [ 594.418096][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4499'. [ 594.427079][T23260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4499'. [ 594.443133][T23260] gretap0: entered promiscuous mode [ 594.462963][T23260] gretap0: left promiscuous mode [ 594.566842][T23265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4500'. [ 594.588465][T23265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4500'. [ 594.737203][T23274] netlink: 'syz.0.4502': attribute type 1 has an invalid length. [ 594.770501][T23274] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4502'. [ 595.370049][T23301] netlink: 'syz.0.4510': attribute type 1 has an invalid length. [ 595.430913][T23298] xt_hashlimit: max too large, truncated to 1048576 [ 595.469237][T23309] netlink: 'syz.1.4512': attribute type 1 has an invalid length. [ 595.538758][T23301] bond8: entered promiscuous mode [ 595.618678][T23301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.652917][T23307] ipvlan3: entered allmulticast mode [ 595.668351][T23307] bond8: entered allmulticast mode [ 595.705816][T23312] bond8: (slave bridge0): making interface the new active one [ 595.713558][T23312] bridge0: entered promiscuous mode [ 595.719398][T23312] bridge0: entered allmulticast mode [ 595.726664][T23312] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 595.930046][T23335] netlink: 'syz.0.4517': attribute type 2 has an invalid length. [ 595.964027][T23338] xt_hashlimit: size too large, truncated to 1048576 [ 595.983750][T23335] netlink: 'syz.0.4517': attribute type 1 has an invalid length. [ 596.171570][T23336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.238366][T23336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.395005][T23362] netlink: 'syz.2.4524': attribute type 1 has an invalid length. [ 596.431372][T23364] netlink: 'syz.2.4524': attribute type 1 has an invalid length. [ 596.506595][T23336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.547163][T23336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.571812][T23370] netlink: 'syz.0.4526': attribute type 21 has an invalid length. [ 596.724203][T23375] net_ratelimit: 3 callbacks suppressed [ 596.724225][T23375] openvswitch: netlink: Key 32 has unexpected len 260 expected 2 [ 596.850103][T23336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.876180][T23336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.932542][T23382] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 597.041096][T23336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.087563][T23336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 597.247819][T23394] lo speed is unknown, defaulting to 1000 [ 597.341450][ T1314] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 597.379863][ T1314] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 598.481815][T23413] validate_nla: 3 callbacks suppressed [ 598.481838][T23413] netlink: 'syz.1.4540': attribute type 2 has an invalid length. [ 600.256907][T23400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.269798][T23400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 600.299738][ T6816] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 600.309214][ T6816] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.324571][T23409] dvmrp0: entered allmulticast mode [ 600.374353][ T1314] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 600.388400][ T1314] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.450974][T23400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.462016][T23400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 600.561140][T23400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.573334][T23400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 600.587788][T23425] __nla_validate_parse: 18 callbacks suppressed [ 600.587807][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4545'. [ 600.613730][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 600.624385][ T49] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.739899][T23400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.778083][T23400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 601.043999][ T1314] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 601.062763][ T1314] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 601.116437][T23448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4551'. [ 601.145734][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 601.176145][ T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 601.269671][T23455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4553'. [ 601.285501][T23455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4553'. [ 601.328611][T23450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4551'. [ 601.337925][ T1314] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 601.347583][ T1314] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 601.441074][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 601.454900][ T35] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 601.484881][T23460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4556'. [ 601.536480][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'. [ 601.550182][T23463] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.558727][T23463] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.766930][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 601.806030][T23477] rdma_rxe: rxe_newlink: failed to add lo [ 601.854212][T23479] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4563'. [ 601.891199][T23479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4563'. [ 601.964779][T23483] tipc: New replicast peer: 255.255.255.255 [ 601.977414][T23483] tipc: Enabled bearer , priority 10 [ 601.986056][T23481] netlink: 'syz.4.4564': attribute type 10 has an invalid length. [ 602.033716][T23481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.075827][T23481] : (slave batadv0): Enslaving as an active interface with an up link [ 602.135186][T23485] netlink: 'syz.1.4566': attribute type 2 has an invalid length. [ 602.146359][T23489] lo speed is unknown, defaulting to 1000 [ 602.189987][T23485] netlink: 'syz.1.4566': attribute type 11 has an invalid length. [ 602.278961][T23504] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 602.427956][T23509] lo: Caught tx_queue_len zero misconfig [ 602.738595][T23526] bond9: entered allmulticast mode [ 602.779828][T23526] bridge4: entered promiscuous mode [ 602.785357][T23526] bridge4: entered allmulticast mode [ 602.796520][T23526] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 603.067148][T23546] bond3: entered promiscuous mode [ 603.073199][T23546] bond3: entered allmulticast mode [ 603.079361][T23546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 603.132456][T23552] netlink: 'syz.1.4583': attribute type 8 has an invalid length. [ 603.636535][T23583] netlink: 'syz.1.4591': attribute type 1 has an invalid length. [ 603.655815][T23583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.681196][T23574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.044931][T23602] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 604.056727][T23602] bond5 (unregistering): Released all slaves [ 604.153846][T23610] pim6reg1: entered promiscuous mode [ 604.162759][T23610] pim6reg1: entered allmulticast mode [ 604.236930][T23612] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 604.250661][T23612] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 604.255365][T23615] openvswitch: netlink: IPv4 tun info is not correct [ 604.261058][T23614] openvswitch: netlink: IPv4 tun info is not correct [ 604.330796][T23612] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 604.341447][T23612] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 604.385012][T23612] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 604.395137][T23612] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 604.467348][T23612] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 604.477533][T23612] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 604.570709][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 604.579398][ T49] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 604.613222][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 604.621910][ T49] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 604.643624][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 604.652411][ T49] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 604.676051][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 604.685783][ T49] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.048327][T23639] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 605.081222][T23639] bond5: (slave lo): Enslaving as an active interface with an up link [ 605.118767][T23639] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 605.163819][T23645] nbd: couldn't find a device at index 2 [ 605.880024][T23680] __nla_validate_parse: 14 callbacks suppressed [ 605.880045][T23680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4621'. [ 606.059724][T23687] netlink: 'syz.3.4623': attribute type 4 has an invalid length. [ 606.124623][T23690] bond7: ARP target 1.0.0.0 is already present [ 606.134757][T23690] bond7: option arp_ip_target: invalid value (1) [ 606.184669][T23690] bond7 (unregistering): Released all slaves [ 606.436123][T23720] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 606.444949][T23720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4631'. [ 606.464585][T23723] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 606.473252][T23723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4631'. [ 606.500589][T23724] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4633'. [ 606.511834][T23724] syzkaller1: entered promiscuous mode [ 606.517359][T23724] syzkaller1: entered allmulticast mode [ 606.668589][T23732] bond4: option mode: unable to set because the bond device has slaves [ 606.980334][T23754] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 606.991863][T23754] bond10 (unregistering): Released all slaves [ 607.300624][T23770] tipc: Enabled bearer , priority 24 [ 607.317354][T23770] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4646'. [ 607.359510][T23772] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 607.531959][T23776] netlink: 'syz.3.4649': attribute type 4 has an invalid length. [ 607.674274][T23780] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4652'. [ 607.723559][T23786] netlink: 'syz.2.4654': attribute type 10 has an invalid length. [ 607.732311][T23786] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4654'. [ 607.790066][T23789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.832107][T23787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4650'. [ 607.949795][T23799] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4659'. [ 607.965392][T23800] pimreg3: entered allmulticast mode [ 607.989987][T23799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.991714][T23804] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 608.023071][T23804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4660'. [ 609.249230][T23880] syzkaller0: entered promiscuous mode [ 609.254937][T23880] syzkaller0: entered allmulticast mode [ 609.453402][T23893] netlink: 'syz.3.4689': attribute type 2 has an invalid length. [ 609.693031][T23904] netlink: 'syz.4.4692': attribute type 1 has an invalid length. [ 609.743978][T23904] 8021q: adding VLAN 0 to HW filter on device bond6 [ 610.552233][T23955] xt_hashlimit: size too large, truncated to 1048576 [ 610.603641][T23959] : renamed from vxcan1 [ 610.687779][T23957] vlan1: entered allmulticast mode [ 610.700070][T23957] bond0: entered allmulticast mode [ 610.738625][T23957] bond_slave_0: entered allmulticast mode [ 610.744734][T23957] bond_slave_1: entered allmulticast mode [ 610.871874][T23960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.902681][T23960] bond_slave_0: left allmulticast mode [ 610.923182][T23960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.951620][T23960] bond_slave_1: left allmulticast mode [ 610.964406][T23960] bond0 (unregistering): Released all slaves [ 611.301066][T23974] FAULT_INJECTION: forcing a failure. [ 611.301066][T23974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.356401][T23974] CPU: 0 UID: 0 PID: 23974 Comm: syz.1.4707 Not tainted syzkaller #0 PREEMPT(full) [ 611.356452][T23974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.356466][T23974] Call Trace: [ 611.356474][T23974] [ 611.356483][T23974] dump_stack_lvl+0xe8/0x150 [ 611.356518][T23974] should_fail_ex+0x412/0x560 [ 611.356555][T23974] _copy_from_user+0x2d/0xb0 [ 611.356580][T23974] ___sys_recvmsg+0x175/0x590 [ 611.356605][T23974] ? get_pid_task+0x20/0x1f0 [ 611.356622][T23974] ? get_pid_task+0x20/0x1f0 [ 611.356647][T23974] ? __pfx____sys_recvmsg+0x10/0x10 [ 611.356697][T23974] ? __fget_files+0x3a0/0x420 [ 611.356728][T23974] __x64_sys_recvmsg+0x1ba/0x2a0 [ 611.356749][T23974] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 611.356775][T23974] ? __pfx_ksys_write+0x10/0x10 [ 611.356801][T23974] do_syscall_64+0x14d/0xf80 [ 611.356819][T23974] ? trace_irq_disable+0x3b/0x150 [ 611.356832][T23974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.356847][T23974] ? clear_bhb_loop+0x40/0x90 [ 611.356865][T23974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.356880][T23974] RIP: 0033:0x7feeb719c819 [ 611.356894][T23974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.356908][T23974] RSP: 002b:00007feeb80e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 611.356923][T23974] RAX: ffffffffffffffda RBX: 00007feeb7416090 RCX: 00007feeb719c819 [ 611.356934][T23974] RDX: 0000000040000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 611.356943][T23974] RBP: 00007feeb80e3090 R08: 0000000000000000 R09: 0000000000000000 [ 611.356953][T23974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.356961][T23974] R13: 00007feeb7416128 R14: 00007feeb7416090 R15: 00007ffc36f9c018 [ 611.356985][T23974] [ 611.843022][T24000] Cannot find set identified by id 65534 to match [ 612.066029][T24014] bond0: entered allmulticast mode [ 612.079109][T24012] __nla_validate_parse: 13 callbacks suppressed [ 612.079131][T24012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4720'. [ 612.153626][T24018] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4723'. [ 612.223340][T24021] FAULT_INJECTION: forcing a failure. [ 612.223340][T24021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.268443][T24021] CPU: 1 UID: 0 PID: 24021 Comm: syz.0.4722 Not tainted syzkaller #0 PREEMPT(full) [ 612.268474][T24021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.268487][T24021] Call Trace: [ 612.268495][T24021] [ 612.268504][T24021] dump_stack_lvl+0xe8/0x150 [ 612.268549][T24021] should_fail_ex+0x412/0x560 [ 612.268584][T24021] _copy_to_iter+0x404/0x17d0 [ 612.268616][T24021] ? lockdep_hardirqs_on+0x7a/0x110 [ 612.268642][T24021] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 612.268677][T24021] ? __pfx__copy_to_iter+0x10/0x10 [ 612.268722][T24021] ? skb_recv_datagram+0x145/0x190 [ 612.268754][T24021] raw_recvmsg+0x1e1/0x5c0 [ 612.268779][T24021] ? __pfx_raw_recvmsg+0x10/0x10 [ 612.268798][T24021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.268830][T24021] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 612.268851][T24021] ? security_socket_recvmsg+0x7e/0x2c0 [ 612.268874][T24021] ? __pfx_raw_recvmsg+0x10/0x10 [ 612.268893][T24021] sock_recvmsg+0x172/0x1b0 [ 612.268926][T24021] ____sys_recvmsg+0x1e6/0x4a0 [ 612.268959][T24021] ? __pfx_____sys_recvmsg+0x10/0x10 [ 612.269000][T24021] ? import_iovec+0x73/0xa0 [ 612.269025][T24021] ___sys_recvmsg+0x215/0x590 [ 612.269047][T24021] ? get_pid_task+0x20/0x1f0 [ 612.269071][T24021] ? __pfx____sys_recvmsg+0x10/0x10 [ 612.269121][T24021] ? __fget_files+0x3a0/0x420 [ 612.269162][T24021] __x64_sys_recvmsg+0x1ba/0x2a0 [ 612.269189][T24021] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 612.269224][T24021] ? __pfx_ksys_write+0x10/0x10 [ 612.269258][T24021] do_syscall_64+0x14d/0xf80 [ 612.269280][T24021] ? trace_irq_disable+0x3b/0x150 [ 612.269302][T24021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.269322][T24021] ? clear_bhb_loop+0x40/0x90 [ 612.269347][T24021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.269367][T24021] RIP: 0033:0x7f6f0b79c819 [ 612.269395][T24021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.269411][T24021] RSP: 002b:00007f6f0c60e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 612.269430][T24021] RAX: ffffffffffffffda RBX: 00007f6f0ba15fa0 RCX: 00007f6f0b79c819 [ 612.269444][T24021] RDX: 0000000040000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 612.269456][T24021] RBP: 00007f6f0c60e090 R08: 0000000000000000 R09: 0000000000000000 [ 612.269467][T24021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.269478][T24021] R13: 00007f6f0ba16038 R14: 00007f6f0ba15fa0 R15: 00007ffe494ce128 [ 612.269509][T24021] [ 612.923441][T24050] bond7: option fail_over_mac: invalid value (16) [ 612.935801][T24050] bond7 (unregistering): Released all slaves [ 612.973907][T24051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4730'. [ 612.986489][T24051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4730'. [ 613.005204][T24055] tc_dump_action: action bad kind [ 613.161001][T24065] syzkaller0: entered promiscuous mode [ 613.166529][T24065] syzkaller0: entered allmulticast mode [ 613.512711][T24100] netlink: 'syz.1.4741': attribute type 1 has an invalid length. [ 613.631238][T24100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 613.660499][T24103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 613.667707][T24103] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 613.680329][T24103] bond7: (slave vcan0): Error -95 calling set_mac_address [ 613.749397][T24109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.765065][T24109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.851977][T24109] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 613.885152][T24109] bond3: left promiscuous mode [ 613.888330][ C0] hrtimer: interrupt took 210275 ns [ 613.896423][T24109] bond3: left allmulticast mode [ 613.934641][T24111] bond7: entered allmulticast mode [ 613.949012][ T1314] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.974311][ T1314] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.991827][T24115] netlink: 'syz.1.4745': attribute type 29 has an invalid length. [ 614.018258][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'. [ 614.036543][ T1314] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.175331][T24129] syzkaller0: entered promiscuous mode [ 614.195837][T24129] syzkaller0: entered allmulticast mode [ 614.247519][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4751'. [ 614.260750][T24137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4750'. [ 614.284984][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4750'. [ 614.350164][ T35] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 614.365673][T24145] netlink: 'syz.4.4752': attribute type 4 has an invalid length. [ 614.396204][T24148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4755'. [ 614.411391][T24148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4755'. [ 614.421302][T24132] netlink: 'syz.4.4752': attribute type 4 has an invalid length. [ 614.571696][T24157] syzkaller0: entered promiscuous mode [ 614.577248][T24157] syzkaller0: entered allmulticast mode [ 614.590323][T24157] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 614.771346][T24166] lo speed is unknown, defaulting to 1000 [ 614.921291][T24181] netlink: 'syz.2.4763': attribute type 1 has an invalid length. [ 615.726984][T24214] netlink: Conntrack attr has 4 unknown bytes [ 615.899762][T24218] team2: entered promiscuous mode [ 615.904835][T24218] team2: entered allmulticast mode [ 615.926607][T24225] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 615.996482][T24227] syzkaller0: entered promiscuous mode [ 616.005699][T24227] syzkaller0: entered allmulticast mode [ 616.246794][T24245] netlink: 'syz.4.4782': attribute type 7 has an invalid length. [ 616.267862][T24245] bridge0: entered promiscuous mode [ 616.270725][T24248] netlink: 'syz.2.4784': attribute type 2 has an invalid length. [ 616.285851][T24245] bridge0: left promiscuous mode [ 616.334576][T24251] syzkaller0: entered promiscuous mode [ 616.341886][T24251] syzkaller0: entered allmulticast mode [ 616.447224][T24259] netlink: 'syz.2.4788': attribute type 28 has an invalid length. [ 616.459189][T24259] netlink: 'syz.2.4788': attribute type 3 has an invalid length. [ 616.712620][T24268] netlink: 'syz.1.4790': attribute type 1 has an invalid length. [ 616.769346][T24268] 8021q: adding VLAN 0 to HW filter on device bond8 [ 616.811511][T24279] sctp: [Deprecated]: syz.3.4794 (pid 24279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.811511][T24279] Use struct sctp_sack_info instead [ 616.855231][T24268] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 616.970126][T24274] bond8: entered promiscuous mode [ 616.975611][T24274] bond8: entered allmulticast mode [ 617.112246][T24288] __nla_validate_parse: 21 callbacks suppressed [ 617.112266][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'. [ 617.129272][T24293] tipc: Enabled bearer , priority 0 [ 617.135944][ T35] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.144687][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.160661][T24288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4795'. [ 617.172695][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.207510][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'. [ 617.217357][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.228405][T24288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4795'. [ 617.263870][T24293] tipc: Disabling bearer [ 617.494745][T24313] SET target dimension over the limit! [ 617.860335][T24338] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4806'. [ 619.262084][T24325] syzkaller0: entered promiscuous mode [ 619.269443][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4805'. [ 619.418811][T24358] netlink: 'syz.0.4811': attribute type 1 has an invalid length. [ 619.441471][T24359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4810'. [ 619.443764][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4811'. [ 619.463460][T24359] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4810'. [ 619.483507][T24359] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.490768][T24359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.498407][T24359] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.505562][T24359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.521015][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4811'. [ 619.577720][T24359] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.585121][T24359] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.760901][T24377] netlink: 'syz.1.4818': attribute type 1 has an invalid length. [ 619.790117][T24380] netlink: 'syz.3.4817': attribute type 9 has an invalid length. [ 619.823003][T24377] bond9: entered promiscuous mode [ 619.830195][T24377] 8021q: adding VLAN 0 to HW filter on device bond9 [ 619.921195][T24377] bond9: (slave bridge7): making interface the new active one [ 619.934066][T24377] bridge7: entered promiscuous mode [ 619.947301][T24377] bridge7: left promiscuous mode [ 620.156409][T24398] openvswitch: netlink: Unknown nsh attribute 0 [ 620.512137][T24425] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 620.543037][T24425] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 620.560917][T24425] gretap1: entered promiscuous mode [ 620.576472][T24425] gretap1: entered allmulticast mode [ 620.682570][T24429] lo speed is unknown, defaulting to 1000 [ 621.363953][T24465] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 621.398579][T24465] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 621.419517][T24465] gretap2: entered promiscuous mode [ 621.427263][T24465] gretap2: entered allmulticast mode [ 621.444516][T24462] syzkaller0: entered promiscuous mode [ 621.451943][T24462] syzkaller0: entered allmulticast mode [ 621.616661][T24482] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 621.891565][T24503] netlink: 'syz.4.4848': attribute type 1 has an invalid length. [ 621.919576][T24503] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 621.975653][T24509] netlink: 'syz.2.4849': attribute type 1 has an invalid length. [ 622.194289][T24518] veth0: entered promiscuous mode [ 622.230260][T24518] __nla_validate_parse: 16 callbacks suppressed [ 622.230282][T24518] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4852'. [ 622.335879][T24533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4856'. [ 622.349057][T24533] sctp: [Deprecated]: syz.4.4856 (pid 24533) Use of int in max_burst socket option deprecated. [ 622.349057][T24533] Use struct sctp_assoc_value instead [ 622.369824][T24513] veth0: left promiscuous mode [ 622.526719][T24543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4860'. [ 622.552913][T24536] bridge6: entered promiscuous mode [ 622.568844][T24536] bridge6: entered allmulticast mode [ 622.573968][T24548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4859'. [ 622.593622][T24536] team0: Port device bridge6 added [ 622.651588][T24543] 8021q: adding VLAN 0 to HW filter on device bond10 [ 622.680938][T24554] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 622.691562][T24543] vxcan3: entered promiscuous mode [ 622.710985][T24543] 8021q: adding VLAN 0 to HW filter on device bond10 [ 622.747991][T24543] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 622.793893][T24543] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 623.222969][T24583] netlink: 'syz.0.4870': attribute type 11 has an invalid length. [ 623.237915][T24583] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4870'. [ 623.257146][T24583] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4870'. [ 623.524129][T24595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4876'. [ 623.570122][T24595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4876'. [ 623.591388][T24598] ip6erspan0: entered allmulticast mode [ 623.613442][T24600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4878'. [ 623.980564][T24619] netlink: 'syz.4.4885': attribute type 24 has an invalid length. [ 624.013182][T24619] x_tables: duplicate underflow at hook 3 [ 624.086932][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.125204][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.141095][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.168740][T24630] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4886'. [ 624.188602][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.211561][T24636] netlink: 'syz.0.4889': attribute type 1 has an invalid length. [ 624.221572][T24636] netlink: 'syz.0.4889': attribute type 2 has an invalid length. [ 624.302214][T24634] bridge_slave_1: left allmulticast mode [ 624.307928][T24634] bridge_slave_1: left promiscuous mode [ 624.313931][T24634] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.346946][T24634] bridge_slave_0: left allmulticast mode [ 624.375708][T24634] bridge_slave_0: left promiscuous mode [ 624.394939][T24634] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.448254][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 624.487766][T24634] : (slave bridge0): Releasing backup interface [ 624.523862][T24657] IPVS: sh: FWM 3 0x00000003 - no destination available [ 624.531489][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 624.557257][T24648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.618959][T24654] lo speed is unknown, defaulting to 1000 [ 624.915097][T24675] lo speed is unknown, defaulting to 1000 [ 625.315609][T24698] bond8: entered promiscuous mode [ 625.321654][T24698] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.415800][T24698] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.474255][T24698] bond8: (slave sit3): The slave device specified does not support setting the MAC address [ 625.489605][T24698] bond8: (slave sit3): Error -95 calling set_mac_address [ 625.579191][T24721] syzkaller1: entered promiscuous mode [ 625.594993][T24721] syzkaller1: entered allmulticast mode [ 625.694641][T24725] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 625.744742][T24725] syzkaller1: left promiscuous mode [ 625.758251][T24725] syzkaller1: left allmulticast mode [ 625.950764][T24732] pim6reg: entered allmulticast mode [ 625.979157][T24740] pim6reg: left allmulticast mode [ 626.892670][T24770] bond11: (slave erspan0): Device is not bonding slave [ 626.899823][T24770] bond11: option active_slave: invalid value (erspan0) [ 626.918819][T24770] bond11 (unregistering): Released all slaves [ 627.208358][T24790] veth1_macvtap: renamed from veth0_vlan [ 627.341554][T24800] lo speed is unknown, defaulting to 1000 [ 627.349672][T24797] __nla_validate_parse: 8 callbacks suppressed [ 627.349833][T24797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4931'. [ 627.397584][T24805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4933'. [ 627.419387][T24807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4933'. [ 627.495243][T24813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.825085][T24831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.844186][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4941'. [ 627.859277][T24825] syzkaller0: entered promiscuous mode [ 627.867470][T24825] syzkaller0: entered allmulticast mode [ 629.506627][ T5489] veth1_macvtap: left promiscuous mode [ 629.543153][ T5489] veth1_macvtap: entered promiscuous mode [ 629.926960][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4949'. [ 629.958174][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 629.966256][ C0] lec:lec_tx_timeout: lec0 [ 630.419997][T24855] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 630.430862][T24900] netlink: 'syz.4.4954': attribute type 17 has an invalid length. [ 630.450266][T24900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4954'. [ 630.478308][T24900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4954'. [ 630.739040][T24916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4958'. [ 630.755001][T24917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4958'. [ 631.147975][T24935] netlink: 'syz.0.4965': attribute type 30 has an invalid length. [ 631.427188][T24955] netlink: 792 bytes leftover after parsing attributes in process `syz.0.4974'. [ 631.564931][T24969] erspan0: entered allmulticast mode [ 631.639442][T24970] ip6t_srh: unknown srh invflags 4000 [ 631.775818][T24978] bridge6: entered promiscuous mode [ 631.798607][T24978] bridge6: entered allmulticast mode [ 631.818301][T24978] team0: Port device bridge6 added [ 631.830095][T24978] bridge0: port 1(team0) entered blocking state [ 631.853806][T24978] bridge0: port 1(team0) entered disabled state [ 631.861185][T24978] team0: entered allmulticast mode [ 631.871311][T24978] team0: entered promiscuous mode [ 632.212996][T25001] netlink: 'syz.2.4988': attribute type 1 has an invalid length. [ 632.244342][T25001] 8021q: adding VLAN 0 to HW filter on device bond8 [ 632.879625][T25042] veth0_to_hsr: mtu less than device minimum [ 632.969099][T25047] lo: entered allmulticast mode [ 632.977849][T25047] tunl0: entered allmulticast mode [ 633.006438][T25047] gre0: entered allmulticast mode [ 633.065974][T25047] gretap0: entered allmulticast mode [ 633.181898][T25058] __nla_validate_parse: 1 callbacks suppressed [ 633.181919][T25058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 633.197225][T25058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 633.227869][T25058] netlink: 'syz.3.5004': attribute type 14 has an invalid length. [ 633.252797][T25058] netlink: 'syz.3.5004': attribute type 13 has an invalid length. [ 633.301774][T25047] erspan0: entered allmulticast mode [ 633.344385][T25047] ip_vti0: entered allmulticast mode [ 633.437796][T25047] ip6_vti0: entered allmulticast mode [ 633.451358][T25047] sit0: entered allmulticast mode [ 633.479747][T25047] ip6tnl0: entered allmulticast mode [ 633.489312][T25047] ip6gre0: entered allmulticast mode [ 633.501048][T25033] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4997'. [ 633.513282][T25047] syz_tun: entered allmulticast mode [ 633.533500][T25047] ip6gretap0: entered allmulticast mode [ 633.567149][T25047] bridge0: entered allmulticast mode [ 633.586501][T25047] vcan0: entered allmulticast mode [ 633.596882][T25047] bond0: entered allmulticast mode [ 633.602928][T25047] bond_slave_0: entered allmulticast mode [ 633.610200][T25047] bond_slave_1: entered allmulticast mode [ 633.623204][T25047] team0: entered allmulticast mode [ 633.631772][T25047] team_slave_0: entered allmulticast mode [ 633.644205][T25047] team_slave_1: entered allmulticast mode [ 633.657242][T25047] dummy0: entered allmulticast mode [ 633.673806][T25047] nlmon0: entered allmulticast mode [ 633.682808][T25047] caif0: entered allmulticast mode [ 633.690108][T25047] batadv0: entered allmulticast mode [ 633.701135][T25047] vxcan0: entered allmulticast mode [ 633.707816][T25047] vxcan1: entered allmulticast mode [ 633.714076][T25047] veth0: entered allmulticast mode [ 633.742289][T25047] veth1: entered allmulticast mode [ 633.753367][T25047] wg0: entered allmulticast mode [ 633.763472][T25047] wg1: entered allmulticast mode [ 633.790747][T25047] wg2: entered allmulticast mode [ 633.801576][T25047] veth0_to_bridge: entered allmulticast mode [ 633.927175][T25047] veth1_to_bridge: entered allmulticast mode [ 633.967527][T25047] veth0_to_bond: entered allmulticast mode [ 634.007972][T25047] veth1_to_bond: entered allmulticast mode [ 634.048555][T25047] veth0_to_team: entered allmulticast mode [ 634.084184][T25047] veth1_to_team: entered allmulticast mode [ 634.122976][T25047] veth0_to_batadv: entered allmulticast mode [ 634.144009][T25047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.168318][T25047] batadv_slave_0: entered allmulticast mode [ 634.178550][T25047] veth1_to_batadv: entered allmulticast mode [ 634.209955][T25047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.217522][T25047] batadv_slave_1: entered allmulticast mode [ 634.247979][T25047] xfrm0: entered allmulticast mode [ 634.278803][T25047] veth0_to_hsr: entered allmulticast mode [ 634.295354][T25047] hsr_slave_0: entered allmulticast mode [ 634.320894][T25047] veth1_to_hsr: entered allmulticast mode [ 634.346746][T25047] hsr_slave_1: entered allmulticast mode [ 634.367404][T25047] hsr0: entered allmulticast mode [ 634.385898][T25047] veth1_virt_wifi: entered allmulticast mode [ 634.400288][T25047] veth0_virt_wifi: entered allmulticast mode [ 634.431863][T25047] virt_wifi0: entered allmulticast mode [ 634.449230][T25047] veth1_macvtap: entered allmulticast mode [ 634.460040][T25047] veth0_macvtap: entered allmulticast mode [ 634.466625][T25047] macvtap0: entered allmulticast mode [ 634.485938][T25047] macsec0: entered allmulticast mode [ 634.518488][T25047] geneve0: entered allmulticast mode [ 634.534474][T25047] geneve1: entered allmulticast mode [ 634.548769][T25047] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 634.556249][T25047] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 634.564284][T25047] bond1: entered allmulticast mode [ 634.570421][T25047] bond2: entered allmulticast mode [ 634.575970][T25047] syz_tun.3: entered allmulticast mode [ 634.582597][T25047] bond3: entered allmulticast mode [ 634.587895][T25047] geneve2: entered allmulticast mode [ 634.604692][T25047] sit1: entered allmulticast mode [ 634.612036][T25047] ip6gretap1: entered allmulticast mode [ 634.621978][T25047] team1: left promiscuous mode [ 634.627084][T25047] bond4: entered allmulticast mode [ 634.635527][T25047] bridge1: entered allmulticast mode [ 634.641732][T25047] bridge2: entered allmulticast mode [ 634.647399][T25047] mac80211_hwsim hwsim47 wlan2: entered allmulticast mode [ 634.667200][T25047] bridge4: entered allmulticast mode [ 634.680464][T25047] bridge5: entered allmulticast mode [ 634.685988][T25047] bond5: entered allmulticast mode [ 634.693458][T25047] netdevsim netdevsim2 eth0: entered allmulticast mode [ 634.701239][T25047] netdevsim netdevsim2 eth1: entered allmulticast mode [ 634.709155][T25047] netdevsim netdevsim2 eth2: entered allmulticast mode [ 634.716502][T25047] netdevsim netdevsim2 eth3: entered allmulticast mode [ 634.724791][T25047] vlan0: entered allmulticast mode [ 634.731867][T25047] bond6: entered allmulticast mode [ 634.737270][T25047] gre1: entered allmulticast mode [ 634.742678][T25047] bond7: entered allmulticast mode [ 634.747949][T25047] sit2: entered allmulticast mode [ 634.753930][T25047] bridge6: left promiscuous mode [ 634.760866][T25047] vxlan0: entered allmulticast mode [ 634.769499][T25047] veth2: entered allmulticast mode [ 634.774820][T25047] veth3: entered allmulticast mode [ 634.781948][T25047] veth4: entered allmulticast mode [ 634.787289][T25047] veth5: entered allmulticast mode [ 634.798692][T25047] bond8: entered allmulticast mode [ 634.807647][T25047] syztnl0: entered allmulticast mode [ 634.921374][T25088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5008'. [ 634.945934][ T610] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.954996][ T610] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.964197][ T610] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 634.996487][ T610] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.026956][ T610] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.041439][ T610] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 635.078911][T25097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 635.118996][ T610] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.127405][ T610] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.154132][ T610] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 635.216070][ T610] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.233559][T25112] xt_l2tp: missing protocol rule (udp|l2tpip) [ 635.248854][ T610] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.257338][ T610] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 635.430654][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5016'. [ 636.167753][T25172] netlink: 'syz.0.5031': attribute type 1 has an invalid length. [ 636.181592][T25171] netlink: 'syz.4.5032': attribute type 1 has an invalid length. [ 636.255499][T25179] bond9: (slave gretap1): making interface the new active one [ 636.264115][T25179] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 636.300359][T25181] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 636.360571][T25181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5033'. [ 636.426516][T25187] netlink: 'syz.0.5035': attribute type 1 has an invalid length. [ 636.461326][T25187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 636.569268][T25190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5035'. [ 636.638849][T25194] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 636.673081][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5037'. [ 636.727929][T25197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5037'. [ 637.074386][T25218] 0: reclassify loop, rule prio 0, protocol 700 [ 637.083083][T25218] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 637.333197][T25231] syzkaller1: entered promiscuous mode [ 637.339691][T25231] syzkaller1: entered allmulticast mode [ 637.441470][T25240] netlink: 'syz.0.5051': attribute type 1 has an invalid length. [ 637.535651][T25240] bond11: entered promiscuous mode [ 637.569255][T25240] 8021q: adding VLAN 0 to HW filter on device bond11 [ 637.607675][T25243] bond11: (slave bridge7): making interface the new active one [ 637.625417][T25243] bridge7: entered promiscuous mode [ 637.633778][T25243] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 637.668042][T25247] bridge0: Device is already in use. [ 638.092781][T25282] h: entered promiscuous mode [ 638.348052][T25307] netlink: 'syz.3.5067': attribute type 9 has an invalid length. [ 638.374896][T25307] netlink: 'syz.3.5067': attribute type 11 has an invalid length. [ 638.395163][T25307] netlink: 'syz.3.5067': attribute type 12 has an invalid length. [ 638.423278][T25307] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.5067'. [ 638.451084][T25313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'. [ 638.487198][T25313] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 638.510876][T25313] batadv1: entered allmulticast mode [ 638.541853][T25313] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 638.613308][T25313] team0: Failed to send options change via netlink (err -105) [ 638.639024][T25313] team0: Port device batadv1 added [ 638.651502][T25315] lo speed is unknown, defaulting to 1000 [ 638.706684][T25325] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5072'. [ 638.757453][T25332] syzkaller0: entered promiscuous mode [ 638.780431][T25332] 0: reclassify loop, rule prio 0, protocol 800 [ 639.020118][T25346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 639.065312][T25352] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 639.072607][T25352] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 639.093453][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5077'. [ 639.189305][T25357] lo speed is unknown, defaulting to 1000 [ 639.352425][T25367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.402744][T25379] bond0: (slave rose0): Error: Device can not be enslaved while up [ 639.543832][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5086'. [ 639.946582][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5091'. [ 639.978793][T25405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5091'. [ 639.999033][T25408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5092'. [ 640.142765][T25408] tipc: Disabling bearer [ 640.391225][T25426] ip6tnl0: Caught tx_queue_len zero misconfig [ 640.817856][T25449] ip6gre1: entered allmulticast mode [ 640.854381][T25454] nbd: socks must be embedded in a SOCK_ITEM attr [ 641.177901][T25479] netlink: 'syz.4.5110': attribute type 1 has an invalid length. [ 641.188662][T25479] netlink: 'syz.4.5110': attribute type 1 has an invalid length. [ 641.228665][T25480] netlink: 'syz.0.5112': attribute type 2 has an invalid length. [ 641.236534][T25480] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5112'. [ 641.396646][T25482] vlan0: entered promiscuous mode [ 641.464938][T25487] netlink: 'syz.2.5116': attribute type 1 has an invalid length. [ 641.519736][T25494] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20002 [ 641.534830][T25487] 8021q: adding VLAN 0 to HW filter on device bond9 [ 642.253777][T25536] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 642.442724][T25554] veth0: entered promiscuous mode [ 642.473088][T25553] syzkaller0: entered promiscuous mode [ 642.483284][T25553] syzkaller0: entered allmulticast mode [ 642.503033][T25559] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.706557][T25551] veth0: left promiscuous mode [ 643.049208][T25589] netlink: 'syz.3.5142': attribute type 9 has an invalid length. [ 643.079541][T25591] netlink: 'syz.2.5143': attribute type 1 has an invalid length. [ 643.358923][T25612] lo: MTU too low for tipc bearer [ 643.383018][T25612] tipc: Enabling of bearer rejected, failed to enable media [ 643.492509][T25615] syzkaller1: entered promiscuous mode [ 643.502605][T25615] syzkaller1: entered allmulticast mode [ 643.585005][T25623] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 643.614606][T25623] bond12 (unregistering): Released all slaves [ 643.637515][T25621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.666134][T25626] __nla_validate_parse: 13 callbacks suppressed [ 643.666157][T25626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5150'. [ 643.864441][T25637] netlink: 160380 bytes leftover after parsing attributes in process `syz.0.5151'. [ 643.894531][T25637] erspan0: left allmulticast mode [ 643.995353][T25641] tipc: Invalid UDP bearer configuration [ 643.995411][T25641] tipc: Enabling of bearer rejected, failed to enable media [ 644.028296][T25642] sctp: [Deprecated]: syz.0.5151 (pid 25642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.028296][T25642] Use struct sctp_sack_info instead [ 644.224012][T25656] netlink: 'syz.4.5156': attribute type 1 has an invalid length. [ 644.620036][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5161'. [ 644.652176][T25684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5164'. [ 644.951259][T25699] syzkaller1: entered promiscuous mode [ 644.957117][T25699] syzkaller1: entered allmulticast mode [ 645.279839][T25717] ip_vti0: entered promiscuous mode [ 645.288392][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5175'. [ 645.317875][T25726] team0: Device gtp2 is up. Set it down before adding it as a team port [ 645.413200][T25734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5180'. [ 645.422785][T25734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5180'. [ 645.473394][T25734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5180'. [ 645.509070][T25734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5180'. [ 645.580144][T25745] batadv2: entered allmulticast mode [ 645.613494][T25743] netlink: 'syz.0.5182': attribute type 25 has an invalid length. [ 645.621488][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5182'. [ 645.852984][T25767] x_tables: unsorted entry at hook 3 [ 645.886248][T25761] tipc: Enabling of bearer rejected, media not registered [ 646.040154][T25770] team0: entered promiscuous mode [ 646.045327][T25770] team0: entered allmulticast mode [ 646.060582][ T35] nci: nci_rsp_packet: unknown rsp opcode 0x2a [ 646.083747][T25776] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 646.126764][T25789] vlan2: entered allmulticast mode [ 646.149010][T25789] bridge_slave_0: entered allmulticast mode [ 646.416539][T25805] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 646.806470][T25772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 646.832201][T25807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.860146][T25834] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 647.376667][T25873] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 647.389091][T25873] netlink: 'syz.2.5215': attribute type 10 has an invalid length. [ 647.403438][T25873] bridge_slave_1: left allmulticast mode [ 647.441327][T25873] bridge_slave_1: left promiscuous mode [ 647.487691][T25873] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.655965][T25873] bridge_slave_1: entered allmulticast mode [ 647.663701][T25873] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 648.293021][T25925] netlink: 'syz.0.5230': attribute type 11 has an invalid length. [ 648.335478][T25925] netlink: 'syz.0.5230': attribute type 11 has an invalid length. [ 649.179983][T25963] __nla_validate_parse: 13 callbacks suppressed [ 649.180014][T25963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5239'. [ 649.197222][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5239'. [ 649.580999][T25986] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 649.867266][T26004] syzkaller0: entered promiscuous mode [ 649.873217][T26004] syzkaller0: entered allmulticast mode [ 649.971221][T26008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5250'. [ 650.150320][T26015] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5253'. [ 650.320912][T26022] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5256'. [ 650.331527][T26022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5256'. [ 650.488378][T26024] netlink: 'syz.1.5257': attribute type 75 has an invalid length. [ 650.529109][T26026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5258'. [ 650.555180][T26028] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 650.667577][T26032] netlink: 'syz.1.5260': attribute type 3 has an invalid length. [ 650.963297][T26040] netlink: 'syz.1.5264': attribute type 1 has an invalid length. [ 651.060910][T26040] 8021q: adding VLAN 0 to HW filter on device bond12 [ 651.087346][T26045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5265'. [ 651.097874][T26045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5265'. [ 651.179286][T26052] netlink: 'syz.0.5267': attribute type 2 has an invalid length. [ 651.187076][T26052] netlink: 'syz.0.5267': attribute type 2 has an invalid length. [ 651.204334][T26049] bond12: (slave geneve3): making interface the new active one [ 651.219542][T26052] netlink: 'syz.0.5267': attribute type 1 has an invalid length. [ 651.227514][T26052] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5267'. [ 651.234461][T26049] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 651.305108][T26055] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 651.358737][T26055] syzkaller0: entered promiscuous mode [ 651.364281][T26055] syzkaller0: entered allmulticast mode [ 651.411752][T26061] bridge_slave_0: left promiscuous mode [ 651.417710][T26061] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.451967][T26061] bond0: (slave bridge_slave_1): Releasing backup interface [ 651.469030][T26061] bridge_slave_1: left allmulticast mode [ 651.495197][T26061] bond0: (slave bond_slave_0): Releasing backup interface [ 651.507166][T26061] bond0: (slave bond_slave_1): Releasing backup interface [ 651.534931][T26061] team0: Port device team_slave_0 removed [ 651.543976][T26061] team0: Port device team_slave_1 removed [ 651.557482][T26061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.599200][T26061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.619964][T26061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 651.763270][T26074] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 651.841488][T26081] bond0: Caught tx_queue_len zero misconfig [ 652.030552][T26088] syzkaller0: entered promiscuous mode [ 652.036084][T26088] syzkaller0: entered allmulticast mode [ 652.220443][T26107] macvlan0: entered allmulticast mode [ 652.240233][T26112] sock: sock_set_timeout: `syz.0.5286' (pid 26112) tries to set negative timeout [ 653.036928][T26171] netlink: 'syz.2.5306': attribute type 5 has an invalid length. [ 653.059985][T26171] netlink: 'syz.2.5306': attribute type 1 has an invalid length. [ 653.135226][T26171] bond10: entered promiscuous mode [ 653.164213][T26171] 8021q: adding VLAN 0 to HW filter on device bond10 [ 653.304151][T26181] syzkaller0: entered promiscuous mode [ 653.328190][T26181] syzkaller0: entered allmulticast mode [ 653.361986][T26171] bond10: (slave bridge9): making interface the new active one [ 653.381681][T26171] bridge9: entered promiscuous mode [ 653.422601][T26171] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 653.493382][T26200] netlink: 'syz.3.5312': attribute type 4 has an invalid length. [ 653.511405][T26200] netlink: 'syz.3.5312': attribute type 4 has an invalid length. [ 655.161039][T26222] __nla_validate_parse: 14 callbacks suppressed [ 655.161059][T26222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5318'. [ 655.203159][T26222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5318'. [ 655.287465][T26222] gretap2: entered promiscuous mode [ 655.296849][T26222] gretap2: entered allmulticast mode [ 655.360392][T26232] syzkaller1: entered promiscuous mode [ 655.365926][T26232] syzkaller1: entered allmulticast mode [ 655.397622][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5321'. [ 655.419260][T26236] netlink: 'syz.0.5322': attribute type 1 has an invalid length. [ 655.427417][T26236] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5322'. [ 655.440949][T26238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5323'. [ 655.450054][T26236] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5322'. [ 656.077725][T26285] netlink: 'syz.0.5334': attribute type 1 has an invalid length. [ 656.108036][T26285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5334'. [ 656.526753][T26315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5341'. [ 656.543079][T26316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.569351][T26307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5338'. [ 656.611464][T26315] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5341'. [ 656.851020][T26330] tipc: Started in network mode [ 656.856046][T26330] tipc: Node identity 9e7ece058c74, cluster identity 4711 [ 656.864018][T26330] tipc: Enabled bearer , priority 0 [ 656.922274][T26330] syzkaller0: entered promiscuous mode [ 656.927796][T26330] syzkaller0: entered allmulticast mode [ 656.946382][T26330] tipc: Resetting bearer [ 656.957885][T26329] tipc: Resetting bearer [ 658.459128][T26329] tipc: Disabling bearer [ 658.469285][T26347] netlink: 'syz.2.5351': attribute type 1 has an invalid length. [ 658.535561][ T5951] tipc: Node number set to 302697989 [ 658.757222][T26370] gtp2: entered promiscuous mode [ 658.771777][T26370] gtp2: entered allmulticast mode [ 658.827778][T26382] netlink: 'syz.0.5360': attribute type 11 has an invalid length. [ 658.878916][T26375] syzkaller1: entered promiscuous mode [ 658.889389][T26375] syzkaller1: entered allmulticast mode [ 658.905200][T26389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.993271][T26375] lo speed is unknown, defaulting to 1000 [ 659.153064][T26401] sctp: [Deprecated]: syz.0.5365 (pid 26401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.153064][T26401] Use struct sctp_sack_info instead [ 659.420120][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.428682][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.436762][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.446364][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.486147][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.495442][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.554001][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.572861][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.581231][T26416] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 659.821139][T26437] syzkaller0: entered promiscuous mode [ 659.837468][T26437] syzkaller0: entered allmulticast mode [ 659.940302][T26441] veth7: entered allmulticast mode [ 660.245100][T26454] +: renamed from syzkaller0 [ 660.267519][T26456] bridge0: port 1(ipvlan0) entered blocking state [ 660.282376][T26456] bridge0: port 1(ipvlan0) entered disabled state [ 660.289674][T26456] ipvlan0: entered allmulticast mode [ 660.296685][T26456] ipvlan0: left allmulticast mode [ 660.307337][T26458] netem: incorrect gi model size [ 660.313656][T26458] netem: change failed [ 660.329741][T26457] bridge0: port 1(ipvlan0) entered blocking state [ 660.336516][T26457] bridge0: port 1(ipvlan0) entered disabled state [ 660.343571][T26457] ipvlan0: entered allmulticast mode [ 660.354249][T26457] ipvlan0: left allmulticast mode [ 660.778027][T26485] __nla_validate_parse: 72 callbacks suppressed [ 660.778047][T26485] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.5393'. [ 660.857175][T26490] Bluetooth: MGMT ver 1.23 [ 663.483389][T26466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.799929][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5400'. [ 664.133558][T26535] validate_nla: 56 callbacks suppressed [ 664.133579][T26535] netlink: 'syz.4.5407': attribute type 2 has an invalid length. [ 664.178227][T26535] netlink: 'syz.4.5407': attribute type 1 has an invalid length. [ 664.233971][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 664.251814][T26541] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 664.252375][T26535] vlan2: entered allmulticast mode [ 664.264679][T26535] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 664.291628][T26531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5406'. [ 664.484571][T26556] netlink: 'syz.0.5413': attribute type 1 has an invalid length. [ 664.495483][T26556] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5413'. [ 664.515391][T26558] netlink: 'syz.0.5413': attribute type 1 has an invalid length. [ 664.545843][T26558] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5413'. [ 664.649884][T26562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.961169][T26588] syzkaller0: entered promiscuous mode [ 664.966837][T26588] syzkaller0: entered allmulticast mode [ 665.068524][T26595] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 665.184877][T26602] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5424'. [ 665.197266][T26602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5424'. [ 665.220744][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5423'. [ 665.530172][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5427'. [ 665.539362][T26613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.631912][T26621] netlink: 'syz.2.5429': attribute type 1 has an invalid length. [ 665.662594][T26621] bond11: entered promiscuous mode [ 665.667757][T26621] bond11: entered allmulticast mode [ 665.673704][T26621] 8021q: adding VLAN 0 to HW filter on device bond11 [ 665.691219][T26621] macvlan1: entered promiscuous mode [ 665.696646][T26621] macvlan1: entered allmulticast mode [ 665.861994][T26631] __nla_validate_parse: 1 callbacks suppressed [ 665.862010][T26631] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.5432'. [ 668.016231][T26594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.192569][T26645] netlink: 'syz.4.5436': attribute type 1 has an invalid length. [ 668.210339][T26645] netlink: 'syz.4.5436': attribute type 4 has an invalid length. [ 668.232067][T26648] xt_hashlimit: size too large, truncated to 1048576 [ 668.240909][T26645] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5436'. [ 668.412777][T26667] netlink: 'syz.1.5439': attribute type 1 has an invalid length. [ 668.420758][T26667] netlink: 'syz.1.5439': attribute type 1 has an invalid length. [ 668.436343][T26666] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 668.505039][T26666] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 668.525578][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5441'. [ 668.546352][T26666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.555624][T26676] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.570168][T26666] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 668.611290][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5441'. [ 668.617135][T26666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.640932][T26666] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 668.664954][T26676] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.682736][T26666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.697911][T26666] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 668.831267][T26692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'. [ 668.863155][T26692] netlink: 'syz.3.5445': attribute type 3 has an invalid length. [ 668.996247][T26702] openvswitch: netlink: IPv4 tun info is not correct [ 669.023346][T26702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5448'. [ 669.115702][T26707] dvmrp8: entered allmulticast mode [ 669.266669][T26716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5453'. [ 669.287992][T26714] x_tables: duplicate underflow at hook 2 [ 669.819949][T26723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.866902][T26723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.439760][ T1314] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.491330][ T1314] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.523067][ T1314] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.551058][ T1314] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.650054][T26754] netlink: 'syz.1.5463': attribute type 2 has an invalid length. [ 670.754148][T26764] netlink: 'syz.1.5463': attribute type 1 has an invalid length. [ 670.777837][T26763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5467'. [ 670.883374][T26763] netlink: 'syz.2.5467': attribute type 3 has an invalid length. [ 670.903624][T26763] netlink: 'syz.2.5467': attribute type 3 has an invalid length. [ 671.059969][T26762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.086201][T26780] lo speed is unknown, defaulting to 1000 [ 671.507384][T26789] lo speed is unknown, defaulting to 1000 [ 671.521063][T26789] lo speed is unknown, defaulting to 1000 [ 671.527864][T26789] lo speed is unknown, defaulting to 1000 [ 671.735781][T26789] infiniband syz0: set active [ 671.740626][T26789] infiniband syz0: added lo [ 671.749747][T25069] lo speed is unknown, defaulting to 1000 [ 671.798937][T26789] RDS/IB: syz0: added [ 671.803227][T26789] smc: adding ib device syz0 with port count 1 [ 671.812732][T26789] smc: ib device syz0 port 1 has no pnetid [ 671.822964][T26789] lo speed is unknown, defaulting to 1000 [ 671.860876][T25069] lo speed is unknown, defaulting to 1000 [ 671.868405][T26808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5479'. [ 672.079715][T26805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5477'. [ 672.089851][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5477'. [ 672.128552][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5477'. [ 672.219675][T26803] xt_bpf: check failed: parse error [ 672.259314][T26825] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5481'. [ 672.276226][T26825] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5481'. [ 672.463425][T26789] lo speed is unknown, defaulting to 1000 [ 672.531936][T26838] xt_recent: Unsupported userspace flags (000000b1) [ 672.565512][T26840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5487'. [ 672.576369][T26838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5486'. [ 672.600730][T26838] IPVS: ip_vs_add_dest(): server weight less than zero [ 672.621430][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.639548][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.658017][T25069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.809372][T26846] lo: entered promiscuous mode [ 672.814687][T26846] tunl0: entered promiscuous mode [ 672.842199][T26846] gre0: entered promiscuous mode [ 672.847601][T26846] gretap0: entered promiscuous mode [ 672.856289][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5490'. [ 672.880683][T26846] erspan0: entered promiscuous mode [ 672.971064][T26862] syzkaller1: entered promiscuous mode [ 672.976673][T26862] syzkaller1: entered allmulticast mode [ 672.989822][T26789] lo speed is unknown, defaulting to 1000 [ 673.006111][T26862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5492'. [ 673.398542][T25069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.410926][T26878] netlink: 'syz.4.5498': attribute type 3 has an invalid length. [ 673.478486][T25069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.495299][T26789] lo speed is unknown, defaulting to 1000 [ 674.211058][T26789] lo speed is unknown, defaulting to 1000 [ 674.222599][T26928] netlink: 'syz.1.5511': attribute type 10 has an invalid length. [ 674.260112][T26928] veth0_vlan: left promiscuous mode [ 674.297902][T26928] veth0_vlan: entered promiscuous mode [ 674.309697][T26928] team0: Device veth0_vlan failed to register rx_handler [ 674.576463][T26943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.789715][T26949] gretap0: entered promiscuous mode [ 674.795058][T26949] vlan1: entered promiscuous mode [ 674.867730][T26789] lo speed is unknown, defaulting to 1000 [ 675.270604][T26973] IPVS: ip_vs_add_dest(): server weight less than zero [ 675.476521][T26789] lo speed is unknown, defaulting to 1000 [ 675.522103][T26987] syzkaller1: entered promiscuous mode [ 675.527649][T26987] syzkaller1: entered allmulticast mode [ 676.056659][T27007] macvtap1: entered allmulticast mode [ 676.070087][T27007] veth0_macvtap: entered allmulticast mode [ 676.077447][T26789] lo speed is unknown, defaulting to 1000 [ 676.172425][T27009] can: request_module (can-proto-0) failed. [ 676.431466][T26789] lo speed is unknown, defaulting to 1000 [ 676.438361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.608910][T27036] netlink: 'syz.1.5541': attribute type 10 has an invalid length. [ 677.117614][T27071] __nla_validate_parse: 39 callbacks suppressed [ 677.117637][T27071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5551'. [ 677.375653][T27082] netlink: 'syz.0.5555': attribute type 1 has an invalid length. [ 677.489992][T27082] bond12: entered promiscuous mode [ 677.495640][T27082] 8021q: adding VLAN 0 to HW filter on device bond12 [ 677.537991][T27086] bridge0: Device is already in use. [ 677.558589][T27082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5555'. [ 677.574672][T27089] bridge0: Device is already in use. [ 677.714064][T27096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5557'. [ 677.724230][ T610] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.733985][ T610] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.744683][T27096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5557'. [ 677.759461][ T610] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.767801][ T610] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.777431][T27097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5557'. [ 677.788698][T27097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5557'. [ 677.951451][T27110] netlink: 212216 bytes leftover after parsing attributes in process `syz.3.5563'. [ 677.952589][T27109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5562'. [ 678.071267][T27118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5564'. [ 678.400469][T27137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5571'. [ 678.533715][T27145] macsec1: entered promiscuous mode [ 678.539255][T27145] bridge0: entered promiscuous mode [ 678.544852][T27145] macsec1: entered allmulticast mode [ 678.550961][T27145] bridge0: entered allmulticast mode [ 678.557078][T27145] bridge0: port 3(macsec1) entered blocking state [ 678.565704][T27145] bridge0: port 3(macsec1) entered disabled state [ 678.580269][T27145] bridge0: left allmulticast mode [ 678.585338][T27145] bridge0: left promiscuous mode [ 678.620291][T27149] netlink: 'syz.4.5573': attribute type 1 has an invalid length. [ 678.628334][T27141] lo speed is unknown, defaulting to 1000 [ 678.719349][T27151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.049084][T27141] lo speed is unknown, defaulting to 1000 [ 679.544102][T27197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.411692][T27237] syzkaller0: entered promiscuous mode [ 680.417434][T27237] syzkaller0: entered allmulticast mode [ 680.629469][T27245] netlink: 'syz.0.5604': attribute type 1 has an invalid length. [ 680.637446][T27245] netlink: 'syz.0.5604': attribute type 2 has an invalid length. [ 680.645337][T27245] netlink: 'syz.0.5604': attribute type 1 has an invalid length. [ 680.653581][T27245] netlink: 'syz.0.5604': attribute type 3 has an invalid length. [ 680.944558][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 681.190083][ T12] dvmrp0 (unregistering): left allmulticast mode [ 681.593833][ T12] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 681.603206][ T12] bridge6 (unregistering): left promiscuous mode [ 681.648826][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 681.660781][ T12] bond0 (unregistering): Released all slaves [ 681.671458][ T12] bond1 (unregistering): Released all slaves [ 681.688056][ T12] bond2 (unregistering): Released all slaves [ 681.703378][ T12] bond3 (unregistering): Released all slaves [ 681.722076][ T12] bond4 (unregistering): Released all slaves [ 681.738024][ T12] bond5 (unregistering): Released all slaves [ 681.756058][ T12] bond6 (unregistering): Released all slaves [ 681.774176][ T12] bond7 (unregistering): Released all slaves [ 681.792345][ T12] bond8 (unregistering): Released all slaves [ 681.984993][ T12] : left promiscuous mode [ 682.065582][ T12] tipc: Disabling bearer [ 682.072384][ T12] tipc: Left network mode [ 682.145262][T27302] batman_adv: batadv0: Adding interface: dummy0 [ 682.160925][T27300] __nla_validate_parse: 11 callbacks suppressed [ 682.160945][T27300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5620'. [ 682.194705][T27302] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.231671][T27302] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 682.453093][T27316] : renamed from virt_wifi0 [ 682.572096][T27318] syzkaller1: entered promiscuous mode [ 682.579642][T27318] syzkaller1: entered allmulticast mode [ 683.036898][T27341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5635'. [ 683.092715][T27346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.290121][T27355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5639'. [ 683.607556][T27373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5642'. [ 683.616776][T27373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5642'. [ 683.863735][ T12] team0 (unregistering): Port device vxcan1 removed [ 683.916427][ T6822] smc: removing ib device syz2 [ 683.932893][T27366] netlink: 'syz.3.5644': attribute type 10 has an invalid length. [ 683.956792][T27372] bridge10: entered promiscuous mode [ 683.967977][T27366] netlink: 396 bytes leftover after parsing attributes in process `syz.3.5644'. [ 683.982789][T27372] bridge10: entered allmulticast mode [ 684.234460][T27378] netlink: 'syz.3.5648': attribute type 1 has an invalid length. [ 684.277634][T27378] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5648'. [ 684.293227][T27378] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5648'. [ 684.391779][T27396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5651'. [ 684.566487][T27400] netlink: 'syz.3.5652': attribute type 1 has an invalid length. [ 684.598344][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 684.763479][T27400] 8021q: adding VLAN 0 to HW filter on device bond6 [ 684.778964][T27410] netlink: 'syz.4.5654': attribute type 11 has an invalid length. [ 684.787004][T27410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5654'. [ 684.841547][T27400] netlink: 'syz.3.5652': attribute type 10 has an invalid length. [ 684.996606][T27408] bond6: (slave bridge9): making interface the new active one [ 685.017766][T27408] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 685.282799][T27427] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 685.309659][T27428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.470254][T27430] TCP: TCP_TX_DELAY enabled [ 685.889609][T27459] syz0: rxe_newlink: already configured on lo [ 685.900986][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 686.577980][T27502] x_tables: duplicate underflow at hook 1 [ 687.476548][ T12] IPVS: stop unused estimator thread 0... [ 687.601016][T27543] : renamed from hsr0 [ 687.644970][T27547] __nla_validate_parse: 6 callbacks suppressed [ 687.644992][T27547] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5695'. [ 687.677637][T27547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5695'. [ 687.744053][T27550] erspan0: left promiscuous mode [ 688.017900][T27574] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5704'. [ 688.199449][T27592] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5710'. [ 688.322211][T27601] x_tables: duplicate underflow at hook 4 [ 688.541904][T27614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5720'. [ 688.558291][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5720'. [ 688.569436][T27620] netlink: 'syz.0.5719': attribute type 32 has an invalid length. [ 688.577304][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5719'. [ 688.601795][T27614] netlink: 'syz.3.5720': attribute type 15 has an invalid length. [ 688.646455][T27620] bond13: option coupled_control: invalid value (192) [ 688.665155][T27620] bond13 (unregistering): Released all slaves [ 688.706290][T27614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5720'. [ 688.716703][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5720'. [ 688.748941][T27614] netlink: 'syz.3.5720': attribute type 15 has an invalid length. [ 688.799161][ T6816] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 688.809020][ T6816] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 688.828853][ T6816] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 688.839777][ T49] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 688.975898][T27635] syzkaller0: entered promiscuous mode [ 688.982494][T27635] syzkaller0: entered allmulticast mode [ 688.992153][T27632] netlink: zone id is out of range [ 689.012832][T27636] vlan0: entered promiscuous mode [ 689.015746][T27632] netlink: zone id is out of range [ 689.023703][T27632] netlink: zone id is out of range [ 689.028981][T27636] bridge0: entered promiscuous mode [ 689.054294][T27632] netlink: zone id is out of range [ 689.061690][T27632] netlink: zone id is out of range [ 689.070181][T27632] netlink: zone id is out of range [ 689.075624][T27632] netlink: zone id is out of range [ 689.082928][T27632] netlink: zone id is out of range [ 689.088534][T27632] netlink: zone id is out of range [ 689.263810][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5731'. [ 689.317056][T27657] SET target dimension over the limit! [ 689.377891][T27659] netlink: 'syz.3.5733': attribute type 1 has an invalid length. [ 689.893980][T27698] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 689.922919][T27700] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 689.935086][T27698] IPVS: length: 136 != 56366203928 [ 690.349095][T27728] tipc: Enabled bearer , priority 0 [ 690.369906][T27726] tipc: Disabling bearer [ 690.382222][T27729] netlink: 'syz.3.5753': attribute type 16 has an invalid length. [ 690.398390][T27729] netlink: 'syz.3.5753': attribute type 17 has an invalid length. [ 690.451477][T27731] netlink: 'syz.4.5754': attribute type 1 has an invalid length. [ 690.471139][T27729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.485859][T27729] net_ratelimit: 185 callbacks suppressed [ 690.485870][T27729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.974900][T27746] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 690.998785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 691.015922][ C0] lec:lec_tx_timeout: lec0 [ 691.311077][T27789] netlink: 'syz.2.5769': attribute type 2 has an invalid length. [ 691.432944][T27790] lo speed is unknown, defaulting to 1000 [ 691.770050][T27811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 691.830137][T27821] : renamed from bond0 [ 692.206096][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.218012][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.229659][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.240007][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.247817][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.270034][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.277373][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.285359][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.293464][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.309579][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.559331][T27847] netlink: 'syz.3.5783': attribute type 2 has an invalid length. [ 692.602608][T27849] sctp: [Deprecated]: syz.2.5784 (pid 27849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.602608][T27849] Use struct sctp_sack_info instead [ 692.667779][T27847] 9: entered promiscuous mode [ 692.676624][T27835] lo speed is unknown, defaulting to 1000 [ 693.406787][T27835] chnl_net:caif_netlink_parms(): no params data found [ 693.554217][T27891] __nla_validate_parse: 12 callbacks suppressed [ 693.554240][T27891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5795'. [ 693.605303][T27835] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.613209][T27835] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.620821][T27835] bridge_slave_0: entered allmulticast mode [ 693.628839][T27835] bridge_slave_0: entered promiscuous mode [ 693.637615][T27835] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.646102][T27835] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.655093][T27835] bridge_slave_1: entered allmulticast mode [ 693.663904][T27835] bridge_slave_1: entered promiscuous mode [ 693.751727][T27835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.780005][T27835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.808659][T27897] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 693.830572][T27903] netlink: 'syz.2.5797': attribute type 30 has an invalid length. [ 693.905213][T27835] team0: Port device team_slave_0 added [ 693.916029][T27835] team0: Port device team_slave_1 added [ 693.994803][T27835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.012716][T27835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.056891][T27913] netlink: 'syz.2.5800': attribute type 3 has an invalid length. [ 694.095446][T27835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.109812][T27835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.117876][T27835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.145648][T27835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.158732][T27920] netlink: 'syz.2.5800': attribute type 3 has an invalid length. [ 694.295020][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5803'. [ 694.315412][T27835] hsr_slave_0: entered promiscuous mode [ 694.330699][T27835] hsr_slave_1: entered promiscuous mode [ 694.337476][T27835] debugfs: 'hsr0' already exists in 'hsr' [ 694.344711][T27835] Cannot create hsr debugfs directory [ 694.354657][T27930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5804'. [ 694.368375][ T5145] Bluetooth: hci4: command tx timeout [ 694.501802][T27935] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5805'. [ 694.511902][T27933] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5805'. [ 694.523602][T27933] netlink: 'syz.0.5805': attribute type 1 has an invalid length. [ 694.531491][T27933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5805'. [ 694.542053][T27933] netlink: 'syz.0.5805': attribute type 30 has an invalid length. [ 694.718857][T27947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5808'. [ 695.007820][T27961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5814'. [ 695.030101][T27958] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 695.049328][T27958] bond0 (unregistering): Released all slaves [ 695.162421][T27835] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.175233][T27835] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 695.211037][T27835] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.325744][T27977] ip6tnl5: entered allmulticast mode [ 695.343981][T27835] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.377296][T27835] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 695.389180][T27835] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.442939][T27975] netem: change failed [ 695.452630][T27985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5820'. [ 695.461917][T27985] openvswitch: netlink: Flow actions attr not present in new flow. [ 695.476343][T27985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5820'. [ 695.488679][T27835] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.520222][T27835] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 695.596022][T27835] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.706219][T27835] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.735759][T27835] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 695.768813][T27835] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.881600][T28009] syzkaller1: entered promiscuous mode [ 695.919589][T28009] syzkaller1: entered allmulticast mode [ 696.145312][T27835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.182416][T27835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.252176][T27835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.274811][T28028] syzkaller0: entered promiscuous mode [ 696.281175][T28028] syzkaller0: entered allmulticast mode [ 696.297752][T27835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 696.376888][T28034] netlink: 'syz.1.5833': attribute type 1 has an invalid length. [ 696.438567][ T5145] Bluetooth: hci4: command tx timeout [ 696.480185][T28032] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 696.592733][T28050] netlink: 'syz.1.5836': attribute type 11 has an invalid length. [ 696.715081][T27835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.782953][T27835] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.792490][T28061] netlink: 'syz.0.5840': attribute type 1 has an invalid length. [ 696.812642][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.819858][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.857696][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.864896][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.069259][T28070] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 697.201682][T28086] netlink: 'syz.0.5847': attribute type 4 has an invalid length. [ 697.505988][T27835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.547097][T28102] netlink: 'syz.1.5852': attribute type 1 has an invalid length. [ 697.561135][T28102] netlink: 'syz.1.5852': attribute type 1 has an invalid length. [ 697.590792][T28102] netlink: 'syz.1.5852': attribute type 1 has an invalid length. [ 697.615100][T28102] netlink: 'syz.1.5852': attribute type 1 has an invalid length. [ 698.205764][T27835] veth0_vlan: entered promiscuous mode [ 698.243547][T27835] veth1_vlan: entered promiscuous mode [ 698.373174][T27835] veth0_macvtap: entered promiscuous mode [ 698.421191][T27835] veth1_macvtap: entered promiscuous mode [ 698.481827][T27835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.518904][ T5145] Bluetooth: hci4: command tx timeout [ 698.543186][T27835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.560942][ T6822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.607250][ T6822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.643515][T28157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.661907][ T6822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.673647][T28157] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.682365][T28163] __nla_validate_parse: 7 callbacks suppressed [ 698.682383][T28163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5867'. [ 698.697959][ T6822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.899981][ T6816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.930356][ T6816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.940284][T22627] IPVS: starting estimator thread 0... [ 698.967359][T28173] lo speed is unknown, defaulting to 1000 [ 698.978863][T28175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5872'. [ 699.020362][ T6822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.037358][ T6822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.038503][T28174] IPVS: using max 39 ests per chain, 93600 per kthread [ 699.555177][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 699.572191][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 699.585322][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 699.595079][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 699.604526][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 699.640283][T28197] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5879'. [ 699.781681][T28193] lo speed is unknown, defaulting to 1000 [ 699.932785][T28212] validate_nla: 62 callbacks suppressed [ 699.932806][T28212] netlink: 'syz.3.5883': attribute type 32 has an invalid length. [ 699.968321][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 700.047592][T17239] syz_tun (unregistering): left allmulticast mode [ 700.054804][T28217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5883'. [ 700.171858][ T1314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.186969][ T1314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.201051][ T1314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41164 - 0 [ 700.387153][T28222] netlink: 'syz.4.5886': attribute type 75 has an invalid length. [ 700.524429][ T1314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.537327][ T1314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.550789][ T1314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41164 - 0 [ 700.608576][ T5145] Bluetooth: hci4: command tx timeout [ 700.642113][ T1314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.653401][ T1314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.664105][ T1314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41164 - 0 [ 700.695009][T28230] syzkaller0: entered promiscuous mode [ 700.702007][T28230] syzkaller0: entered allmulticast mode [ 700.896542][ T1314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.908003][ T1314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.922243][ T1314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41164 - 0 [ 701.029810][T28241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5891'. [ 701.060984][T28241] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 701.088601][T28241] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 701.099290][T28241] gretap2: entered promiscuous mode [ 701.104560][T28241] gretap2: entered allmulticast mode [ 701.135004][T28247] netlink: 'syz.4.5892': attribute type 12 has an invalid length. [ 701.373969][T28256] xt_hashlimit: max too large, truncated to 1048576 [ 701.431835][T28263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5894'. [ 701.508409][T28262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5894'. [ 701.627165][T28270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5896'. [ 701.639015][ T5145] Bluetooth: hci5: command tx timeout [ 701.657861][T28193] chnl_net:caif_netlink_parms(): no params data found [ 701.756061][ T1314] team0: left allmulticast mode [ 701.789439][ T1314] team0: left promiscuous mode [ 701.794631][ T1314] bridge0: port 1(team0) entered disabled state [ 702.126263][ T12] tipc: Subscription rejected, illegal request [ 702.143879][T28297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5903'. [ 702.351440][ T1314] batman_adv: batadv0: Removing interface: gretap1 [ 702.483297][ T1314] bond8 (unregistering): (slave bridge0): Releasing backup interface [ 702.491703][ T1314] bridge0 (unregistering): left allmulticast mode [ 702.624052][ T1314] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 702.723419][ T1314] team0: Port device bridge6 removed [ 702.775899][ T1314] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 702.784495][ T1314] bridge7 (unregistering): left promiscuous mode [ 702.877523][ T1314] bond0 (unregistering): Released all slaves [ 702.892668][ T1314] bond1 (unregistering): Released all slaves [ 702.907374][ T1314] bond2 (unregistering): Released all slaves [ 702.930226][ T1314] bond3 (unregistering): Released all slaves [ 702.944996][ T1314] bond4 (unregistering): (slave lo): Releasing backup interface [ 702.953779][ T1314] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 702.967309][ T1314] bond4 (unregistering): Released all slaves [ 702.983906][ T1314] bond5 (unregistering): Released all slaves [ 702.997915][ T1314] bond6 (unregistering): Released all slaves [ 703.014471][ T1314] bond7 (unregistering): Released all slaves [ 703.035946][ T1314] bond8 (unregistering): Released all slaves [ 703.055015][ T1314] bond9 (unregistering): Released all slaves [ 703.073700][ T1314] bond10 (unregistering): Released all slaves [ 703.089847][ T1314] bond11 (unregistering): Released all slaves [ 703.104942][ T1314] bond12 (unregistering): Released all slaves [ 703.256434][T28282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.374480][ T1314] 9: left promiscuous mode [ 703.530982][T28282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.659145][ T1314] tipc: Disabling bearer [ 703.664944][ T1314] tipc: Left network mode [ 703.673686][T28315] pim6reg: entered allmulticast mode [ 703.712945][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5907'. [ 703.722117][ T5145] Bluetooth: hci5: command tx timeout [ 703.825255][T28315] pim6reg: left allmulticast mode [ 703.957472][T28282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.981835][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5908'. [ 704.049128][T28335] team0: Mode "loadbalFnce" not found [ 704.102848][T28193] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.111987][T28193] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.129457][T28193] bridge_slave_0: entered allmulticast mode [ 704.163414][T28193] bridge_slave_0: entered promiscuous mode [ 704.230347][T28282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.259206][T28193] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.270323][T28352] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5911'. [ 704.280733][T28193] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.296055][T28193] bridge_slave_1: entered allmulticast mode [ 704.317651][T28193] bridge_slave_1: entered promiscuous mode [ 704.483600][T28360] netlink: 'syz.3.5913': attribute type 10 has an invalid length. [ 704.503468][T28362] netlink: 'syz.1.5914': attribute type 1 has an invalid length. [ 704.631249][T28367] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 705.802237][ T5145] Bluetooth: hci5: command tx timeout [ 706.086191][T28362] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 706.086429][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.134530][T28375] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5915'. [ 706.148055][T28193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.172183][T28193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.349126][T28377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5916'. [ 706.371977][ T1314] hsr_slave_0: left promiscuous mode [ 706.383895][ T1314] 0: left promiscuous mode [ 706.401541][ T1314] hsr0: left allmulticast mode [ 706.443939][ T1314] pimreg (unregistering): left allmulticast mode [ 706.664187][T28399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5919'. [ 706.688516][T28399] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5919'. [ 706.714036][T28399] netlink: 'syz.3.5919': attribute type 6 has an invalid length. [ 706.726155][T28399] netlink: 'syz.3.5919': attribute type 5 has an invalid length. [ 706.750348][T28399] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5919'. [ 706.855230][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.885325][T28193] team0: Port device team_slave_0 added [ 707.005388][ T6816] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.026487][T28193] team0: Port device team_slave_1 added [ 707.118167][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.141685][T28193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.171218][T28193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.232776][T28193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.268324][T28193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.318797][T28193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.392427][T28193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.547117][T28193] hsr_slave_0: entered promiscuous mode [ 707.554370][T28193] hsr_slave_1: entered promiscuous mode [ 707.597916][T28193] debugfs: 'hsr0' already exists in 'hsr' [ 707.604214][T28193] Cannot create hsr debugfs directory [ 707.826436][ T1314] IPVS: stop unused estimator thread 0... [ 707.882773][ T5145] Bluetooth: hci5: command tx timeout [ 709.150706][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 709.296139][T28512] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5939'. [ 709.417446][T28518] openvswitch: netlink: Multiple metadata blocks provided [ 710.599086][T28428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.621169][T28193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 710.672488][T28193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 710.721808][T28193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.794613][T28193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.952601][T28193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.973354][T28193] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.989768][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.996947][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.026756][T28566] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5946'. [ 711.052108][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.059308][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.594497][T28604] netlink: 'syz.4.5954': attribute type 83 has an invalid length. [ 711.627326][T28604] pim6reg: entered allmulticast mode [ 711.637367][T28604] pim6reg: left allmulticast mode [ 711.702226][T28604] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5954'. [ 711.753973][T28193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.799981][T28610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5956'. [ 711.873187][T28618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5957'. [ 711.980638][T28193] veth0_vlan: entered promiscuous mode [ 712.030894][T28193] veth1_vlan: entered promiscuous mode [ 712.051144][T28626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5961'. [ 712.120304][T28193] veth0_macvtap: entered promiscuous mode [ 712.143606][T28193] veth1_macvtap: entered promiscuous mode [ 712.214983][T28193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.270412][T28193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.328515][ T1060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.346384][ T1060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.391866][ T6816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.402005][ T6816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.526627][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.551295][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.713941][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.723298][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.166527][T28678] netlink: 'syz.0.5973': attribute type 1 has an invalid length. [ 713.373042][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 713.390902][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 713.404023][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 713.436754][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 713.448511][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 713.585546][T28684] lo speed is unknown, defaulting to 1000 [ 714.452007][T28721] lo speed is unknown, defaulting to 1000 [ 714.535807][T28733] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5986'. [ 714.551249][T28730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5985'. [ 714.657273][T28735] netlink: 'syz.4.5987': attribute type 1 has an invalid length. [ 714.833529][ T35] bridge_slave_1: left allmulticast mode [ 714.840493][ T35] bridge_slave_1: left promiscuous mode [ 714.848721][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.858088][ T35] bridge_slave_0: left allmulticast mode [ 714.870805][ T35] bridge_slave_0: left promiscuous mode [ 714.876713][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.130908][ T35] bond12 (unregistering): (slave geneve3): Releasing active interface [ 715.150067][ T35] bond4 (unregistering): (slave geneve2): Releasing active interface [ 715.559196][ T5145] Bluetooth: hci3: command tx timeout [ 715.662841][ T35] bond1 (unregistering): Released all slaves [ 715.677269][ T35] bond2 (unregistering): Released all slaves [ 715.693098][ T35] bond3 (unregistering): Released all slaves [ 715.714286][ T35] bond4 (unregistering): Released all slaves [ 715.730179][ T35] bond5 (unregistering): Released all slaves [ 715.746900][ T35] bond6 (unregistering): Released all slaves [ 715.762236][ T35]  (unregistering): Released all slaves [ 715.786100][ T35] bond7 (unregistering): Released all slaves [ 715.826180][ T35] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 715.842514][ T35] bond8 (unregistering): Released all slaves [ 715.856725][ T35] bond9 (unregistering): Released all slaves [ 715.871412][ T35] bond10 (unregistering): Released all slaves [ 715.885277][ T35] bond11 (unregistering): Released all slaves [ 715.906020][ T35] bond12 (unregistering): Released all slaves [ 715.921607][ T35] bond0 (unregistering): Released all slaves [ 715.935373][T28684] chnl_net:caif_netlink_parms(): no params data found [ 715.989211][T28744] s5: renamed from vlan1 (while UP) [ 716.210014][ T35] tipc: Left network mode [ 716.240682][T28763] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5992'. [ 716.277003][T28764] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5992'. [ 716.533088][T28684] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.550290][T28684] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.557703][T28684] bridge_slave_0: entered allmulticast mode [ 716.565977][T28684] bridge_slave_0: entered promiscuous mode [ 716.683776][T28684] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.725507][T28684] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.737712][T28684] bridge_slave_1: entered allmulticast mode [ 716.783491][T28684] bridge_slave_1: entered promiscuous mode [ 716.962912][T28802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6000'. [ 716.976298][T28802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6000'. [ 717.125437][T28684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.209670][T28684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.392301][T28684] team0: Port device team_slave_0 added [ 717.404092][T28684] team0: Port device team_slave_1 added [ 717.562246][T28830] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6007'. [ 717.583202][T28684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.590504][T28684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.618431][T28684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.631187][T28830] netlink: 'syz.0.6007': attribute type 2 has an invalid length. [ 717.640533][ T5145] Bluetooth: hci3: command tx timeout [ 717.703914][T28684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.711279][T28684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.739513][T28684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.778334][T28835] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6007'. [ 717.909993][T28829] syzkaller0: entered promiscuous mode [ 717.926027][T28829] syzkaller0: entered allmulticast mode [ 717.980070][T28845] : renamed from team_slave_1 [ 718.056961][T28849] syzkaller0: entered promiscuous mode [ 718.065338][T28849] syzkaller0: entered allmulticast mode [ 718.142299][T28855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6013'. [ 719.721123][ T5145] Bluetooth: hci3: command tx timeout [ 719.834397][T28879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6016'. [ 720.049007][T28684] hsr_slave_0: entered promiscuous mode [ 720.055970][T28684] hsr_slave_1: entered promiscuous mode [ 720.069788][T28684] debugfs: 'hsr0' already exists in 'hsr' [ 720.085383][T28684] Cannot create hsr debugfs directory [ 720.144908][ T35] hsr_slave_0: left promiscuous mode [ 720.180485][ T35] hsr_slave_1: left promiscuous mode [ 720.196662][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.235647][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.252263][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6020'. [ 720.315497][T28901] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6020'. [ 720.411934][ T35] team0 (unregistering): Port device team_slave_1 removed [ 720.429646][ T35] team0 (unregistering): Port device team_slave_0 removed [ 720.571032][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6020'. [ 720.613151][ T1314] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.639129][ T1314] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.751470][ T1314] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.770309][ T1314] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.780639][T28909] netlink: 'syz.3.6021': attribute type 29 has an invalid length. [ 720.810331][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6021'. [ 720.900817][T28909] bond7: option xmit_hash_policy: invalid value (64) [ 720.911403][T28909] bond7 (unregistering): Released all slaves [ 721.180069][T28926] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 721.241523][ T35] IPVS: stop unused estimator thread 0... [ 721.335234][T28936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6026'. [ 721.795934][T28962] netlink: 'syz.0.6033': attribute type 1 has an invalid length. [ 721.804266][T28962] netlink: 'syz.0.6033': attribute type 4 has an invalid length. [ 721.814708][ T5145] Bluetooth: hci3: command tx timeout [ 721.828474][T28962] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6033'. [ 721.951427][T28966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6034'. [ 722.017982][T28966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6034'. [ 722.033550][T28684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.134063][T28684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.153924][T28684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.217450][T28684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.256885][T28981] syzkaller0: entered promiscuous mode [ 722.268665][T28981] syzkaller0: entered allmulticast mode [ 722.350936][T28992] netlink: 'syz.2.6040': attribute type 3 has an invalid length. [ 722.375242][ T29] audit: type=1107 audit(1774908923.373:8): pid=28990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 722.690809][T28684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.849736][T28684] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.887009][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.894256][ T610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.902963][T29016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6045'. [ 722.954659][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.961872][ T610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.144445][T29037] tipc: Failed to obtain node identity [ 723.168612][T29037] tipc: Enabling of bearer rejected, failed to enable media [ 723.263519][T29041] x_tables: duplicate entry at hook 3 [ 723.531697][T29057] sctp: [Deprecated]: syz.4.6054 (pid 29057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 723.531697][T29057] Use struct sctp_sack_info instead [ 723.601656][T28684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.787253][T28684] veth0_vlan: entered promiscuous mode [ 723.845962][T28684] veth1_vlan: entered promiscuous mode [ 723.967756][T29077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.996902][T28684] veth0_macvtap: entered promiscuous mode [ 724.029338][T28684] veth1_macvtap: entered promiscuous mode [ 724.120608][T28684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.200269][T28684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.274084][ T1314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.331497][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.380463][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.409433][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.452284][T29098] SET target dimension over the limit! [ 724.511442][T29101] tipc: Enabling of bearer rejected, failed to enable media [ 724.553069][T29107] SET target dimension over the limit! [ 724.786872][T29128] netlink: 'syz.3.6069': attribute type 1 has an invalid length. [ 724.878612][T29134] __nla_validate_parse: 4 callbacks suppressed [ 724.878642][T29134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6069'. [ 724.892334][T29128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 724.976881][T29134] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6069'. [ 725.078598][ T5145] Bluetooth: hci3: command tx timeout [ 725.136623][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.185950][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.271958][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.289264][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.576785][T29161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6077'. [ 725.595398][T29163] xt_nat: multiple ranges no longer supported [ 725.923271][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6083'. [ 725.956316][T29183] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 726.019293][T29183] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 726.044470][T29183] gretap1: entered promiscuous mode [ 726.066966][T29183] gretap1: entered allmulticast mode [ 726.418290][T29208] team0: No ports can be present during mode change [ 726.458705][T29214] syzkaller0: entered promiscuous mode [ 726.464273][T29214] syzkaller0: entered allmulticast mode [ 726.549906][T29216] netlink: 'syz.4.6092': attribute type 13 has an invalid length. [ 727.049885][T29253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 727.222085][T29263] netlink: 'syz.4.6104': attribute type 18 has an invalid length. [ 727.245861][T29266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6105'. [ 727.284246][ T6822] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.317483][ T6822] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.359493][ T6822] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.385468][T29272] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 727.395569][ T6822] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.414012][T29277] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6108'. [ 727.436270][T29274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6107'. [ 727.486508][T29277] IPv6: sit4: Disabled Multicast RS [ 727.524334][T29279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6110'. [ 727.563461][T29282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6110'. [ 727.665618][T29289] delete_channel: no stack [ 728.365768][T29347] netlink: 'syz.0.6122': attribute type 4 has an invalid length. [ 728.446151][T29350] netlink: 'syz.1.6123': attribute type 10 has an invalid length. [ 728.475015][T29350] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.504514][T29350] bridge_slave_1: left allmulticast mode [ 728.524708][T29350] bridge_slave_1: left promiscuous mode [ 728.548566][T29350] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.579110][T29350] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 730.680815][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.740679][T29300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.923645][T29372] __nla_validate_parse: 2 callbacks suppressed [ 730.923666][T29372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6126'. [ 731.000980][T29370] lo speed is unknown, defaulting to 1000 [ 731.012206][T29380] netlink: 'syz.1.6128': attribute type 11 has an invalid length. [ 731.020575][T29372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6126'. [ 731.023119][T29380] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.6128'. [ 731.236795][T29389] xt_hashlimit: size too large, truncated to 1048576 [ 731.266633][T29380] syzkaller1: entered promiscuous mode [ 731.276795][T29380] syzkaller1: entered allmulticast mode [ 731.283916][T29391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6133'. [ 731.652291][T29413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6138'. [ 731.666855][T29414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.811600][T29419] netlink: 'syz.3.6140': attribute type 1 has an invalid length. [ 731.836750][T29419] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6140'. [ 732.059313][T29437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6145'. [ 732.565259][T29467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6154'. [ 732.749346][T29475] netlink: 'syz.4.6158': attribute type 1 has an invalid length. [ 732.829660][T29478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6159'. [ 732.850466][T29478] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 732.973964][T29490] netlink: 'syz.3.6162': attribute type 75 has an invalid length. [ 733.164132][T29505] bridge11: entered promiscuous mode [ 733.179699][T29505] bridge11: entered allmulticast mode [ 733.179709][T29507] netlink: 'syz.2.6166': attribute type 64 has an invalid length. [ 733.327435][T29514] netlink: 'syz.2.6170': attribute type 1 has an invalid length. [ 733.456658][T29521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6170'. [ 733.484407][ T5145] block nbd5: Receive control failed (result -107) [ 733.496617][T29514] bond13: entered promiscuous mode [ 733.503005][T29514] 8021q: adding VLAN 0 to HW filter on device bond13 [ 733.540892][T29518] nbd5: detected capacity change from 0 to 127 [ 733.550252][T27844] block nbd5: Dead connection, failed to find a fallback [ 733.557353][T27844] block nbd5: shutting down sockets [ 733.564419][T29525] 0: renamed from hsr_slave_1 (while UP) [ 733.571991][T29527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.576145][T27844] blk_print_req_error: 138 callbacks suppressed [ 733.576183][T27844] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 733.600289][T29525] 0: entered allmulticast mode [ 733.605693][T29525] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 733.622912][T29527] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.633564][T29527] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.650310][T29527] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.660330][T29527] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.687715][ T5145] [ 733.690097][ T5145] ====================================================== [ 733.697134][ T5145] WARNING: possible circular locking dependency detected [ 733.703642][T27844] buffer_io_error: 138 callbacks suppressed [ 733.703693][T27844] Buffer I/O error on dev nbd5, logical block 0, async page read [ 733.704177][ T5145] syzkaller #0 Not tainted [ 733.710790][T27844] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 733.717800][ T5145] ------------------------------------------------------ [ 733.717825][ T5145] kworker/u9:1/5145 is trying to acquire lock: [ 733.717853][ T5145] ffff88801b6dda20 [ 733.727531][T27844] Buffer I/O error on dev nbd5, logical block 1, async page read [ 733.731741][ T5145] (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x46c/0x540 [ 733.731875][ T5145] [ 733.731875][ T5145] but task is already holding lock: [ 733.731898][ T5145] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 733.782492][ T5145] [ 733.782492][ T5145] which lock already depends on the new lock. [ 733.782492][ T5145] [ 733.792931][ T5145] [ 733.792931][ T5145] the existing dependency chain (in reverse order) is: [ 733.801984][ T5145] [ 733.801984][ T5145] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 733.810159][ T5145] down_write+0x96/0x200 [ 733.815021][ T5145] kernfs_add_one+0x41/0x5c0 [ 733.820201][ T5145] kernfs_create_dir_ns+0xde/0x130 [ 733.825900][ T5145] internal_create_group+0x425/0x1180 [ 733.831872][ T5145] cpuhp_invoke_callback+0x445/0x860 [ 733.837772][ T5145] cpuhp_issue_call+0x430/0x7a0 [ 733.843213][ T5145] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 733.849869][ T5145] __cpuhp_setup_state+0x3f/0x60 [ 733.855397][ T5145] do_one_initcall+0x250/0x8d0 [ 733.860763][ T5145] do_initcall_level+0x104/0x190 [ 733.866314][ T5145] do_initcalls+0x59/0xa0 [ 733.871251][ T5145] kernel_init_freeable+0x2a6/0x3e0 [ 733.877073][ T5145] kernel_init+0x1d/0x1d0 [ 733.882053][ T5145] ret_from_fork+0x51e/0xb90 [ 733.887237][ T5145] ret_from_fork_asm+0x1a/0x30 [ 733.892649][ T5145] [ 733.892649][ T5145] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 733.900537][ T5145] [ 733.900537][ T5145] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 733.908368][ T5145] cpus_read_lock+0x42/0x160 [ 733.913560][ T5145] static_key_disable+0x12/0x20 [ 733.919020][ T5145] __inet_hash_connect+0x2430/0x2440 [ 733.924901][ T5145] tcp_v4_connect+0xd5f/0x19b0 [ 733.930343][ T5145] __inet_stream_connect+0x25a/0xdd0 [ 733.936223][ T5145] inet_stream_connect+0x66/0xa0 [ 733.941733][ T5145] __sys_connect+0x312/0x450 [ 733.946949][ T5145] __x64_sys_connect+0x7a/0x90 [ 733.952305][ T5145] do_syscall_64+0x14d/0xf80 [ 733.957486][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.963962][ T5145] [ 733.963962][ T5145] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 733.971699][ T5145] lock_sock_nested+0x48/0x100 [ 733.977058][ T5145] inet_shutdown+0x6a/0x390 [ 733.982181][ T5145] nbd_mark_nsock_dead+0x2e9/0x560 [ 733.987895][ T5145] recv_work+0x1c7f/0x1d90 [ 733.992918][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 733.999052][ T5145] worker_thread+0xa53/0xfc0 [ 734.004220][ T5145] kthread+0x388/0x470 [ 734.008887][ T5145] ret_from_fork+0x51e/0xb90 [ 734.014111][ T5145] ret_from_fork_asm+0x1a/0x30 [ 734.019491][ T5145] [ 734.019491][ T5145] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 734.027207][ T5145] __mutex_lock+0x19f/0x1300 [ 734.032386][ T5145] nbd_queue_rq+0x37b/0x1100 [ 734.037534][ T5145] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 734.043683][ T5145] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 734.050621][ T5145] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 734.057214][ T5145] blk_mq_run_hw_queue+0x348/0x4f0 [ 734.062924][ T5145] blk_mq_dispatch_list+0xd16/0xe10 [ 734.068707][ T5145] blk_mq_flush_plug_list+0x48d/0x570 [ 734.074679][ T5145] __blk_flush_plug+0x3ed/0x4d0 [ 734.080135][ T5145] __submit_bio+0x28d/0x580 [ 734.085244][ T5145] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 734.091488][ T5145] block_read_full_folio+0x599/0x830 [ 734.097401][ T5145] filemap_read_folio+0x137/0x3b0 [ 734.103060][ T5145] do_read_cache_folio+0x358/0x590 [ 734.108777][ T5145] read_part_sector+0xb6/0x2b0 [ 734.114235][ T5145] adfspart_check_ICS+0xa5/0xa40 [ 734.119770][ T5145] bdev_disk_changed+0x7ba/0x1550 [ 734.125380][ T5145] blkdev_get_whole+0x380/0x510 [ 734.130826][ T5145] bdev_open+0x31e/0xd30 [ 734.135682][ T5145] blkdev_open+0x470/0x610 [ 734.140700][ T5145] do_dentry_open+0x785/0x14e0 [ 734.146042][ T5145] vfs_open+0x3b/0x340 [ 734.150719][ T5145] path_openat+0x2e08/0x3860 [ 734.155955][ T5145] do_file_open+0x23e/0x4a0 [ 734.161014][ T5145] do_sys_openat2+0x113/0x200 [ 734.166342][ T5145] __x64_sys_openat+0x138/0x170 [ 734.171774][ T5145] do_syscall_64+0x14d/0xf80 [ 734.176951][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.183428][ T5145] [ 734.183428][ T5145] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 734.190746][ T5145] __mutex_lock+0x19f/0x1300 [ 734.195922][ T5145] nbd_queue_rq+0xc6/0x1100 [ 734.200994][ T5145] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 734.207156][ T5145] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 734.214079][ T5145] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 734.220648][ T5145] blk_mq_run_hw_queue+0x348/0x4f0 [ 734.226351][ T5145] blk_mq_dispatch_list+0xd16/0xe10 [ 734.232148][ T5145] blk_mq_flush_plug_list+0x48d/0x570 [ 734.238112][ T5145] __blk_flush_plug+0x3ed/0x4d0 [ 734.243579][ T5145] __submit_bio+0x28d/0x580 [ 734.248686][ T5145] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 734.254906][ T5145] block_read_full_folio+0x599/0x830 [ 734.260793][ T5145] filemap_read_folio+0x137/0x3b0 [ 734.266422][ T5145] do_read_cache_folio+0x358/0x590 [ 734.272129][ T5145] read_part_sector+0xb6/0x2b0 [ 734.277485][ T5145] adfspart_check_ICS+0xa5/0xa40 [ 734.283000][ T5145] bdev_disk_changed+0x7ba/0x1550 [ 734.288601][ T5145] blkdev_get_whole+0x380/0x510 [ 734.294037][ T5145] bdev_open+0x31e/0xd30 [ 734.298891][ T5145] blkdev_open+0x470/0x610 [ 734.303924][ T5145] do_dentry_open+0x785/0x14e0 [ 734.309288][ T5145] vfs_open+0x3b/0x340 [ 734.313949][ T5145] path_openat+0x2e08/0x3860 [ 734.319128][ T5145] do_file_open+0x23e/0x4a0 [ 734.324235][ T5145] do_sys_openat2+0x113/0x200 [ 734.329537][ T5145] __x64_sys_openat+0x138/0x170 [ 734.335000][ T5145] do_syscall_64+0x14d/0xf80 [ 734.340172][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.346648][ T5145] [ 734.346648][ T5145] -> #4 (set->srcu){.+.+}-{0:0}: [ 734.353865][ T5145] __synchronize_srcu+0xca/0x300 [ 734.359395][ T5145] elevator_switch+0x1e8/0x7a0 [ 734.364776][ T5145] elevator_change+0x2cc/0x450 [ 734.370126][ T5145] elevator_set_default+0x36c/0x430 [ 734.375932][ T5145] blk_register_queue+0x366/0x430 [ 734.381534][ T5145] __add_disk+0x677/0xd50 [ 734.386538][ T5145] add_disk_fwnode+0xfb/0x480 [ 734.391805][ T5145] nbd_dev_add+0x72c/0xb50 [ 734.396818][ T5145] nbd_init+0x168/0x1f0 [ 734.401579][ T5145] do_one_initcall+0x250/0x8d0 [ 734.406926][ T5145] do_initcall_level+0x104/0x190 [ 734.412462][ T5145] do_initcalls+0x59/0xa0 [ 734.417392][ T5145] kernel_init_freeable+0x2a6/0x3e0 [ 734.423182][ T5145] kernel_init+0x1d/0x1d0 [ 734.428120][ T5145] ret_from_fork+0x51e/0xb90 [ 734.433316][ T5145] ret_from_fork_asm+0x1a/0x30 [ 734.438726][ T5145] [ 734.438726][ T5145] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 734.446724][ T5145] __mutex_lock+0x19f/0x1300 [ 734.451914][ T5145] elevator_change+0x1b3/0x450 [ 734.457266][ T5145] elevator_set_none+0xb5/0x140 [ 734.462700][ T5145] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 734.469109][ T5145] nbd_start_device+0x17f/0xb10 [ 734.474574][ T5145] nbd_genl_connect+0x165b/0x1cf0 [ 734.480178][ T5145] genl_family_rcv_msg_doit+0x22a/0x330 [ 734.486319][ T5145] genl_rcv_msg+0x61c/0x7a0 [ 734.491394][ T5145] netlink_rcv_skb+0x232/0x4b0 [ 734.496765][ T5145] genl_rcv+0x28/0x40 [ 734.501338][ T5145] netlink_unicast+0x80f/0x9b0 [ 734.506775][ T5145] netlink_sendmsg+0x813/0xb40 [ 734.512099][ T5145] ____sys_sendmsg+0x972/0x9f0 [ 734.517465][ T5145] ___sys_sendmsg+0x2a5/0x360 [ 734.522719][ T5145] __x64_sys_sendmsg+0x1bd/0x2a0 [ 734.528281][ T5145] do_syscall_64+0x14d/0xf80 [ 734.533448][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.539912][ T5145] [ 734.539912][ T5145] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 734.548715][ T5145] blk_alloc_queue+0x546/0x680 [ 734.554080][ T5145] __blk_mq_alloc_disk+0x197/0x390 [ 734.559808][ T5145] nbd_dev_add+0x499/0xb50 [ 734.564796][ T5145] nbd_init+0x168/0x1f0 [ 734.569546][ T5145] do_one_initcall+0x250/0x8d0 [ 734.574913][ T5145] do_initcall_level+0x104/0x190 [ 734.580440][ T5145] do_initcalls+0x59/0xa0 [ 734.585350][ T5145] kernel_init_freeable+0x2a6/0x3e0 [ 734.591133][ T5145] kernel_init+0x1d/0x1d0 [ 734.596055][ T5145] ret_from_fork+0x51e/0xb90 [ 734.601215][ T5145] ret_from_fork_asm+0x1a/0x30 [ 734.606610][ T5145] [ 734.606610][ T5145] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 734.613892][ T5145] fs_reclaim_acquire+0x71/0x100 [ 734.619411][ T5145] kmem_cache_alloc_noprof+0x40/0x650 [ 734.625350][ T5145] __kernfs_iattrs+0xdf/0x340 [ 734.630633][ T5145] kernfs_iop_setattr+0xea/0x3f0 [ 734.636184][ T5145] notify_change+0xc1a/0xf40 [ 734.641337][ T5145] do_truncate+0x1c2/0x250 [ 734.646324][ T5145] path_openat+0x2f89/0x3860 [ 734.651516][ T5145] do_file_open+0x23e/0x4a0 [ 734.656596][ T5145] do_sys_openat2+0x113/0x200 [ 734.661873][ T5145] __x64_sys_openat+0x138/0x170 [ 734.667323][ T5145] do_syscall_64+0x14d/0xf80 [ 734.672529][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.679077][ T5145] [ 734.679077][ T5145] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 734.687685][ T5145] __lock_acquire+0x15a5/0x2cf0 [ 734.693121][ T5145] lock_acquire+0xf0/0x2e0 [ 734.698216][ T5145] down_write+0x96/0x200 [ 734.703055][ T5145] kernfs_link_sibling+0x46c/0x540 [ 734.708803][ T5145] kernfs_add_one+0x1ca/0x5c0 [ 734.714090][ T5145] kernfs_create_dir_ns+0xde/0x130 [ 734.719754][ T5145] sysfs_create_dir_ns+0x12f/0x2a0 [ 734.725424][ T5145] kobject_add_internal+0x62b/0xd00 [ 734.731169][ T5145] kobject_add+0x163/0x240 [ 734.736136][ T5145] device_add+0x408/0xb70 [ 734.741007][ T5145] hci_conn_add_sysfs+0xd5/0x210 [ 734.746476][ T5145] hci_conn_complete_evt+0x77a/0x11d0 [ 734.752383][ T5145] hci_event_packet+0x805/0x12c0 [ 734.757856][ T5145] hci_rx_work+0x3ee/0x1030 [ 734.762888][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 734.768972][ T5145] worker_thread+0xa53/0xfc0 [ 734.774104][ T5145] kthread+0x388/0x470 [ 734.778712][ T5145] ret_from_fork+0x51e/0xb90 [ 734.783867][ T5145] ret_from_fork_asm+0x1a/0x30 [ 734.789215][ T5145] [ 734.789215][ T5145] other info that might help us debug this: [ 734.789215][ T5145] [ 734.799452][ T5145] Chain exists of: [ 734.799452][ T5145] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 734.799452][ T5145] [ 734.813987][ T5145] Possible unsafe locking scenario: [ 734.813987][ T5145] [ 734.821452][ T5145] CPU0 CPU1 [ 734.826957][ T5145] ---- ---- [ 734.832343][ T5145] lock(&root->kernfs_rwsem); [ 734.837124][ T5145] lock(cpuhp_state_mutex); [ 734.844248][ T5145] lock(&root->kernfs_rwsem); [ 734.851554][ T5145] lock(&root->kernfs_iattr_rwsem); [ 734.856864][ T5145] [ 734.856864][ T5145] *** DEADLOCK *** [ 734.856864][ T5145] [ 734.865017][ T5145] 4 locks held by kworker/u9:1/5145: [ 734.870322][ T5145] #0: ffff888089de3948 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 734.881318][ T5145] #1: ffffc90010437c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 734.893349][ T5145] #2: ffff88803e2f00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xbb/0x11d0 [ 734.903222][ T5145] #3: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 734.913092][ T5145] [ 734.913092][ T5145] stack backtrace: [ 734.918994][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 734.919015][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.919028][ T5145] Workqueue: hci2 hci_rx_work [ 734.919051][ T5145] Call Trace: [ 734.919060][ T5145] [ 734.919069][ T5145] dump_stack_lvl+0xe8/0x150 [ 734.919093][ T5145] print_circular_bug+0x2e1/0x300 [ 734.919122][ T5145] check_noncircular+0x12e/0x150 [ 734.919150][ T5145] __lock_acquire+0x15a5/0x2cf0 [ 734.919177][ T5145] ? __lock_acquire+0x6b5/0x2cf0 [ 734.919204][ T5145] lock_acquire+0xf0/0x2e0 [ 734.919224][ T5145] ? kernfs_link_sibling+0x46c/0x540 [ 734.919256][ T5145] down_write+0x96/0x200 [ 734.919277][ T5145] ? kernfs_link_sibling+0x46c/0x540 [ 734.919303][ T5145] ? __pfx_down_write+0x10/0x10 [ 734.919325][ T5145] ? kernfs_root+0x1c/0x230 [ 734.919348][ T5145] ? kernfs_root+0x1c/0x230 [ 734.919373][ T5145] ? kernfs_root+0x1ea/0x230 [ 734.919397][ T5145] kernfs_link_sibling+0x46c/0x540 [ 734.919433][ T5145] kernfs_add_one+0x1ca/0x5c0 [ 734.919460][ T5145] kernfs_create_dir_ns+0xde/0x130 [ 734.919478][ T5145] sysfs_create_dir_ns+0x12f/0x2a0 [ 734.919503][ T5145] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 734.919527][ T5145] ? do_raw_spin_unlock+0xf5/0x210 [ 734.919546][ T5145] kobject_add_internal+0x62b/0xd00 [ 734.919574][ T5145] kobject_add+0x163/0x240 [ 734.919597][ T5145] ? __pfx_kobject_add+0x10/0x10 [ 734.919620][ T5145] ? _raw_spin_unlock+0x28/0x50 [ 734.919637][ T5145] ? get_device_parent+0x366/0x3a0 [ 734.919661][ T5145] device_add+0x408/0xb70 [ 734.919682][ T5145] hci_conn_add_sysfs+0xd5/0x210 [ 734.919703][ T5145] hci_conn_complete_evt+0x77a/0x11d0 [ 734.919728][ T5145] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 734.919753][ T5145] hci_event_packet+0x805/0x12c0 [ 734.919774][ T5145] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 734.919795][ T5145] ? __pfx_hci_event_packet+0x10/0x10 [ 734.919816][ T5145] ? kcov_remote_start+0x49a/0x7a0 [ 734.919843][ T5145] ? hci_send_to_monitor+0xe2/0x590 [ 734.919870][ T5145] hci_rx_work+0x3ee/0x1030 [ 734.919893][ T5145] ? process_scheduled_works+0xa8d/0x18c0 [ 734.919916][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 734.919951][ T5145] ? __pfx_process_scheduled_works+0x10/0x10 [ 734.919975][ T5145] ? assign_work+0x3d5/0x5e0 [ 734.919998][ T5145] worker_thread+0xa53/0xfc0 [ 734.920033][ T5145] kthread+0x388/0x470 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 734.920049][ T5145] ? __pfx_worker_thread+0x10/0x10 [ 734.920070][ T5145] ? __pfx_kthread+0x10/0x10 [ 734.920085][ T5145] ret_from_fork+0x51e/0xb90 [ 734.920109][ T5145] ? __pfx_ret_from_fork+0x10/0x10 [ 734.920130][ T5145] ? __switch_to+0xc7d/0x1450 [ 734.920149][ T5145] ? __pfx_kthread+0x10/0x10 [ 734.920165][ T5145] ret_from_fork_asm+0x1a/0x30 [ 734.920199][ T5145] [ 735.029274][T27844] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.213706][T29514] bond13: (slave bridge12): making interface the new active one [ 735.224747][T27844] Buffer I/O error on dev nbd5, logical block 2, async page read [ 735.233581][T27844] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.243357][T27844] Buffer I/O error on dev nbd5, logical block 3, async page read [ 735.251252][T27844] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.261703][T27844] Buffer I/O error on dev nbd5, logical block 0, async page read [ 735.266658][T29514] bridge12: entered promiscuous mode [ 735.269567][T27844] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.269594][T27844] Buffer I/O error on dev nbd5, logical block 1, async page read [ 735.269630][T27844] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.269653][T27844] Buffer I/O error on dev nbd5, logical block 2, async page read [ 735.269709][T27844] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.316224][T29514] bond13: (slave bridge12): Enslaving as an active interface with an up link [ 735.332564][T27844] Buffer I/O error on dev nbd5, logical block 3, async page read [ 735.340670][T27844] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.351175][T27844] Buffer I/O error on dev nbd5, logical block 0, async page read [ 735.359059][T27844] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.368970][T27844] Buffer I/O error on dev nbd5, logical block 1, async page read [ 735.444432][T27844] ldm_validate_partition_table(): Disk read failed. [ 735.500363][T27844] Dev nbd5: unable to read RDB block 0 [ 735.506304][T27844] nbd5: unable to read partition table [ 735.527456][T27844] ldm_validate_partition_table(): Disk read failed. [ 735.537577][T27844] Dev nbd5: unable to read RDB block 0 [ 735.545794][T27844] nbd5: unable to read partition table [ 735.750385][ T35] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.760304][ T35] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 735.882083][ T35] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.892619][ T35] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 736.043771][ T35] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.058602][ T35] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 736.090805][ T35] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.101323][ T35] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 736.287475][ T35] dvmrp0 (unregistering): left allmulticast mode [ 736.750438][ T35] bond6 (unregistering): (slave bridge9): Releasing active interface [ 736.854931][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.864804][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.874151][ T35] bond0 (unregistering): Released all slaves [ 736.882016][ T35] bond1 (unregistering): Released all slaves [ 736.894199][ T35] bond2 (unregistering): (slave lo): Releasing backup interface [ 736.902778][ T35] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 736.915499][ T35] bond2 (unregistering): Released all slaves [ 736.925961][ T35] bond3 (unregistering): Released all slaves [ 736.935606][ T35] bond4 (unregistering): Released all slaves [ 736.944990][ T35] bond5 (unregistering): Released all slaves [ 736.954560][ T35] bond6 (unregistering): Released all slaves [ 736.970612][ T35] bond7 (unregistering): Released all slaves [ 736.980298][T24294] lo speed is unknown, defaulting to 1000 [ 736.986162][T24294] syz0: Port: 1 Link DOWN [ 736.991222][T25075] lo speed is unknown, defaulting to 1000