last executing test programs: 2.591560848s ago: executing program 2 (id=5259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c054}, 0x20) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xa20245ab6159b2b}, 0x4040800) 2.367593912s ago: executing program 2 (id=5263): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8000081"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x50}]}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20a, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='macvtap0\x00', 0x40, 0x4}) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmmsg(r3, &(0x7f0000005d00)=[{{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x44080) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r0, @ANYBLOB="37964d9f83ff6f5fa3e1cfc905663e325460d1", @ANYRESOCT=r0, @ANYRESOCT=r3], 0x6) 2.201765492s ago: executing program 1 (id=5266): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000001c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x2d, 0xff, 0xf}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$isdn(0x22, 0x3, 0x21) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="ef81c943e0658080e3138b920139335e2282b54e3503b26d3fda8dca429e09805138b1ae956934168b929db721711438b67d0489cd81344235a734f24ed3489be5c6c5835daf87e8603d7e01b75c420dc3f49a0373ef42494d4977a44d4cf191568acb65e24b5e7119c1c5d7033f89ae21e4b910ca32a0025773624138fb827b445fd83df02849707bd2e97b3d3864a97eab265fa9daf520441cf5974713cf65ccec5d515cfeaeca474c8dfb1c78bce885154ff2f707eb64aa8abf025baddb281e9a3fc06c5af950c64e78ba5f4085828ad31dbb220f786b4e98f1c9c835ca267f8fc2ca42ffbc8223444f67a153b16fd50292", 0xf3}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f00000002c0)="e62343c9360ee01e77768cf6252dbe12161de54fece6a9fdb32b9c573d1901cbee9f64c64bfb13766e734f330f1483dbca3dfdefbe6c7f15bff4eed8fe4ad32756b5120db11edf326ba3043d91560e89bdb432636df3621c249cc068f9dbb7ae6b7cb5bd16da7a6545e01a37c76587dafe77b2e75e13f8fd13907b08b697256505eed40aedaa1f70ceb3ec14719a9c9a687b2b1f4d5d4e24e3573aaa1bb51518d3334de72d76881eed6fdeb85bb676d1", 0xb0}, {&(0x7f00000005c0)="120ce1b35c8262fac59fc53f3561e1d73569bb9e5fbcb6f1a7df5632be3a9475fb4ac4b422da3d251279c3fa46d1e9683f54af90ee216ae018ba2084792292017821ef1eddde86ee7ca997", 0x4b}, {&(0x7f0000000640)="17a7e4726168af0ad889a026a4bc2326bb031362c0115f8604e76db409d33f87946c1b3ccf6b9677f78f1394e9c66bf120a33b5f5537c5fcafb5f38d0dfe58fb194402319c4eae89fb6d0481955759d37f165ece2297e8b0ac3c24395f0eb9199fb0541a1e6baff0791b7309788c676d86d202f0a31daee10cb671f8101edb8a5d2ba0586620d4859920b0f347ee19ff7043d483c66ace97c52d4ecff30543889e19de0199", 0xa5}, {&(0x7f0000000000)="703de6aad28550d78b02e99ec5718ac0e64c6ac2491e", 0x16}], 0x6, &(0x7f0000000080)=[@timestamping={{0x14}}], 0x18}, 0x0) 1.939527315s ago: executing program 3 (id=5267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0xffffffffffffff24, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040044) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) 1.939106755s ago: executing program 1 (id=5268): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) (async) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000000)=@l2={0x1f, 0x5c9, @none, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="0142571f0494296a4db404e514", 0xd}], 0x1, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x36}}, @mark={{0x14, 0x1, 0x24, 0xd}}], 0x48}, 0x0) 1.922444497s ago: executing program 2 (id=5269): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) poll(&(0x7f0000000400)=[{r2, 0x40}], 0x1, 0x3) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2b, 'cpuset'}, {0x2b, 'pids'}, {0x2b, 'freezer'}]}, 0x29) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffe, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.840611151s ago: executing program 4 (id=5270): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x1a, 0x3, 0x7) 1.712696386s ago: executing program 3 (id=5272): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x6f7042ba49d8091a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0) preadv(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x55f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x90) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001d000bcc000000000000000007000000c7"], 0x1c}}, 0x0) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 1.655775271s ago: executing program 1 (id=5273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=0x1, 0x2) shutdown(r0, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@empty, 0x0}, &(0x7f0000000200)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x1d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c2ab10000040042800c00018006000600843b0000100002800c0016"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000400000000000000000000000000000000900000000000000006851522cdc2f0067c8c5e6df64a68f302a616ccfbeb9c53043e5d540e610b58b74de1b50db66bc028675c98275de0d105bb2b48e15dd39efae99704a70467b6195ba1682eb58c9914706cd4ea35fa4cf3e0b9cb86e4d0cda4edbeed3bc0d0723d6dbc06fca06813e82912a7029a3b66b93efa846b908c31c9a3fc282258727bc25ebb6fac44e16aecdc1264eded4b1857964a50728f45ce22a7e15d9e0f8fc1077ce86160d5a2eecc2c03d220e98b17ed40ecb69a0f59aa4b673a01e699498f61553512de9df0a6e4684b75af80a349fac0e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r9, &(0x7f0000000340)='^'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x8fa, 0x61, r5, 0xfff, '\x00', r2, r3, 0x2, 0x5, 0x0, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x7, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x8006}]}, 0x10) sendto(r11, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xce, &(0x7f0000000340)=""/206, 0x41100, 0x10, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xa, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r6, r0, r9, 0xffffffffffffffff, r10, r13], &(0x7f0000000700)=[{0x3, 0x1, 0xa, 0xc}, {0x2, 0x4, 0xffffffff}, {0x1, 0x5, 0x4, 0x5}, {0x1, 0x3, 0x10, 0xa}, {0x2, 0x2, 0xe, 0x4}, {0x3, 0x4, 0x8, 0x7}, {0x1, 0x5, 0xa, 0x5}], 0x10, 0x511}, 0x94) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @local, 0x9}, 0x1c) 1.616139021s ago: executing program 4 (id=5274): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x400c885) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x3, 0x4) 1.50325401s ago: executing program 2 (id=5276): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2040) (async) clock_gettime(0x3, &(0x7f0000000540)) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async, rerun: 64) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f00000001c0)=0x3, 0x56) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20}, 0x10}, 0x94) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000040)={0x7d, 0xffffffff, 0x8}, 0xc) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e044", 0x2}], 0x1}}], 0x1, 0x2000c0c0) 1.446240938s ago: executing program 4 (id=5277): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.38747415s ago: executing program 1 (id=5278): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x10000000}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.312628216s ago: executing program 4 (id=5279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x3c, r4, 0xb97534d5fe9704cf, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2ea}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x48852) 1.219568417s ago: executing program 1 (id=5280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 1.163449612s ago: executing program 2 (id=5281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x80, 0x7800, 0x1, 0x80, {{0x17, 0x4, 0x2, 0x15, 0x5c, 0x66, 0x0, 0xfd, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@ssrr={0x89, 0x1b, 0xcc, [@dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, @multicast2, @local]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "bba152336126"}]}, @rr={0x7, 0xf, 0x7c, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0xd, "9966d3b3ad563daac6ed77"}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xff03, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2f, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6f}], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r4}, 0x94) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x842}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 1.148359378s ago: executing program 0 (id=5282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 1.078720923s ago: executing program 4 (id=5283): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000024000100000000000000000002007be6"], 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000a3cfb0bc1c008d3ae89d087a4e7d4a378c51d30e579382bd5ee4f28bb7ab1073cb1667f90a21d085db107c816ba9363902f6723a98eaddd5", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf256b0000000a0006000802110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x84) (async) r3 = accept4(r0, &(0x7f0000000340)=@rc={0x1f, @none}, &(0x7f00000003c0)=0x80, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000010) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r6) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r9) splice(r10, 0x0, r9, 0x0, 0x8000, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}}, 0x44) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r10, &(0x7f0000000200)="9929440a9d5808c26a3bd0a2f7244657cac1548b10f852a8abd8d20ceef87e8f4b3b2165", &(0x7f0000000240)=""/61}, 0x20) (async) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf25010000000800030007000000080004000400000005000500030000000500060001000000"], 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) 959.960557ms ago: executing program 0 (id=5284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$inet6(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x8c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x20040044) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r8, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES8=r4, @ANYRESOCT=r5, @ANYRES16=r6], 0x8c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4c884) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="09000000010000", 0x7) 959.035123ms ago: executing program 1 (id=5285): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="b31654f65e", 0x5}], 0x1}, 0x81) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500005800000000002f90780000dd4cdc9f0001248081000000000010000800000086dd080088be81000004100000000100000000000000080022eb0000000020000000120000000000000000000000080065580000000036aff68e389f5a5a7a6d8083c893f6d04325997459849454995594d4378f9183eb397083e93c40d68796727bdb7d04aeec11da09d1089d328e5f1d8b086f3300b9edbc44174415c1b59b8391cfd1aff2f30b72bf5cda4d8a4cca54b4d780e9fe0f6750f7552051b1b2076e35e854f1ccdf6056597d6054e9afe8ac3b58142f29035b65f3a8257a2dadf8acbd3a"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 880.293075ms ago: executing program 4 (id=5286): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1000}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x400, 0x70bd26, 0x25d7dbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000884) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg0\x00'}) (rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000000c0)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14}}, 0x6c}}, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x604, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44005}, 0x20000000) (rerun: 64) 704.289092ms ago: executing program 0 (id=5287): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 539.483134ms ago: executing program 3 (id=5288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xefffffffffffffff}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 515.83589ms ago: executing program 0 (id=5289): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r3, 0x800442d4, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x4}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x24000814) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRESDEC=r4, @ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48090) 384.668507ms ago: executing program 3 (id=5290): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x5c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000800000004001680"], 0x3c}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f00000002c0)={{r0}, "9cb81664dbfae0d5b2ffc7cff31a1859990a034250df874e14db85dc788bb2bdeea8660b0e80c30b9bbd6d894719cfd47a12c1b5f2b8d5298697f93a2bfc99f29d3cc0c0996971aecc0f90b449c645c6596c1c21ddeabf08366c32f2a552ed70eb29bbb2d057ed0e138146844b6565662546241f370725e97af47b51bd453db9cdabdd50389ebbe63bb6b2fbbc387006690e5b534fe87b62fb4177b2ce0269a1fd698894ab38c6778b0d90878e4e577833a28e94c5a5c01e4d6f57dacc418b0de558b3b1fc90a14a3395059e9b1cd53446a8f86ded49d5735b1c03f352615803c7b5b3b10886a04cd18293a26a679bf9222c4d26772d940157deac63e7956489eef0a95477993ffe5fd0eab91f39a8586aa198936054b845c2e088e970da5199543f3f62581861c38dfe6ac52aeb96ff3e6e14af140a61ddc8683da5fe8deb1d4e26a970cd467cfc00f5dda7f0c5252c53a67afa40f68bcaf3af19686320429e84233b9142257fbd2d76df9212287aac1e77b0864593c4fd7d44b9f87db103352fb7c577b58c13b169b3d4d7eed166db6310010699952d53530c34815cacca5732a18d890c3e5b2b4ded317a747cd49de411b0b77fcf409f27c0050081b8edd1a559519df003f0f0a200112af5dd5c76aec268590579ed334bbc0c4cde7c6ddf5f31d9db219ed277eb72b0f3f9b3feeda301471b73c65015ddca7cc3d2693ce1b9c62a84f61ce9610207f8d932d4ce7c3a78fa8622dc2f497214280a2df36e36a3c42ba2a6b6ed3a5f5b0540ad921e2aeb896930048d4aacf7d2857ab703c9439a96322aecad067bb417b1f5392302224f7efef27150de5361b1a412cbf671c1e46a0b55f420cc3dcaba7f0d827b79dca988658b71ca749499b253581dc5e669548483bf06089f60bbeacd01124d867d47f06db8308ab6994962edffd388c3041724d19b6f0b43f963e4c07e48a17224c44ec36b74cb4691987fdfd7cc62edc0c69fc3810f6cdd53216e455165e71e1318ca7989a416ed6be51d52cf6f33972a218b12a1f7c05f28eafdb8c9844e83d7eeba8529c49c00ceb962257ff56255fc572b96f3533a3ddc236e510b112ae17084485bef2ab63a37d15ae1c41bbde2b4d4ee2af616c42763df78b3c4260227b4df9c3118eb7b2a4957634f57a20695e5e09f3a72b6a5da1b2e8a74f0e153fceb70e8bca95780af5d59607b988b9dacf113f8d3758bb14f3e234b6bc44c734fdb637cfe6caaad668e1d52a4efe7d315cd1ce9eabea4d38d029204787d43b4c425d8693398ca67e667c8f990cc8efd6ad4a3f1613affad86b68e270adec4f9b417ab911e1191fad637a97d4c249e8b40f647ffe00691f38974087711f2ff470e0b3877250914d36a5b97db67c202691c4ecbde412e15b7c7561ebaf441a0d60efb3b2292ac362414b3351e7f14764fa6b5787c4491671fc74dbbeadc9afcc9ff390e08e315c294da659c286fd2c4fffc87cad6e54bf21aa7dc38e385d7a2773390773d482f7003f7721fecc4914094e286e6b87753b6bef315bb0856490ba0f338e627baae3807bab8e6ab4d47591e35b6b29a6db3c541e2b164523aad6c5a1ae76a0d7ef652bbfac2524c5698b7bba9f39f8e1fa42397e7c5ea2393528205fe01578619ee4cee7f85d4187e30800df85fbc0a941f45d0e39b7f7aeec9f09120b953a1e3d28bdd00e7673339d6d536bb9881b6e712325d38a0f2288acf9f1767ea7fad8b52d0058823275bcf2fb7e5b16390bb362c12b434264565dc790f88e6643e389772b9cc5110b90bbac8c964db261f0cbe01b7791e7897f59cc7b5e8736b043be7b85daeb160cd9bc1a9fce98ac6d9d189f282a0e8fbd3e179d5b9e3121551435f8961df858dfa8ab3f50a3aa1551c89df40f0cf2ce16fd8b649dfc36cd0416be13cefb78cac78e1874cab619d4a647c1b0ee976e3de2737b75f713b8fb9fe0d89976aff78b40c4517556b4e0fefd5940394ba791fd93a05107d9bde70888fd1a70b204de03f293a7a355917ebdea092f8d093270aad0f48085f837df8684879b3eba0f42d3dfbfb1279679c8233b226166e83da1b2433d2f7864924121f15802291c099ec56f3961872a3b5e584d3696b2f255e081a279fd913e47c0a89cdc3530093f81bfd1fd6326a777a5d89559f73961f4082df37c3ea7fc17d7b86b83e1e4ffc8eb0c8f6e41a3b52f5dfbb6ae54178ace722bad7de8dc0f10bf5c23dffda9ec6edfb80d63aa47c3ed631ddf3937275412936a347eecb53cb1936dd78ae35156504826100eeec2c998679e44d85fd495bb7044796557b8416ab9aab534792dda2c3db800696097b5e6ec2598fe4597cb112dcb197911db9cd9fdf862d1dc47398b1ec3fc6ff9651127d65564107255ec913629c487f8386d64c50d1065a4030d84edff0595d8f627eb933aa03b52d782d83a6918f36a97fd48184ec40301c692a7e9c6d718a6bae41f317b2ad34244529a85ed67986e99a78a1b63c0aed58b81ea4e3dc33a5cf5920dcdcc69361e398d176939b770e9f22fb9734b02b3871fe731f28ea137199bfb57d16fd3da05151ad352ea2f180b4b952b9df5e68f637127e350a4a16a70e44a6a26e857e742bec52fa1341e5b2b4b405243a6f168a052c41923aefaf01b795b8a74056e936b0ed8f837d1a579db5a1150df17e20343e5af70d17d2e358ff776da071737cdc39157e8abfae62806bc35e7083139def6dbb5c37a0d63b4a8627f46ef4fb0f0c5db443c4925b177c4876157e4ea6c12243141555bfdb7ecfcb2ee77397b44e21682aa6bc2c062710bc019d0e7232b88c4d9878a637b2d7a68b14cde3705a8144c5d6e24958d6738107068cb17ca783554045930ae78710f4bc42b2637f56ce02beecdf2852f3253c0553d619452440474d848cfeb38f96898807bf7ecae6d741a7f5d98e445cbd0af8e3e4c79c2b7d5f3111ea998b21390af3576f383db3c8d4265d70874f32e9efbaf2c1b12c3c49d175bee56df73317171d2b2f62ae900f8920246cc47272b399807912342df8940886ac7b404c73ff71d80797f4c85c6462adeb411ac7efb07019f0826362af73577a00027a0b95e907fdaa99904e76a61064afe492dbe7c5079e52412a4b6ca94522c2b8c626934a03a8e2fd8e629b2cbe6b9fcc1a9d5630f954e1d9821feafbe1ff0bed813c339d318b1b6f5f6802161109ffaa5557ce44f46058b4ac699e7745b85d88ce881ed50ad21984f208bdaea9b30958f6a72f07937a928f033585b00f32963abf19ab51b49e840c0ac348da6dbf7b07339043c53f085c88436b0b17f3abd27375fcb5e629b839d6fc794a60a2a55bb9497004a823a56cf8257447a1208c4402546383d8b949dbce9d78bf9d2d6a463579096f41b73919c26313d9c98187944494ae85e44d5935f629316a98e55a33e1aae33df4b32b2bc1775330539c742c204c64dd96beb5bf93f1e8e0249e44ccfa16bcf1489dbb02cfd4006401ac3ca6411e828ae97c9c56f9828035a35933b14636e07e30ffa5bdefef0d83d06b1963ace4ec80ae3071c1814bf69bc735f67d96ac309fb409f5ea8cf27306f184cc65364a2b9319cb1c55c7a9a779aad5f9fb221a2a9f9a1e80e898d299cadff1bec85f17d125ffd2c2620627b784a61939d95267c641bb0eb63b927f3d7cd4270538213ee567ea5154d63ff99dec4fdcca8e1bcb4c7037ee2f45eb52a3fd9fa0e73965a1d180f8646657d0787b424a5f0d6c6d544889bfde0c20f413c2b806ebb1f745e909a0f8c9bef9978d4aea1b7077602389f06c8fdc303efc9354afcacaf745cd6dcb1d48e70a9a63ff2b1c0579f9e5b3707f4ecd51b07671bf2d32b29a5d2a3af249d40865c8ea647d640fee22d1a86ab39135246af5af8a277a153e2906aef193a9dfef08073cb2b74b71e57d575b7e74d39df1c820f425e4fa69f34135f9f8a14219a6b1b38f7ada691a165633b0f81132f19ab81d5e7f131650becc98b2c149ae74a243007e77fa6ec5884b908ae3fd6e021e53b49ce42512b366a524275b8f9b63734729259afb82538dde27b08d780d2a5c4aaa0983a8981532073a525da4ea227a0a07b437f31052a652a93f2f0cd1d91473f7f65b05fd2c527df5482c8700993e5d62192ab85b9c25c666b92ad52dcee00125473c029861dec643ead6203ed7954716063a76ddb5527025b18e3d717440ed5303bfd747cc3c92befb3a17f45707162c7f14e97fcb5f1ce093a443618a8c427e8b4e78572d9176b6163d193875827e9fecd8bc9113fb985ce858d5d19d921b33c9b405e89e0e5aaa78a7e3516a5ca687b3e50ec51f07380d3010b4928ab762b382647a3f6ac652fd75cf7a9c1c6d360f17e00049b9aaf17edfe9a2c7de744700ef6d847e3e31a2af3d6fcf7e1d32901536e7dac1d9e95d23bad48b2f4f6c6831b5180e0174d859445dfbb90b27f578a071b22a2142eb2c035d6d87438440fbf2a087d1bdef44641b09570031d1acd6d6fd1e138aa4468b5648aff2c8bca7f499f599683430c42aff88f8103d172034d86541daeee73ea9545eb6239075c5c58d0159de737d553aa98b5260bd6ad9a745237b3b1a912b49ff2c5082a0b33514362193d6a186b71113267cade45a544b3c15199862739e08d7da9f2e85c851b2bc9c7f2d6c5bdef2dd295524f219859db696c8df22ed18073f5ee926321fbb0d1df973134078b9646248235a899bf0804d1800c88a2d8d98fb672860b0c08663e5993e5b1687e2b0a06f729282b7e77c84b3a7b9f663bc89fd2eb1436d6fe552843a1be243b51b1e571c5b16a5d50020f8ac90812817cb0c0a3d6f2daaa6df13d61f85c87be00f84dfc4a71bfce6c74179699af596463bd5effe06c60250246072ba2330c6f04a6bb3b1d84a563c03d11a34f11cbcc10febdb8d00053a9962ca3e5b0dd9ef21ef79fbb102a1450a80cd79c5f5693019cfff7ad8972439d2ded09da02979686c0e21912bb3501bde11982e61d9ee73c74d1ecb3efbaa7cc45c7a927818b1fa4139e1f3adfade051a1067b9f6125de2becc04a46c67c6993306d9a0766e10ac5e80d6037975dd7e3935e88c32e2f2dfa0959af7068c85e515de6f0b9c9057f61ba343ae388061d5323f2550be56cf6e11203f98f945432f14d31a4539b88f5804bd6601a51203adc9166d066a49e0014bed284f67d1eea15c38b3a25c27cfecee6ac881dab80b4918ddee2ab620ce8126d28d63c8676efa702ec831e7ed1834c8e8eb125ece85e335e03a965a95e40aaf4d6d25873c0799c2a534863242f290941b5348d6460c2c2f11023cf0852f1cdb4df2d7693946258606726d0096b259747eeb09d1d8c9f5e5a9b4cebbb3b41daef8656a411e7c0cc3d3aa8ec8c90e1f37f24ca6c34e38c19cf934dfd452079938ea8e40a9d08a54cadf9d6913d586da38f8758ff6cd253172da4bfc1cb189a2d7a87f0254fb1690b44e6c0a1f08847896b1a9c074b470df39601a852434f3ca95237b1e4e67062927e5fbc2d0ebc32b4d04fe69ed1e375db4b289b10e18db7d700cfdc4eacc442269d63466797d8959bab0507172c15a8992dc85cba225b1fd79876530aa3a68ccd07cc2886812365663d673fdd65ae926e1edb37bd8a0e47cf051e619c3a13bf5c8886575b13cd99925cea48a819ee1dd9ae39de117b36a0a5ba12590b803f1b30c42e822c1b801102b5f2cb77e84352dedc880db07f62df995496dea1098db1a19461c6ef1ec7aa5671aac16428c74b810"}) 203.630016ms ago: executing program 0 (id=5291): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000180)={'wlan1\x00', {0x2, 0x0, @private}}) ioctl$FICLONE(r1, 0x40049409, r0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@bcast, @netrom, @bcast, @netrom, @rose, @netrom, @bcast, @null]}, &(0x7f0000000240)=0x48) sendto$netrom(r4, &(0x7f0000000280)="4bd8f9f198f8c9938d310f4fe31994492a45a2f2a320bb2cdc6d8944d4414309e6267e738fa5b2cc883eadfa9df5faadf66ec03539d9d66f1ce435380a214466eb7a99fc45ae9ce50f69443c565f99b07e5e349018b1995c2592154d2a8ac3468f9fc2535e579896f5bb52bfccddb13234ac5ace50aa39991e9a781e7253ecc07d88cecb80036748a45f2047b8160c28f66eb28a3e513e61358a819bb70116bb87ec704f038cc1d33db916e9bdd16e2c4291bc6989eadd46c22cf337163703f587a33f527e5066a82a0d0fe011b9", 0xce, 0x50, &(0x7f0000000380)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) 202.801369ms ago: executing program 2 (id=5292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x800, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 197.020314ms ago: executing program 3 (id=5293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000140)={0x0, 0x0, 0x2}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x30, r2, 0xb97534d5fe9704cf, 0xffffffff, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x375}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x4, 0xb5, 0x2ea}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c1}, 0x48852) 27.503201ms ago: executing program 0 (id=5294): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="19fffff4f21fefc12d50c4bdc6bc81e46e95ddc8a7d7d937ad5b98778fb55ba0c8d54864b51723c09299c48d27495dbfc918a2da77eeb66c70e56fee304dfeebedf08e75e6e305d40b0131a6e383d7b9c608a5d6d3dc74dc16d6a63cdc25d8c812d7e660e8da8715c94c7dce68864bc4fbc11f8e7aa18cea8ab5bf7b8bf5ada940a1fb5d728b69607fee8b74d2152420060000009ee609e3824e6603c14691456e660c85", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=5295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffcb, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x4040) kernel console output (not intermixed with test programs): d length. [ 409.244803][T17336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'. [ 409.289418][ T7122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.323099][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3145'. [ 409.341452][ T7122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.712095][T17354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3151'. [ 409.941038][T10903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.965002][T10903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.137100][T17370] IPv6: sit1: Disabled Multicast RS [ 410.158120][T17370] sit1: entered allmulticast mode [ 410.296030][T17375] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3155'. [ 410.313055][T10911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.371846][T10911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.593276][T17390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.657346][T17390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3161'. [ 410.680785][T17394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.066332][T17405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3166'. [ 411.079768][T17408] netlink: 'syz.4.3165': attribute type 9 has an invalid length. [ 411.110708][T17402] netlink: 'syz.4.3165': attribute type 9 has an invalid length. [ 412.030490][T17434] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3171'. [ 412.057785][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 412.071925][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 412.088319][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 412.103044][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 412.114694][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.141287][T17424] macvlan0 (unregistering): left promiscuous mode [ 412.573344][T17437] lo speed is unknown, defaulting to 1000 [ 412.945852][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 413.021232][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 413.137371][T17437] chnl_net:caif_netlink_parms(): no params data found [ 413.379204][T17487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3183'. [ 413.413864][T17488] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3184'. [ 413.451195][T17437] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.469194][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.476962][T17437] bridge_slave_0: entered allmulticast mode [ 413.486336][T17437] bridge_slave_0: entered promiscuous mode [ 413.500300][T17437] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.507728][T17437] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.515332][T17437] bridge_slave_1: entered allmulticast mode [ 413.523792][T17437] bridge_slave_1: entered promiscuous mode [ 413.681872][T17437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.751979][T17437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.753728][T17494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3185'. [ 413.880220][T17497] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3186'. [ 413.909265][T17497] openvswitch: netlink: Flow key attr not present in new flow. [ 413.954070][T17437] team0: Port device team_slave_0 added [ 413.983439][T17498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.025532][T17437] team0: Port device team_slave_1 added [ 414.170079][ T5877] Bluetooth: hci2: command tx timeout [ 414.239635][T17437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.255535][T17437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.288151][T17437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.321751][T17437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.341469][T17437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.431117][T17437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.474657][T17516] netlink: 'syz.1.3194': attribute type 33 has an invalid length. [ 414.673715][T17437] hsr_slave_0: entered promiscuous mode [ 414.691497][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'. [ 414.701111][T17437] hsr_slave_1: entered promiscuous mode [ 414.707638][T17437] debugfs: 'hsr0' already exists in 'hsr' [ 414.718939][T17437] Cannot create hsr debugfs directory [ 414.871771][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 415.921250][T17557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.177120][T17580] netlink: 'syz.4.3209': attribute type 10 has an invalid length. [ 416.251008][ T5877] Bluetooth: hci2: command tx timeout [ 416.272030][T17437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.292129][T17437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.315004][T17584] __nla_validate_parse: 2 callbacks suppressed [ 416.315024][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 416.375568][T17437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.421035][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 416.439878][T17437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.439990][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'. [ 416.480233][T17588] ip6gre1: entered allmulticast mode [ 416.607107][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3214'. [ 416.616233][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3214'. [ 416.765205][T17437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.809170][T17437] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.853838][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.861186][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.973397][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.980719][ T9453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.075024][T17614] netlink: 'syz.3.3219': attribute type 24 has an invalid length. [ 417.216935][T17620] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 417.246411][T17620] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3220'. [ 417.377665][T17628] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 417.469831][T17628] bond9: entered promiscuous mode [ 417.475483][T17628] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.541073][T17625] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3222'. [ 417.567733][T17630] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.583307][T17630] bond9: (slave bond10): making interface the new active one [ 417.610169][T17630] bond10: entered promiscuous mode [ 417.622489][T17630] bond9: (slave bond10): Enslaving as an active interface with an up link [ 417.753142][T17437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.809040][T17641] netem: incorrect ge model size [ 417.825170][T17641] netem: change failed [ 417.867276][T17641] netlink: 'syz.2.3224': attribute type 11 has an invalid length. [ 417.911239][T17644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3225'. [ 417.947155][T17644] netlink: 'syz.3.3225': attribute type 7 has an invalid length. [ 417.965308][T17437] veth0_vlan: entered promiscuous mode [ 417.971373][T17644] netlink: 'syz.3.3225': attribute type 8 has an invalid length. [ 418.010018][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 418.035918][T17437] veth1_vlan: entered promiscuous mode [ 418.206350][T17656] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 418.254748][T17437] veth0_macvtap: entered promiscuous mode [ 418.329615][ T5877] Bluetooth: hci2: command tx timeout [ 418.413451][T17656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3230'. [ 418.424209][T17656] bond11: entered promiscuous mode [ 418.430784][T17656] bond11: entered allmulticast mode [ 418.437692][T17656] 8021q: adding VLAN 0 to HW filter on device bond11 [ 418.471365][T17437] veth1_macvtap: entered promiscuous mode [ 418.480533][T17668] netlink: zone id is out of range [ 418.486120][T17668] netlink: zone id is out of range [ 418.506146][T17668] netlink: zone id is out of range [ 418.512369][T17668] netlink: zone id is out of range [ 418.517534][T17668] netlink: zone id is out of range [ 418.523757][T17668] netlink: get zone limit has 8 unknown bytes [ 418.545737][T17662] bond12 (unregistering): Released all slaves [ 418.720708][T17437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.764133][T17437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.000535][T17686] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 419.045930][ T7122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.085021][ T7122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.118323][ T7122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.160191][T10903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.423057][T17701] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 419.593645][T17701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.672778][T17704] bond1: (slave ip6erspan0): making interface the new active one [ 419.706549][T17704] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 419.773540][T10903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.800660][T10903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.050886][T10910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.112460][T10910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.142346][T17729] netlink: 'syz.3.3250': attribute type 19 has an invalid length. [ 420.234528][ T1110] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.292634][ T1110] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.367678][ T1110] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.388027][ T1110] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.409348][ T5873] Bluetooth: hci2: command tx timeout [ 420.415176][T17734] vlan1: entered promiscuous mode [ 420.421380][T17734] bridge0: entered promiscuous mode [ 421.281847][T17776] bridge0: port 2(syz_tun) entered blocking state [ 421.298820][T17776] bridge0: port 2(syz_tun) entered disabled state [ 421.314545][T17776] syz_tun: entered allmulticast mode [ 421.344709][T17776] syz_tun: entered promiscuous mode [ 421.364578][T17776] bridge0: port 2(syz_tun) entered blocking state [ 421.372514][T17776] bridge0: port 2(syz_tun) entered forwarding state [ 421.647866][ T30] audit: type=1107 audit(1758216724.155:4): pid=17784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 421.648420][ T30] audit: type=1107 audit(1758216724.155:5): pid=17784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 421.996820][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.133583][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.142846][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.165321][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.179693][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.314649][T17793] lo speed is unknown, defaulting to 1000 [ 422.336212][T17780] infiniband syz1: set active [ 422.342221][T17780] infiniband syz1: added syz_tun [ 422.347986][T17780] syz1: rxe_create_cq: returned err = -12 [ 422.354382][T17780] infiniband syz1: Couldn't create ib_mad CQ [ 422.361140][T17780] infiniband syz1: Couldn't open port 1 [ 422.414274][T17780] RDS/IB: syz1: added [ 422.418378][T17780] smc: adding ib device syz1 with port count 1 [ 422.459455][T17780] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 422.490207][ T5186] Bluetooth: hci2: command 0x0405 tx timeout [ 422.502441][T17807] __nla_validate_parse: 9 callbacks suppressed [ 422.502460][T17807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3271'. [ 422.699771][T17816] validate_nla: 2 callbacks suppressed [ 422.699792][T17816] netlink: 'syz.1.3273': attribute type 4 has an invalid length. [ 422.767335][T17817] netlink: 'syz.1.3273': attribute type 4 has an invalid length. [ 422.850129][T17823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3274'. [ 422.852455][T17821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3274'. [ 422.878371][T17824] netlink: 'syz.2.3275': attribute type 4 has an invalid length. [ 423.166267][T17793] chnl_net:caif_netlink_parms(): no params data found [ 423.395935][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3279'. [ 423.476942][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.505479][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.521328][T17793] bridge_slave_0: entered allmulticast mode [ 423.531434][T17793] bridge_slave_0: entered promiscuous mode [ 423.549682][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.559486][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.566923][T17793] bridge_slave_1: entered allmulticast mode [ 423.585654][T17793] bridge_slave_1: entered promiscuous mode [ 423.668366][T17850] netlink: 'syz.1.3282': attribute type 6 has an invalid length. [ 423.766277][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.822229][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.944947][T17854] IPVS: ip_vs_edit_dest(): server weight less than zero [ 423.945012][T17793] team0: Port device team_slave_0 added [ 423.958264][ T10] IPVS: starting estimator thread 0... [ 423.983969][T17793] team0: Port device team_slave_1 added [ 424.059482][T17855] IPVS: using max 29 ests per chain, 69600 per kthread [ 424.199750][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.214314][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.247576][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.250319][ T5186] Bluetooth: hci0: command tx timeout [ 424.312453][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 424.334877][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.350590][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.454337][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.687096][T17793] hsr_slave_0: entered promiscuous mode [ 424.695681][T17793] hsr_slave_1: entered promiscuous mode [ 424.705236][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 424.711945][T17793] Cannot create hsr debugfs directory [ 424.956736][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 424.968075][ T30] audit: type=1800 audit(1758216727.485:6): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3295" name=02 dev="tmpfs" ino=206 res=0 errno=0 [ 425.398273][T17897] lo speed is unknown, defaulting to 1000 [ 425.462265][T17903] batadv_slave_0: entered allmulticast mode [ 425.482284][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 425.543610][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 425.584503][T17903] bond0: (slave bond_slave_1): Releasing backup interface [ 425.682286][T17911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3300'. [ 425.810621][T17903] batadv_slave_0: left allmulticast mode [ 425.876141][T17793] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.008398][T17793] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.096358][T17917] netlink: 'syz.0.3303': attribute type 2 has an invalid length. [ 426.121667][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 426.121721][T17793] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.263492][T17793] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.328874][ T5186] Bluetooth: hci0: command tx timeout [ 426.884461][T17793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.961098][T17793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.009952][T17793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.050879][T17793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.335900][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.472181][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.516824][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.524084][T10747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.595606][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.602842][T10911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.677430][T17952] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 428.009396][T17961] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3315'. [ 428.030744][T17961] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3315'. [ 428.064564][T17961] netlink: 'syz.1.3315': attribute type 58 has an invalid length. [ 428.094035][T17961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3315'. [ 428.273126][T17971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3317'. [ 428.374772][T17971] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 428.393301][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.409448][T17971] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 428.410809][ T5186] Bluetooth: hci0: command tx timeout [ 428.664157][T17983] netlink: 'syz.1.3321': attribute type 1 has an invalid length. [ 428.749396][T17983] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 428.761699][T17983] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 428.852485][T17988] gretap1: entered promiscuous mode [ 428.903984][T17988] bond2: (slave gretap1): making interface the new active one [ 428.926857][T17988] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 428.956033][T17983] macvlan2: entered promiscuous mode [ 428.970049][T17983] macvlan2: entered allmulticast mode [ 428.997187][T17983] bond2: entered promiscuous mode [ 429.014434][T17983] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 429.037402][T17983] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 429.053798][T17983] bond2: left promiscuous mode [ 429.477222][T17793] veth0_vlan: entered promiscuous mode [ 429.522867][T17793] veth1_vlan: entered promiscuous mode [ 429.672220][T17793] veth0_macvtap: entered promiscuous mode [ 429.725462][T17793] veth1_macvtap: entered promiscuous mode [ 429.777076][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.828225][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.901997][T10911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.922425][T10911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.946201][T10911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.979540][ T5236] udevd[5236]: worker [13048] /devices/virtual/block/nbd2 is taking a long time [ 429.989567][T10911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.079913][T18018] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3329'. [ 430.101722][ T94] block nbd2: Possible stuck request ffff888025107000: control (read@0,1024B). Runtime 120 seconds [ 430.112950][ T94] block nbd2: Possible stuck request ffff8880251071c0: control (read@1024,1024B). Runtime 120 seconds [ 430.128449][ T94] block nbd2: Possible stuck request ffff888025107380: control (read@2048,1024B). Runtime 120 seconds [ 430.149008][ T94] block nbd2: Possible stuck request ffff888025107540: control (read@3072,1024B). Runtime 120 seconds [ 430.272459][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.299673][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.331264][T10910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.358371][T10910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.416542][T18023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.456873][T18024] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 430.489777][ T5186] Bluetooth: hci0: command tx timeout [ 430.678842][T18027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.040170][T18043] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 431.172281][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 431.315771][T18051] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 431.350524][T18051] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 431.460766][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 431.805448][T18077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3346'. [ 431.843869][T18076] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3349'. [ 432.181514][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 432.231607][T18090] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 432.392874][T18096] netlink: 'syz.3.3357': attribute type 13 has an invalid length. [ 432.407305][T18098] netlink: 'syz.1.3356': attribute type 10 has an invalid length. [ 432.470435][T18098] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.506575][T18098] bond0: (slave team0): Enslaving as an active interface with an up link [ 432.675771][T18096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.119750][T18144] __nla_validate_parse: 2 callbacks suppressed [ 433.119772][T18144] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3369'. [ 433.136648][T18144] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3369'. [ 433.147861][T18143] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3369'. [ 433.161846][T18143] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3369'. [ 433.297110][T18153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3370'. [ 433.532940][T18159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3375'. [ 433.546506][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3376'. [ 433.561728][T18159] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 433.567651][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3376'. [ 433.609386][T18164] tipc: Started in network mode [ 433.614590][T18164] tipc: Node identity 6aa7d55e833d, cluster identity 4711 [ 433.622834][T18164] tipc: Enabled bearer , priority 0 [ 433.654555][T18164] syzkaller0: entered promiscuous mode [ 433.663717][T18164] syzkaller0: entered allmulticast mode [ 433.714877][T18164] tipc: Resetting bearer [ 433.724510][T18168] tipc: Started in network mode [ 433.730295][T18168] tipc: Node identity 080211000001, cluster identity 4711 [ 433.741775][T18168] tipc: Enabled bearer , priority 0 [ 433.751541][T18160] tipc: Resetting bearer [ 433.828299][T18160] tipc: Disabling bearer [ 433.875047][T18168] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 433.895523][T18168] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 433.917283][T18179] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 434.024622][T18170] tipc: Resetting bearer [ 434.122133][T18187] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 434.142161][T18191] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3384'. [ 434.317905][T18198] Bluetooth: MGMT ver 1.23 [ 434.641050][T18216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3394'. [ 434.689208][T18219] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 434.868909][T12050] tipc: Node number set to 134418688 [ 434.880914][T18225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 434.938799][T18233] netlink: 'syz.4.3399': attribute type 11 has an invalid length. [ 434.995731][T18235] delete_channel: no stack [ 435.002860][T18233] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 435.186969][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.235073][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.294594][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.313929][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.333967][ T1145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.768205][T18273] netlink: 'syz.1.3409': attribute type 142 has an invalid length. [ 435.872800][T18278] netlink: 'syz.0.3411': attribute type 1 has an invalid length. [ 435.890710][T18277] netlink: 'syz.4.3410': attribute type 4 has an invalid length. [ 435.943133][T18278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.964777][T18277] `: renamed from bond0 (while UP) [ 436.159543][T18281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.175506][T18281] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 436.253545][T18281] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 436.354183][T18278] veth3: entered promiscuous mode [ 436.371136][T18278] bond1: (slave veth3): Enslaving as an active interface with a down link [ 436.392337][T18287] vlan2: entered allmulticast mode [ 436.399756][T18287] bond1: entered allmulticast mode [ 436.796354][T18305] lo speed is unknown, defaulting to 1000 [ 438.291956][T18380] __nla_validate_parse: 15 callbacks suppressed [ 438.291979][T18380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3439'. [ 438.481129][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3441'. [ 438.652538][T18389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3443'. [ 438.847099][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3447'. [ 438.938512][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'. [ 438.979907][T18407] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 438.997345][T18407] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 439.449292][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3457'. [ 439.535684][T18442] mac80211_hwsim hwsim34 : renamed from wlan1 (while UP) [ 439.637449][T18445] netlink: 'syz.1.3459': attribute type 1 has an invalid length. [ 439.682989][T18448] tipc: Failed to remove unknown binding: 66,1,1/0:2123392934/2123392936 [ 439.743376][T18450] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 439.916097][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3463'. [ 439.970525][T18454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3463'. [ 440.021404][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 440.032858][T18454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3463'. [ 440.118497][T18467] netlink: 'syz.3.3468': attribute type 10 has an invalid length. [ 440.205322][T18467] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 441.349611][T18520] netlink: 'syz.3.3485': attribute type 1 has an invalid length. [ 441.467490][T18520] bond2: entered promiscuous mode [ 441.474561][T18520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.531871][T18523] bond2: (slave bridge3): making interface the new active one [ 441.590688][T18523] bridge3: entered promiscuous mode [ 441.601732][T18523] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 441.657471][T18535] syzkaller0: entered promiscuous mode [ 441.664311][T18535] syzkaller0: entered allmulticast mode [ 441.814228][T18547] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 441.888215][T18551] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 442.321183][T18570] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 442.497788][T18579] tipc: Started in network mode [ 442.509125][T18579] tipc: Node identity 96b164c15713, cluster identity 4711 [ 442.539219][T18579] tipc: Enabled bearer , priority 0 [ 442.584438][T18579] syzkaller0: entered promiscuous mode [ 442.609641][T18579] syzkaller0: entered allmulticast mode [ 442.675013][T18578] tipc: Resetting bearer [ 442.723399][T18578] tipc: Disabling bearer [ 443.109095][T18613] netlink: 'syz.3.3510': attribute type 21 has an invalid length. [ 443.128207][T18613] netlink: 'syz.3.3510': attribute type 1 has an invalid length. [ 443.253023][T18618] tipc: Enabled bearer , priority 0 [ 443.273976][T18618] syzkaller0: entered promiscuous mode [ 443.287185][T18618] syzkaller0: entered allmulticast mode [ 443.333095][T18617] tipc: Resetting bearer [ 443.354039][T18621] __nla_validate_parse: 9 callbacks suppressed [ 443.354060][T18621] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3513'. [ 443.390732][T18626] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3513'. [ 443.405610][T18628] netlink: 'syz.1.3514': attribute type 29 has an invalid length. [ 443.420759][T18617] tipc: Disabling bearer [ 443.652989][T18638] netlink: 'syz.3.3518': attribute type 2 has an invalid length. [ 443.660666][T18632] syzkaller1: entered promiscuous mode [ 443.684519][T18632] syzkaller1: entered allmulticast mode [ 443.798618][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3522'. [ 443.865835][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3522'. [ 443.867338][T18644] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 443.889766][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 443.900296][T18644] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 443.908069][T18644] gretap1: entered promiscuous mode [ 443.915094][T18644] gretap1: entered allmulticast mode [ 443.926632][T18650] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 444.707318][T18689] ipvlan1: mtu less than device minimum [ 445.339661][T18707] syzkaller0: entered promiscuous mode [ 445.345193][T18707] syzkaller0: entered allmulticast mode [ 445.365937][T18714] netlink: 'syz.1.3545': attribute type 32 has an invalid length. [ 445.387162][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 445.525305][T18714] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 445.564335][T18724] netlink: 'syz.3.3546': attribute type 83 has an invalid length. [ 445.655911][T18715] lo speed is unknown, defaulting to 1000 [ 446.065646][T18732] bridge_slave_0: left allmulticast mode [ 446.080699][T18732] bridge_slave_0: left promiscuous mode [ 446.086566][T18732] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.157169][T18732] bridge_slave_1: left allmulticast mode [ 446.204490][T18732] bridge_slave_1: left promiscuous mode [ 446.226478][T18732] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.265501][T18732] bond0: (slave bond_slave_0): Releasing backup interface [ 446.314307][T18732] bond0: (slave bond_slave_1): Releasing backup interface [ 446.360682][T18732] team0: Port device team_slave_0 removed [ 446.378203][T18732] team0: Port device team_slave_1 removed [ 446.386839][T18732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.395576][T18732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.405721][T18732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.415438][T18732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.450838][T18732] bond1: (slave veth3): Releasing active interface [ 446.886459][T18761] syzkaller1: entered promiscuous mode [ 446.910926][T18761] syzkaller1: entered allmulticast mode [ 447.272038][T18771] lo speed is unknown, defaulting to 1000 [ 447.393349][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3562'. [ 447.433676][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3562'. [ 447.471977][T18796] openvswitch: netlink: IP tunnel dst address not specified [ 447.875582][T18804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3566'. [ 447.908965][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3566'. [ 448.639307][T18830] __nla_validate_parse: 3 callbacks suppressed [ 448.639326][T18830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3573'. [ 448.697219][T18834] netlink: 'syz.3.3575': attribute type 1 has an invalid length. [ 448.846541][T18838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3576'. [ 449.190448][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 449.223092][T18847] netlink: 'syz.3.3580': attribute type 1 has an invalid length. [ 449.275769][T18848] netlink: 'syz.3.3580': attribute type 1 has an invalid length. [ 449.313991][T18844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.324631][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3580'. [ 449.347347][T18845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.722608][T18863] netlink: 'syz.1.3585': attribute type 10 has an invalid length. [ 449.760950][T18863] veth1_macvtap: left promiscuous mode [ 449.897126][T18867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3587'. [ 450.136958][T18876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.222574][T18879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.523287][T18886] netlink: 'syz.4.3593': attribute type 178 has an invalid length. [ 450.767874][T18905] tipc: Started in network mode [ 450.784842][T18905] tipc: Node identity 8, cluster identity 4711 [ 450.800273][T18905] tipc: Node number set to 8 [ 450.868923][T18908] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3601'. [ 450.990423][T18913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3602'. [ 451.131197][T18928] netlink: 'syz.0.3602': attribute type 23 has an invalid length. [ 451.508260][T18949] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3612'. [ 451.624720][T10910] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.741602][T18969] netlink: 'syz.1.3616': attribute type 1 has an invalid length. [ 451.772794][T18971] netlink: 'syz.3.3614': attribute type 1 has an invalid length. [ 451.943677][T18969] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 451.945674][T18972] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 452.145315][T18989] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 452.280278][T18998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3622'. [ 452.306685][T18989] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3620'. [ 452.363869][T18996] lo speed is unknown, defaulting to 1000 [ 452.587915][T19006] xt_limit: Overflow, try lower: 604147548/4200216962 [ 452.654679][T19008] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 452.676370][T19008] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 453.037830][T19020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.247004][T19035] lo speed is unknown, defaulting to 1000 [ 453.763772][T19049] 8021q: VLANs not supported on ip_vti0 [ 453.772791][T19051] __nla_validate_parse: 7 callbacks suppressed [ 453.772812][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3636'. [ 453.792013][T19052] bridge_slave_0: invalid flags given to default FDB implementation [ 453.812577][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3636'. [ 453.844147][T19051] validate_nla: 5 callbacks suppressed [ 453.844165][T19051] netlink: 'syz.0.3636': attribute type 11 has an invalid length. [ 454.178524][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3640'. [ 454.250180][T19066] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 454.268704][T19066] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3641'. [ 454.335579][T19069] xt_l2tp: missing protocol rule (udp|l2tpip) [ 454.424956][T19063] netlink: 'syz.0.3640': attribute type 1 has an invalid length. [ 454.556145][T19072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3644'. [ 454.775271][T19076] xt_l2tp: missing protocol rule (udp|l2tpip) [ 455.061051][T19086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3650'. [ 455.267721][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 455.684997][T19118] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 456.231339][T19148] netlink: 'syz.0.3662': attribute type 5 has an invalid length. [ 456.363578][T19153] syzkaller1: entered promiscuous mode [ 456.370789][T19153] syzkaller1: entered allmulticast mode [ 456.420076][T19155] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3666'. [ 456.653993][T19163] netlink: 'syz.3.3668': attribute type 17 has an invalid length. [ 456.690638][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3668'. [ 456.717205][T19163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3668'. [ 456.928613][T19174] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 457.100700][T19188] nbd: must specify a device to reconfigure [ 457.267405][T11747] IPVS: starting estimator thread 0... [ 457.279176][T19194] IPVS: sed: FWM 3 0x00000003 - no destination available [ 457.302502][T19199] delete_channel: no stack [ 457.316760][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 457.320885][T19199] openvswitch: netlink: IPv4 tun info is not correct [ 457.360564][T19202] sock: sock_timestamping_bind_phc: sock not bind to device [ 457.404699][T19197] IPVS: using max 24 ests per chain, 57600 per kthread [ 457.780192][T19211] netlink: 'syz.1.3682': attribute type 1 has an invalid length. [ 457.788376][T19211] netlink: 'syz.1.3682': attribute type 1 has an invalid length. [ 458.181340][T19236] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 458.272184][T19246] netlink: 'syz.2.3695': attribute type 33 has an invalid length. [ 458.654206][T19262] netlink: 'syz.2.3701': attribute type 12 has an invalid length. [ 459.263526][ T7122] syzkaller0: tun_net_xmit 76 [ 459.275494][ T7122] syzkaller0: tun_net_xmit 48 [ 459.289623][ T7817] syzkaller0: tun_net_xmit 76 [ 459.615073][ T10] syzkaller0: tun_net_xmit 76 [ 459.826703][T19321] __nla_validate_parse: 5 callbacks suppressed [ 459.826725][T19321] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3711'. [ 459.873962][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'. [ 459.896132][T19321] openvswitch: netlink: Flow actions attr not present in new flow. [ 460.175810][ T94] block nbd2: Possible stuck request ffff888025107000: control (read@0,1024B). Runtime 150 seconds [ 460.187463][ T94] block nbd2: Possible stuck request ffff8880251071c0: control (read@1024,1024B). Runtime 150 seconds [ 460.200591][ T94] block nbd2: Possible stuck request ffff888025107380: control (read@2048,1024B). Runtime 150 seconds [ 460.212301][ T94] block nbd2: Possible stuck request ffff888025107540: control (read@3072,1024B). Runtime 150 seconds [ 462.537688][T19314] netlink: 'syz.1.3711': attribute type 29 has an invalid length. [ 462.877427][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 462.986328][T19360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.552885][T19380] netlink: 'syz.0.3731': attribute type 4 has an invalid length. [ 463.607318][T19380] netlink: 'syz.0.3731': attribute type 4 has an invalid length. [ 463.644809][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 463.660772][T19389] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3734'. [ 463.672138][T19389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3734'. [ 463.853963][T19392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3735'. [ 463.877047][T19392] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3735'. [ 463.888216][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3735'. [ 464.084693][T19400] atomic_op ffff888063605198 conn xmit_atomic 0000000000000000 [ 464.232077][T19409] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 464.452784][T19418] pimreg: entered allmulticast mode [ 464.606835][T19430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.632141][T19432] netem: incorrect ge model size [ 464.637504][T19432] netem: change failed [ 464.658225][T19433] netlink: 'syz.0.3748': attribute type 27 has an invalid length. [ 464.702361][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 464.706302][T19433] netlink: 'syz.0.3748': attribute type 4 has an invalid length. [ 464.916501][T19444] gre1: entered promiscuous mode [ 464.928137][T19444] gre1: entered allmulticast mode [ 464.946719][T19446] __nla_validate_parse: 1 callbacks suppressed [ 464.946740][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3753'. [ 465.238305][T19460] syzkaller0: entered promiscuous mode [ 465.306002][T19460] syzkaller0: entered allmulticast mode [ 465.314869][T19459] tipc: Enabled bearer , priority 0 [ 465.461264][T19459] tipc: Resetting bearer [ 465.494381][T19476] netlink: 'syz.1.3762': attribute type 1 has an invalid length. [ 465.506978][T19476] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3762'. [ 465.525091][T19459] tipc: Disabling bearer [ 465.593863][T19480] block nbd4: Unsupported socket: shutdown callout must be supported. [ 465.645995][T19476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.751842][T19482] tipc: Enabled bearer , priority 0 [ 465.894072][T19482] syzkaller0: entered promiscuous mode [ 465.901076][T19482] syzkaller0: entered allmulticast mode [ 465.908071][T19482] tipc: Resetting bearer [ 465.963884][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3764'. [ 466.084246][ T13] tipc: Resetting bearer [ 466.110320][T19492] vlan3: entered promiscuous mode [ 466.115880][T19492] vlan3: entered allmulticast mode [ 466.122591][T19492] hsr_slave_1: entered allmulticast mode [ 466.156030][T19484] bond3: entered allmulticast mode [ 466.162345][T19484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.175094][T19484] bridge0: port 3(bond3) entered blocking state [ 466.182279][T19484] bridge0: port 3(bond3) entered disabled state [ 466.195190][T19484] bond3: entered promiscuous mode [ 466.201864][T19484] bridge0: port 3(bond3) entered blocking state [ 466.209766][T19484] bridge0: port 3(bond3) entered forwarding state [ 466.240488][T10910] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 466.330040][T19481] tipc: Resetting bearer [ 466.480549][T19519] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3775'. [ 466.694176][T19518] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3773'. [ 469.351307][T19481] tipc: Disabling bearer [ 469.416240][ T13] bridge0: port 3(bond3) entered disabled state [ 469.757199][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3781'. [ 469.953101][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 470.074383][T19575] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 470.110835][T19570] netlink: 'syz.4.3783': attribute type 11 has an invalid length. [ 470.132146][T19570] netlink: 'syz.4.3783': attribute type 11 has an invalid length. [ 470.142328][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'. [ 470.182037][T19584] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 470.216425][T19570] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3783'. [ 473.413415][T19602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3790'. [ 473.592683][ T5236] udevd[5236]: worker [13416] terminated by signal 33 (Unknown signal 33) [ 473.627281][T19623] xt_socket: unknown flags 0xe4 [ 473.682138][T19627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3799'. [ 473.999289][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3801'. [ 474.424744][T19661] tipc: Enabling of bearer rejected, already enabled [ 474.492843][T19661] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 474.567808][T19672] netlink: 'syz.4.3811': attribute type 39 has an invalid length. [ 474.821267][T19680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3814'. [ 474.915019][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 475.881007][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3826'. [ 475.891471][T19733] netlink: 'syz.4.3826': attribute type 7 has an invalid length. [ 475.911086][T19733] netlink: 'syz.4.3826': attribute type 8 has an invalid length. [ 475.949936][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3826'. [ 475.981706][T19736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3827'. [ 475.997238][T19733] gretap0: entered promiscuous mode [ 476.013419][T19733] batadv_slave_1: entered promiscuous mode [ 476.051943][T19733] gretap0: left promiscuous mode [ 476.066938][T19733] batadv_slave_1: left promiscuous mode [ 476.098148][T11744] IPVS: starting estimator thread 0... [ 476.219133][T19744] IPVS: using max 27 ests per chain, 64800 per kthread [ 476.446819][T19760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3836'. [ 476.547507][T19754] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3834'. [ 476.907289][T19789] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3842'. [ 476.982187][T19797] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3841'. [ 477.417856][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'. [ 477.555041][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'. [ 478.000642][T19841] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 478.066645][T19841] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 478.133921][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3859'. [ 478.167095][T19845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.167095][T19841] veth5: entered promiscuous mode [ 478.174432][T19841] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 478.204082][T10910] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 478.205489][T19841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.363878][ T1110] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 478.584752][T19873] tipc: Enabled bearer , priority 0 [ 478.593743][T19873] syzkaller0: entered promiscuous mode [ 478.600301][T19873] syzkaller0: entered allmulticast mode [ 478.719790][T19871] tipc: Resetting bearer [ 478.742919][T19871] tipc: Disabling bearer [ 480.001599][ T1145] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 480.410938][T19939] lo speed is unknown, defaulting to 1000 [ 480.452652][T19941] netlink: 'syz.2.3888': attribute type 4 has an invalid length. [ 480.661670][T19945] netlink: 'syz.4.3890': attribute type 2 has an invalid length. [ 481.274327][T19966] __nla_validate_parse: 11 callbacks suppressed [ 481.274350][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 481.611077][T19983] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3901'. [ 481.736304][T19989] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3902'. [ 481.810325][T19989] netlink: 'syz.0.3902': attribute type 6 has an invalid length. [ 481.918281][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 482.032875][T19997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3904'. [ 482.102688][T19997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.166975][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 482.189862][T20004] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3906'. [ 482.227527][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 482.339203][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3908'. [ 482.391029][T20016] netlink: 'syz.2.3908': attribute type 11 has an invalid length. [ 482.399689][T20016] netlink: 'syz.2.3908': attribute type 11 has an invalid length. [ 482.422065][T20016] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3908'. [ 482.452132][T20014] bond0: (slave bond_slave_1): Releasing backup interface [ 483.313644][T20077] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 483.453858][T20080] bridge: RTM_NEWNEIGH with invalid ether address [ 483.989990][T20082] netlink: 'syz.1.3928': attribute type 12 has an invalid length. [ 484.180717][T20094] netlink: 'syz.1.3932': attribute type 1 has an invalid length. [ 484.189262][T20097] netlink: 'syz.3.3933': attribute type 21 has an invalid length. [ 484.197918][T20097] netlink: 'syz.3.3933': attribute type 6 has an invalid length. [ 484.524448][T20111] netlink: 'syz.0.3938': attribute type 1 has an invalid length. [ 484.818466][T20130] netlink: 'syz.4.3943': attribute type 1 has an invalid length. [ 484.838350][T20131] netlink: 'syz.4.3943': attribute type 1 has an invalid length. [ 484.970530][T20136] bond0 (unregistering): Released all slaves [ 485.516208][T20164] netlink: 'syz.4.3955': attribute type 1 has an invalid length. [ 485.703900][T20171] netlink: 'syz.4.3959': attribute type 3 has an invalid length. [ 485.849457][T20181] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 485.966529][T20185] netlink: 'syz.3.3962': attribute type 12 has an invalid length. [ 485.982769][T20187] sctp: [Deprecated]: syz.4.3961 (pid 20187) Use of int in max_burst socket option deprecated. [ 485.982769][T20187] Use struct sctp_assoc_value instead [ 486.027798][T20187] netlink: 'syz.4.3961': attribute type 1 has an invalid length. [ 486.136640][T20187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.222345][T20192] veth3: entered promiscuous mode [ 486.413312][T20205] syzkaller0: entered allmulticast mode [ 486.421815][T20205] __nla_validate_parse: 10 callbacks suppressed [ 486.421837][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3967'. [ 486.609140][T20209] IPv6: sit1: Disabled Multicast RS [ 486.640710][T20209] sit1: entered allmulticast mode [ 486.819592][T20220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3968'. [ 487.036366][T20225] 8021q: VLANs not supported on caif0 [ 487.218105][T20228] lo speed is unknown, defaulting to 1000 [ 487.448018][T20249] syzkaller0: entered promiscuous mode [ 487.484052][T20249] syzkaller0: entered allmulticast mode [ 487.799540][T20261] tipc: Enabling of bearer rejected, failed to enable media [ 488.598425][T20283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3987'. [ 488.689898][T20287] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 488.721040][T20287] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 488.767995][T20287] gretap2: entered promiscuous mode [ 488.798039][T20287] gretap2: entered allmulticast mode [ 488.995140][T20298] tipc: Enabled bearer , priority 0 [ 489.056840][T20304] wg2: entered promiscuous mode [ 489.063349][T20304] wg2: entered allmulticast mode [ 489.088302][T20294] tipc: Resetting bearer [ 489.254273][T20301] syzkaller0: entered promiscuous mode [ 489.276415][T20301] syzkaller0: entered allmulticast mode [ 489.305267][T20288] tipc: Resetting bearer [ 489.367592][T20288] tipc: Disabling bearer [ 490.026836][T20353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4004'. [ 490.250482][ T94] block nbd2: Possible stuck request ffff888025107000: control (read@0,1024B). Runtime 180 seconds [ 490.266386][ T94] block nbd2: Possible stuck request ffff8880251071c0: control (read@1024,1024B). Runtime 180 seconds [ 490.278439][ T94] block nbd2: Possible stuck request ffff888025107380: control (read@2048,1024B). Runtime 180 seconds [ 490.289685][ T94] block nbd2: Possible stuck request ffff888025107540: control (read@3072,1024B). Runtime 180 seconds [ 490.371523][T20365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4010'. [ 490.806897][T20382] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 491.177982][T20395] tipc: New replicast peer: 255.255.255.255 [ 491.203405][T20395] tipc: Enabled bearer , priority 10 [ 491.234518][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4020'. [ 491.329324][T20368] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 491.407202][T20411] netlink: 'syz.2.4025': attribute type 1 has an invalid length. [ 491.421296][T20410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.544572][T20411] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 491.646564][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4028'. [ 491.679744][T20424] netlink: 'syz.4.4029': attribute type 29 has an invalid length. [ 491.700439][T20424] netlink: 'syz.4.4029': attribute type 29 has an invalid length. [ 491.726668][T20424] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4029'. [ 491.748803][T20425] nbd: must specify a device to reconfigure [ 493.297097][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 493.386419][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'. [ 493.419564][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'. [ 493.630193][T20601] bond2: entered promiscuous mode [ 493.639262][T20601] bond2: entered allmulticast mode [ 493.649153][T20601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.218163][T20674] 8021q: VLANs not supported on ip6tnl0 [ 494.405834][T20454] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 494.574277][T20702] netlink: 'syz.0.4057': attribute type 2 has an invalid length. [ 494.599969][T20700] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 494.606045][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'. [ 494.854922][T20707] syzkaller1: entered promiscuous mode [ 494.862056][T20707] syzkaller1: entered allmulticast mode [ 494.947028][T20706] tap0: tun_chr_ioctl cmd 1074025676 [ 494.966939][T20706] tap0: owner set to 0 [ 495.267787][T20712] bond3: entered promiscuous mode [ 495.274941][T20712] bond3: entered allmulticast mode [ 495.290825][T20712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.299886][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4062'. [ 495.323705][T20720] netlink: 'syz.3.4062': attribute type 30 has an invalid length. [ 495.352343][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4062'. [ 495.660892][T20728] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 495.894925][T20737] netlink: 'syz.3.4067': attribute type 11 has an invalid length. [ 495.911833][T20737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4067'. [ 495.986919][T20741] bond1: entered promiscuous mode [ 496.013547][T20741] bond1: entered allmulticast mode [ 496.021863][T20741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.217029][T20752] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4070'. [ 496.264008][T20755] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 496.677951][T20777] __nla_validate_parse: 2 callbacks suppressed [ 496.677974][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 496.697398][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 496.833280][T20781] syzkaller0: entered promiscuous mode [ 496.848087][T20781] syzkaller0: entered allmulticast mode [ 496.874852][T20781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4078'. [ 497.348216][T20805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4090'. [ 497.408432][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'. [ 497.452430][T20808] tipc: Enabled bearer , priority 0 [ 497.461444][T20813] netlink: 'syz.0.4091': attribute type 8 has an invalid length. [ 497.474664][T20807] netlink: 'syz.2.4089': attribute type 142 has an invalid length. [ 497.496831][T20802] syzkaller0: entered promiscuous mode [ 497.516006][T20802] syzkaller0: entered allmulticast mode [ 497.526610][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4091'. [ 497.758359][T20802] tipc: Resetting bearer [ 498.171760][T20802] tipc: Disabling bearer [ 498.278775][T20840] netlink: 'syz.0.4098': attribute type 3 has an invalid length. [ 498.653758][T20860] netlink: 'syz.2.4101': attribute type 3 has an invalid length. [ 498.682449][T20860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4101'. [ 498.743426][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 498.886948][T20868] netlink: 'syz.4.4102': attribute type 11 has an invalid length. [ 499.081277][T20878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4106'. [ 499.109138][T20878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4106'. [ 500.226039][T20929] netlink: 'syz.0.4117': attribute type 24 has an invalid length. [ 500.305974][T20934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4119'. [ 500.327515][T20938] netlink: 'syz.3.4118': attribute type 3 has an invalid length. [ 501.423441][T20964] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 502.087158][T21003] __nla_validate_parse: 3 callbacks suppressed [ 502.087181][T21003] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.4134'. [ 502.177700][T21004] tipc: Resetting bearer [ 502.503710][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4138'. [ 502.538121][T21014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 502.554393][T21014] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 502.774113][T21026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.166259][T21040] pim6reg: entered allmulticast mode [ 503.223765][T21045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4151'. [ 503.233693][T21045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4151'. [ 503.252746][T21042] syzkaller1: entered promiscuous mode [ 503.266136][T21042] syzkaller1: entered allmulticast mode [ 503.443700][T21052] veth1_macvtap: left promiscuous mode [ 503.449699][T21055] netlink: 'syz.0.4156': attribute type 1 has an invalid length. [ 503.461747][T21055] netlink: 'syz.0.4156': attribute type 2 has an invalid length. [ 503.493988][T21055] netlink: 'syz.0.4156': attribute type 1 has an invalid length. [ 503.516032][T21055] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.4156'. [ 503.628051][T21059] Bluetooth: MGMT ver 1.23 [ 503.681569][T21064] tipc: Enabled bearer , priority 0 [ 503.716434][T21064] syzkaller0: entered promiscuous mode [ 503.749415][T21064] syzkaller0: entered allmulticast mode [ 503.814823][T21064] tipc: Resetting bearer [ 503.882879][T21063] tipc: Resetting bearer [ 503.953149][T21063] tipc: Disabling bearer [ 504.003546][T21073] syzkaller1: entered promiscuous mode [ 504.029172][T21073] syzkaller1: entered allmulticast mode [ 504.124117][T21088] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4167'. [ 504.148280][T21088] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4167'. [ 504.161957][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 504.171611][T21088] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4167'. [ 504.186220][T21089] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4166'. [ 504.199299][T21094] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 504.310441][T21098] netlink: zone id is out of range [ 504.340111][T21098] netlink: del zone limit has 4 unknown bytes [ 504.664409][T21116] netlink: 'syz.2.4175': attribute type 21 has an invalid length. [ 504.995938][T21132] netlink: 'syz.2.4181': attribute type 1 has an invalid length. [ 505.045664][T21132] netlink: 'syz.2.4181': attribute type 3 has an invalid length. [ 505.070223][T21132] NCSI netlink: No device for ifindex 813332851 [ 505.113715][T21138] xt_l2tp: unknown flags: 10 [ 505.157844][T21138] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 505.392909][ T1110] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 506.010000][ T5186] Bluetooth: hci0: command 0x0405 tx timeout [ 506.293916][T21183] netlink: 'syz.4.4193': attribute type 1 has an invalid length. [ 506.598004][T21203] sctp: [Deprecated]: syz.1.4199 (pid 21203) Use of int in maxseg socket option. [ 506.598004][T21203] Use struct sctp_assoc_value instead [ 506.610449][T21198] IPv6: sit1: Disabled Multicast RS [ 506.624694][T21198] sit1: entered allmulticast mode [ 507.199315][T21235] 8021q: adding VLAN 0 to HW filter on device bond5 [ 507.207174][T21236] bond5: option mode: unable to set because the bond device is up [ 507.617452][T21267] netlink: 'syz.2.4219': attribute type 1 has an invalid length. [ 507.644694][T21267] netlink: 'syz.2.4219': attribute type 3 has an invalid length. [ 507.681873][T21267] __nla_validate_parse: 80 callbacks suppressed [ 507.681893][T21267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4219'. [ 507.890926][T21283] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4223'. [ 508.058203][T21295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.088978][ T5873] Bluetooth: hci0: command 0x0405 tx timeout [ 508.120030][T21297] xt_policy: too many policy elements [ 508.243797][T21303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.505879][T21317] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4232'. [ 508.533260][T21317] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4232'. [ 508.573795][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4232'. [ 508.725467][T21325] bond0: (slave ip6gre0): Error: Device type is different from other slaves [ 508.970216][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 509.093714][T21354] tipc: Enabling of bearer rejected, media not registered [ 509.243878][T11746] IPVS: starting estimator thread 0... [ 509.339261][T21363] IPVS: using max 25 ests per chain, 60000 per kthread [ 509.612375][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 509.630738][T21386] netlink: 'syz.4.4252': attribute type 1 has an invalid length. [ 510.625063][T21435] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 510.868157][T21446] tipc: Enabled bearer , priority 0 [ 510.884896][T21446] syzkaller0: entered promiscuous mode [ 510.896877][T21446] syzkaller0: entered allmulticast mode [ 510.984983][T21453] tipc: Resetting bearer [ 511.159857][T21442] tipc: Resetting bearer [ 511.247349][T21462] netlink: 'syz.1.4279': attribute type 2 has an invalid length. [ 511.272773][T21442] tipc: Disabling bearer [ 511.878007][T21487] netlink: 'syz.2.4286': attribute type 11 has an invalid length. [ 511.895550][T21487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4286'. [ 512.208469][T21497] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4289'. [ 512.231552][T21497] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 512.250158][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4287'. [ 512.279682][ T5967] IPVS: starting estimator thread 0... [ 512.297745][T21497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4289'. [ 512.369492][T21500] IPVS: using max 25 ests per chain, 60000 per kthread [ 512.461051][T21505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 512.496840][T21505] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 512.526391][T21505] gretap1: entered promiscuous mode [ 512.546212][T21505] gretap1: entered allmulticast mode [ 512.815346][T21522] __nla_validate_parse: 2 callbacks suppressed [ 512.815369][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4296'. [ 512.883951][T21522] xfrm1: entered promiscuous mode [ 512.900997][T21522] xfrm1: entered allmulticast mode [ 512.936501][T21524] netlink: 'syz.1.4297': attribute type 1 has an invalid length. [ 513.033222][T21524] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.191937][T21537] syzkaller1: entered promiscuous mode [ 513.217726][T21537] syzkaller1: entered allmulticast mode [ 513.277024][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4303'. [ 513.900370][T21564] netlink: 'syz.2.4309': attribute type 29 has an invalid length. [ 513.923843][T21564] netlink: 'syz.2.4309': attribute type 29 has an invalid length. [ 513.957087][T21564] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4309'. [ 513.968641][T21571] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 514.223004][T21582] netlink: 'syz.2.4317': attribute type 1 has an invalid length. [ 514.324918][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 514.372536][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 514.617548][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4322'. [ 514.682383][T21607] netlink: 'syz.2.4322': attribute type 11 has an invalid length. [ 514.749267][T21611] openvswitch: netlink: Flow actions attr not present in new flow. [ 514.761598][T21611] netlink: 'syz.3.4323': attribute type 1 has an invalid length. [ 514.793834][T21611] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4323'. [ 514.859670][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4325'. [ 514.992504][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4327'. [ 515.078238][T21629] team_slave_0: entered promiscuous mode [ 515.084458][T21629] team_slave_1: entered promiscuous mode [ 515.133526][T21629] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 515.160083][T21629] team0: Device macvtap1 is already an upper device of the team interface [ 515.198008][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4329'. [ 515.223336][T21629] team_slave_0: left promiscuous mode [ 515.228892][T21629] team_slave_1: left promiscuous mode [ 515.324093][T21627] team_slave_0: entered promiscuous mode [ 515.329910][T21627] team_slave_1: entered promiscuous mode [ 515.345523][T21627] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 515.354258][T21627] team0: Device macvtap1 is already an upper device of the team interface [ 515.367921][T21644] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 515.368289][T21627] team_slave_0: left promiscuous mode [ 515.382155][T21627] team_slave_1: left promiscuous mode [ 515.589980][T21654] netlink: 'syz.0.4334': attribute type 10 has an invalid length. [ 515.690421][T21654] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 515.793625][T21662] netlink: 'syz.1.4337': attribute type 4 has an invalid length. [ 515.917181][T21669] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 516.046416][T21675] netlink: 'syz.4.4343': attribute type 5 has an invalid length. [ 516.208153][T21683] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 516.409704][ T5186] Bluetooth: hci0: command 0x0405 tx timeout [ 516.457721][T21692] sock: sock_set_timeout: `syz.1.4349' (pid 21692) tries to set negative timeout [ 516.469479][T21697] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 516.703030][T21707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.189324][T21731] tipc: Enabling of bearer rejected, failed to enable media [ 517.228004][T21731] tipc: Enabled bearer , priority 10 [ 517.286968][T21731] netlink: 'syz.2.4360': attribute type 5 has an invalid length. [ 517.531725][T21752] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 517.810884][T21770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.873764][T21774] __nla_validate_parse: 6 callbacks suppressed [ 517.873784][T21774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'. [ 517.912038][T21774] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4373'. [ 518.191920][T21796] netlink: 'syz.3.4380': attribute type 1 has an invalid length. [ 518.210047][T21796] netlink: 'syz.3.4380': attribute type 2 has an invalid length. [ 518.217846][T21796] netlink: 'syz.3.4380': attribute type 1 has an invalid length. [ 518.229152][T11746] tipc: Node number set to 3248645313 [ 518.244719][T10747] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 518.277508][T21796] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.4380'. [ 520.334215][ T94] block nbd2: Possible stuck request ffff888025107000: control (read@0,1024B). Runtime 210 seconds [ 520.345620][ T94] block nbd2: Possible stuck request ffff8880251071c0: control (read@1024,1024B). Runtime 210 seconds [ 520.356696][ T94] block nbd2: Possible stuck request ffff888025107380: control (read@2048,1024B). Runtime 210 seconds [ 520.368962][ T94] block nbd2: Possible stuck request ffff888025107540: control (read@3072,1024B). Runtime 210 seconds [ 520.998808][T21782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.184404][T21826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.220657][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4389'. [ 521.311252][T21832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4390'. [ 521.414040][T21839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4393'. [ 521.970938][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 522.043403][T21866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4397'. [ 522.077675][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 522.127837][T21858] bridge0: port 1(batadv1) entered blocking state [ 522.144041][T21874] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 522.150576][T21858] bridge0: port 1(batadv1) entered disabled state [ 522.169250][T21875] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4400'. [ 522.188979][T21858] batadv1: entered allmulticast mode [ 522.205606][T21858] batadv1: entered promiscuous mode [ 522.231324][T21870] netlink: 'syz.1.4400': attribute type 1 has an invalid length. [ 522.627111][ T1110] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 522.636881][ T1110] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 522.703993][T21898] netlink: 'syz.4.4408': attribute type 6 has an invalid length. [ 522.874495][T21903] gre1: entered promiscuous mode [ 522.886919][T21903] gre1: entered allmulticast mode [ 523.185118][T21919] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 523.261105][T21919] __nla_validate_parse: 1 callbacks suppressed [ 523.261127][T21919] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4412'. [ 523.681608][T21941] IPv6: NLM_F_CREATE should be specified when creating new route [ 523.831991][T21943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4420'. [ 523.843160][T21943] bond3: left promiscuous mode [ 523.864566][T21943] bridge0: port 3(bond3) entered disabled state [ 524.005089][T21943] syz_tun: left allmulticast mode [ 524.025418][T21943] syz_tun: left promiscuous mode [ 524.050128][T21943] bridge0: port 2(syz_tun) entered disabled state [ 524.070548][T21943] bridge_slave_0: left allmulticast mode [ 524.076475][T21943] bridge_slave_0: left promiscuous mode [ 524.082800][T21943] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.174006][T21955] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4423'. [ 524.185658][T21955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4423'. [ 524.196229][T21955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4423'. [ 524.341602][ T5877] Bluetooth: hci5: command 0x0406 tx timeout [ 524.691422][T21979] netlink: 5340 bytes leftover after parsing attributes in process `syz.3.4432'. [ 524.703173][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'. [ 524.711017][T21979] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 524.721536][T21982] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 524.994249][T21978] lo speed is unknown, defaulting to 1000 [ 525.187239][T22002] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 525.382035][T22010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4441'. [ 525.907352][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4446'. [ 525.994156][T22039] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4447'. [ 526.003991][T22037] vlan3: entered allmulticast mode [ 526.004018][T22037] bridge0: entered allmulticast mode [ 526.004345][T22037] bridge2: port 1(vlan3) entered blocking state [ 526.049863][T22037] bridge2: port 1(vlan3) entered disabled state [ 526.070422][T22037] vlan3: entered promiscuous mode [ 526.076031][T22037] bridge0: entered promiscuous mode [ 526.124069][T22041] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 526.149908][T22041] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 526.278925][T22048] sch_fq: defrate 0 ignored. [ 526.295425][T22048] vlan1: entered allmulticast mode [ 526.307161][T22048] veth0_vlan: entered allmulticast mode [ 526.554607][T22055] netlink: 'syz.3.4453': attribute type 2 has an invalid length. [ 526.878761][T22067] lo speed is unknown, defaulting to 1000 [ 526.886216][T22070] netlink: 'syz.4.4458': attribute type 1 has an invalid length. [ 527.077620][T22074] sit1: entered allmulticast mode [ 527.172027][T22076] team0: Device vti0 is of different type [ 527.641475][T22096] netlink: 'syz.3.4465': attribute type 3 has an invalid length. [ 527.661208][T22096] netlink: 'syz.3.4465': attribute type 3 has an invalid length. [ 527.921793][T22068] netlink: 'syz.1.4457': attribute type 13 has an invalid length. [ 527.935017][T22068] netlink: 'syz.1.4457': attribute type 17 has an invalid length. [ 527.989674][T22101] siw: device registration error -23 [ 528.124834][T22068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.389274][T22114] lo speed is unknown, defaulting to 1000 [ 528.630725][T22146] __nla_validate_parse: 9 callbacks suppressed [ 528.630747][T22146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4481'. [ 529.102978][T22166] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4487'. [ 529.206318][T22172] sctp: [Deprecated]: syz.4.4487 (pid 22172) Use of int in max_burst socket option deprecated. [ 529.206318][T22172] Use struct sctp_assoc_value instead [ 529.562910][T22182] ip6gre1: entered allmulticast mode [ 529.696896][T22190] netlink: 'syz.2.4496': attribute type 10 has an invalid length. [ 529.701042][T22187] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4495'. [ 529.734156][T22190] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 529.767449][T22187] vlan2: entered allmulticast mode [ 529.773845][T22187] gretap0: entered allmulticast mode [ 529.979565][T22201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4500'. [ 530.194133][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4501'. [ 530.225033][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4501'. [ 530.251866][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4501'. [ 530.300911][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4501'. [ 530.343597][T22210] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4503'. [ 530.851297][T22233] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4511'. [ 531.565401][T22265] tipc: Enabled bearer , priority 0 [ 531.582809][T22265] syzkaller0: entered promiscuous mode [ 531.612926][T22265] syzkaller0: entered allmulticast mode [ 531.675493][T22272] bridge_slave_0: left allmulticast mode [ 531.686522][T22272] bridge_slave_0: left promiscuous mode [ 531.697023][T22272] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.718427][T22272] bridge_slave_1: left allmulticast mode [ 531.729203][T22272] bridge_slave_1: left promiscuous mode [ 531.741485][T22272] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.768178][T22272] `: (slave bond_slave_0): Releasing backup interface [ 531.792252][T22272] `: (slave bond_slave_1): Releasing backup interface [ 531.828322][T22272] team0: Port device team_slave_0 removed [ 531.842095][T22272] team0: Port device team_slave_1 removed [ 531.852324][T22272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.864552][T22272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.884138][T22272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.892188][T22272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.932269][T22278] tipc: Resetting bearer [ 532.084932][T22283] tipc: Resetting bearer [ 532.118053][T22294] netlink: 'syz.4.4527': attribute type 11 has an invalid length. [ 532.169319][T22283] tipc: Disabling bearer [ 532.915083][T22348] delete_channel: no stack [ 533.036950][T22347] delete_channel: no stack [ 533.046140][T22349] 8021q: adding VLAN 0 to HW filter on device ` [ 533.149171][T22349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.347263][T22355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.512977][T22355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.781269][T22355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.945490][T22355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.120500][ T1110] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.197526][ T1145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.213083][ T1145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.293746][ T1145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.543702][T22435] __nla_validate_parse: 3 callbacks suppressed [ 534.543723][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4563'. [ 534.572418][ T5877] Bluetooth: hci2: command 0x0405 tx timeout [ 534.663403][T22444] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 535.137952][T22465] netlink: 'syz.2.4574': attribute type 1 has an invalid length. [ 535.175592][T22465] netlink: 'syz.2.4574': attribute type 4 has an invalid length. [ 535.199430][T22465] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4574'. [ 535.219304][T22470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.557161][T22484] netlink: 'syz.4.4577': attribute type 10 has an invalid length. [ 535.603193][T22484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4577'. [ 535.674498][T22484] team0: Port device geneve0 added [ 535.688127][T22485] lo speed is unknown, defaulting to 1000 [ 536.045790][T22504] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4582'. [ 536.057299][T22504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4582'. [ 536.080280][T22504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4582'. [ 536.129865][T22504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4582'. [ 536.658142][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4589'. [ 536.810451][T22537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4591'. [ 536.859707][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4592'. [ 537.245213][T22554] tipc: Enabled bearer , priority 0 [ 537.273082][T22554] syzkaller0: entered promiscuous mode [ 537.288232][T22554] syzkaller0: entered allmulticast mode [ 537.331293][T22554] tipc: Resetting bearer [ 537.340647][T22551] tipc: Resetting bearer [ 537.439568][T22551] tipc: Disabling bearer [ 537.795191][T22571] netlink: 'syz.2.4601': attribute type 2 has an invalid length. [ 537.819349][T22571] netlink: 'syz.2.4601': attribute type 2 has an invalid length. [ 538.065778][T22589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 538.608918][T22622] netlink: 'syz.1.4613': attribute type 3 has an invalid length. [ 538.643477][T22622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.935479][T22607] vlan1 (unregistering): left allmulticast mode [ 538.942628][T22607] veth0_vlan (unregistering): left allmulticast mode [ 539.281815][T22648] netlink: 'syz.1.4621': attribute type 10 has an invalid length. [ 539.323273][T22648] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 539.390236][T22648] netlink: 'syz.1.4621': attribute type 10 has an invalid length. [ 539.407428][T22648] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 539.651460][T22658] __nla_validate_parse: 8 callbacks suppressed [ 539.651483][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4624'. [ 539.678103][T22660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4626'. [ 539.717516][T22664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4625'. [ 539.741544][T22663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4627'. [ 539.835733][T22664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4625'. [ 539.839491][ T30] audit: type=1107 audit(1758216842.345:7): pid=22661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Cer wc!58Q<`^B݃WӴ4x>`'2/퍅8=7R$Zsh;l T$u8@p*LyAR2^$Y5' [ 540.113431][T22681] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4631'. [ 540.170790][T22689] 8021q: VLANs not supported on wlan0 [ 540.178088][T22686] netlink: 'syz.0.4634': attribute type 23 has an invalid length. [ 540.204845][T22689] unknown channel width for channel at 909000KHz? [ 540.288673][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4636'. [ 540.316081][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4636'. [ 540.319482][T22694] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 540.484705][T22701] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4640'. [ 540.502765][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4639'. [ 540.653364][T22701] 8021q: VLANs not supported on gre0 [ 540.849147][T22719] netlink: zone id is out of range [ 540.858832][T22717] netlink: zone id is out of range [ 540.869824][T22717] netlink: del zone limit has 4 unknown bytes [ 540.875620][T22719] netlink: del zone limit has 4 unknown bytes [ 541.204806][T22737] veth0: entered promiscuous mode [ 541.554483][T22756] IPVS: Error joining to the multicast group [ 541.591202][T22735] veth0: left promiscuous mode [ 541.600774][T22757] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 541.885032][T22775] netlink: 'syz.2.4660': attribute type 1 has an invalid length. [ 542.393012][T22795] v: renamed from veth0_macvtap [ 542.636635][T22818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.916111][T22831] Unsupported ieee802154 address type: 0 [ 543.869701][T22890] ip6tnl0: Caught tx_queue_len zero misconfig [ 544.366915][T22914] sctp: [Deprecated]: syz.3.4703 (pid 22914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.366915][T22914] Use struct sctp_sack_info instead [ 544.870460][T22935] __nla_validate_parse: 49 callbacks suppressed [ 544.870482][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 544.906295][T22936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4709'. [ 545.054574][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4711'. [ 545.103002][T22933] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4709'. [ 545.257409][T22951] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4713'. [ 545.383096][T22959] netlink: 211416 bytes leftover after parsing attributes in process `syz.3.4716'. [ 545.737260][T22983] netlink: 'syz.3.4721': attribute type 8 has an invalid length. [ 546.209743][T22995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 546.546347][T23021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4733'. [ 546.629664][T23021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4733'. [ 546.927628][T23040] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 547.111638][T23047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4741'. [ 547.138410][T23048] netlink: 'syz.4.4742': attribute type 4 has an invalid length. [ 547.157832][T23043] syzkaller0: entered promiscuous mode [ 547.163595][T23043] syzkaller0: entered allmulticast mode [ 547.454291][T23058] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4744'. [ 549.950251][T23073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4748'. [ 550.062763][T23075] tipc: Enabling of bearer rejected, already enabled [ 550.119331][T23077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4750'. [ 550.149388][T23080] netlink: 'syz.3.4751': attribute type 1 has an invalid length. [ 550.176741][T23080] netlink: 784 bytes leftover after parsing attributes in process `syz.3.4751'. [ 550.424743][ T94] block nbd2: Possible stuck request ffff888025107000: control (read@0,1024B). Runtime 240 seconds [ 550.436931][ T94] block nbd2: Possible stuck request ffff8880251071c0: control (read@1024,1024B). Runtime 240 seconds [ 550.448686][ T94] block nbd2: Possible stuck request ffff888025107380: control (read@2048,1024B). Runtime 240 seconds [ 550.460827][ T94] block nbd2: Possible stuck request ffff888025107540: control (read@3072,1024B). Runtime 240 seconds [ 550.774880][T23118] batadv1: entered allmulticast mode [ 550.823555][T23121] netlink: 'syz.3.4762': attribute type 1 has an invalid length. [ 550.831775][T23121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4762'. [ 550.872836][T23127] tipc: Enabled bearer , priority 0 [ 550.895855][T23127] syzkaller0: entered promiscuous mode [ 550.915598][T23127] syzkaller0: entered allmulticast mode [ 550.961118][T23130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4763'. [ 550.998065][T23127] tipc: Resetting bearer [ 551.021495][T23124] tipc: Resetting bearer [ 551.095614][T23124] tipc: Disabling bearer [ 551.126956][T23139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.145224][T23137] netlink: 'syz.3.4765': attribute type 4 has an invalid length. [ 551.225248][T23141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.556041][T23158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4772'. [ 551.566435][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4772'. [ 551.974618][T23173] syzkaller1: entered promiscuous mode [ 551.980918][T23173] syzkaller1: entered allmulticast mode [ 552.363593][T23186] syzkaller0: entered promiscuous mode [ 552.370040][T23186] syzkaller0: entered allmulticast mode [ 552.398469][T23195] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 552.491749][T23198] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 552.543376][T23202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4788'. [ 552.715739][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4791'. [ 552.752084][T23215] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4792'. [ 552.936376][T23225] netlink: 'syz.0.4797': attribute type 4 has an invalid length. [ 555.663193][T23245] __nla_validate_parse: 3 callbacks suppressed [ 555.663216][T23245] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4801'. [ 555.876086][T23253] netlink: 'syz.3.4805': attribute type 1 has an invalid length. [ 555.997337][T23253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 556.084287][T23255] veth11: entered promiscuous mode [ 556.114743][T23255] bond6: (slave veth11): Enslaving as an active interface with a down link [ 556.170195][T23259] veth13: entered promiscuous mode [ 556.188116][T23259] bond6: (slave veth13): Enslaving as an active interface with a down link [ 556.279407][T23270] lo speed is unknown, defaulting to 1000 [ 556.495506][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4812'. [ 556.924441][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 557.393595][T23300] team0 (unregistering): Port device team_slave_0 removed [ 557.405859][T23300] team0 (unregistering): Port device team_slave_1 removed [ 557.624299][T23313] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 557.742772][T23318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4823'. [ 557.757786][T23319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4824'. [ 557.775099][T23319] ve: renamed from ipvlan1 [ 557.870223][T23318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4823'. [ 558.184158][T23333] netlink: zone id is out of range [ 558.207417][T23333] netlink: del zone limit has 4 unknown bytes [ 558.396583][T23337] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4829'. [ 558.435793][T23337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4829'. [ 558.458180][T23337] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4829'. [ 558.512053][T23337] netlink: zone id is out of range [ 558.517236][T23337] netlink: zone id is out of range [ 558.543029][T23337] netlink: zone id is out of range [ 558.564353][T23337] netlink: zone id is out of range [ 558.576605][T23337] netlink: zone id is out of range [ 558.591336][T23337] netlink: zone id is out of range [ 558.598710][T23337] netlink: zone id is out of range [ 558.841194][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4833'. [ 559.311107][T23364] netlink: 'syz.3.4836': attribute type 1 has an invalid length. [ 559.598370][T23379] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 559.655133][T23379] syzkaller1: entered promiscuous mode [ 559.668857][T23379] syzkaller1: entered allmulticast mode [ 561.878210][T23414] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 561.913672][T23419] __nla_validate_parse: 1 callbacks suppressed [ 561.913694][T23419] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4855'. [ 561.929783][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4856'. [ 561.975095][T23418] bond0: entered promiscuous mode [ 562.019213][T23418] bond0: left promiscuous mode [ 562.494888][T23449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4863'. [ 562.511112][T23445] lo speed is unknown, defaulting to 1000 [ 562.547674][T23446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4862'. [ 562.611702][T23451] netlink: 'syz.3.4864': attribute type 16 has an invalid length. [ 562.651470][T23451] netlink: 'syz.3.4864': attribute type 17 has an invalid length. [ 562.855107][T23451] net_ratelimit: 24 callbacks suppressed [ 562.855131][T23451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.050320][T23465] netlink: 'syz.1.4868': attribute type 4 has an invalid length. [ 563.086449][T23464] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 563.397765][T23479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.603028][T23485] netlink: 404 bytes leftover after parsing attributes in process `syz.1.4876'. [ 563.634547][T23487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4878'. [ 563.686171][T23490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4878'. [ 563.817417][T23494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4879'. [ 564.000368][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4880'. [ 564.176918][T23504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4883'. [ 564.442208][T23506] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 564.490250][T23506] syzkaller0: entered promiscuous mode [ 564.506095][T23506] syzkaller0: entered allmulticast mode [ 564.781260][T23520] IPVS: Unknown mcast interface: dvmrp0 [ 566.974740][ T5877] Bluetooth: hci0: command 0x0405 tx timeout [ 567.255483][T23566] __nla_validate_parse: 2 callbacks suppressed [ 567.255504][T23566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4901'. [ 567.384157][T23568] lo speed is unknown, defaulting to 1000 [ 567.541478][T23584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4904'. [ 567.694675][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.743133][T23593] lo: Caught tx_queue_len zero misconfig [ 567.753367][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.807727][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.842332][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.892180][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.932884][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.983877][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.030173][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.079319][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.101755][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.125866][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.145770][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.158247][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.180466][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.487470][T23603] tipc: Enabled bearer , priority 0 [ 568.496441][T23603] syzkaller0: entered promiscuous mode [ 568.502339][T23603] syzkaller0: entered allmulticast mode [ 568.619217][T23603] tipc: Resetting bearer [ 568.669888][T23602] tipc: Resetting bearer [ 568.851651][T23602] tipc: Disabling bearer [ 569.030009][T23627] netlink: 'syz.4.4918': attribute type 1 has an invalid length. [ 569.221545][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4920'. [ 569.313959][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4920'. [ 569.603935][T23659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4927'. [ 569.760817][T23661] netlink: 'syz.0.4926': attribute type 1 has an invalid length. [ 569.834367][T23668] bond3: entered allmulticast mode [ 569.843905][T23668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.851924][T23668] bridge0: port 1(bond3) entered blocking state [ 569.860260][T23668] bridge0: port 1(bond3) entered disabled state [ 569.867827][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4926'. [ 569.871400][T23668] bond3: entered promiscuous mode [ 569.883803][T23668] bridge0: port 1(bond3) entered blocking state [ 569.890428][T23668] bridge0: port 1(bond3) entered forwarding state [ 569.909114][T23675] ip6gretap0: entered promiscuous mode [ 569.915397][T23675] macvtap1: entered promiscuous mode [ 569.921189][T23675] macvtap1: entered allmulticast mode [ 569.927418][T23675] ip6gretap0: entered allmulticast mode [ 569.968189][ T13] bridge0: port 1(bond3) entered disabled state [ 570.077780][T23684] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4931'. [ 570.117574][T23684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4931'. [ 570.150521][T23684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4931'. [ 570.361626][T23693] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4934'. [ 570.399548][T23693] netlink: 'syz.3.4934': attribute type 7 has an invalid length. [ 570.407676][T23693] netlink: 'syz.3.4934': attribute type 8 has an invalid length. [ 570.423883][T23697] netlink: 'syz.0.4936': attribute type 13 has an invalid length. [ 570.436392][T23697] netlink: 'syz.0.4936': attribute type 58 has an invalid length. [ 571.141692][T23730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.600251][T23761] netlink: 'syz.4.4958': attribute type 142 has an invalid length. [ 571.730791][T23772] netlink: 'syz.1.4961': attribute type 5 has an invalid length. [ 572.203298][T23786] veth0: entered promiscuous mode [ 572.215418][T23785] veth0: left promiscuous mode [ 572.654780][T23806] __nla_validate_parse: 7 callbacks suppressed [ 572.654802][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4971'. [ 572.792909][T23814] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4974'. [ 572.851448][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4975'. [ 573.012716][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4976'. [ 573.100706][T23825] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4979'. [ 573.248811][T23831] net_ratelimit: 21 callbacks suppressed [ 573.248998][T23832] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 573.286708][T23831] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 573.301592][T23835] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4983'. [ 573.328431][T23834] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4983'. [ 573.405129][T23835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4983'. [ 573.891828][T23856] tipc: Enabled bearer , priority 0 [ 573.914603][T23856] syzkaller0: entered allmulticast mode [ 573.971476][T23856] tipc: Resetting bearer [ 574.050549][T23855] tipc: Resetting bearer [ 574.160829][T23855] tipc: Disabling bearer [ 574.176123][T23867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4994'. [ 574.400380][T23880] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 574.437954][T23880] tipc: Enabled bearer , priority 13 [ 574.481787][T23888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5002'. [ 574.689166][T23888] lo speed is unknown, defaulting to 1000 [ 574.710790][T23888] lo speed is unknown, defaulting to 1000 [ 574.746592][T23900] netlink: 'syz.2.5004': attribute type 26 has an invalid length. [ 574.771797][T23888] lo speed is unknown, defaulting to 1000 [ 575.097612][T23915] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 575.160597][T23919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.190116][T23888] infiniband syz0: set down [ 575.194764][T23888] infiniband syz0: added lo [ 575.204762][ T5967] lo speed is unknown, defaulting to 1000 [ 575.255780][T23888] RDS/IB: syz0: added [ 575.260980][T23888] smc: adding ib device syz0 with port count 1 [ 575.267196][T23888] smc: ib device syz0 port 1 has pnetid [ 575.286807][ T5870] lo speed is unknown, defaulting to 1000 [ 575.307154][T23888] lo speed is unknown, defaulting to 1000 [ 575.675687][T23888] lo speed is unknown, defaulting to 1000 [ 575.943717][T23941] netlink: 'syz.1.5018': attribute type 13 has an invalid length. [ 576.285741][T23962] lo speed is unknown, defaulting to 1000 [ 576.416037][T23966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.477611][T23888] lo speed is unknown, defaulting to 1000 [ 576.751188][T23966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.017855][T23987] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 577.058091][T23987] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 577.091965][T23966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.240109][T23966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.285118][T23888] lo speed is unknown, defaulting to 1000 [ 577.324713][T23994] netlink: 'syz.2.5030': attribute type 1 has an invalid length. [ 577.602962][T23962] lo speed is unknown, defaulting to 1000 [ 577.873224][T23888] lo speed is unknown, defaulting to 1000 [ 577.891372][T24003] __nla_validate_parse: 7 callbacks suppressed [ 577.891395][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5033'. [ 578.313505][T24029] netlink: 'syz.2.5035': attribute type 1 has an invalid length. [ 578.835883][T23888] lo speed is unknown, defaulting to 1000 [ 578.851394][T24052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5043'. [ 578.909749][T24056] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 579.122078][T24063] sctp: [Deprecated]: syz.0.5045 (pid 24063) Use of int in max_burst socket option deprecated. [ 579.122078][T24063] Use struct sctp_assoc_value instead [ 579.264358][T24061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.348721][T24068] netlink: 'syz.0.5047': attribute type 1 has an invalid length. [ 579.356525][T24068] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5047'. [ 579.368905][T24068] netlink: 'syz.0.5047': attribute type 1 has an invalid length. [ 579.382057][T24068] netlink: 'syz.0.5047': attribute type 4 has an invalid length. [ 579.450365][T24074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5049'. [ 579.472431][T24074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5049'. [ 579.501529][T23888] lo speed is unknown, defaulting to 1000 [ 579.661135][T24083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5052'. [ 579.689273][T24082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5051'. [ 580.071071][T23888] lo speed is unknown, defaulting to 1000 [ 580.512112][ T94] block nbd2: Possible stuck request ffff888025107000: control (read@0,1024B). Runtime 270 seconds [ 580.528685][ T94] block nbd2: Possible stuck request ffff8880251071c0: control (read@1024,1024B). Runtime 270 seconds [ 580.539858][ T94] block nbd2: Possible stuck request ffff888025107380: control (read@2048,1024B). Runtime 270 seconds [ 580.551870][ T94] block nbd2: Possible stuck request ffff888025107540: control (read@3072,1024B). Runtime 270 seconds [ 580.666270][T23888] lo speed is unknown, defaulting to 1000 [ 581.039820][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5067'. [ 581.065459][T24133] netlink: 'syz.3.5068': attribute type 1 has an invalid length. [ 581.111828][T24133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 581.198067][T23888] lo speed is unknown, defaulting to 1000 [ 581.310900][T24145] block nbd2: NBD_DISCONNECT [ 581.315588][T24145] block nbd2: Send disconnect failed -32 [ 581.360249][T24145] block nbd2: shutting down sockets [ 581.400670][ C0] blk_print_req_error: 138 callbacks suppressed [ 581.400692][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.416188][ C0] buffer_io_error: 138 callbacks suppressed [ 581.416209][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 581.430020][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.439219][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 581.447040][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.456179][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 581.460538][T24152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5073'. [ 581.464162][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.482037][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 581.490549][T13048] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.506107][T24154] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5071'. [ 581.518974][T13048] Buffer I/O error on dev nbd2, logical block 0, async page read [ 581.526930][T13048] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.570881][T13048] Buffer I/O error on dev nbd2, logical block 1, async page read [ 581.594893][T13048] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.604748][T13048] Buffer I/O error on dev nbd2, logical block 2, async page read [ 581.624925][T13048] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.639665][T13048] Buffer I/O error on dev nbd2, logical block 3, async page read [ 581.647854][T13048] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.657945][T13048] Buffer I/O error on dev nbd2, logical block 0, async page read [ 581.668169][T13048] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.677766][T13048] Buffer I/O error on dev nbd2, logical block 1, async page read [ 581.689038][T13048] ldm_validate_partition_table(): Disk read failed. [ 581.698248][T13048] Dev nbd2: unable to read RDB block 0 [ 581.746371][T13048] nbd2: unable to read partition table [ 581.833762][T13048] ldm_validate_partition_table(): Disk read failed. [ 581.855999][T13048] Dev nbd2: unable to read RDB block 0 [ 581.868461][T13048] nbd2: unable to read partition table [ 581.960352][T13048] udevd[13048]: failed to send result of seq 17047 to main daemon: Connection refused [ 582.277415][T24173] netlink: 'syz.2.5079': attribute type 1 has an invalid length. [ 582.415430][T24173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 582.952624][T24176] bond7 (unregistering): Released all slaves [ 583.392893][T24215] __nla_validate_parse: 3 callbacks suppressed [ 583.392915][T24215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5092'. [ 583.496399][T24215] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 583.515211][T24222] openvswitch: netlink: Duplicate or invalid key (type 0). [ 583.554351][T24222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.730405][T24230] tipc: Enabling of bearer rejected, already enabled [ 583.775765][T24232] netlink: 'syz.0.5097': attribute type 1 has an invalid length. [ 583.804260][T24232] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5097'. [ 583.985953][T24232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5097'. [ 584.711660][T24272] bond0: entered promiscuous mode [ 584.716769][T24272] geneve1: entered promiscuous mode [ 584.799979][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5109'. [ 584.800400][T24278] netlink: 'syz.1.5111': attribute type 4 has an invalid length. [ 584.821235][T24282] netlink: 'syz.2.5113': attribute type 1 has an invalid length. [ 584.831077][T24282] netlink: 'syz.2.5113': attribute type 1 has an invalid length. [ 584.852379][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5109'. [ 584.891972][T24286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5109'. [ 584.908205][T24286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5109'. [ 584.924498][T24289] netlink: 'syz.1.5111': attribute type 4 has an invalid length. [ 585.221168][T24288] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5114'. [ 585.233524][T24288] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5114'. [ 585.247869][T24288] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5114'. [ 585.320043][T24287] delete_channel: no stack [ 585.425093][T24301] C: renamed from team_slave_0 (while UP) [ 585.465322][T24301] netlink: 'syz.2.5116': attribute type 1 has an invalid length. [ 585.472666][T24272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 585.483063][T24301] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 585.991564][T24326] netlink: 'syz.3.5127': attribute type 1 has an invalid length. [ 586.361427][T24345] netlink: 'syz.2.5134': attribute type 4 has an invalid length. [ 586.404439][T24352] netlink: 'syz.3.5137': attribute type 4 has an invalid length. [ 586.969532][ T5186] Bluetooth: hci0: command 0x0405 tx timeout [ 586.979106][T24391] veth0: entered promiscuous mode [ 586.985128][T24391] veth0: left promiscuous mode [ 587.275735][T24401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.319671][ T10] lo speed is unknown, defaulting to 1000 [ 587.329273][ T10] syz0: Port: 1 Link ACTIVE [ 587.608389][ T5870] lo speed is unknown, defaulting to 1000 [ 587.640018][T24416] delete_channel: no stack [ 588.124795][T24443] netlink: 'syz.0.5163': attribute type 17 has an invalid length. [ 588.150597][T24443] gretap0: entered promiscuous mode [ 588.166621][T24443] gretap0: left promiscuous mode [ 588.270409][T24450] netlink: 'syz.1.5165': attribute type 23 has an invalid length. [ 588.507514][T24461] openvswitch: netlink: Message has -1 unknown bytes. [ 588.805745][T24485] netlink: 'syz.4.5175': attribute type 8 has an invalid length. [ 589.105448][T24494] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 589.114712][T24496] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 589.170493][T24499] __nla_validate_parse: 15 callbacks suppressed [ 589.170515][T24499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5178'. [ 589.245362][T24499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.265282][T24499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5178'. [ 589.278398][T24502] netlink: 'syz.1.5178': attribute type 12 has an invalid length. [ 589.378325][T24503] netlink: 'syz.1.5178': attribute type 12 has an invalid length. [ 589.582065][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'. [ 589.610373][T24513] netem: unknown loss type 0 [ 589.615537][T24513] netem: change failed [ 589.648852][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5181'. [ 589.783766][T24516] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5182'. [ 589.794980][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'. [ 589.814838][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5181'. [ 589.822723][ T7122] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.835076][ T1145] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.907596][T24520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5183'. [ 589.917771][ T1145] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.927642][ T1145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.134818][T24521] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.146680][T24521] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.290664][T24501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 590.302227][ T9453] bond3: (slave ip6gretap1): link status up again after 0 ms [ 590.330402][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.481730][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.493837][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 590.514778][T24553] sctp: [Deprecated]: syz.1.5193 (pid 24553) Use of int in max_burst socket option. [ 590.514778][T24553] Use struct sctp_assoc_value instead [ 590.540203][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 590.592547][T24557] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 590.619469][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.729896][T24561] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 590.730748][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.842746][T24571] netlink: 'syz.2.5199': attribute type 5 has an invalid length. [ 590.908962][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.053825][T24582] netlink: 'syz.3.5201': attribute type 11 has an invalid length. [ 591.248658][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.291144][ T5186] Bluetooth: hci0: command 0x0405 tx timeout [ 591.380323][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.518970][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.655094][T24618] netlink: 'syz.0.5208': attribute type 4 has an invalid length. [ 591.689743][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.768631][T24620] bridge_slave_0: default FDB implementation only supports local addresses [ 591.794176][T24620] sch_fq: defrate 0 ignored. [ 592.129894][T10909] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 592.296413][T10909] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 592.442904][T10909] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 592.463413][T24640] IPVS: length: 153 != 24 [ 593.082733][T24666] netlink: 'syz.4.5227': attribute type 21 has an invalid length. [ 593.448177][T24684] netlink: 'syz.1.5233': attribute type 21 has an invalid length. [ 594.031496][T24718] netlink: 'syz.1.5243': attribute type 2 has an invalid length. [ 594.101623][T24718] netlink: 'syz.1.5243': attribute type 2 has an invalid length. [ 594.785094][T24773] netlink: 'syz.4.5254': attribute type 2 has an invalid length. [ 594.794044][T24773] __nla_validate_parse: 8 callbacks suppressed [ 594.794064][T24773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5254'. [ 594.885678][T24777] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 594.963812][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5257'. [ 595.019434][T24782] sctp: [Deprecated]: syz.0.5257 (pid 24782) Use of int in max_burst socket option deprecated. [ 595.019434][T24782] Use struct sctp_assoc_value instead [ 595.088840][T24780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5257'. [ 595.238009][T24789] netlink: 'syz.3.5261': attribute type 29 has an invalid length. [ 595.262722][T24790] netlink: 'syz.3.5261': attribute type 29 has an invalid length. [ 595.287308][T24789] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5261'. [ 595.304811][T24790] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5261'. [ 595.650858][T10910] net_ratelimit: 29 callbacks suppressed [ 595.650880][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.812294][T10747] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.827078][T24819] bridge0: port 3(syz_tun) entered blocking state [ 595.837729][T24819] bridge0: port 3(syz_tun) entered disabled state [ 595.862470][T24819] syz_tun: entered allmulticast mode [ 595.872114][T24819] syz_tun: entered promiscuous mode [ 595.878022][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 595.879336][T24813] netlink: 'syz.2.5269': attribute type 10 has an invalid length. [ 595.917969][T24813] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 595.950090][T10747] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.060034][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.199747][T10747] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.218257][T24828] pim6reg1: entered promiscuous mode [ 596.253338][T24828] pim6reg1: entered allmulticast mode [ 596.284902][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5278'. [ 596.323043][T24838] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5278'. [ 596.401845][T10909] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.438899][T24840] netlink: 'syz.4.5279': attribute type 32 has an invalid length. [ 596.550825][T24847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5281'. [ 596.582629][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.596447][T24849] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5283'. [ 596.661355][T10909] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 596.663508][T24853] netlink: 'syz.0.5284': attribute type 10 has an invalid length. [ 596.682795][T10909] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 596.691444][T11744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 596.797104][T24853] team0: Port device dummy0 added [ 596.820281][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.850050][T11744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 596.949259][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 597.060925][T10747] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 597.496223][T24882] netlink: 'syz.3.5293': attribute type 181 has an invalid length. [ 597.699443][T24888] [ 597.701839][T24888] ====================================================== [ 597.708878][T24888] WARNING: possible circular locking dependency detected [ 597.715937][T24888] syzkaller #0 Not tainted [ 597.720380][T24888] ------------------------------------------------------ [ 597.727512][T24888] syz.0.5294/24888 is trying to acquire lock: [ 597.733599][T24888] ffffffff8f68f6d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 597.742955][T24888] [ 597.742955][T24888] but task is already holding lock: [ 597.750326][T24888] ffff888020ef0470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 597.759674][T24888] [ 597.759674][T24888] which lock already depends on the new lock. [ 597.759674][T24888] [ 597.770106][T24888] [ 597.770106][T24888] the existing dependency chain (in reverse order) is: [ 597.779156][T24888] [ 597.779156][T24888] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 597.787189][T24888] lock_acquire+0x120/0x360 [ 597.792232][T24888] _raw_spin_lock_bh+0x36/0x50 [ 597.797558][T24888] nr_rt_device_down+0x12a/0x720 [ 597.803062][T24888] nr_device_event+0x137/0x150 [ 597.808387][T24888] notifier_call_chain+0x1b3/0x3e0 [ 597.814041][T24888] netif_close_many+0x29c/0x410 [ 597.819435][T24888] netif_close+0x158/0x210 [ 597.824392][T24888] dev_close+0x10a/0x220 [ 597.829269][T24888] bpq_device_event+0x377/0x6a0 [ 597.834674][T24888] notifier_call_chain+0x1b3/0x3e0 [ 597.840410][T24888] netif_close_many+0x29c/0x410 [ 597.845797][T24888] netif_close+0x158/0x210 [ 597.850755][T24888] dev_close+0x10a/0x220 [ 597.855530][T24888] bond_setup_by_slave+0x5f/0x3f0 [ 597.861098][T24888] bond_enslave+0x7a0/0x3a70 [ 597.866233][T24888] bond_do_ioctl+0x635/0x9b0 [ 597.871367][T24888] bond_siocdevprivate+0x17e/0x350 [ 597.877011][T24888] dev_ifsioc+0xb57/0xf00 [ 597.881882][T24888] dev_ioctl+0x84c/0x1150 [ 597.886740][T24888] sock_ioctl+0x719/0x790 [ 597.891691][T24888] __se_sys_ioctl+0xfc/0x170 [ 597.896815][T24888] do_syscall_64+0xfa/0x3b0 [ 597.901941][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.908378][T24888] [ 597.908378][T24888] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 597.916237][T24888] lock_acquire+0x120/0x360 [ 597.921292][T24888] _raw_spin_lock_bh+0x36/0x50 [ 597.926738][T24888] nr_rt_device_down+0xa9/0x720 [ 597.932179][T24888] nr_device_event+0x137/0x150 [ 597.937576][T24888] notifier_call_chain+0x1b3/0x3e0 [ 597.943483][T24888] netif_close_many+0x29c/0x410 [ 597.948949][T24888] netif_close+0x158/0x210 [ 597.953942][T24888] dev_close+0x10a/0x220 [ 597.958717][T24888] bpq_device_event+0x377/0x6a0 [ 597.964123][T24888] notifier_call_chain+0x1b3/0x3e0 [ 597.969805][T24888] netif_close_many+0x29c/0x410 [ 597.975203][T24888] netif_close+0x158/0x210 [ 597.980180][T24888] dev_close+0x10a/0x220 [ 597.984953][T24888] bond_setup_by_slave+0x5f/0x3f0 [ 597.990533][T24888] bond_enslave+0x7a0/0x3a70 [ 597.995750][T24888] bond_do_ioctl+0x635/0x9b0 [ 598.000870][T24888] bond_siocdevprivate+0x17e/0x350 [ 598.006510][T24888] dev_ifsioc+0xb57/0xf00 [ 598.011378][T24888] dev_ioctl+0x84c/0x1150 [ 598.016256][T24888] sock_ioctl+0x719/0x790 [ 598.021391][T24888] __se_sys_ioctl+0xfc/0x170 [ 598.026529][T24888] do_syscall_64+0xfa/0x3b0 [ 598.031598][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.038027][T24888] [ 598.038027][T24888] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 598.045951][T24888] validate_chain+0xb9b/0x2140 [ 598.051248][T24888] __lock_acquire+0xab9/0xd20 [ 598.056464][T24888] lock_acquire+0x120/0x360 [ 598.061509][T24888] _raw_spin_lock_bh+0x36/0x50 [ 598.066817][T24888] nr_remove_neigh+0x25/0xe0 [ 598.071941][T24888] nr_add_node+0x1d9f/0x2570 [ 598.077067][T24888] nr_rt_ioctl+0xc12/0xd50 [ 598.082028][T24888] sock_do_ioctl+0xdc/0x300 [ 598.087067][T24888] sock_ioctl+0x576/0x790 [ 598.091934][T24888] __se_sys_ioctl+0xfc/0x170 [ 598.097057][T24888] do_syscall_64+0xfa/0x3b0 [ 598.102269][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.108704][T24888] [ 598.108704][T24888] other info that might help us debug this: [ 598.108704][T24888] [ 598.118948][T24888] Chain exists of: [ 598.118948][T24888] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 598.118948][T24888] [ 598.133146][T24888] Possible unsafe locking scenario: [ 598.133146][T24888] [ 598.140603][T24888] CPU0 CPU1 [ 598.146188][T24888] ---- ---- [ 598.151560][T24888] lock(&nr_node->node_lock); [ 598.156342][T24888] lock(nr_node_list_lock); [ 598.163565][T24888] lock(&nr_node->node_lock); [ 598.170866][T24888] lock(nr_neigh_list_lock); [ 598.175556][T24888] [ 598.175556][T24888] *** DEADLOCK *** [ 598.175556][T24888] [ 598.183792][T24888] 1 lock held by syz.0.5294/24888: [ 598.188909][T24888] #0: ffff888020ef0470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 598.198683][T24888] [ 598.198683][T24888] stack backtrace: [ 598.204680][T24888] CPU: 1 UID: 0 PID: 24888 Comm: syz.0.5294 Not tainted syzkaller #0 PREEMPT(full) [ 598.204704][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.204715][T24888] Call Trace: [ 598.204723][T24888] [ 598.204731][T24888] dump_stack_lvl+0x189/0x250 [ 598.204758][T24888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.204779][T24888] ? __pfx__printk+0x10/0x10 [ 598.204803][T24888] ? stack_trace_save+0x9c/0xe0 [ 598.204830][T24888] print_circular_bug+0x2ee/0x310 [ 598.204852][T24888] check_noncircular+0x134/0x160 [ 598.204874][T24888] validate_chain+0xb9b/0x2140 [ 598.204891][T24888] ? do_syscall_64+0xfa/0x3b0 [ 598.204922][T24888] __lock_acquire+0xab9/0xd20 [ 598.204951][T24888] ? nr_remove_neigh+0x25/0xe0 [ 598.204966][T24888] lock_acquire+0x120/0x360 [ 598.204991][T24888] ? nr_remove_neigh+0x25/0xe0 [ 598.205010][T24888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 598.205033][T24888] ? nr_remove_neigh+0x25/0xe0 [ 598.205047][T24888] _raw_spin_lock_bh+0x36/0x50 [ 598.205075][T24888] ? nr_remove_neigh+0x25/0xe0 [ 598.205090][T24888] nr_remove_neigh+0x25/0xe0 [ 598.205107][T24888] nr_add_node+0x1d9f/0x2570 [ 598.205141][T24888] ? dev_get_by_name+0x21/0x200 [ 598.205168][T24888] ? dev_get_by_name+0x21/0x200 [ 598.205191][T24888] ? dev_get_by_name+0x21/0x200 [ 598.205215][T24888] ? nr_call_to_digi+0x136/0x1b0 [ 598.205242][T24888] nr_rt_ioctl+0xc12/0xd50 [ 598.205273][T24888] ? kasan_quarantine_put+0xdd/0x220 [ 598.205296][T24888] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 598.205327][T24888] ? apparmor_capable+0x137/0x1b0 [ 598.205353][T24888] ? capable+0x89/0xe0 [ 598.205370][T24888] ? nr_ioctl+0x1b1/0x3b0 [ 598.205394][T24888] sock_do_ioctl+0xdc/0x300 [ 598.205422][T24888] ? __pfx_sock_do_ioctl+0x10/0x10 [ 598.205447][T24888] ? __lock_acquire+0xab9/0xd20 [ 598.205480][T24888] sock_ioctl+0x576/0x790 [ 598.205506][T24888] ? __pfx_sock_ioctl+0x10/0x10 [ 598.205532][T24888] ? __fget_files+0x2a/0x420 [ 598.205546][T24888] ? __fget_files+0x3a0/0x420 [ 598.205560][T24888] ? __fget_files+0x2a/0x420 [ 598.205576][T24888] ? bpf_lsm_file_ioctl+0x9/0x20 [ 598.205598][T24888] ? __pfx_sock_ioctl+0x10/0x10 [ 598.205623][T24888] __se_sys_ioctl+0xfc/0x170 [ 598.205646][T24888] do_syscall_64+0xfa/0x3b0 [ 598.205664][T24888] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.205682][T24888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.205700][T24888] ? clear_bhb_loop+0x60/0xb0 [ 598.205719][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.205736][T24888] RIP: 0033:0x7f4f5278eba9 [ 598.205754][T24888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.205770][T24888] RSP: 002b:00007f4f509f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.205788][T24888] RAX: ffffffffffffffda RBX: 00007f4f529d5fa0 RCX: 00007f4f5278eba9 [ 598.205802][T24888] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 598.205814][T24888] RBP: 00007f4f52811e19 R08: 0000000000000000 R09: 0000000000000000 [ 598.205825][T24888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.205836][T24888] R13: 00007f4f529d6038 R14: 00007f4f529d5fa0 R15: 00007ffcc1b59638 [ 598.205856][T24888] [ 598.562454][T11744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 598.578046][T24894] netlink: 'syz.2.5296': attribute type 2 has an invalid length. [ 598.595419][T24895] netlink: 'syz.0.5294': attribute type 10 has an invalid length. [ 600.759128][ T1145] net_ratelimit: 25 callbacks suppressed [ 600.759152][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 600.880411][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 600.888698][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.990918][T10911] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.099257][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.210343][T10909] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.319347][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.429382][T10747] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.538961][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.659980][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 601.769695][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 605.789151][ T9453] net_ratelimit: 35 callbacks suppressed [ 605.789173][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 605.908752][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.018710][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.128930][ T9453] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.239158][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.349300][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.458843][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.569932][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.679341][ T1145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 606.789700][T10910] bond3: (slave ip6gretap1): failed to get link speed/duplex