last executing test programs: 2.07399179s ago: executing program 2 (id=4839): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r6}, 0x10) close(r5) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d0600000000060015000200000014001680100008800c000380050001000200"/56], 0x38}}, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=@acquire={0x144, 0x17, 0x2, 0x70bd28, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0xff}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x1bb, 0x4e22, 0x1, 0xa, 0x20, 0x180, 0x2f}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x4e24, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x29, r6}, {0x7fff, 0x8, 0x2, 0xffffffff80000000, 0xce, 0x1, 0x1, 0x1}, {0x9, 0x2, 0x400, 0x8}, 0x10000, 0x6e6bb1, 0x0, 0x1, 0x1, 0x3}, 0xa, 0x0, 0x3802, 0x70bd25}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10e}, @srcaddr={0x14, 0xd, @in6=@empty}]}, 0x144}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000080)={@random="31f2f3a6556f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @loopback}, {0x0, 0x4e24, 0x9, 0x0, @opaque="f4"}}}}}, 0x0) recvfrom(r7, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x5b) 1.737790825s ago: executing program 4 (id=4846): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x100000}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, 0x54}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31b4b, 0x211}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}}, 0x0) 1.627848436s ago: executing program 3 (id=4847): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x41, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x20008810}, 0x4040000) 1.606983184s ago: executing program 1 (id=4848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000040), 0x3b) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 1.301920684s ago: executing program 3 (id=4849): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@delrng={0x10, 0x14, 0x800, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000012c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x14c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x528}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x471}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0xfe}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}]}, @CTA_ZONE={0x6}, @CTA_LABELS_MASK={0x14, 0x17, [0x7, 0x9, 0x80000001, 0x7]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x40851) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.30162137s ago: executing program 4 (id=4850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x4c25726cb16dd79b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0xe0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xa8, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x88, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xffffffffffff0103}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffe}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0xa8}, 0x1, 0x0, 0x0, 0x50}, 0x91) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063110c00000000008510000002000000850000000500000095000000000000009500a50500000000c07db7f7be5ee75f0354cc02fd485ac68c2c03719f8c5fe32b8f9615fdeefc78da0d291bddcf5611943a59a9f9b118ea14627fa7d6609e51bcf8a7c5ec0fe1db56c90372e90bf5b202edc1f1e106fd7695be20f5698d0f012d4388104d0c8285d9338fbdb75d69580f0775a36a4ed02d410193c0abcf3b41ac44e8e951472863e4c5f4b8425a27bc364b1404679102992ea2b578d133e1822d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xffffffffffffff9a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r7, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x8, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f00000000c0)=0x12, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r11, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) write$tun(r11, &(0x7f0000000740)=ANY=[@ANYBLOB="0000600503041b7d246653b55229239d70292b9bfd62f7037a5c99c677fdec5ea61abef5429bcd04ace565743c18f00f85683df253352ff2cb84"], 0x36) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) accept$nfc_llcp(r11, &(0x7f0000000600), &(0x7f0000000500)=0x60) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000001700000000000000000000bb00000000000000000200000000140000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000000000"], 0x134}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="38000000167d6e03a30a4e4bdb3b4c3fb191a4977bb21890e4ab0de937c44dac41a61ccc810d190f2bf78814a150e3476f2f53eca59aa2fcf9f12ae9473774d6d13e09f064584e59ffbef3fc1e01b1a8328a54a1176cb5554bafd73d3ac3a53eb0115a3e6b5713ce53fc831a06319757a568ba6e9d8e91cae89a2916be7c487cf9796387e87bb9ecf4f47300000840838bdfc009bd18557b8bdfc4447881e02f5302e3bb4037c9ee44a4ce775c2af983d733bba7a72ec91b0408d1951e4d392e86a5f89aebc9da2383e5", @ANYRES16=r9, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) 1.301310284s ago: executing program 0 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, &(0x7f0000000340)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0, 0x37}, 0x28) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfe33) 1.281997721s ago: executing program 1 (id=4852): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a3000"], 0xd4}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x2f, 0x1, 0x0, 0x9, 0x22, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x20, 0x6}}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000037c00000400fc800c00018006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000280)=@in6, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x4, &(0x7f0000000600)=""/48, 0x30}, 0xba881ea2f42e7af) accept$netrom(r2, 0x0, &(0x7f0000000200)) 1.129863521s ago: executing program 0 (id=4853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 1.075611642s ago: executing program 1 (id=4854): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f9ffffffffffff00"/28], 0x48) r0 = socket$inet(0x2, 0x3, 0x6) r1 = epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_pwait(r1, &(0x7f0000000800)=[{}], 0x1, 0x3d1a1214, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x80000017}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x80) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x7fff, 0xc}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r4, &(0x7f00000002c0)="edb3c80576bf28f76e4bcf512ce7d3b3397dc29569e1d2b9a01e8da03ffde1001f183d6e2b51c4", &(0x7f00000003c0)=""/225}, 0xfffffd4c) 1.074681857s ago: executing program 3 (id=4855): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x4, 0x1}) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000140)={0x5, 0x6}) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000001c0)=0x9, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000002c0)=0x3, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000540)=0x0) bind$nfc_llcp(r1, &(0x7f0000000580)={0x27, r4, 0x0, 0x6, 0x7, 0x9, "c8ea2464977f9d559efc4299991eebdb3cf424d26de144e40893f86fc208ad925a225f934a41baea8ed3e597252014fda1dd6191353cd2c03dd11be9b874a1", 0x22}, 0x60) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r3, &(0x7f0000000640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000680)=0x10, 0x800) sendto$inet6(r3, &(0x7f00000006c0)="c32bce812a2478255af09d346ce484440c47ef01a81580a4c7ca463e268ce93c6901be546885a005dc13640ff5c5489debb007bfbb8ec3a9575a7075fc64c696e6805fcef3fbba1d6de43585f366d003e434e5abfd57aaf58fb6923ef616407ac02d7d5ef63af98e075f525a5a696071a3a303ab76866c5684e713c97b7dfe6bc89a529badea15cca283f2de301a6b79", 0x90, 0x40040000, &(0x7f0000000780)={0xa, 0x4e21, 0x9, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000007c0)=@gcm_256={{0x303}, "f872e9095d4c91db", "f2e162fc7b6f102fb376e4ec547041a4cc6d1d5097a088db8438820540733ebf", "01d3344c", "1eaea0f0b2fcdc59"}, 0x38) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5000002, 0x4000010, r5, 0x2b061000) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000800)={0x4, 0x3}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000880)=""/232, &(0x7f0000000980)=0xe8) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/time\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c5d96072464f"}]}, 0x28}}, 0xc083) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1088}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r7, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xf, 0x71}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9b9fd86721e763d7e965e2c235"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x200048c1) 1.072272869s ago: executing program 2 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x44}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=ANY=[@ANYBLOB="5cf77f00", @ANYRES16=r5, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 958.638807ms ago: executing program 4 (id=4857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6c1, 0x35, 0x10}}}}]}, 0x44}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000009b0500000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0xe7f438755103da6a) 936.30011ms ago: executing program 3 (id=4858): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000015000103000000000000000001000000a84f9a7e7ae44eb398e177714b9b97102bc32003319efab697202416a3f13eac5a16b681c0ce82d7081d8523cd31cd391f61693aa00afa3dc7916c75bdb025b11df825b0478d6e596c1d166e33ad42ba27f4ccae6aa7cb6d6560b9e9e253267289f4a5c6f0a3cfba3970c14f2fbd7e5ea7646291c20db3774ce6be3360f5178bebe61380a3849e734dee726f4c0aea26c8a88d2ae3d32c8f9560c0d07522a2e66e9f4867a4aef3d96f8739a5a202897888f777376524ba83b6e69484e5bf7018f1a01971be2130b98f97c6cd"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x70, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9c}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x84) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0204965bf0"], 0x18) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="02b5928c3000000010000080038a04af8f5bbca3639a6910f9e969e94f83868519ea53c39d74d2a91acbdcfdd0b81d5220e0631ec8695118ea70142434bb61c5317027b741939102f07d433f41b5dd7233cf7e3c8c3033ac6a3111209776c3f1dd088be6ac8b8face839006d0c7591eb66d3609893c17bcc1fe36aee4c7b12ebf456fda33b9d8c9504217ba8e1955bf223307b029ee51c82c64a558c70666666115421e8660af17b5f3dda5648940af551", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000008001c00", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="b8b2821400000081000000008100", 0x12}], 0x1}, 0x4000080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000600000002000004001000000400000003000000000000000000000000000000000061006100b1bf04cdcd042f81ed11a699530b668e78820fc8183ad54871f837e66bb9eaa8c63392899b392d9cb5e8f0163631f054e58fe04b01ce32d573d08f309e4c34a6b552032a3ded7da5ff94f7c0be8e5bce2302af61504f7695cb019c1ba84eba7116ef5de64a5819fa6d18b11de721ed422dc173d82e9baf2f0f9c41603610efb3b9c7dc5b16ecca3dce982a203b57f8fef9e0fae263efd8e0a86d6dd707f8b1997d5dfb2d89407db967"], &(0x7f00000000c0)=""/2, 0x44, 0x2, 0x1}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x64}}, 0x0) 924.725387ms ago: executing program 0 (id=4859): socket$kcm(0x10, 0x4, 0x10) 826.02168ms ago: executing program 2 (id=4860): syz_emit_ethernet(0xad, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8863821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe6f4b907f61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91cf08f2"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000007f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000088000000000000001701000002000000730020"], 0x118, 0x40880}], 0x1, 0x40c5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)="c742aed76e0deb9ac38d59352c2429da8a7a01f9860fecd7d865be85deb9f503ac53cf6068ad2d8c865eeb99ef1365bacb97cf5890fb43c5d4b4c7b0718d163cf4f66b5745d7e08d12493c90914aa9d658c6ef12769c4d5b4d1a5f574fc7d046f79f145fbb39e0590e66e5bfce33e6b356629861e5e9790f94e82d3d") 758.545664ms ago: executing program 0 (id=4861): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="09000000010001", 0x7) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000000)) 655.425364ms ago: executing program 4 (id=4862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x1}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 494.052321ms ago: executing program 1 (id=4863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000150a050800000000000000000000010c00064000000000000000010000000000000000000004000000d9ad6a316533df2fad98a616277540ca7b1b04fb657613b258408f97a5e0ff224c94b747f98fc587be0e2357de71c951465964ad46a410007ab95d4be82fc34f500074b816e3198024711ccc31581cb4f0204847d8c64a978229a955527e3ab7c597bb1d0745d5a923e38cb19fbbebfa9615ca988a798021478a87d946acd5dc8a2b34bda40a409988023c90c7099c6dfb646170be6fc8b8d2d3b3b637869db20834f8e93a2270227745995f76d7497fd436aa11e049d6c67ce27d921ff5bb2d"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r1 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xe0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x57e}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1e}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000014}, 0x20044055) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008f80940000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0043e1220e3dd964b0148832b31705080003400000003908000c4000000000140000001000010000000000000000000084000a"], 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 493.563653ms ago: executing program 0 (id=4864): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x4b) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) 490.902802ms ago: executing program 2 (id=4865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x18) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071106e00000000001d300200000000004704000001ed03040f030000000000001d440000000000006b0a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa660000001190780a010101e000000100004e200008907800"/42], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa660000001190780a010101e000000100004e200008907800"/42], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@delqdisc={0x54, 0x25, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x6, 0x8}, {0x6, 0xe}, {0xe, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0xa}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x400000}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x7}}]}}]}, 0x54}}, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) (async) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) r8 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r9) bind$alg(r8, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0xb8, 0x29, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xa}}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) (async) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0xb8, 0x29, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xa}}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r11, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) (async) sendmsg$can_bcm(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r11, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) accept4(r6, 0x0, 0x0, 0x0) (async) accept4(r6, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 371.413574ms ago: executing program 3 (id=4866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={r4, 0x1, 0xc, 0x101, 0x4, 0x7, 0x9, 0x85, {r5, @in={{0x2, 0x4e20, @loopback}}, 0x4a02c1dd, 0xd7, 0x400, 0x9, 0xfffffffe}}, &(0x7f0000000380)=0xb0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000280)={r8}, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 361.061946ms ago: executing program 1 (id=4867): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close(r2) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) (async) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) close(r2) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) (async) close(r4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) 214.474466ms ago: executing program 2 (id=4868): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) accept4(r5, &(0x7f0000001040)=@in6, 0x0, 0x80000) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001280)) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000001040102000000000000000002000002060006400000000006000640000300080a0002000000000702000000080003400000006505000100010000000600064000000000"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x14}, 0x80, &(0x7f0000000300)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf7bae105000700810005004305", 0x1c}, {&(0x7f0000000000)="e554bb04af32f00bd876eeb8fc34327593e96bf36c295e881635b36a9e42f58a565fac0f8d6628", 0x27}, {&(0x7f0000000240)="5b031dd8039205f8cc40318dc3121dc15b7a5d3f5752e3bddaeacb09df17d165bdad4937e1fa9a009a5f43673b5f52567f161eeef23560254e433aeb6681043f9db23654fc8fba6465563cb23e6c6ce96a115b95540e9f5d55559bec8863e6539393546cfcb244a0f262495ce975112bb88097274eb166e4ede1b0723d305505e99c7fce0f9b35e284c6a75e8ed700e14d13543abfb86e32da5f16173c00f3416c636ba392c68b758667a2", 0xab}, {&(0x7f0000000040)="02f69007e4febac171a477c68da8c6277ee9487eb445a0c7dacf112ebf8535c3919cb27dbf86a47918a0e73c843382db1bdefd9f6c736f12eb4a54c87fda21c59393e29c2ccde1c47fd458d9aa8db51908f37d84360833ad6e7b734177ce17d04de1e994", 0x64}, {&(0x7f0000000180)="59806920069869e0cbf5d479f78a586b3d0f97c19e9992f716ffc05ada3f6f62e4ba35392d3fd7a7d111eba5e03c485d958843856bd9a6139d27d27d125e24ebdb5e42fb449e962cb471a28845390acb36eb4e737c385b101055523cbe86fc70d92e3745e5c7edc8130947375b2d61a744c4fc7f6d7766f8bf", 0x79}, {&(0x7f0000000600)="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", 0xc5c}], 0x6}, 0x20000800) 200.141551ms ago: executing program 4 (id=4869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0x62}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}}, 0x40800) 148.945141ms ago: executing program 1 (id=4870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f00000001c0)={0x90, r2, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@rand_addr, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x34}}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000227bd7000fcdbdf2502000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00040002000000000000004c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="00f0e80001800820", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005004600000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000c0) 50.024672ms ago: executing program 3 (id=4871): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r0, 0x0, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000100b00000008000300", @ANYRES32=r3, @ANYBLOB="06000a00feff0000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r7, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x13}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x2004c000) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x10) 49.533492ms ago: executing program 2 (id=4872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) listen(0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @loopback, 0x3f}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000000c0000070000000c0001800500020001"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="b8b2821400000081000000008100", 0xe}], 0x1}, 0x4000080) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8bb5e20}}, [0x9, 0x7, 0x8000000000000001, 0x9, 0x6, 0x3a0d, 0x0, 0x830a, 0xe, 0x5, 0x4, 0x8, 0x6, 0x8, 0x5]}, &(0x7f0000000100)=0x100) r11 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000000)={r10, 0x5, 0x70, 0x9}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r12) sendmsg$IEEE802154_LLSEC_LIST_KEY(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r13, 0x325, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) sendmsg$IEEE802154_ADD_IFACE(r7, 0x0, 0x0) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf250400000008000200020000000800020002000000080001008d4db5cad1cc163c0000000008000100020000000800020002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4000084) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r14, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 29.549442ms ago: executing program 4 (id=4873): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf2517000000a8000680a10003000ebfd61996044fb4249908b9e50fd22320eef6375785b5e7bf7267c09e79af2374da2e83de86a55133b454e6509c2a575bf56aac6b0fb1f656931b7cac8d5b7dc3953cf492e755a660369cf473d0d45688a42f5430e6e3920c79e599708346c75cbb424c126bb5d13060a28ec18914f1a97ee7d9129318d22ad012909f3c1bd2fbfc5e743c033195080a111949cd48b84c02f40594e85bd2caf785a51d9b3223"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) close(0x3) 0s ago: executing program 0 (id=4874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r8, r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000006000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4018, r2}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x40, 0x5, 0x100, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0xd199, 0xae, &(0x7f00000001c0)=""/174, 0x41100, 0x60, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r6, r7, r8, r9, r10, r11, r12, r13], &(0x7f0000000740)=[{0x5, 0x2, 0x6, 0xb}, {0x1, 0x2, 0xd, 0x2}, {0x4, 0x5, 0x6, 0x1}, {0x3, 0x1, 0xc}, {0x2, 0x4, 0xa, 0x4}], 0x10, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r15, r14, 0x25, 0x0, @void}, 0x10) kernel console output (not intermixed with test programs): devsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 321.133688][ T4487] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 321.153514][T16622] netlink: 'syz.2.3038': attribute type 29 has an invalid length. [ 321.199228][T16462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.210246][ T5845] Bluetooth: hci0: command tx timeout [ 321.225166][T16462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 321.245803][T16462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.259343][T16625] delete_channel: no stack [ 321.285074][T16622] netlink: 'syz.2.3038': attribute type 29 has an invalid length. [ 321.304457][ T4487] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 321.384667][T16462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.426012][T16462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 321.453127][T16462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.862411][T16462] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.877817][T16462] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.907786][T16462] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.919543][T16462] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.140216][T16462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.182495][T16462] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.198247][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.205631][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.237843][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.245047][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.357842][T16680] netlink: 'syz.1.3055': attribute type 3 has an invalid length. [ 322.494644][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.526863][T16699] __nla_validate_parse: 1 callbacks suppressed [ 322.526881][T16699] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3057'. [ 322.743002][T16705] syzkaller1: entered promiscuous mode [ 322.750815][T16705] syzkaller1: entered allmulticast mode [ 322.885261][T16462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.061464][T16722] xt_ipcomp: unknown flags 1D [ 323.093419][T16727] xt_ipcomp: unknown flags 1D [ 323.138940][T16731] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3065'. [ 323.185442][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'. [ 323.287846][ T5845] Bluetooth: hci0: command tx timeout [ 323.386007][ T4487] net_ratelimit: 12 callbacks suppressed [ 323.386028][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 323.420780][T16746] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3069'. [ 323.516435][T16752] netem: change failed [ 323.627785][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 323.643047][T16757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3073'. [ 323.654032][T16462] veth0_vlan: entered promiscuous mode [ 323.709874][T16755] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 323.754865][T16755] bond0 (unregistering): Released all slaves [ 323.849118][T16462] veth1_vlan: entered promiscuous mode [ 323.877530][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 323.948973][T16462] veth0_macvtap: entered promiscuous mode [ 323.975281][T16462] veth1_macvtap: entered promiscuous mode [ 323.983659][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'. [ 324.018680][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 324.041964][T16462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.065228][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 324.093594][T16462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.108247][T16778] º: left allmulticast mode [ 324.109475][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3081'. [ 324.115385][T16778] º: left promiscuous mode [ 324.128860][T16778] bridge0: port 1(º) entered disabled state [ 324.203331][ T3569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.223974][ T3569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.238812][ T3569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.264132][ T3569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.378640][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 324.458226][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.473329][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.506291][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 324.571816][ T4487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.591528][ T4487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.628970][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 324.767501][ T13] bond5: (slave gretap3): failed to get link speed/duplex [ 324.909520][ T13] bond5: (slave gretap3): failed to get link speed/duplex [ 325.056928][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 325.235129][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.245817][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.255218][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.264473][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.273269][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.367783][ T5845] Bluetooth: hci0: command tx timeout [ 325.725163][T16823] chnl_net:caif_netlink_parms(): no params data found [ 326.028762][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3102'. [ 326.074894][T16823] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.095704][T16823] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.114910][T16823] bridge_slave_0: entered allmulticast mode [ 326.147693][T16823] bridge_slave_0: entered promiscuous mode [ 326.165128][T16823] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.182738][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.197353][T16823] bridge_slave_1: entered allmulticast mode [ 326.230386][T16823] bridge_slave_1: entered promiscuous mode [ 326.275187][T16884] syz.4.3106 uses old SIOCAX25GETINFO [ 326.354606][T16881] bond9: option resend_igmp: invalid value (32767) [ 326.361458][T16881] bond9: option resend_igmp: allowed values 0 - 255 [ 326.371092][T16881] bond9 (unregistering): Released all slaves [ 326.494071][T16823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.532811][T16823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.724570][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'. [ 326.743492][T16904] syzkaller0: entered promiscuous mode [ 326.749127][T16904] syzkaller0: entered allmulticast mode [ 326.764339][T16823] team0: Port device team_slave_0 added [ 326.818565][T16823] team0: Port device team_slave_1 added [ 327.319721][T16925] netlink: 'syz.3.3115': attribute type 32 has an invalid length. [ 327.367066][ T5845] Bluetooth: hci4: command tx timeout [ 328.337887][T16925] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 328.398042][T16823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.447025][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.512103][T16823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.539651][T16823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.548357][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.576507][T16823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.596515][T16931] __nla_validate_parse: 1 callbacks suppressed [ 328.596532][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3117'. [ 328.685025][T16937] netlink: 'syz.3.3120': attribute type 83 has an invalid length. [ 328.730452][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3119'. [ 328.771548][T16937] netem: change failed [ 328.786929][T16939] net_ratelimit: 4 callbacks suppressed [ 328.786950][T16939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.950978][T16823] hsr_slave_0: entered promiscuous mode [ 328.958833][T16823] hsr_slave_1: entered promiscuous mode [ 328.965293][T16823] debugfs: 'hsr0' already exists in 'hsr' [ 328.976600][T16823] Cannot create hsr debugfs directory [ 329.131588][T16956] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3126'. [ 329.182598][T16962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 329.203671][T16961] netlink: 'syz.3.3124': attribute type 9 has an invalid length. [ 329.229149][T16961] netlink: 'syz.3.3124': attribute type 11 has an invalid length. [ 329.253082][T16961] netlink: 'syz.3.3124': attribute type 12 has an invalid length. [ 329.279565][T16965] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3128'. [ 329.281961][T16966] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3128'. [ 329.306397][T16961] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3124'. [ 329.447792][ T5845] Bluetooth: hci4: command tx timeout [ 329.498947][T16978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.528621][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 329.608897][T16986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3134'. [ 329.658383][T16823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 329.675536][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3135'. [ 329.685770][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3135'. [ 329.695260][T16823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.736181][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 329.750639][T16989] syzkaller0: entered promiscuous mode [ 329.767673][T16989] syzkaller0: entered allmulticast mode [ 329.818863][T16823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 329.837371][T16823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.862984][T16995] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 329.878158][T16995] sctp: [Deprecated]: syz.0.3137 (pid 16995) Use of int in maxseg socket option. [ 329.878158][T16995] Use struct sctp_assoc_value instead [ 329.935472][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 330.000129][T16823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 330.017426][T16823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.076136][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 330.155155][T16823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 330.204448][T16823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.257723][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 330.477288][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 330.490048][T16823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.502655][T16823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.522930][T16823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.561866][T16823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.727590][T17037] openvswitch: netlink: IP tunnel dst address not specified [ 330.736638][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 330.827642][T16823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.869006][T17041] x_tables: duplicate underflow at hook 2 [ 330.923979][T16823] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.960595][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.967906][T11046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.031770][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.038953][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.526292][ T5845] Bluetooth: hci4: command tx timeout [ 331.543818][T17069] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 331.671299][T16823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.793466][T16823] veth0_vlan: entered promiscuous mode [ 331.823247][T16823] veth1_vlan: entered promiscuous mode [ 331.904960][T16823] veth0_macvtap: entered promiscuous mode [ 331.937258][T16823] veth1_macvtap: entered promiscuous mode [ 332.023684][T16823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.040089][T17096] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.065466][T16823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.103092][ T2134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.142741][ T2134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.169796][ T2134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.184489][ T2134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.452548][ T2134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.480738][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.583621][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.599429][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.083462][T17142] netlink: 'syz.1.3174': attribute type 1 has an invalid length. [ 333.363641][T17154] veth0_to_bond: entered allmulticast mode [ 333.511656][T17158] netlink: 'syz.0.3179': attribute type 3 has an invalid length. [ 333.546350][T17158] netlink: 'syz.0.3179': attribute type 1 has an invalid length. [ 333.595779][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.609381][ T52] Bluetooth: hci4: command tx timeout [ 333.617880][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.627661][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.635798][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.651378][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.806246][ T4487] net_ratelimit: 19 callbacks suppressed [ 333.806270][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 333.915657][T17178] __nla_validate_parse: 16 callbacks suppressed [ 333.915676][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 334.199392][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 334.210389][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3184'. [ 334.227491][T17157] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 334.298230][T17185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3186'. [ 334.313228][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.370985][T17191] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3184'. [ 334.519522][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 334.572031][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.631652][T17198] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3189'. [ 334.649922][ T61] bond5: (slave gretap3): failed to get link speed/duplex [ 334.667748][T17200] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3190'. [ 334.738386][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.866012][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 334.899056][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.976055][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 335.051207][T17163] chnl_net:caif_netlink_parms(): no params data found [ 335.073184][T17218] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3195'. [ 335.257454][T17222] netlink: 'syz.1.3196': attribute type 12 has an invalid length. [ 335.278177][T17222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3196'. [ 335.356189][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 335.384864][T17231] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3198'. [ 335.395326][T17233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3200'. [ 335.436374][T17231] netlink: 'syz.0.3198': attribute type 1 has an invalid length. [ 335.453999][T17231] netlink: 'syz.0.3198': attribute type 1 has an invalid length. [ 335.544581][ T13] team0: left allmulticast mode [ 335.552187][ T13] team_slave_0: left allmulticast mode [ 335.573215][ T13] team_slave_1: left allmulticast mode [ 335.589231][ T13] bridge3: left allmulticast mode [ 335.612891][ T5838] Bluetooth: hci0: command 0x080f tx timeout [ 335.631264][ T13] dummy0: left allmulticast mode [ 335.641327][T17244] netlink: 'syz.3.3203': attribute type 21 has an invalid length. [ 335.661199][ T13] team0: left promiscuous mode [ 335.675565][ T13] team_slave_0: left promiscuous mode [ 335.683945][ T13] team_slave_1: left promiscuous mode [ 335.689576][ T5153] Bluetooth: hci4: command 0x0405 tx timeout [ 335.692203][ T5838] Bluetooth: hci2: command tx timeout [ 335.704051][T17244] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.714806][ T13] bridge3: left promiscuous mode [ 335.720236][ T13] dummy0: left promiscuous mode [ 335.727013][ T13] bridge0: port 4(team0) entered disabled state [ 335.740026][ T13] bridge_slave_1: left allmulticast mode [ 335.745715][ T13] bridge_slave_1: left promiscuous mode [ 335.751757][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.763341][ T13] bridge_slave_0: left allmulticast mode [ 335.769266][ T13] bridge_slave_0: left promiscuous mode [ 335.775923][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.191260][ T13] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 336.205320][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 336.321526][ T13] bond0 (unregistering): (slave geneve3): Releasing active interface [ 336.558887][ T13] team0: Port device bridge3 removed [ 336.785260][ T13] ` (unregistering): (slave 32): Releasing backup interface [ 336.794852][ T13] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.804778][ T13] ` (unregistering): Released all slaves [ 336.903472][ T13] bond1 (unregistering): Released all slaves [ 336.917976][ T13] bond2 (unregistering): Released all slaves [ 337.016782][ T13] bond0 (unregistering): Released all slaves [ 337.119734][ T13] bond3 (unregistering): Released all slaves [ 337.135841][ T13] bond4 (unregistering): Released all slaves [ 337.152739][ T13] bond5 (unregistering): Released all slaves [ 337.172808][ T13] bond6 (unregistering): Released all slaves [ 337.191188][ T13] bond7 (unregistering): Released all slaves [ 337.292218][ T13] bond8 (unregistering): Released all slaves [ 337.307758][ T13] bond9 (unregistering): Released all slaves [ 337.355409][T17256] tipc: Enabling of bearer rejected, failed to enable media [ 337.379268][T17163] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.398366][T17163] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.432860][T17163] bridge_slave_0: entered allmulticast mode [ 337.480792][T17163] bridge_slave_0: entered promiscuous mode [ 337.599513][ T13] : left promiscuous mode [ 337.694082][T17163] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.724185][T17163] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.740607][T17163] bridge_slave_1: entered allmulticast mode [ 337.767215][ T5838] Bluetooth: hci2: command tx timeout [ 337.779644][T17163] bridge_slave_1: entered promiscuous mode [ 337.840831][ T13] tipc: Left network mode [ 337.969117][T17163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.000116][T17163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.172551][T17163] team0: Port device team_slave_0 added [ 338.196379][T17163] team0: Port device team_slave_1 added [ 338.281396][T17163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.292267][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.319432][T17163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.339361][T17312] netlink: 'syz.0.3219': attribute type 39 has an invalid length. [ 338.368814][T17163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.386619][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.423407][T17163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.482257][T17317] team_slave_0: entered promiscuous mode [ 338.488396][T17317] team_slave_1: entered promiscuous mode [ 338.504788][T17317] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 338.512720][T17317] team0: Device macvtap1 is already an upper device of the team interface [ 338.579441][T17317] team_slave_0: left promiscuous mode [ 338.585003][T17317] team_slave_1: left promiscuous mode [ 338.659053][T17321] bond2: ARP target 1.0.0.0 is already present [ 338.665411][T17321] bond2: option arp_ip_target: invalid value (1) [ 338.674823][T17321] bond2 (unregistering): Released all slaves [ 338.689225][T17317] netlink: 'syz.1.3220': attribute type 4 has an invalid length. [ 338.869431][ T13] hsr_slave_0: left promiscuous mode [ 338.887990][ T13] hsr_slave_1: left promiscuous mode [ 338.902467][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.936509][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.089511][ T13] pim6reg (unregistering): left allmulticast mode [ 339.127907][T17336] netlink: 'syz.3.3225': attribute type 21 has an invalid length. [ 339.550784][ T13] team0 (unregistering): Port device team_slave_1 removed [ 339.592967][ T13] team0 (unregistering): Port device team_slave_0 removed [ 339.846147][ T5838] Bluetooth: hci2: command tx timeout [ 339.890900][ T13] team0 (unregistering): Port device dummy0 removed [ 339.948514][T17163] hsr_slave_0: entered promiscuous mode [ 339.955376][T17163] hsr_slave_1: entered promiscuous mode [ 339.962529][T17163] debugfs: 'hsr0' already exists in 'hsr' [ 339.968738][T17163] Cannot create hsr debugfs directory [ 339.988622][T17331] __nla_validate_parse: 8 callbacks suppressed [ 339.988642][T17331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3224'. [ 340.009873][T17336] netlink: 'syz.3.3225': attribute type 1 has an invalid length. [ 340.147904][T17342] x_tables: unsorted underflow at hook 2 [ 340.287075][T17348] netlink: 'syz.4.3232': attribute type 178 has an invalid length. [ 340.561407][T17362] tipc: Failed to remove unknown binding: 66,1,1/0:2386708401/2386708403 [ 340.606062][T17362] tipc: Failed to remove unknown binding: 66,1,1/0:2386708401/2386708403 [ 340.636425][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 340.759817][T17359] netlink: 5988 bytes leftover after parsing attributes in process `syz.3.3235'. [ 340.788789][T17359] openvswitch: netlink: Flow key attr not present in new flow. [ 340.816035][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 340.966225][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 341.021258][ T13] IPVS: stop unused estimator thread 0... [ 341.076021][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 341.263954][T17163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.294325][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 341.315300][T17163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.355415][T17163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.406088][T17163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.547370][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 341.622720][T17163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.665032][T17163] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.704515][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.711770][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.742646][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.749955][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.898245][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 341.926667][ T5838] Bluetooth: hci2: command tx timeout [ 342.027632][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 342.202170][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 342.356149][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 342.552682][T17163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.611551][T17457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3261'. [ 342.783672][T17163] veth0_vlan: entered promiscuous mode [ 342.829710][T17163] veth1_vlan: entered promiscuous mode [ 342.914566][T17163] veth0_macvtap: entered promiscuous mode [ 342.921910][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 342.934522][T17163] veth1_macvtap: entered promiscuous mode [ 342.981318][T17471] Cannot find set identified by id 65534 to match [ 343.002558][T17163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.044179][T17163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.090512][ T2025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.109515][ T2025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.131521][ T2025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.145500][ T2025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.478012][ T2025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.490961][ T2025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.572261][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.587567][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.619732][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'. [ 343.771017][T17489] tipc: Started in network mode [ 343.776445][T17489] tipc: Node identity ae70a0e2807c, cluster identity 4711 [ 343.804435][T17489] tipc: Enabled bearer , priority 0 [ 343.818747][T17492] netlink: 'syz.0.3269': attribute type 12 has an invalid length. [ 343.829150][T17488] tipc: Resetting bearer [ 344.070575][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.082791][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.100851][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.127238][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.136953][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.190161][T17486] tipc: Disabling bearer [ 344.243490][T17498] pim6reg: entered allmulticast mode [ 344.257230][T17501] pim6reg: left allmulticast mode [ 344.510300][T17510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3273'. [ 344.925458][T17503] chnl_net:caif_netlink_parms(): no params data found [ 345.301622][T17503] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.308688][T17550] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 345.321128][T17503] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.331629][T17503] bridge_slave_0: entered allmulticast mode [ 345.341106][T17503] bridge_slave_0: entered promiscuous mode [ 345.351771][T17503] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.360340][T17503] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.368190][T17503] bridge_slave_1: entered allmulticast mode [ 345.377132][T17503] bridge_slave_1: entered promiscuous mode [ 345.522141][T17503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.551482][T17561] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3284'. [ 345.582228][T17503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.606902][T17564] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3284'. [ 345.751083][T17503] team0: Port device team_slave_0 added [ 345.786894][T17568] ip6gre1: entered allmulticast mode [ 345.797707][T17503] team0: Port device team_slave_1 added [ 345.807550][T17574] Cannot find map_set index 0 as target [ 345.819220][T17568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3287'. [ 345.957895][T17503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.965265][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.006453][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'. [ 346.035952][T17503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.055202][T17503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.064834][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.118678][T17503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.174376][ T5153] Bluetooth: hci3: command tx timeout [ 346.329831][T17601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3295'. [ 346.402005][T17503] hsr_slave_0: entered promiscuous mode [ 346.409650][T17503] hsr_slave_1: entered promiscuous mode [ 346.417191][T17503] debugfs: 'hsr0' already exists in 'hsr' [ 346.423545][T17503] Cannot create hsr debugfs directory [ 346.476123][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3298'. [ 346.583926][T17617] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3299'. [ 346.593780][T17617] net_ratelimit: 12 callbacks suppressed [ 346.593802][T17617] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 346.734578][ T5993] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 346.833956][T17503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.851480][T17503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.952599][T17503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.964013][T17503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.986114][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 347.057004][T17503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.067494][T17503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.096350][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 347.144141][T17503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.154744][T17503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.217074][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 347.314597][T17628] nbd: illegal input index 2958377 [ 347.377689][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 347.560485][T17503] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.578947][T17638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.593046][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3304'. [ 347.603463][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'. [ 347.612934][T17503] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.652099][T17503] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.665051][T17503] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.706674][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 347.839312][T17503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.857298][T17651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3308'. [ 347.892985][T17503] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.912411][T17651] syzkaller1: entered promiscuous mode [ 347.938615][T17651] syzkaller1: entered allmulticast mode [ 347.977406][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.984648][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.123968][T17630] hsr_slave_0 (unregistering): left promiscuous mode [ 348.143856][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.151102][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.222324][T17659] !: renamed from dummy0 (while UP) [ 348.246307][ T5153] Bluetooth: hci3: command tx timeout [ 348.267872][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 348.397907][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 348.527183][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 348.697149][T17503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.872355][T17503] veth0_vlan: entered promiscuous mode [ 348.908920][T17503] veth1_vlan: entered promiscuous mode [ 349.043163][T17503] veth0_macvtap: entered promiscuous mode [ 349.062618][T17698] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 349.063514][T17503] veth1_macvtap: entered promiscuous mode [ 349.096872][T17503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.110314][T17503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.152953][ T3569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.204046][ T3569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.235638][ T3569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.269834][ T3569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.869948][T17737] netlink: 'syz.0.3331': attribute type 2 has an invalid length. [ 349.917308][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.925197][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.037964][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.058494][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.326732][ T5153] Bluetooth: hci3: command tx timeout [ 350.717028][T17783] __nla_validate_parse: 74 callbacks suppressed [ 350.717050][T17783] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3343'. [ 350.759842][T17783] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3343'. [ 350.800066][T17788] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3345'. [ 350.881356][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 350.934692][T17797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3346'. [ 350.965158][T17797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3346'. [ 351.072178][T17802] netlink: 'syz.1.3349': attribute type 4 has an invalid length. [ 351.437732][T17826] bond1 (unregistering): Released all slaves [ 351.646333][T11046] net_ratelimit: 18 callbacks suppressed [ 351.646356][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 351.688133][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 351.777417][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 351.873422][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 351.896039][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 352.150736][T17865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.187787][T17865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.215462][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3373'. [ 352.231073][T17865] bond0 (unregistering): Released all slaves [ 352.288867][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 352.317491][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 352.406114][ T5153] Bluetooth: hci3: command tx timeout [ 352.416169][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 352.548582][ T1087] bond5: (slave gretap3): failed to get link speed/duplex [ 352.668503][ T1087] bond5: (slave gretap3): failed to get link speed/duplex [ 352.787074][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 352.906071][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 352.994470][T17926] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 353.007566][T17926] netlink: 'syz.0.3386': attribute type 18 has an invalid length. [ 353.020297][T17928] syzkaller1: entered promiscuous mode [ 353.031014][T17928] syzkaller1: entered allmulticast mode [ 353.147330][ T1087] bond5: (slave gretap3): failed to get link speed/duplex [ 353.278684][T17942] netlink: 'syz.1.3393': attribute type 18 has an invalid length. [ 353.313088][ T7031] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.348161][ T7031] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.379616][ T7031] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.425981][ T7031] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.535215][T17949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.596939][T17961] netlink: 'syz.3.3396': attribute type 10 has an invalid length. [ 353.614461][T17956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.631066][T17956] bond1: (slave bond0): making interface the new active one [ 353.642046][T17956] bond1: (slave bond0): Enslaving as an active interface with an up link [ 353.652030][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.659589][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.679663][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.686972][T17961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.694554][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.701842][T17961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.731941][T17961] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 353.904028][T17969] netlink: 'syz.1.3403': attribute type 1 has an invalid length. [ 354.140769][T17981] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 354.429604][T18004] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:0 [ 354.609219][T18018] hsr_slave_0: left promiscuous mode [ 354.618262][T18018] hsr_slave_1: left promiscuous mode [ 354.653159][T18016] netlink: 'syz.0.3417': attribute type 21 has an invalid length. [ 354.783033][T18026] gtp0: entered promiscuous mode [ 354.790980][T18026] gtp0: entered allmulticast mode [ 355.327325][T18055] xt_CONNSECMARK: invalid mode: 0 [ 355.411215][T18061] netlink: 'syz.4.3432': attribute type 1 has an invalid length. [ 356.555623][T18119] "syz.2.3442" (18119) uses obsolete ecb(arc4) skcipher [ 356.563486][T18127] __nla_validate_parse: 17 callbacks suppressed [ 356.563505][T18127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3442'. [ 356.676665][ T4487] net_ratelimit: 23 callbacks suppressed [ 356.676686][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 356.756850][T18142] syzkaller1: entered promiscuous mode [ 356.762396][T18142] syzkaller1: entered allmulticast mode [ 356.816569][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 357.007418][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 357.020219][T18155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3450'. [ 357.058770][T18158] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3452'. [ 357.077573][T18158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3452'. [ 357.135239][T18155] nbd: socks must be embedded in a SOCK_ITEM attr [ 357.146469][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 357.171516][T16418] block nbd64: NBD_DISCONNECT [ 357.256303][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 357.303390][T17710] udevd[17710]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 357.456677][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 357.575991][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 357.687700][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 357.833677][T18093] bond5: (slave gretap3): failed to get link speed/duplex [ 357.847273][T18205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3467'. [ 357.861243][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3468'. [ 357.905371][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 357.986504][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 358.070270][T11723] IPVS: starting estimator thread 0... [ 358.078898][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3472'. [ 358.122271][T18217] netlink: 'syz.3.3472': attribute type 5 has an invalid length. [ 358.147613][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3472'. [ 358.176891][T18220] IPVS: using max 24 ests per chain, 57600 per kthread [ 358.192516][T18217] geneve2: entered promiscuous mode [ 358.227082][T18217] geneve2: entered allmulticast mode [ 358.235512][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 358.259531][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 358.282742][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 358.310112][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 358.393122][T18233] xt_hashlimit: size too large, truncated to 1048576 [ 358.517955][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 358.683265][T18250] xt_hashlimit: overflow, try lower: 3/0 [ 358.740738][T18252] xt_bpf: check failed: parse error [ 359.275088][T18282] delete_channel: no stack [ 359.812150][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.819772][T18282] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.853473][ T7031] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8e [ 360.150057][T18282] veth0_to_bond: left allmulticast mode [ 360.278348][T18282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.328551][T18282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.864464][T18282] ip6gre1: left allmulticast mode [ 360.871252][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880582c5000: rx timeout, send abort [ 360.879858][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880582c5000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 360.988000][ T3439] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.009453][T18304] x_tables: duplicate underflow at hook 3 [ 361.016096][ T3439] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.032957][ T3439] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.063079][ T3439] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.587832][T18339] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 361.598672][T18346] __nla_validate_parse: 5 callbacks suppressed [ 361.598692][T18346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3512'. [ 361.620303][T18339] bond2 (unregistering): Released all slaves [ 361.786122][ T2025] net_ratelimit: 18 callbacks suppressed [ 361.786143][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 361.858427][T18347] syzkaller0: entered promiscuous mode [ 361.864066][T18347] syzkaller0: entered allmulticast mode [ 362.126872][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 362.173601][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.259064][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 362.287455][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 362.304352][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 362.336376][T18382] º: renamed from bridge_slave_0 (while UP) [ 362.426037][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 362.446932][T18397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3525'. [ 362.566554][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 362.595795][T18404] syzkaller0: entered promiscuous mode [ 362.607234][T18404] syzkaller0: entered allmulticast mode [ 362.706697][T18411] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3532'. [ 362.726161][T18093] bond5: (slave gretap3): failed to get link speed/duplex [ 362.790443][T18415] netlink: 'syz.1.3533': attribute type 4 has an invalid length. [ 362.846224][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 362.967263][T11721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.976510][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 363.074172][T18432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 363.213872][T18441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3541'. [ 363.224262][T18441] block nbd0: not configured, cannot reconfigure [ 363.506415][T18452] nbd: must specify at least one socket [ 363.529496][T18452] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3544'. [ 363.557919][T18452] block nbd0: not configured, cannot reconfigure [ 363.650453][T18455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3545'. [ 363.793065][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3547'. [ 363.810611][T18458] netlink: 'syz.3.3546': attribute type 39 has an invalid length. [ 363.822697][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3547'. [ 364.831202][T18528] sctp: [Deprecated]: syz.4.3561 (pid 18528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.831202][T18528] Use struct sctp_sack_info instead [ 364.892511][T18520] netlink: 'syz.2.3560': attribute type 1 has an invalid length. [ 365.596932][T18570] nbd1: detected capacity change from 0 to 63 [ 365.616386][ T5153] block nbd1: Receive control failed (result -104) [ 365.947097][T18602] netlink: 'syz.4.3585': attribute type 5 has an invalid length. [ 366.078631][T18609] netlink: 'syz.3.3586': attribute type 26 has an invalid length. [ 366.130096][T18607] netlink: 'syz.2.3587': attribute type 29 has an invalid length. [ 366.166807][T18613] netlink: 'syz.2.3587': attribute type 29 has an invalid length. [ 366.184004][T18607] netlink: 'syz.2.3587': attribute type 1 has an invalid length. [ 366.499338][T18628] vlan2: entered promiscuous mode [ 366.504671][T18628] vlan2: entered allmulticast mode [ 366.525456][T18628] hsr_slave_1: entered allmulticast mode [ 366.562608][T18628] netlink: 'syz.1.3594': attribute type 6 has an invalid length. [ 366.596136][T18628] netlink: 'syz.1.3594': attribute type 5 has an invalid length. [ 366.825963][T18490] net_ratelimit: 37 callbacks suppressed [ 366.825985][T18490] bond5: (slave gretap3): failed to get link speed/duplex [ 366.959586][T18490] bond5: (slave gretap3): failed to get link speed/duplex [ 367.040287][T18651] __nla_validate_parse: 15 callbacks suppressed [ 367.040307][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'. [ 367.048135][T18672] openvswitch: netlink: Duplicate or invalid key (type 0). [ 367.064653][T18672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.126431][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 367.134079][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.236617][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 367.313176][T18678] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 367.366790][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 367.477704][ T13] bond5: (slave gretap3): failed to get link speed/duplex [ 367.490323][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 367.586039][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 367.667641][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'. [ 368.371901][T18712] syzkaller0: entered promiscuous mode [ 368.377634][T18712] syzkaller0: entered allmulticast mode [ 368.393644][T18710] syzkaller0: entered promiscuous mode [ 368.399360][T18710] syzkaller0: entered allmulticast mode [ 368.465373][T18710] xt_hashlimit: size too large, truncated to 1048576 [ 368.689096][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3629'. [ 370.608032][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'. [ 370.985358][T18790] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 371.309645][T18805] team0: No ports can be present during mode change [ 371.460468][T18814] netlink: 'syz.3.3650': attribute type 9 has an invalid length. [ 371.546320][T18817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3651'. [ 371.698093][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 371.822145][T18834] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3655'. [ 371.915022][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3658'. [ 371.928744][ T2984] net_ratelimit: 32 callbacks suppressed [ 371.928766][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 372.066046][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 372.176010][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 372.276256][T18871] netlink: 'syz.0.3665': attribute type 21 has an invalid length. [ 372.285468][T18871] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3665'. [ 372.296296][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 372.310198][T18871] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3665'. [ 372.331236][ T8055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.423422][T18873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.433471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.436994][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 372.577250][ T13] bond5: (slave gretap3): failed to get link speed/duplex [ 372.687355][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 372.700070][T18883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3668'. [ 372.713100][T18887] xt_limit: Overflow, try lower: 604147548/4200216962 [ 372.955218][T18910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3676'. [ 372.971571][T18909] netlink: 'syz.1.3677': attribute type 4 has an invalid length. [ 373.229727][T18928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3684'. [ 373.716125][T18954] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3690'. [ 373.922431][T18972] syzkaller0: entered promiscuous mode [ 373.929145][T18972] syzkaller0: entered allmulticast mode [ 374.050090][T18978] syz_tun: entered allmulticast mode [ 374.067056][T18978] dvmrp6: entered allmulticast mode [ 374.075244][T18979] netlink: 'syz.1.3698': attribute type 1 has an invalid length. [ 374.083295][T18979] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3698'. [ 374.094163][T18979] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3698'. [ 374.194784][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3699'. [ 374.221366][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3699'. [ 374.386243][T18993] nbd: nbd64 already in use [ 374.530314][T18999] sctp: [Deprecated]: syz.1.3705 (pid 18999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.530314][T18999] Use struct sctp_sack_info instead [ 374.887999][T19012] syzkaller0: entered promiscuous mode [ 374.893547][T19012] syzkaller0: entered allmulticast mode [ 374.946149][T19012] tipc: Started in network mode [ 374.951093][T19012] tipc: Node identity , cluster identity 4711 [ 374.960771][T19012] tipc: Failed to obtain node identity [ 374.976521][T19012] tipc: Enabling of bearer rejected, failed to enable media [ 375.256379][T19031] macsec1: entered promiscuous mode [ 375.575152][T19042] netlink: 'syz.0.3714': attribute type 22 has an invalid length. [ 375.858718][T19046] netlink: 'syz.3.3715': attribute type 29 has an invalid length. [ 375.867672][T19047] netlink: 'syz.3.3715': attribute type 29 has an invalid length. [ 375.876200][T19047] netlink: 'syz.3.3715': attribute type 29 has an invalid length. [ 375.898633][T19047] netlink: 'syz.3.3715': attribute type 29 has an invalid length. [ 375.946508][T19047] netlink: 'syz.3.3715': attribute type 29 has an invalid length. [ 376.068901][T19061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.334522][ T5951] IPVS: starting estimator thread 0... [ 376.430498][T19086] IPVS: using max 29 ests per chain, 69600 per kthread [ 376.652902][T19102] validate_nla: 15 callbacks suppressed [ 376.652923][T19102] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 376.893851][T19110] tipc: Started in network mode [ 376.900839][T19110] tipc: Node identity 0e91d7265102, cluster identity 4711 [ 376.913620][T19110] tipc: Enabled bearer , priority 0 [ 376.942499][T19110] syzkaller0: entered promiscuous mode [ 376.960310][T19110] syzkaller0: entered allmulticast mode [ 377.042352][T19110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.053390][ T9] net_ratelimit: 39 callbacks suppressed [ 377.053410][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.142992][T19128] netlink: 'syz.3.3740': attribute type 2 has an invalid length. [ 377.163838][T19110] tipc: Resetting bearer [ 377.181889][T19128] netlink: 'syz.3.3740': attribute type 8 has an invalid length. [ 377.209180][T19131] xt_nat: multiple ranges no longer supported [ 377.261851][T19132] sctp: [Deprecated]: syz.2.3741 (pid 19132) Use of int in max_burst socket option. [ 377.261851][T19132] Use struct sctp_assoc_value instead [ 377.314793][T19131] __nla_validate_parse: 8 callbacks suppressed [ 377.314812][T19131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3742'. [ 377.377472][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 377.396374][T19109] tipc: Resetting bearer [ 377.470195][T19109] tipc: Disabling bearer [ 377.486301][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 377.561308][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 377.607825][ T8055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.626240][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 377.737850][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 377.852741][T19162] IPVS: length: 239 != 24 [ 377.870769][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 377.960070][T19169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 378.000295][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 378.081559][T19176] netlink: 'syz.2.3756': attribute type 10 has an invalid length. [ 378.126099][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 378.139961][T19176] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3756'. [ 378.445967][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 378.481887][T19189] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3762'. [ 378.491380][T19189] block nbd0: not configured, cannot reconfigure [ 378.835820][T19201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3767'. [ 378.844434][T19211] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 378.966781][T19217] ipt_REJECT: TCP_RESET invalid for non-tcp [ 379.068825][T19219] IPVS: length: 4096 != 8 [ 379.118800][T19222] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 379.157933][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 379.215449][T18490] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.215462][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 379.266936][T18490] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.303004][ T2134] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.338496][ T2134] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.063359][T19270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3791'. [ 380.075567][T19271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3791'. [ 380.099156][T19270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3791'. [ 382.488402][ T5999] net_ratelimit: 25 callbacks suppressed [ 382.488424][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.817254][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 382.824735][ T8055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.926580][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 382.994022][T19295] __nla_validate_parse: 3 callbacks suppressed [ 382.994043][T19295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3800'. [ 383.051299][T19299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.088517][T19299] xt_hashlimit: size too large, truncated to 1048576 [ 383.129812][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 383.139584][T19303] netlink: 401 bytes leftover after parsing attributes in process `syz.4.3801'. [ 383.176500][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 383.226573][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 383.287025][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.295997][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 383.417925][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 383.500727][T19319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.891845][T19341] Bluetooth: MGMT ver 1.23 [ 384.059457][T19351] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3811'. [ 384.203607][T19363] netlink: 'syz.4.3815': attribute type 12 has an invalid length. [ 385.040930][T19399] syzkaller0: entered promiscuous mode [ 385.058995][T19399] syzkaller0: entered allmulticast mode [ 385.103353][T19406] netlink: 'syz.2.3825': attribute type 6 has an invalid length. [ 385.147512][T19409] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 385.219424][T19409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.354583][T19412] bond2: (slave gretap1): making interface the new active one [ 385.365055][T19412] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 385.969282][T19449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3840'. [ 386.017801][T19449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3840'. [ 386.055187][T19449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3840'. [ 386.119806][T19449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3840'. [ 386.140447][T19449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3840'. [ 386.232228][T19461] netlink: 'syz.0.3844': attribute type 1 has an invalid length. [ 386.394862][T19465] netlink: 'syz.1.3847': attribute type 1 has an invalid length. [ 386.483288][T19476] sctp: [Deprecated]: syz.4.3848 (pid 19476) Use of int in maxseg socket option. [ 386.483288][T19476] Use struct sctp_assoc_value instead [ 386.593568][T19481] xt_CONNSECMARK: invalid mode: 0 [ 386.858690][T19502] netlink: 'syz.4.3857': attribute type 1 has an invalid length. [ 387.153592][T19522] netlink: 'syz.1.3862': attribute type 2 has an invalid length. [ 387.192776][T19522] : entered promiscuous mode [ 387.255786][T19522] dvmrp6: entered allmulticast mode [ 387.327546][T19524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.576626][ T5993] net_ratelimit: 33 callbacks suppressed [ 387.576649][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 387.706513][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 387.742634][T19549] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 387.836467][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 387.964446][T19563] netlink: 'syz.2.3875': attribute type 1 has an invalid length. [ 388.008861][T19563] bond3: entered promiscuous mode [ 388.014314][T19563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.066130][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 388.088448][ T8055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.150607][T19576] __nla_validate_parse: 37 callbacks suppressed [ 388.150627][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'. [ 388.167892][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 388.187642][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 388.207080][T19578] netlink: 'syz.2.3880': attribute type 10 has an invalid length. [ 388.223847][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 388.238932][T19578] bond0: (slave 0!): Enslaving as an active interface with an up link [ 388.269700][T19582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3881'. [ 388.276942][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 388.282250][T19582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3881'. [ 388.408004][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 388.555230][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 388.571923][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.731043][T19605] veth0_to_bridge: entered promiscuous mode [ 388.793420][T19604] veth0_to_bridge: left promiscuous mode [ 388.796848][T19610] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 389.025290][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3891'. [ 389.077201][ T30] audit: type=1800 audit(1766534163.063:7): pid=19623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3894" name="memory.events" dev="tmpfs" ino=1079 res=0 errno=0 [ 389.127388][ T30] audit: type=1804 audit(1766534163.083:8): pid=19623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3894" name="/newroot/209/memory.events" dev="tmpfs" ino=1079 res=1 errno=0 [ 389.290573][T19633] IPv6: NLM_F_REPLACE set, but no existing node found! [ 389.326359][T19632] nbd: socks must be embedded in a SOCK_ITEM attr [ 389.580873][T19641] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3900'. [ 389.696403][T19644] netlink: 'syz.1.3902': attribute type 21 has an invalid length. [ 389.801380][T19644] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 389.839955][T19644] bond3 (unregistering): Released all slaves [ 389.894280][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060775800: rx timeout, send abort [ 389.903088][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888060775800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 390.055668][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3905'. [ 390.070826][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 390.268553][T19664] syzkaller0: entered promiscuous mode [ 390.274106][T19664] syzkaller0: entered allmulticast mode [ 390.318509][T19666] sock: sock_timestamping_bind_phc: sock not bind to device [ 390.744782][T19692] netlink: 'syz.1.3916': attribute type 4 has an invalid length. [ 391.145815][T19715] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 391.168051][T19715] bond3: option packets_per_slave: allowed values 0 - 65535 [ 391.178023][T19715] bond3 (unregistering): Released all slaves [ 391.830017][T19754] bond0: entered promiscuous mode [ 391.866066][T19754] bond0: entered allmulticast mode [ 391.883218][T19754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.920953][T19754] tipc: Enabled bearer , priority 2 [ 392.157916][T19783] netlink: 'syz.1.3943': attribute type 1 has an invalid length. [ 392.277300][T19783] bond3: (slave bridge3): making interface the new active one [ 392.288052][T19783] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 392.325269][T19788] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 392.350543][T19783] macvlan2: entered promiscuous mode [ 392.356168][T19783] macvlan2: entered allmulticast mode [ 392.368433][T19783] bond3: entered promiscuous mode [ 392.376336][T19783] bridge3: entered promiscuous mode [ 392.382769][T19783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.391441][T19783] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 392.426781][T19783] bond3: left promiscuous mode [ 392.431889][T19783] bridge3: left promiscuous mode [ 392.596570][ T5993] net_ratelimit: 30 callbacks suppressed [ 392.596593][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 392.726097][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.808142][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 392.896487][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.926127][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 392.935193][T19812] unsupported nlmsg_type 40 [ 393.058399][ T5951] tipc: Node number set to 772579554 [ 393.079004][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 393.196191][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 393.287589][ T8055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.300398][T19802] __nla_validate_parse: 11 callbacks suppressed [ 393.300494][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'. [ 393.316271][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 393.334313][T19802] netlink: 'syz.1.3948': attribute type 30 has an invalid length. [ 393.357246][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'. [ 393.427452][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 393.454071][T19828] netlink: 'syz.2.3956': attribute type 1 has an invalid length. [ 393.573057][T19828] bond5: (slave bridge4): making interface the new active one [ 393.615289][T19828] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 393.878437][T19839] syzkaller1: entered promiscuous mode [ 393.883992][T19839] syzkaller1: entered allmulticast mode [ 393.928330][T19850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3963'. [ 394.211622][T19866] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3967'. [ 394.618271][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3976'. [ 394.721199][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3975'. [ 395.118271][T19915] netlink: 'syz.0.3977': attribute type 1 has an invalid length. [ 395.157980][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 395.545379][T19941] netlink: 'syz.0.3985': attribute type 1 has an invalid length. [ 395.601774][T19941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.665989][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3989'. [ 395.714700][T19959] sctp: [Deprecated]: syz.3.3991 (pid 19959) Use of int in max_burst socket option. [ 395.714700][T19959] Use struct sctp_assoc_value instead [ 395.743459][T19938] bond1: (slave veth3): Enslaving as an active interface with a down link [ 395.818160][T19943] bond1: (slave veth0_to_bond): making interface the new active one [ 395.838407][T19943] veth0_to_bond: entered promiscuous mode [ 395.866983][T19943] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 396.013369][T19974] team0: No ports can be present during mode change [ 396.097515][ T25] block nbd1: Possible stuck request ffff888024e60000: control (read@0,1024B). Runtime 30 seconds [ 396.110420][ T25] block nbd1: Possible stuck request ffff888024e60200: control (read@1024,1024B). Runtime 30 seconds [ 396.121853][ T25] block nbd1: Possible stuck request ffff888024e60400: control (read@2048,1024B). Runtime 30 seconds [ 396.133084][ T25] block nbd1: Possible stuck request ffff888024e60600: control (read@3072,1024B). Runtime 30 seconds [ 396.170064][T19979] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3997'. [ 396.216538][T19980] netlink: 'syz.2.3997': attribute type 1 has an invalid length. [ 396.308640][T19988] bond6: (slave gretap1): making interface the new active one [ 396.317949][T19988] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 397.626151][T17671] net_ratelimit: 33 callbacks suppressed [ 397.626174][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 397.746159][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 397.856169][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 397.966223][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 398.076191][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 398.186088][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 398.296123][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 398.406131][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 398.516115][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 398.626196][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 402.726328][ T3439] net_ratelimit: 36 callbacks suppressed [ 402.727253][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 402.846138][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 402.956205][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 403.066240][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 403.176993][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 403.286354][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 403.396690][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 403.506760][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 403.616243][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 403.727109][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 406.846326][ T1150] veth0_to_bond: left promiscuous mode [ 407.816234][T18490] net_ratelimit: 36 callbacks suppressed [ 407.816262][T18490] bond5: (slave gretap3): failed to get link speed/duplex [ 407.936479][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 408.046261][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 408.156189][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 408.266157][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 408.376158][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 408.486396][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 408.596149][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 408.706145][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 408.816801][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 412.754940][T19992] netlink: 'syz.2.4003': attribute type 10 has an invalid length. [ 412.767151][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 412.792186][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 412.809033][T20007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4004'. [ 412.886825][ T4487] net_ratelimit: 36 callbacks suppressed [ 412.886849][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 413.027535][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 413.080064][T20018] netlink: 'syz.2.4008': attribute type 1 has an invalid length. [ 413.137419][T20018] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.227921][T20027] vlan2: entered promiscuous mode [ 413.248866][T20027] hsr_slave_1: entered promiscuous mode [ 413.254942][T20027] vlan2: entered allmulticast mode [ 413.262470][T20027] hsr_slave_1: entered allmulticast mode [ 413.317566][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 413.426603][T20037] netlink: 'syz.0.4014': attribute type 18 has an invalid length. [ 413.435026][T20040] netlink: 'syz.4.4013': attribute type 10 has an invalid length. [ 413.456999][T17671] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.480283][T20040] team0: Port device dummy0 added [ 413.485570][T17671] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.501508][T17671] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.510708][T17671] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.545945][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 413.562709][T20044] IPv6: Can't replace route, no match found [ 413.648410][T20049] "syz.2.4016" (20049) uses obsolete ecb(arc4) skcipher [ 413.656051][ T3439] bond5: (slave gretap3): failed to get link speed/duplex [ 413.682860][T20051] netlink: 'syz.3.4019': attribute type 1 has an invalid length. [ 413.694930][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4017'. [ 413.704728][T20052] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4017'. [ 413.737999][T20051] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4019'. [ 413.766267][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 413.780241][T20053] No such timeout policy "syz0" [ 413.800697][T20053] vxcan1: tx drop: invalid sa for name 0x0000020000000005 [ 413.831317][T20053] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 413.886164][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 414.009036][T11046] bond5: (slave gretap3): failed to get link speed/duplex [ 414.055527][T20076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.142372][T20084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4031'. [ 414.155185][T20082] netlink: 'syz.2.4030': attribute type 1 has an invalid length. [ 414.244545][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'. [ 414.255031][T20082] 8021q: adding VLAN 0 to HW filter on device bond8 [ 414.298744][T20089] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 414.347614][T20089] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4032'. [ 414.406442][T20095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.467449][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 414.658862][T20118] IPVS: length: 47 != 24 [ 414.793880][T20125] syzkaller1: entered promiscuous mode [ 414.814539][T20125] syzkaller1: entered allmulticast mode [ 414.930259][T20133] netlink: 'syz.2.4043': attribute type 20 has an invalid length. [ 414.968162][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 414.978180][T20133] netlink: 'syz.2.4043': attribute type 20 has an invalid length. [ 415.269141][T20152] netlink: 'syz.0.4049': attribute type 3 has an invalid length. [ 415.497289][T20157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.516094][T20157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.704602][T20157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.722066][T20157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.837426][T20157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.868766][T20157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.907726][T20188] netlink: 'syz.4.4061': attribute type 12 has an invalid length. [ 416.027331][T20157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.054051][T20157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.307807][ T2025] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.324141][ T2025] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.412200][ T3527] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.421144][ T3527] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.445199][T20213] tunl0: entered promiscuous mode [ 416.471420][ T3527] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.493328][ T3527] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.527764][ T3527] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.536626][ T3527] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.461285][T20249] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 417.837176][T20279] __nla_validate_parse: 14 callbacks suppressed [ 417.837198][T20279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4085'. [ 417.856848][T20283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4084'. [ 417.929248][T18490] net_ratelimit: 30 callbacks suppressed [ 417.929270][T18490] bond5: (slave gretap3): failed to get link speed/duplex [ 418.078449][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 418.091330][T20294] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4087'. [ 418.195966][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 418.256645][T11723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.378559][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 418.497401][T20311] validate_nla: 4 callbacks suppressed [ 418.497420][T20311] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 418.577918][T20315] netlink: 'syz.2.4095': attribute type 2 has an invalid length. [ 418.599596][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4095'. [ 418.626322][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4095'. [ 418.659467][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 418.776682][T20311] bond9: entered promiscuous mode [ 418.782180][T20311] 8021q: adding VLAN 0 to HW filter on device bond9 [ 418.815966][T20322] bond9: (slave bridge5): making interface the new active one [ 418.823695][T20322] bridge5: entered promiscuous mode [ 418.832803][T20322] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 418.856326][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 419.006199][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 419.156815][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 419.277367][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 419.289973][T11723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.557795][T20362] netlink: 'syz.0.4103': attribute type 5 has an invalid length. [ 420.111625][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 420.919569][T20421] netlink: 'syz.3.4119': attribute type 1 has an invalid length. [ 422.149757][T20404] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.189787][T20419] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4119'. [ 422.330448][T20429] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4122'. [ 422.357076][T20432] netlink: 'syz.3.4124': attribute type 27 has an invalid length. [ 422.378344][T20429] netlink: 'syz.4.4122': attribute type 21 has an invalid length. [ 422.386593][T20429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4122'. [ 422.547487][T20444] netlink: 'syz.3.4127': attribute type 10 has an invalid length. [ 422.566571][T20444] bridge0: port 3(team0) entered blocking state [ 422.575947][T20444] bridge0: port 3(team0) entered disabled state [ 422.588580][T20444] team0: entered allmulticast mode [ 422.601818][T20444] team_slave_0: entered allmulticast mode [ 422.608534][T20444] team_slave_1: entered allmulticast mode [ 422.618540][T20444] team0: entered promiscuous mode [ 422.633341][T20444] team_slave_0: entered promiscuous mode [ 422.644900][T20444] team_slave_1: entered promiscuous mode [ 422.654582][T20444] bridge0: port 3(team0) entered blocking state [ 422.661071][T20444] bridge0: port 3(team0) entered forwarding state [ 423.046178][ T2025] net_ratelimit: 21 callbacks suppressed [ 423.046198][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 423.128752][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.138257][T20469] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 423.206181][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 423.338420][T18490] bond5: (slave gretap3): failed to get link speed/duplex [ 423.387393][T20479] __nla_validate_parse: 1 callbacks suppressed [ 423.387414][T20479] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4137'. [ 423.421278][T20482] netlink: 'syz.2.4138': attribute type 10 has an invalid length. [ 423.449432][T11724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.485168][T20482] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.536628][T20482] bridge_slave_1: left allmulticast mode [ 423.577155][T20482] bridge_slave_1: left promiscuous mode [ 423.583046][T20482] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.631218][T20482] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 423.639958][T20497] xt_hashlimit: invalid rate [ 423.647101][T20498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4142'. [ 423.656334][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 423.766076][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 423.901983][T20513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 423.928741][T20510] pim6reg: entered allmulticast mode [ 423.936292][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4145'. [ 423.945314][T20514] netlink: 'syz.3.4145': attribute type 1 has an invalid length. [ 423.963373][T20517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4148'. [ 423.997333][T20514] netlink: 'syz.3.4145': attribute type 1 has an invalid length. [ 424.005140][T20514] netlink: 'syz.3.4145': attribute type 2 has an invalid length. [ 424.056144][T20514] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4145'. [ 424.115957][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 424.246200][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 424.393672][T20536] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4152'. [ 424.443328][T20536] erspan0: entered promiscuous mode [ 424.507858][T20543] netlink: 'syz.4.4155': attribute type 1 has an invalid length. [ 424.564886][T20543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.575227][T20550] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 424.600746][T20550] bond3: entered allmulticast mode [ 424.677450][T20550] netlink: 'syz.4.4155': attribute type 1 has an invalid length. [ 424.704237][T20555] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 424.726338][T20560] x_tables: duplicate underflow at hook 1 [ 424.810237][T20567] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4161'. [ 425.294786][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 425.354918][T20591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4169'. [ 425.377913][T20591] geneve2: entered promiscuous mode [ 425.383528][T20591] geneve2: entered allmulticast mode [ 425.391263][T17671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.416815][T17671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.538125][T20595] bond11: option lp_interval: invalid value (0) [ 425.561462][T20595] bond11: option lp_interval: allowed values 1 - 2147483647 [ 425.578351][T20595] bond11 (unregistering): Released all slaves [ 425.634479][T17671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.666034][T17671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.863980][T20624] netlink: 'syz.1.4182': attribute type 21 has an invalid length. [ 425.882819][T20624] netlink: 'syz.1.4182': attribute type 22 has an invalid length. [ 425.892243][T20624] netlink: 'syz.1.4182': attribute type 23 has an invalid length. [ 425.901154][T20624] netlink: 'syz.1.4182': attribute type 25 has an invalid length. [ 426.176152][ T25] block nbd1: Possible stuck request ffff888024e60000: control (read@0,1024B). Runtime 60 seconds [ 426.189809][ T25] block nbd1: Possible stuck request ffff888024e60200: control (read@1024,1024B). Runtime 60 seconds [ 426.202596][ T25] block nbd1: Possible stuck request ffff888024e60400: control (read@2048,1024B). Runtime 60 seconds [ 426.214239][ T25] block nbd1: Possible stuck request ffff888024e60600: control (read@3072,1024B). Runtime 60 seconds [ 426.661421][ T5838] block nbd0: Receive control failed (result -107) [ 426.965767][T20696] veth1_macvtap: left promiscuous mode [ 427.053626][T20702] netlink: 'syz.0.4205': attribute type 22 has an invalid length. [ 427.429624][T20729] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20000 [ 427.471328][T20736] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003 [ 428.087607][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 428.142760][ T354] net_ratelimit: 38 callbacks suppressed [ 428.142781][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 428.373968][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 428.486465][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 428.596196][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 428.647865][T11724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.686737][T20819] __nla_validate_parse: 14 callbacks suppressed [ 428.686757][T20819] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4239'. [ 428.707358][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 428.828195][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 428.956533][T18490] bond5: (slave gretap3): failed to get link speed/duplex [ 429.086978][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 429.197147][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 430.224120][T20917] validate_nla: 1 callbacks suppressed [ 430.224139][T20917] netlink: 'syz.4.4267': attribute type 1 has an invalid length. [ 430.240402][T20917] netlink: 'syz.4.4267': attribute type 2 has an invalid length. [ 430.807736][T20952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.839457][T20952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.004616][T20962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4280'. [ 431.061258][T20957] syzkaller0: entered promiscuous mode [ 431.066874][T20957] syzkaller0: entered allmulticast mode [ 432.752965][T20978] syzkaller0: entered promiscuous mode [ 432.760520][T20978] syzkaller0: entered allmulticast mode [ 433.056776][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4290'. [ 433.202328][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4291'. [ 433.207274][ T7031] net_ratelimit: 26 callbacks suppressed [ 433.207327][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 433.362634][T18490] bond5: (slave gretap3): failed to get link speed/duplex [ 433.416104][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4296'. [ 433.463679][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4296'. [ 433.497179][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 433.518522][ T5203] udevd[5203]: worker [17710] /devices/virtual/block/nbd1 is taking a long time [ 433.587110][T21019] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 433.608231][ T5897] IPVS: starting estimator thread 0... [ 433.616246][ T7031] bond5: (slave gretap3): failed to get link speed/duplex [ 433.706376][T21025] IPVS: using max 26 ests per chain, 62400 per kthread [ 433.745981][T21028] syzkaller0: entered promiscuous mode [ 433.756011][T21028] syzkaller0: entered allmulticast mode [ 433.776543][T21028] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 433.786128][ T12] bond5: (slave gretap3): failed to get link speed/duplex [ 433.859901][ T8055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.906104][ T61] bond5: (slave gretap3): failed to get link speed/duplex [ 434.892384][T11724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.129832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.289302][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.597638][T21050] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 435.742559][T21070] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4309'. [ 435.763464][T21071] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4309'. [ 435.798401][T21073] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4312'. [ 435.916870][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 436.049343][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 436.223198][T21094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4319'. [ 436.234725][T21111] ipt_REJECT: TCP_RESET invalid for non-tcp [ 436.513523][T21125] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4324'. [ 436.853897][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4333'. [ 436.988421][T21151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 437.070631][T21169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4335'. [ 437.079772][T21169] netlink: 'syz.2.4335': attribute type 11 has an invalid length. [ 437.192068][T21157] netlink: 'syz.2.4335': attribute type 10 has an invalid length. [ 437.211483][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 437.347773][T21157] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 437.361285][T21164] syzkaller1: entered promiscuous mode [ 437.368919][T21164] syzkaller1: entered allmulticast mode [ 437.616722][T21205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.624021][T21205] IPv6: NLM_F_CREATE should be set when creating new route [ 437.631311][T21205] IPv6: NLM_F_CREATE should be set when creating new route [ 437.638558][T21205] IPv6: NLM_F_CREATE should be set when creating new route [ 437.646033][T21204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.266119][ T3569] net_ratelimit: 25 callbacks suppressed [ 438.266173][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 438.338200][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.436010][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 438.583514][T21239] syzkaller0: entered promiscuous mode [ 438.589659][T21239] syzkaller0: entered allmulticast mode [ 439.208422][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 440.346504][T21266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.396276][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 440.567064][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 440.727881][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 440.788410][T21294] __nla_validate_parse: 2 callbacks suppressed [ 440.788431][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4368'. [ 440.847553][ T37] bond5: (slave gretap3): failed to get link speed/duplex [ 440.884437][T21304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4373'. [ 440.898472][T21296] netlink: 'syz.4.4368': attribute type 1 has an invalid length. [ 440.971053][ T37] bond5: (slave gretap3): failed to get link speed/duplex [ 441.085986][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 441.394023][T21334] sctp: [Deprecated]: syz.3.4381 (pid 21334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.394023][T21334] Use struct sctp_sack_info instead [ 441.478223][T21339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.478831][T21337] netlink: 401 bytes leftover after parsing attributes in process `syz.0.4382'. [ 441.519641][T21340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.704542][T21351] rdma_op ffff88803146d1f0 conn xmit_rdma 0000000000000000 [ 441.721922][T21353] rdma_op ffff8880314681f0 conn xmit_rdma 0000000000000000 [ 441.839596][T21326] lec:lec_atm_send: lec0: Unknown message type -1 [ 441.849456][T21359] netlink: 'syz.0.4389': attribute type 4 has an invalid length. [ 441.887388][T21364] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4390'. [ 441.961971][T21368] netlink: 'syz.3.4391': attribute type 1 has an invalid length. [ 441.998781][T21363] lec:lec_atm_close: lec0: Shut down! [ 442.113142][T21368] bond3: (slave bridge1): making interface the new active one [ 442.132372][T21368] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 442.186503][T21372] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 442.251918][T21368] macvlan2: entered promiscuous mode [ 442.268597][T21368] macvlan2: entered allmulticast mode [ 442.284741][T21380] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4393'. [ 442.331149][ T5838] Bluetooth: hci0: command 0x080f tx timeout [ 442.337673][T21368] bond3: entered promiscuous mode [ 442.342781][T21368] bridge1: entered promiscuous mode [ 442.359227][T21368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.381415][T21368] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 442.414239][T21368] bond3: left promiscuous mode [ 442.420576][T21368] bridge1: left promiscuous mode [ 442.463656][T21388] pimreg3: entered allmulticast mode [ 442.675679][T21397] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 442.682495][T21396] vlan0: entered promiscuous mode [ 442.697922][T21396] vlan0: entered allmulticast mode [ 442.703106][T21396] veth0_vlan: entered allmulticast mode [ 442.722011][T21396] netlink: 'syz.4.4399': attribute type 1 has an invalid length. [ 443.204924][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'. [ 443.306873][ T3013] net_ratelimit: 14 callbacks suppressed [ 443.306896][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 443.346988][T21435] netlink: 'syz.0.4410': attribute type 2 has an invalid length. [ 443.358523][T21433] netlink: 'syz.1.4409': attribute type 27 has an invalid length. [ 443.370220][T21436] sock: sock_set_timeout: `syz.1.4409' (pid 21436) tries to set negative timeout [ 443.389920][T21436] sock: sock_set_timeout: `syz.1.4409' (pid 21436) tries to set negative timeout [ 443.418432][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'. [ 443.419832][T21436] sock: sock_set_timeout: `syz.1.4409' (pid 21436) tries to set negative timeout [ 443.456376][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 443.561945][T21444] openvswitch: netlink: Message has 592 unknown bytes. [ 443.586641][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 443.595673][T21446] syz_tun: entered allmulticast mode [ 443.603798][T21444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.696534][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 443.807059][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 444.145703][T21484] netlink: 'syz.2.4423': attribute type 7 has an invalid length. [ 444.171335][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4427'. [ 444.241390][T21494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4427'. [ 444.261064][T21475] xt_CT: No such helper "syz1" [ 444.536554][T21515] tipc: Enabled bearer , priority 0 [ 444.550082][T21515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4432'. [ 444.563943][T21515] tipc: Resetting bearer [ 444.582519][T21514] tipc: Disabling bearer [ 444.615018][T21519] xt_hashlimit: size too large, truncated to 1048576 [ 444.963412][T21534] syzkaller0: entered promiscuous mode [ 444.972121][T21534] syzkaller0: entered allmulticast mode [ 445.452705][T21566] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 445.556346][T21580] netlink: 'syz.0.4453': attribute type 1 has an invalid length. [ 445.564257][T21580] netlink: 'syz.0.4453': attribute type 3 has an invalid length. [ 445.572404][T21580] NCSI netlink: No device for ifindex 813332851 [ 445.741669][T21586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 446.006456][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 446.289269][T21628] bridge_slave_0: invalid flags given to default FDB implementation [ 446.352937][T21631] __nla_validate_parse: 6 callbacks suppressed [ 446.352957][T21631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4468'. [ 446.369805][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4468'. [ 446.731458][T21646] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4473'. [ 446.778594][T21648] tap0: tun_chr_ioctl cmd 1074025676 [ 446.794320][T21648] tap0: owner set to 0 [ 446.826474][T21656] netlink: 'syz.2.4475': attribute type 1 has an invalid length. [ 446.846616][T21650] netlink: 'syz.2.4475': attribute type 1 has an invalid length. [ 446.869712][T21657] tap0: tun_chr_ioctl cmd 35111 [ 447.007563][T21662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4479'. [ 447.172234][T21672] netlink: 'syz.0.4482': attribute type 3 has an invalid length. [ 447.239196][T21675] netlink: 'syz.3.4483': attribute type 10 has an invalid length. [ 447.267038][T21654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4477'. [ 447.290989][T21675] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 447.324935][T21675] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 447.446163][ T5153] Bluetooth: hci4: command 0x0405 tx timeout [ 447.478927][T21684] bond12: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 447.505085][T21684] bond12 (unregistering): Released all slaves [ 447.567223][T21687] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 447.728151][T21697] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.746794][T21697] syzkaller1: entered promiscuous mode [ 447.752320][T21697] syzkaller1: entered allmulticast mode [ 447.778397][T21706] validate_nla: 1 callbacks suppressed [ 447.778417][T21706] netlink: 'syz.1.4490': attribute type 29 has an invalid length. [ 448.049250][T21731] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.4494'. [ 448.089091][T21737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4496'. [ 448.099801][T21737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4496'. [ 448.377245][ T3569] net_ratelimit: 30 callbacks suppressed [ 448.377266][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 448.526410][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 448.539305][T21756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4502'. [ 448.607974][T21756] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4502'. [ 448.636213][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 448.756039][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 448.811404][T21781] tipc: Started in network mode [ 448.827439][T21781] tipc: Node identity 4a9e699da8af, cluster identity 4711 [ 448.842075][T21781] tipc: Enabled bearer , priority 0 [ 448.852345][T21781] syzkaller0: entered promiscuous mode [ 448.876263][T21781] syzkaller0: entered allmulticast mode [ 448.902318][T21781] syzkaller1: entered promiscuous mode [ 448.908195][T21781] syzkaller1: entered allmulticast mode [ 448.936367][ T3569] bond5: (slave gretap3): failed to get link speed/duplex [ 448.974319][T21781] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 449.002070][T21781] tipc: Resetting bearer [ 449.047005][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 449.069596][T21780] tipc: Resetting bearer [ 449.096670][T21780] tipc: Disabling bearer [ 449.156278][T17671] bond5: (slave gretap3): failed to get link speed/duplex [ 449.365196][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 449.476649][ T12] bond5: (slave gretap3): failed to get link speed/duplex [ 449.589331][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 450.678306][T21879] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 450.770090][T21879] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 450.838141][T21882] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 450.841081][T21889] netlink: 'syz.0.4540': attribute type 32 has an invalid length. [ 450.922026][T21887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 450.935330][T21882] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 450.968465][T21890] gretap2: entered promiscuous mode [ 451.677942][T21913] __nla_validate_parse: 14 callbacks suppressed [ 451.677961][T21913] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4544'. [ 453.090187][T21882] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 453.112447][T21882] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 453.141868][T21882] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 453.174563][T21882] netlink: 'syz.2.4538': attribute type 29 has an invalid length. [ 453.232915][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4546'. [ 453.416143][ T2025] net_ratelimit: 8 callbacks suppressed [ 453.416164][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 453.548167][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 453.666626][ T37] bond5: (slave gretap3): failed to get link speed/duplex [ 453.816423][ T37] bond5: (slave gretap3): failed to get link speed/duplex [ 453.900371][T21946] sctp: [Deprecated]: syz.1.4550 (pid 21946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.900371][T21946] Use struct sctp_sack_info instead [ 453.937722][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 454.087460][ T12] bond5: (slave gretap3): failed to get link speed/duplex [ 454.216108][ T5993] bond5: (slave gretap3): failed to get link speed/duplex [ 454.327302][ T37] bond5: (slave gretap3): failed to get link speed/duplex [ 454.436074][ T37] bond5: (slave gretap3): failed to get link speed/duplex [ 454.547794][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 454.639115][T21978] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 454.748086][T21982] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4560'. [ 454.760522][T21980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.760758][T21982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4560'. [ 454.795065][T21982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4560'. [ 454.811985][T21986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4561'. [ 454.822113][T21986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4561'. [ 454.841938][T21987] netlink: 'syz.0.4562': attribute type 1 has an invalid length. [ 455.052958][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4565'. [ 455.386830][T22008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4569'. [ 455.588862][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4572'. [ 455.791574][T22029] xt_SECMARK: invalid mode: 9 [ 455.833353][T22035] xt_SECMARK: invalid mode: 9 [ 456.256227][ T25] block nbd1: Possible stuck request ffff888024e60000: control (read@0,1024B). Runtime 90 seconds [ 456.267693][ T25] block nbd1: Possible stuck request ffff888024e60200: control (read@1024,1024B). Runtime 90 seconds [ 456.288981][ T25] block nbd1: Possible stuck request ffff888024e60400: control (read@2048,1024B). Runtime 90 seconds [ 456.300412][ T25] block nbd1: Possible stuck request ffff888024e60600: control (read@3072,1024B). Runtime 90 seconds [ 456.559589][T22062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.824833][T22073] __nla_validate_parse: 4 callbacks suppressed [ 456.824853][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4588'. [ 456.927291][T22079] veth0_to_bond: entered allmulticast mode [ 456.964691][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4591'. [ 457.019845][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4591'. [ 457.049324][T22083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4591'. [ 457.072389][T22085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4592'. [ 457.082408][T22086] netlink: 'syz.0.4591': attribute type 10 has an invalid length. [ 457.182331][T22081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.209336][T22092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4592'. [ 457.331409][T22086] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 457.376717][T22088] syzkaller1: entered promiscuous mode [ 457.382328][T22088] syzkaller1: entered allmulticast mode [ 457.455119][T22098] netlink: 'syz.1.4594': attribute type 1 has an invalid length. [ 457.529989][T22101] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4595'. [ 457.575724][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4596'. [ 457.612704][T22101] team0: Port device dummy0 removed [ 457.642741][T22107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.687152][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 457.745293][T22109] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4598'. [ 458.062286][T22126] pimreg3: entered allmulticast mode [ 458.068820][T22131] block nbd2: NBD_DISCONNECT [ 458.109527][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4605'. [ 458.143150][T22131] vlan3: entered allmulticast mode [ 458.148636][T22131] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 458.436242][ T3794] net_ratelimit: 29 callbacks suppressed [ 458.436263][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 458.465144][T22151] netlink: 'syz.4.4612': attribute type 2 has an invalid length. [ 458.550772][T22157] netlink: 'syz.2.4614': attribute type 6 has an invalid length. [ 458.573918][T22157] netlink: 'syz.2.4614': attribute type 5 has an invalid length. [ 458.597613][ T37] bond5: (slave gretap3): failed to get link speed/duplex [ 458.717518][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 458.768866][T22171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.836647][T22178] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20000 [ 458.885290][T22178] netlink: 'syz.4.4619': attribute type 1 has an invalid length. [ 458.906465][T22170] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.947540][T22170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.016256][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 459.041345][T22182] netlink: 'syz.1.4622': attribute type 58 has an invalid length. [ 459.219406][T22184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.235154][T22184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 459.250267][T22192] openvswitch: netlink: IP tunnel dst address not specified [ 459.328618][ T3794] bond5: (slave gretap3): failed to get link speed/duplex [ 459.385788][T22192] bridge0: entered promiscuous mode [ 459.391861][T22192] macsec1: entered promiscuous mode [ 459.399342][T22192] macsec1: entered allmulticast mode [ 459.405489][T22192] bridge0: entered allmulticast mode [ 459.412238][T22192] bridge0: port 3(macsec1) entered blocking state [ 459.419638][T22192] bridge0: port 3(macsec1) entered disabled state [ 459.439703][T22192] bridge0: left allmulticast mode [ 459.445258][T22192] bridge0: left promiscuous mode [ 459.501483][T22184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.515996][T22184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 459.540620][T22202] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 459.546665][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 459.632920][T22184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.644310][T22184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 459.729189][T22184] bond0: (slave netdevsim0): Releasing backup interface [ 459.743463][T22184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.754432][T22184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 460.000127][ T1087] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 460.014710][ T1087] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.063174][ T1087] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 460.077393][ T1087] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.122567][ T1087] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 460.133031][ T1087] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.158187][ T1087] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 460.181576][ T1087] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.436170][T22239] netlink: 'syz.0.4641': attribute type 9 has an invalid length. [ 460.469826][T22239] netlink: 'syz.0.4641': attribute type 11 has an invalid length. [ 460.494885][T22239] netlink: 'syz.0.4641': attribute type 12 has an invalid length. [ 460.579629][T22239] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 460.599024][T22254] netlink: 'syz.1.4645': attribute type 8 has an invalid length. [ 460.610075][T22239] 0ªî{X¹¦: entered allmulticast mode [ 460.639988][T22239] syzkaller0: entered promiscuous mode [ 460.659113][T22239] syzkaller0: entered allmulticast mode [ 460.948588][T22267] Cannot find set identified by id 65534 to match [ 461.790634][T22326] ip6gre1: entered allmulticast mode [ 461.877905][T22333] __nla_validate_parse: 19 callbacks suppressed [ 461.877929][T22333] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4670'. [ 461.932607][T22334] !: renamed from dummy0 (while UP) [ 462.220677][T22348] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4676'. [ 462.413168][T22360] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4677'. [ 462.443274][T22363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4681'. [ 462.635718][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4686'. [ 462.658022][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4686'. [ 462.811948][T22390] ip6gre1: entered promiscuous mode [ 462.969749][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4692'. [ 462.996180][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4692'. [ 463.093665][T22410] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 463.104438][T22411] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 463.430920][T22429] tipc: Enabled bearer , priority 0 [ 463.438683][T22429] syzkaller0: entered promiscuous mode [ 463.444423][T22429] syzkaller0: entered allmulticast mode [ 463.461416][T22429] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 463.490686][ T10] IPVS: starting estimator thread 0... [ 463.515048][T22429] tipc: Resetting bearer [ 463.539884][T22428] tipc: Resetting bearer [ 463.580557][T22428] tipc: Disabling bearer [ 463.602290][T22433] IPVS: using max 28 ests per chain, 67200 per kthread [ 463.617730][T22438] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 463.637255][T22438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4705'. [ 463.656582][ T2025] net_ratelimit: 31 callbacks suppressed [ 463.656605][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 463.789414][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 463.916012][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 464.004223][T22458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4710'. [ 464.017085][T22458] openvswitch: netlink: Missing key (keys=40, expected=80) [ 464.026891][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 464.111073][T22462] netlink: 'syz.0.4712': attribute type 83 has an invalid length. [ 464.138876][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 464.423412][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 464.567018][ T2134] bond5: (slave gretap3): failed to get link speed/duplex [ 464.675950][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 464.798195][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 464.945198][T22525] netlink: 'syz.4.4730': attribute type 1 has an invalid length. [ 465.490168][T22543] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 465.505637][T22543] bond5 (unregistering): Released all slaves [ 465.529723][T22550] netlink: 'syz.0.4736': attribute type 4 has an invalid length. [ 465.641659][T22552] x_tables: duplicate underflow at hook 3 [ 466.005389][T22572] netlink: 'syz.1.4741': attribute type 2 has an invalid length. [ 466.470945][T22598] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 466.777051][T22625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.792083][T22624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.898621][T22636] __nla_validate_parse: 15 callbacks suppressed [ 466.898641][T22636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4754'. [ 466.927531][T22635] veth0_to_team: entered promiscuous mode [ 467.332451][T22655] 8021q: VLANs not supported on ipvlan1 [ 467.583732][T22637] infiniband syû: set down [ 467.608326][T22637] infiniband syû: added bond_slave_0 [ 467.727295][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4762'. [ 467.754458][T22637] RDS/IB: syû: added [ 467.762296][T22637] smc: adding ib device syû with port count 1 [ 467.772721][T22637] smc: ib device syû port 1 has no pnetid [ 468.154727][T11724] IPVS: starting estimator thread 0... [ 468.254210][T22688] IPVS: using max 27 ests per chain, 64800 per kthread [ 468.429950][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'. [ 468.670812][T22705] netlink: 'syz.1.4775': attribute type 9 has an invalid length. [ 468.767263][ T354] net_ratelimit: 34 callbacks suppressed [ 468.767286][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 468.999355][T22720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.035640][T22716] can: request_module (can-proto-0) failed. [ 469.037006][T22721] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4780'. [ 469.056745][T22721] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4780'. [ 469.266536][T22727] netlink: 'syz.1.4781': attribute type 1 has an invalid length. [ 469.276245][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 469.404092][T22731] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 469.434535][T22729] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 469.447936][T22729] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 469.458682][T22729] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 469.566388][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4781'. [ 469.591018][T22743] netlink: 'syz.2.4784': attribute type 1 has an invalid length. [ 469.606107][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 469.627298][T22727] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 469.645298][T22743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4784'. [ 469.676466][T22743] tc_dump_action: action bad kind [ 469.684255][T22745] netlink: 'syz.3.4785': attribute type 32 has an invalid length. [ 469.721528][T22745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4785'. [ 469.737312][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 469.852161][T22745] bond4: Setting coupled_control to off (0) [ 469.871681][T22757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4788'. [ 470.002049][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'. [ 470.026762][ T13] bond5: (slave gretap3): failed to get link speed/duplex [ 470.299384][T18487] bond5: (slave gretap3): failed to get link speed/duplex [ 470.416419][ T1087] bond5: (slave gretap3): failed to get link speed/duplex [ 470.511084][T22788] netlink: 'syz.3.4796': attribute type 7 has an invalid length. [ 470.521652][T22788] netlink: 'syz.3.4796': attribute type 8 has an invalid length. [ 470.791458][T22797] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 470.854599][T22801] syzkaller0: entered promiscuous mode [ 470.885144][T22801] syzkaller0: entered allmulticast mode [ 471.009488][T22796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.673767][T22829] netlink: 'syz.1.4810': attribute type 4 has an invalid length. [ 471.877798][T22834] netlink: 'syz.1.4812': attribute type 29 has an invalid length. [ 471.900092][T22834] netlink: 'syz.1.4812': attribute type 29 has an invalid length. [ 471.910674][T22834] __nla_validate_parse: 7 callbacks suppressed [ 471.910694][T22834] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4812'. [ 472.069920][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 472.088342][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 472.114029][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 472.191640][T22846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 472.286911][T22848] bond5: option all_slaves_active: invalid value (222) [ 472.296328][T22848] bond5 (unregistering): Released all slaves [ 472.480435][T22851] syzkaller0: entered promiscuous mode [ 472.486576][T22851] syzkaller0: entered allmulticast mode [ 472.806418][ T5153] Bluetooth: hci0: command 0x080f tx timeout [ 473.043197][T22868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'. [ 474.331227][ T36] net_ratelimit: 15 callbacks suppressed [ 474.331251][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 474.479352][ T3527] bond5: (slave gretap3): failed to get link speed/duplex [ 474.524715][T22884] netlink: 'syz.3.4828': attribute type 1 has an invalid length. [ 474.564858][T22888] pim6reg: entered allmulticast mode [ 474.600534][T22888] pim6reg: left allmulticast mode [ 474.678316][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4831'. [ 474.695999][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 474.807460][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 474.917052][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 474.942939][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4837'. [ 475.036015][T18487] bond5: (slave gretap3): failed to get link speed/duplex [ 475.166852][T22923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4839'. [ 475.186910][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 475.306113][ T3013] bond5: (slave gretap3): failed to get link speed/duplex [ 475.416389][ T36] bond5: (slave gretap3): failed to get link speed/duplex [ 475.546107][ T2984] bond5: (slave gretap3): failed to get link speed/duplex [ 475.595609][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4847'. [ 475.820845][T22966] tipc: Cannot configure node identity twice [ 476.545136][T23010] tipc: Enabled bearer , priority 0 [ 476.579506][T23010] syzkaller0: entered promiscuous mode [ 476.585050][T23010] syzkaller0: entered allmulticast mode [ 476.602654][T23010] tipc: Resetting bearer [ 476.639662][T23009] tipc: Resetting bearer [ 476.709476][T23009] tipc: Disabling bearer [ 476.825012][T23027] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 476.920965][T23035] __nla_validate_parse: 7 callbacks suppressed [ 476.920984][T23035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4869'. [ 477.309398][T23037] [ 477.311799][T23037] ====================================================== [ 477.318859][T23037] WARNING: possible circular locking dependency detected [ 477.325926][T23037] syzkaller #0 Not tainted [ 477.330376][T23037] ------------------------------------------------------ [ 477.337432][T23037] syz.1.4870/23037 is trying to acquire lock: [ 477.343540][T23037] ffff88814233f800 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b4/0x450 [ 477.353071][T23037] [ 477.353071][T23037] but task is already holding lock: [ 477.360470][T23037] ffff88814233f2c0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 477.370745][T23037] [ 477.370745][T23037] which lock already depends on the new lock. [ 477.370745][T23037] [ 477.381174][T23037] [ 477.381174][T23037] the existing dependency chain (in reverse order) is: [ 477.390206][T23037] [ 477.390206][T23037] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 477.398892][T23037] blk_alloc_queue+0x52f/0x610 [ 477.404206][T23037] __blk_mq_alloc_disk+0x15c/0x340 [ 477.409863][T23037] nbd_dev_add+0x46c/0xae0 [ 477.414829][T23037] nbd_init+0x168/0x1f0 [ 477.419545][T23037] do_one_initcall+0x1fb/0x820 [ 477.424903][T23037] do_initcall_level+0x104/0x190 [ 477.430420][T23037] do_initcalls+0x59/0xa0 [ 477.435298][T23037] kernel_init_freeable+0x334/0x4b0 [ 477.441134][T23037] kernel_init+0x1d/0x1d0 [ 477.446044][T23037] ret_from_fork+0x599/0xb30 [ 477.451185][T23037] ret_from_fork_asm+0x1a/0x30 [ 477.456499][T23037] [ 477.456499][T23037] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 477.463743][T23037] fs_reclaim_acquire+0x72/0x100 [ 477.469226][T23037] kmem_cache_alloc_node_noprof+0x48/0x720 [ 477.475602][T23037] __alloc_skb+0x255/0x430 [ 477.480653][T23037] tcp_stream_alloc_skb+0x3d/0x350 [ 477.486312][T23037] tcp_sendmsg_locked+0x1ab8/0x5520 [ 477.492087][T23037] tcp_sendmsg+0x2f/0x50 [ 477.496906][T23037] __sock_sendmsg+0x19c/0x270 [ 477.502163][T23037] sock_write_iter+0x279/0x360 [ 477.507475][T23037] vfs_write+0x5c9/0xb30 [ 477.512265][T23037] ksys_write+0x145/0x250 [ 477.517135][T23037] do_syscall_64+0xfa/0xf80 [ 477.522182][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.528642][T23037] [ 477.528642][T23037] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 477.536316][T23037] lock_sock_nested+0x48/0x100 [ 477.541669][T23037] inet_shutdown+0x6a/0x390 [ 477.546715][T23037] nbd_mark_nsock_dead+0x2e9/0x560 [ 477.552370][T23037] recv_work+0x1b38/0x1c50 [ 477.557318][T23037] process_scheduled_works+0xad1/0x1770 [ 477.563402][T23037] worker_thread+0x8a0/0xda0 [ 477.568531][T23037] kthread+0x711/0x8a0 [ 477.573151][T23037] ret_from_fork+0x599/0xb30 [ 477.578367][T23037] ret_from_fork_asm+0x1a/0x30 [ 477.583680][T23037] [ 477.583680][T23037] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 477.591441][T23037] __mutex_lock+0x187/0x1350 [ 477.596574][T23037] nbd_queue_rq+0x257/0xf10 [ 477.601626][T23037] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 477.607717][T23037] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 477.614618][T23037] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 477.621148][T23037] blk_mq_run_hw_queue+0x348/0x4f0 [ 477.626805][T23037] blk_mq_dispatch_list+0xd0b/0xe00 [ 477.632548][T23037] blk_mq_flush_plug_list+0x469/0x550 [ 477.638471][T23037] __blk_flush_plug+0x3d3/0x4b0 [ 477.643863][T23037] __submit_bio+0x2d0/0x5a0 [ 477.648934][T23037] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 477.655136][T23037] block_read_full_folio+0x599/0x830 [ 477.660972][T23037] filemap_read_folio+0x117/0x380 [ 477.666535][T23037] do_read_cache_folio+0x358/0x590 [ 477.672187][T23037] read_part_sector+0xb6/0x2b0 [ 477.677499][T23037] adfspart_check_ICS+0xa4/0xa50 [ 477.682984][T23037] bdev_disk_changed+0x75f/0x14b0 [ 477.688549][T23037] blkdev_get_whole+0x380/0x510 [ 477.693944][T23037] bdev_open+0x31e/0xd30 [ 477.698737][T23037] blkdev_open+0x457/0x600 [ 477.703699][T23037] do_dentry_open+0x7ce/0x1420 [ 477.709001][T23037] vfs_open+0x3b/0x340 [ 477.713640][T23037] path_openat+0x340e/0x3dd0 [ 477.718794][T23037] do_filp_open+0x1fa/0x410 [ 477.723833][T23037] do_sys_openat2+0x121/0x200 [ 477.729053][T23037] __x64_sys_openat+0x138/0x170 [ 477.734468][T23037] do_syscall_64+0xfa/0xf80 [ 477.739519][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.745960][T23037] [ 477.745960][T23037] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 477.753211][T23037] __mutex_lock+0x187/0x1350 [ 477.758346][T23037] nbd_queue_rq+0xc8/0xf10 [ 477.763308][T23037] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 477.769401][T23037] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 477.776277][T23037] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 477.782819][T23037] blk_mq_run_hw_queue+0x348/0x4f0 [ 477.788496][T23037] blk_mq_dispatch_list+0xd0b/0xe00 [ 477.794252][T23037] blk_mq_flush_plug_list+0x469/0x550 [ 477.800166][T23037] __blk_flush_plug+0x3d3/0x4b0 [ 477.805561][T23037] __submit_bio+0x2d0/0x5a0 [ 477.810607][T23037] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 477.816780][T23037] block_read_full_folio+0x599/0x830 [ 477.822611][T23037] filemap_read_folio+0x117/0x380 [ 477.828178][T23037] do_read_cache_folio+0x358/0x590 [ 477.833839][T23037] read_part_sector+0xb6/0x2b0 [ 477.839158][T23037] adfspart_check_ICS+0xa4/0xa50 [ 477.844645][T23037] bdev_disk_changed+0x75f/0x14b0 [ 477.850212][T23037] blkdev_get_whole+0x380/0x510 [ 477.855609][T23037] bdev_open+0x31e/0xd30 [ 477.860406][T23037] blkdev_open+0x457/0x600 [ 477.865370][T23037] do_dentry_open+0x7ce/0x1420 [ 477.870685][T23037] vfs_open+0x3b/0x340 [ 477.875302][T23037] path_openat+0x340e/0x3dd0 [ 477.880431][T23037] do_filp_open+0x1fa/0x410 [ 477.885477][T23037] do_sys_openat2+0x121/0x200 [ 477.890696][T23037] __x64_sys_openat+0x138/0x170 [ 477.896089][T23037] do_syscall_64+0xfa/0xf80 [ 477.901133][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.907570][T23037] [ 477.907570][T23037] -> #1 (set->srcu){.+.+}-{0:0}: [ 477.914737][T23037] __synchronize_srcu+0x96/0x390 [ 477.920304][T23037] elevator_switch+0x12b/0x5f0 [ 477.925613][T23037] elevator_change+0x2cd/0x450 [ 477.930921][T23037] elevator_set_default+0x1af/0x2b0 [ 477.936671][T23037] blk_register_queue+0x34e/0x3f0 [ 477.942335][T23037] __add_disk+0x677/0xd50 [ 477.947234][T23037] add_disk_fwnode+0xfc/0x480 [ 477.952456][T23037] nbd_dev_add+0x717/0xae0 [ 477.957430][T23037] nbd_init+0x168/0x1f0 [ 477.962131][T23037] do_one_initcall+0x1fb/0x820 [ 477.967441][T23037] do_initcall_level+0x104/0x190 [ 477.972926][T23037] do_initcalls+0x59/0xa0 [ 477.977826][T23037] kernel_init_freeable+0x334/0x4b0 [ 477.983650][T23037] kernel_init+0x1d/0x1d0 [ 477.988526][T23037] ret_from_fork+0x599/0xb30 [ 477.993674][T23037] ret_from_fork_asm+0x1a/0x30 [ 477.998987][T23037] [ 477.998987][T23037] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 478.006827][T23037] __lock_acquire+0x15a6/0x2cf0 [ 478.012220][T23037] lock_acquire+0x117/0x340 [ 478.017261][T23037] __mutex_lock+0x187/0x1350 [ 478.022391][T23037] elevator_change+0x1b4/0x450 [ 478.027696][T23037] elevator_set_none+0x98/0x110 [ 478.033089][T23037] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 478.039444][T23037] nbd_start_device+0x17f/0xb10 [ 478.044853][T23037] nbd_genl_connect+0x1353/0x1900 [ 478.050424][T23037] genl_family_rcv_msg_doit+0x215/0x300 [ 478.056524][T23037] genl_rcv_msg+0x60e/0x790 [ 478.061569][T23037] netlink_rcv_skb+0x208/0x470 [ 478.066880][T23037] genl_rcv+0x28/0x40 [ 478.071406][T23037] netlink_unicast+0x82f/0x9e0 [ 478.076705][T23037] netlink_sendmsg+0x805/0xb30 [ 478.082102][T23037] __sock_sendmsg+0x21c/0x270 [ 478.087335][T23037] ____sys_sendmsg+0x505/0x820 [ 478.092728][T23037] ___sys_sendmsg+0x21f/0x2a0 [ 478.098028][T23037] __x64_sys_sendmsg+0x19b/0x260 [ 478.103509][T23037] do_syscall_64+0xfa/0xf80 [ 478.108557][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.114993][T23037] [ 478.114993][T23037] other info that might help us debug this: [ 478.114993][T23037] [ 478.125255][T23037] Chain exists of: [ 478.125255][T23037] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 478.125255][T23037] [ 478.139015][T23037] Possible unsafe locking scenario: [ 478.139015][T23037] [ 478.146475][T23037] CPU0 CPU1 [ 478.151856][T23037] ---- ---- [ 478.157232][T23037] lock(&q->q_usage_counter(io)#53); [ 478.162643][T23037] lock(fs_reclaim); [ 478.169168][T23037] lock(&q->q_usage_counter(io)#53); [ 478.177088][T23037] lock(&q->elevator_lock); [ 478.181799][T23037] [ 478.181799][T23037] *** DEADLOCK *** [ 478.181799][T23037] [ 478.190052][T23037] 6 locks held by syz.1.4870/23037: [ 478.195268][T23037] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.203473][T23037] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 478.212542][T23037] #2: ffff888024d7c1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1a80 [ 478.223973][T23037] #3: ffff888024d7c0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1a80 [ 478.234972][T23037] #4: ffff88814233f2c0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 478.245716][T23037] #5: ffff88814233f2f8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x199/0x450 [ 478.256644][T23037] [ 478.256644][T23037] stack backtrace: [ 478.262599][T23037] CPU: 1 UID: 0 PID: 23037 Comm: syz.1.4870 Not tainted syzkaller #0 PREEMPT(full) [ 478.262628][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.262650][T23037] Call Trace: [ 478.262659][T23037] [ 478.262669][T23037] dump_stack_lvl+0x189/0x250 [ 478.262694][T23037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.262714][T23037] ? __pfx__printk+0x10/0x10 [ 478.262740][T23037] ? print_lock_name+0xde/0x100 [ 478.262767][T23037] print_circular_bug+0x2e2/0x300 [ 478.262791][T23037] check_noncircular+0x12e/0x150 [ 478.262816][T23037] __lock_acquire+0x15a6/0x2cf0 [ 478.262845][T23037] ? elevator_change+0x1b4/0x450 [ 478.262865][T23037] lock_acquire+0x117/0x340 [ 478.262880][T23037] ? elevator_change+0x1b4/0x450 [ 478.262903][T23037] ? work_grab_pending+0x44f/0x990 [ 478.262935][T23037] __mutex_lock+0x187/0x1350 [ 478.262954][T23037] ? elevator_change+0x1b4/0x450 [ 478.262978][T23037] ? enable_work+0x1b9/0x2b0 [ 478.262999][T23037] ? elevator_change+0x1b4/0x450 [ 478.263020][T23037] ? enable_work+0x21a/0x2b0 [ 478.263039][T23037] ? queue_hctx+0x1e/0x240 [ 478.263056][T23037] ? __pfx___mutex_lock+0x10/0x10 [ 478.263079][T23037] ? __cancel_work_sync+0xf7/0x110 [ 478.263100][T23037] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 478.263125][T23037] elevator_change+0x1b4/0x450 [ 478.263150][T23037] elevator_set_none+0x98/0x110 [ 478.263172][T23037] ? __pfx_elevator_set_none+0x10/0x10 [ 478.263196][T23037] ? xa_load+0x1ea/0x210 [ 478.263217][T23037] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 478.263249][T23037] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 478.263269][T23037] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 478.263300][T23037] ? sysfs_add_file_mode_ns+0x259/0x300 [ 478.263330][T23037] nbd_start_device+0x17f/0xb10 [ 478.263359][T23037] ? device_create_file+0xf4/0x1b0 [ 478.263387][T23037] nbd_genl_connect+0x1353/0x1900 [ 478.263416][T23037] ? __pfx_nbd_genl_connect+0x10/0x10 [ 478.263443][T23037] ? rcu_is_watching+0x15/0xb0 [ 478.263466][T23037] ? __nla_parse+0x40/0x60 [ 478.263486][T23037] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 478.263508][T23037] genl_family_rcv_msg_doit+0x215/0x300 [ 478.263527][T23037] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.263549][T23037] ? __lock_acquire+0x6b6/0x2cf0 [ 478.263570][T23037] genl_rcv_msg+0x60e/0x790 [ 478.263588][T23037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.263603][T23037] ? __pfx_nbd_genl_connect+0x10/0x10 [ 478.263633][T23037] netlink_rcv_skb+0x208/0x470 [ 478.263655][T23037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.263673][T23037] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.263702][T23037] ? down_read+0x274/0x2e0 [ 478.263720][T23037] ? genl_rcv+0xd/0x40 [ 478.263735][T23037] genl_rcv+0x28/0x40 [ 478.263747][T23037] netlink_unicast+0x82f/0x9e0 [ 478.263771][T23037] ? __pfx_netlink_unicast+0x10/0x10 [ 478.263789][T23037] ? plist_check_list+0x2f4/0x310 [ 478.263812][T23037] ? netlink_sendmsg+0x642/0xb30 [ 478.263833][T23037] ? skb_put+0x11b/0x210 [ 478.263853][T23037] netlink_sendmsg+0x805/0xb30 [ 478.263879][T23037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.263903][T23037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 478.263931][T23037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.263946][T23037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.263969][T23037] __sock_sendmsg+0x21c/0x270 [ 478.263996][T23037] ____sys_sendmsg+0x505/0x820 [ 478.264019][T23037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.264043][T23037] ? import_iovec+0x74/0xa0 [ 478.264065][T23037] ___sys_sendmsg+0x21f/0x2a0 [ 478.264086][T23037] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.264109][T23037] ? futex_wait+0x285/0x360 [ 478.264145][T23037] ? __fget_files+0x2a/0x420 [ 478.264166][T23037] ? __fget_files+0x3a0/0x420 [ 478.264192][T23037] __x64_sys_sendmsg+0x19b/0x260 [ 478.264213][T23037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.264241][T23037] ? do_syscall_64+0xbe/0xf80 [ 478.264261][T23037] do_syscall_64+0xfa/0xf80 [ 478.264278][T23037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.264295][T23037] ? clear_bhb_loop+0x60/0xb0 [ 478.264314][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.264334][T23037] RIP: 0033:0x7f2484f8f749 [ 478.264353][T23037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.264369][T23037] RSP: 002b:00007f2485e67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.264386][T23037] RAX: ffffffffffffffda RBX: 00007f24851e5fa0 RCX: 00007f2484f8f749 [ 478.264400][T23037] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 478.264410][T23037] RBP: 00007f2485013f91 R08: 0000000000000000 R09: 0000000000000000 [ 478.264421][T23037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.264431][T23037] R13: 00007f24851e6038 R14: 00007f24851e5fa0 R15: 00007fff00a87478 [ 478.264452][T23037] [ 478.806253][ T5153] Bluetooth: hci3: command 0x0405 tx timeout [ 478.898112][ T5153] block nbd4: Receive control failed (result -32) [ 478.898161][ T5838] block nbd4: Receive control failed (result -32) [ 478.898193][ T5845] block nbd4: Receive control failed (result -32) [ 478.904681][ T52] block nbd4: Receive control failed (result -32) [ 478.915371][ T5845] block nbd4: Receive control failed (result -32) [ 478.931491][ T5845] block nbd4: Receive control failed (result -32) [ 478.938151][ T5845] block nbd4: Receive control failed (result -32) [ 478.944824][ T5845] block nbd4: Receive control failed (result -32) [ 479.416092][ T2025] net_ratelimit: 19 callbacks suppressed [ 479.416116][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 479.536157][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 479.646023][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 479.756068][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 479.866017][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 479.976046][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 480.096595][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 480.206113][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 480.316128][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 480.426193][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 484.526089][ T354] net_ratelimit: 36 callbacks suppressed [ 484.526113][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 484.645985][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 484.755943][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 484.866050][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 484.976801][ T354] bond5: (slave gretap3): failed to get link speed/duplex [ 485.086083][ T4487] bond5: (slave gretap3): failed to get link speed/duplex [ 485.196201][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 485.306044][ T2025] bond5: (slave gretap3): failed to get link speed/duplex [ 485.426021][ T1150] bond5: (slave gretap3): failed to get link speed/duplex [ 485.536018][ T12] bond5: (slave gretap3): failed to get link speed/duplex [ 486.330285][ T25] block nbd1: Possible stuck request ffff888024e60000: control (read@0,1024B). Runtime 120 seconds [ 486.341700][ T25] block nbd1: Possible stuck request ffff888024e60200: control (read@1024,1024B). Runtime 120 seconds [ 486.352920][ T25] block nbd1: Possible stuck request ffff888024e60400: control (read@2048,1024B). Runtime 120 seconds [ 486.364040][ T25] block nbd1: Possible stuck request ffff888024e60600: control (read@3072,1024B). Runtime 120 seconds