last executing test programs: 2.926611532s ago: executing program 3 (id=3579): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000340)={'vcan0\x00', @ifru_map={0x2, 0x4, 0x9, 0x6, 0x7, 0x1}}}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = accept(r0, &(0x7f0000000480)=@nfc_llcp, &(0x7f0000001280)=0x80) shutdown(r2, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8034) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r6, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) sendmsg(r0, &(0x7f0000001240)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010101}, 0x3, 0x3, 0x3}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="0153d9e50ba99bd5a1a4e96925bcdd734a07066ba84258f27357a5e964c4832efce316912909e495197f9f90a6929fb00ad67e57ab", 0x35}], 0x1, &(0x7f0000000e40)=[{0xe0, 0x3a, 0xf, "f49a0e1986dd994dfd0d799dda8d51ac725afb105ac3e8acf0ae8792d476aa7bd7e728a7de6be97d191f8153c28d286785a2d2fdd8ee4eb80e4ad5c8b97b0c842ef83469e32b6eb5d6a134eb5390e0c838f4060f5cc991dd40e8a9d29a64524dcd225aa9f3a4df2b429383658ed8e8c8170a4bdd7430420bc6635ead337d1bf5d32ec652cf0d55a35f7dfd6b83882d8f622e941c2dba03ce3675a28ffb496a9e48b786f016e6ef30c0f4b1dd0227ef1cf7ee74e112d2fcc4fe856641fb6312ab5aabc5c98c176512d6bebbf6c174ade6"}, {0x48, 0x102, 0x1, "a375e060b6f7d45d087a8f92afd281665d63d2d945be4f1ef9dadc921d3fb20f23afdb693df9e9df31d2765c81cb585d9e87c7623c"}, {0x20, 0x10b, 0x4, "65ab8d5ba1f3cbf8bdd00b"}, {0xf8, 0x0, 0x1, "60afa37057cd6dc20a5891fc5e8cf392d73c22c6e595d9358a8d7363470ba76f47f504697e3a5977567135641ee972678cec08db96c948dd80f37415c5b34e1e22f1394e548242f0ebb96419aaa2ed4872c4a9ab03a19056fdcaa8bdaef066c9d82caeff1328ea6348898ac6742dd531c6be1c031cc786e1f5fb9b8ff0f4759ad2c67a63ff3c3400636176e774c9ad5ca5fccf980f60b71c1df28b18fb63ae61527e96cbdb47ee59c3a1566afe87244e68eb92c38ee2ccd4c431f008906b7cd050884c4193b1b767b6d5b2051ee59170d5a63ab05a854964928b8f8caa2df0fce4dd2d367f"}, {0xa8, 0x0, 0x9, "9fdba04847183eaae79bd3b641cee8d8f594620d9c0d51af4463459fda9447224cc97741cc7a3c628741a9e8378ffe3cfe685694cdf02be5e2932c5ecf4d55b2cebe7ac6f9048c54e055efbe337197874df5dd997a3692d9a3a068a065c44c462294cd6c11367c29205cd4377e382cf6afd59a2b2f4dd69f68454b83b70883b81f45e5b0dcf74792ce8eb73f6168a81929c1"}, {0xe8, 0x10a, 0x2, "dc7799c60fff251447855ae628a4428cb87bf82f3b348dc4e7a35a3d2c4d60fe527b5a11e1de6d7369f9a299bd661944b5e8fbf2a8d6957af4f222fef98ec7ff277d33fb7719bb2794f919a2ce4ea50672fad0c29497c4c2329ecf675b368e508e11116fec60f68988e244b32a4aa329b9f915675314888611aedb7be7e485ae4c77725eb9564b5ae2f915cc3fd613182041f2aaf4260e3690eb73163e1a5fe89a47b2ae1767a64f7dad22fe5b3f14f7b62debdd7930fbe969cd4a843e2c7202ca981c25e2efe9a99237069d795a163863591432a7d2373d"}], 0x3d0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2004}, 0x10}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 2.742786898s ago: executing program 3 (id=3582): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) shutdown(r3, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) syz_open_procfs$namespace(r5, &(0x7f00000037c0)='ns/pid_for_children\x00') clock_gettime(0x0, &(0x7f0000003700)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/222, 0xde}, {&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/77, 0x4d}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000003500)=""/104, 0x68}, {&(0x7f0000000ac0)=""/234, 0xea}], 0x7}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000cc0)=""/245, 0xf5}, {&(0x7f0000000dc0)=""/63, 0x3f}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/243, 0xf3}, {&(0x7f0000001f00)=""/152, 0x98}, {&(0x7f0000001fc0)=""/30, 0x1e}, {&(0x7f0000002000)=""/124, 0x7c}, {&(0x7f0000002080)=""/160, 0xa0}, {&(0x7f0000002140)=""/7, 0x7}], 0x9, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000002380), 0x6e, &(0x7f0000002800)=[{&(0x7f0000002b80)=""/90, 0x5a}, {&(0x7f0000000a40)=""/35, 0x23}, {&(0x7f00000024c0)=""/201, 0xc9}, {&(0x7f00000025c0)=""/130, 0x82}, {&(0x7f0000002680)=""/57, 0x39}, {&(0x7f00000026c0)=""/230, 0xf8}, {&(0x7f00000027c0)=""/55, 0x37}], 0x7}}, {{&(0x7f0000002880), 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/150, 0x96}], 0x1, &(0x7f0000002a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003080), 0x0, &(0x7f0000003100)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c}}], 0x110}}, {{&(0x7f0000003240), 0x6e, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/217, 0xd9}, {&(0x7f00000033c0)=""/134, 0x86}], 0x2, &(0x7f00000034c0)}}], 0x6, 0x8002, &(0x7f0000003740)={r6, r7+60000000}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x41) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x10044884) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r12, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x1c, r16, 0x1, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x24, r16, 0x8, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000404}, 0x8090) 2.063135972s ago: executing program 4 (id=3592): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x2, 0xffffffffffffff29}) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt(r4, 0x1, 0x6, 0x0, &(0x7f00000008c0)) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) 2.058011832s ago: executing program 1 (id=3594): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x27, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @ldst={0x2, 0x2, 0x1, 0xb, 0x2, 0xfffffffffffffefc, 0xc6ff3a1a84e4703e}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x51b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @generic={0x6, 0xb, 0x9, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x5f, &(0x7f0000000400)=""/95, 0x41100, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xc, 0x8001, 0x80e4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x5, 0x0, 0xb}, {0x3, 0x3, 0x6, 0xb}, {0x2, 0x1, 0xe, 0x4}, {0x1, 0x1, 0xd, 0xc}, {0x2, 0x4, 0xf, 0x3}], 0x10, 0x2}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0xa0, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xfff5, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x74, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xd}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x4c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x3, 0x5bee43bb, 0xd66f, {0x1, 0x0, 0x2d, 0x9, 0x2, 0xfff}, {0x0, 0x3, 0x4, 0x61b1, 0x0, 0x401}, 0x8001, 0x80000000, 0x9}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000740)={0x2, 0x3}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r7) 1.939261471s ago: executing program 2 (id=3595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendto$packet(r2, 0x0, 0x0, 0x8ca8ffff, &(0x7f0000000700)={0x11, 0x88a8, r3}, 0x14) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000c8014000b800800090000000000ea99d485036008000a004b42000004000b80080002000100000000000480080001000000"], 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) sendto$packet(r2, 0x0, 0x0, 0x8ca8ffff, &(0x7f0000000700)={0x11, 0x88a8, r3}, 0x14) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000c8014000b800800090000000000ea99d485036008000a004b42000004000b80080002000100000000000480080001000000"], 0x48}}, 0x0) (async) 1.79543323s ago: executing program 4 (id=3596): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) pread64(r1, &(0x7f0000000240)=""/5, 0x5, 0xcd32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="340000005ba546e1001048000000000071043b00000000009b0200008368a15915f50e5b8eb417db7767b489fe4938641577ecb825be59617bda0bbf36bd00a1c29c98f2a805ee28c0335bf4a4"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) 1.751753853s ago: executing program 3 (id=3597): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80800) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) bind(r1, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x2710}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x40010046, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.743320237s ago: executing program 2 (id=3598): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r0, 0x1, 0x1}, 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x30, r3, 0x389, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @val={0xc, 0x99, {0x904, 0x5e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4c841}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000c40)={0x2f4, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="daa7aff98d87a6adfeeca2b7edce1e6f118ae278899f62e65041"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x24, 0x34, @random="17d7b3c3127d572a6cd380b74ce7cc7f18a1c4382aae1acbcdb0ecbf79c297d0"}, @NL80211_ATTR_IE={0x279, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x74}}, @cf={0x4, 0x6, {0x6f, 0x6, 0x8, 0xe}}, @perr={0x84, 0x13a, {0x19, 0x12, [{{}, @broadcast, 0xfff, @void, 0x37}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x22}, {{}, @broadcast, 0x3, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x25}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x36}, {{0x0, 0x1}, @device_a, 0xdd, @value=@device_b, 0x40}, {{0x0, 0x1}, @device_a, 0xffff, @value, 0x25}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x1f}, {{}, @device_b, 0x2, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0x494b, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x17}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x1d}, {{}, @device_a, 0x3, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x3e, @value, 0xd}, {{0x0, 0x1}, @broadcast, 0x16fc3b0d, @value=@device_b, 0x2c}, {{}, @device_a, 0x73, @void, 0xb}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x42}, {{0x0, 0x1}, @device_b, 0xfffffff8, @value=@device_b, 0x1b}]}}, @random_vendor={0xdd, 0xff, "0dc607ab7efe7a6c4c22e50237405175b6aef7780a33aef7f0acfc91bf1deca678ee61e536a7413238e9a2f2ec7af723cf830fb8de25c8f5d464ad887c19460e3a5462443704e5e1752bccccab5f7672e99f7523af1ada10388e20e6ba01412c271d7eb3b0f128a0e7f73ae4a40766fc4992b5ce7ce35d88f61499ac4b5d5a2c13ff073bb65e1620ae2040be12cee818ad1794025a77e7e3d82978c4f99664299942c3cbf90669b23d451a05c7dff24efb76c5e736457112290f72ed7bbcf6c39d728b50119bdc575a58f8d488b3d663bcd6a2a6ca59e60c15b378b65aa3ab087fb79b6a51af6728a42362937196ba97461b6537bbb40b6ba75dc67b38799c"}, @prep={0x83, 0x1f, {{}, 0x5, 0x5, @device_b, 0x7, @void, 0x3, 0x0, @broadcast, 0x3}}, @chsw_timing={0x68, 0x4, {0x8, 0x6}}, @challenge={0x10, 0x1, 0x94}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ppoll(&(0x7f0000000440)=[{r6, 0x840}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r8, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004015) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x208, 0x130, 0x208, 0x2a0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x1d}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 1.625178037s ago: executing program 1 (id=3599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c001c00250327bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="80008e04"], 0x1c}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0xfffffff7, 0x4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4040000) 1.548403951s ago: executing program 4 (id=3600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000040a030000000000000000000000000011000b4000000000340008800c00014000000000000000400c00024000000000000000000c00014000000000000000000c00024000000000000000000b00070066696c74657200000900010073797a3100000000"], 0x68}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x9, r4, 0x36, r6}, 0x10) 1.411142059s ago: executing program 1 (id=3602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000008000000000061125000000000009500000000000000b2577ddc0bd0bcf9709a94cf9915f15b4b289fe40953ef83dd25de9208442e18744c51fedb48436f83223125ca6f8dd6d29ebb2ae4483338e4e85946e8a1c576c2b73b123660d79f06cc5d8e1c78bc9b858e32a0896f03000000000000002fb43a7053feae07a2f1d6d635fe8dc4c8a0d8c1f4e50161f1ae1dc60f8366a207462f61d1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="03e97c540ae2358bd97aa904220000"], 0x9) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180), 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x1, 0x10, 0x1c4}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) (async, rerun: 64) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 64) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000180)={{[0x101, 0x24, 0xc, 0x9]}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x10, 0x890b]}, {0x0, 0x4, 0x7bad, 0x7}}, 0x100, 0x0, '\x00'}, {{@align=0x5, {0x1, 0x4, 0x2, 0x9}}, 0x5, 0x0, ')#\xf1\x00'}, {{@align=0xc70a, {0x7, 0x1, 0xffffffff, 0x7}}, 0xa3d, 0x0, 'GPL\x00'}, {{@align=0x1, {0xe09, 0x7ff, 0x6}}, 0x4, 0x0, 'GPL\x00'}, {{@align=0x70b73487, {0x22d, 0x8000, 0x5473, 0x4}}, 0x8, 0x0, '%&[-+^:.*\x00'}, {{@_ha_fsid={[0x2, 0x8]}, {0x7, 0x5, 0xe, 0x462}}, 0x7, 0x0, '\x00'}, {{@align=0x1, {0x9, 0x6, 0x4, 0x240cd617}}, 0x2, 0x0, ')+\x00'}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x101043, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x124, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r9, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xf4, 0x2, [@TCA_BASIC_EMATCHES={0xf0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_META={0xc8, 0x1, 0x0, 0x0, {{0x172, 0x4, 0xed31}, [@TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_VAR="eecc1c", @TCF_META_TYPE_VAR="4112766ea947", @TCF_META_TYPE_VAR="53b936", @TCF_META_TYPE_VAR="30456bcafdbd", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c053e7fa75520a35ad69", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="78ebd2ee9f0cef76", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="cd3a2aaf34cafecf4a5e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x1}, {0x10, 0x9}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='vY']}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="ee80e63b1ce5", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="7c9f3075da", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="1132657d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xff2a, 0x4}}}]}}]}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x3, r6, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.331847241s ago: executing program 0 (id=3603): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x28, r1, 0xb15, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) 1.331030261s ago: executing program 2 (id=3604): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) 1.155298146s ago: executing program 0 (id=3605): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000700)="e2", 0x1, 0x40000, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4000080) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 974.429759ms ago: executing program 2 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c0000000300000000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 923.796849ms ago: executing program 1 (id=3607): r0 = socket(0x10, 0x80003, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, @none, 0xb1}, 0xa) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa95000a1e0c0000dd604df34200280600fc010000000000000000000000000002fe80000000000a0000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00604009078000013126d84a22012be73afefa596f1a731aeae0000"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xaae}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000040000030006000000000002"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 915.777263ms ago: executing program 0 (id=3608): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119700000000008510000002000000850000000000000095003303000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async, rerun: 32) r0 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)="170000007a006bbbb880cd9e3fe3dc6e0817000700007387c85b90f1c054", 0x1e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 914.08202ms ago: executing program 4 (id=3609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d18d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)='%pi6 \x00'}, 0x20) pwritev(r1, &(0x7f00000018c0)=[{&(0x7f0000000380)="c35b15ed05669f8a5c64ce217e2a45ad94508f9d6160a558a27be32feda6699851ba4884b107c8b1b7506f1975376ab219a0636381ebfb88e86ca6147a0c6a76ac547be21bcc2084ba282f831d530ced0e6b99d94dfefcc43fb9b79e5faace75b4b8034fb108879b6cf0e77539abd901e98897ae91bb4c032a8414b588ba8b530f7570dd1c813654a719e355428fa535cd5dc330b95b00d9592300ed3726cc49438bed6f354d6c5ca9cb4d3f532ebd841eb50d1ea6ac4c9f2608b4593734f2c98fa2cac914b884d3886bde4ae3607b3277dfb34a6e55710487343373971a773f190cd9530b09e591ee31a2f677b821", 0xef}, {&(0x7f0000000480)="d2fef1fba817f523842de4f19ad5e28d72737fb1f7b5f48c94b462baf8f6ec113404b1fa17998e2e6f13523104eab8b89c63e519da74dab3a270ea4b670dcfb1baf91bbc8e3e55c70f2d10f67fef4a0101031d6f9070732500c414da681fca46573f4f3142a6b33afc32907e28a9ef2909e5de4457cbc61145c317064c0339", 0x7f}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="fd3528f78ed0d0b86f771adf7f153176f99e65c3c3815ef8d569ce93b97e", 0x1e}, {&(0x7f0000001840)="fe514603d3737fbe1842160b46cc3d2af6eb759b703e8f6f11debebc2f987d56926487aeb1f596c27507f1bb9025eadde497bd7d98fee2fabf47c1f73ad74e11b49867266351c604e209", 0x4a}], 0x5, 0x8, 0x5b35) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 766.963629ms ago: executing program 3 (id=3610): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170002d17028008000500", @ANYRES32=r1, @ANYBLOB="08fafa0dae6a3991d012a4624bcab51fc69f9a2d4b66d4d9b3b2f1f2836c69268cdf6ce18e6c950254df1503252ea024a3f097b367339259966e00640676ab0198b626025c80e2a0bdc363b1b842869835917c125a1f748d28d601339bf991fa60277c20a4ec05e32896a782eefd30151fa26184c089f22358155ba0716e0ccf0316ab081d16028eaf0ff6815bf12dec8bd23837aa578e91201ee66c826fbec2d9180a969da6b3a31103ab112ab2f154fab10adc7095d0bfe11218b4805349632f4e8ead71aafcdba671bc7d93b19c4a1082ad03b7f7d1e575372e39f3941d666cfe54876a858733", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x4) 757.864043ms ago: executing program 2 (id=3611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x9, 0x0, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x8}}, 0x1c}}, 0x0) 660.449631ms ago: executing program 4 (id=3612): r0 = socket(0xa, 0x3, 0x4) sendmmsg$unix(r0, &(0x7f0000001340)=[{{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x10, 0x1, 0x41}}], 0x10}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100000000000200000000000000", @ANYRES32=r2, @ANYBLOB="408f010008200200280012800e00010069703667726574617000000014000280100011"], 0x48}}, 0x0) 603.020489ms ago: executing program 1 (id=3613): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a834", 0x1c}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x4048804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7d, 0x0, &(0x7f0000000000)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 560.166089ms ago: executing program 2 (id=3614): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x2}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(r5, 0x7) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="84110000040000001c0012800b0001006d616373656300000c0002800500080001000000e65b66e102190b580c8ed7c90dbe25a63063241afb41ea281659237430a5ab1df875ad829016bfdc7d8dfd0f4f064be264570f1aace2446139e3fdbcf84d5090d3a04493baa8384d091fda50837a0f0963533da7001419822a907dfffe269c4ae1f0e6547c6ad2a052cc99dbe6f31f13e5108d84650b51f4d1c462d0aa94ef871e3879c9063b3b4623a2043749155d9cbbfef9c8f3eb8ebff0d6398855ba0f887df6b2bea501c603de23d90912"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r7], 0x7c}}, 0x20000000) 499.382506ms ago: executing program 0 (id=3615): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = epoll_create(0x3) r2 = socket$nl_rdma(0x10, 0x3, 0x14) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x70000000}) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) 201.578367ms ago: executing program 4 (id=3616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdc00, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdc00, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) (async) 191.739329ms ago: executing program 1 (id=3617): bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xff05, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000020}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r2, 0x401, 0x2, 0x5}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x3}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000280)=""/109, 0x2b, 0x6d, 0x1, 0x8}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x8, 0x9, 0xe, 0x801, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0xd}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r8, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6008800}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000006000000185b00000f000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000800000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000005210200040000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0xfffffffc, 0xffe}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x1, r6, 0x1], &(0x7f0000000540)=[{0x0, 0x4, 0x8, 0x4}, {0x1, 0x2, 0xc, 0xc}, {0x2, 0x1, 0x1, 0xa}, {0x3, 0x4, 0x4, 0x5}, {0x4, 0x1, 0x4, 0x5}, {0x0, 0x4, 0xa, 0x2}, {0x1, 0x4, 0x6, 0x6}], 0x10, 0x2}, 0x94) 83.165949ms ago: executing program 0 (id=3618): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1000f85, 0x64) r3 = socket(0x26, 0x800, 0xffff8001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x8, 0x4, 0x3, 0x18, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0xd, [{@loopback, 0x100000}]}]}}}}}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x24}, 0x20) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000000)=0x7ff, 0x4) 82.597977ms ago: executing program 3 (id=3619): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) 13.374499ms ago: executing program 0 (id=3620): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0xfffffffa, 0x4) 0s ago: executing program 3 (id=3621): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r3], 0xa) kernel console output (not intermixed with test programs): : 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 324.307063][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 324.318976][T13537] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 324.344347][T13531] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 324.357503][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 324.407028][T13531] geneve2: entered promiscuous mode [ 324.426436][T13531] geneve2: entered allmulticast mode [ 324.938376][ C0] syz_tun: tun_net_xmit 86 [ 325.555143][T13543] lo speed is unknown, defaulting to 1000 [ 325.578793][T13577] syzkaller0: entered promiscuous mode [ 325.590691][T13577] syzkaller0: entered allmulticast mode [ 325.884116][T13597] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 325.935687][T13603] netlink: 'syz.0.2039': attribute type 12 has an invalid length. [ 325.975546][ C0] syz_tun: tun_net_xmit 86 [ 326.009992][T13597] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 326.031198][T13609] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 326.079626][T13609] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 326.756195][T13649] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 326.854002][T13649] bond8: entered promiscuous mode [ 326.860409][T13649] 8021q: adding VLAN 0 to HW filter on device bond8 [ 326.872101][T13648] bridge0: Device is already in use. [ 326.899017][T13650] bridge0: Device is already in use. [ 327.003678][T13543] lo speed is unknown, defaulting to 1000 [ 327.025131][T13543] xfrm0 speed is unknown, defaulting to 1000 [ 327.152469][T13661] openvswitch: netlink: Message has 12 unknown bytes. [ 327.172670][T13661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.443918][T13682] __nla_validate_parse: 4 callbacks suppressed [ 327.443938][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 327.466887][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 327.668876][T13693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2056'. [ 327.866720][T13695] bridge0: entered allmulticast mode [ 329.187995][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 329.366941][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 329.380138][T13755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2072'. [ 329.659803][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 329.712667][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 329.790130][T13775] syzkaller0: entered promiscuous mode [ 329.811916][T13775] syzkaller0: entered allmulticast mode [ 329.884462][T13780] netlink: 'syz.0.2077': attribute type 21 has an invalid length. [ 330.321653][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 330.425609][T13796] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 330.512235][T13801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2083'. [ 330.576238][T13799] syzkaller0: entered promiscuous mode [ 330.584737][T13799] syzkaller0: entered allmulticast mode [ 330.818126][T13811] syzkaller0: entered promiscuous mode [ 330.831897][T13811] syzkaller0: entered allmulticast mode [ 331.287800][T13835] netlink: 'syz.2.2092': attribute type 1 has an invalid length. [ 331.351654][T13787] lo speed is unknown, defaulting to 1000 [ 331.618258][T13843] netlink: 'syz.0.2095': attribute type 1 has an invalid length. [ 331.710443][T13846] sctp: [Deprecated]: syz.1.2097 (pid 13846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.710443][T13846] Use struct sctp_sack_info instead [ 332.495282][T13871] syzkaller0: entered promiscuous mode [ 332.512110][T13871] syzkaller0: entered allmulticast mode [ 332.755273][T13891] netlink: 'syz.1.2108': attribute type 21 has an invalid length. [ 332.786855][T13895] __nla_validate_parse: 4 callbacks suppressed [ 332.786872][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 332.812786][T13787] lo speed is unknown, defaulting to 1000 [ 332.823507][T13891] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.772056][T13787] xfrm0 speed is unknown, defaulting to 1000 [ 335.282584][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 335.754503][T13964] netlink: 'syz.3.2123': attribute type 6 has an invalid length. [ 336.279431][T13981] syzkaller0: entered promiscuous mode [ 336.289499][T13981] syzkaller0: entered allmulticast mode [ 336.670318][T13994] netlink: 'syz.3.2129': attribute type 4 has an invalid length. [ 336.691894][T13993] syzkaller0: entered promiscuous mode [ 336.714006][T13993] syzkaller0: entered allmulticast mode [ 336.742821][T13993] simple: basic_1 [ 336.758582][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'. [ 337.136268][T14005] netlink: 'syz.2.2133': attribute type 2 has an invalid length. [ 337.153813][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2134'. [ 337.586803][T14032] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2142'. [ 337.803772][T14036] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 337.858260][T14036] bond9 (unregistering): Released all slaves [ 338.269533][T14068] pim6reg: entered allmulticast mode [ 338.356313][T14065] syzkaller0: entered promiscuous mode [ 338.388660][T14065] syzkaller0: entered allmulticast mode [ 338.748049][T14092] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2159'. [ 339.234790][T14115] Cannot find add_set index 0 as target [ 339.742104][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'. [ 339.774280][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 339.798400][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 339.818983][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 339.852389][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 339.947828][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 339.998355][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 340.049078][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 340.095000][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 340.376662][T14183] siw: device registration error -23 [ 340.483684][T14183] ±ÿª¨úrBº“: renamed from lo [ 340.956089][T14204] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 341.241720][T14219] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 341.330245][T14226] netlink: 'syz.0.2190': attribute type 83 has an invalid length. [ 341.367696][T14172] lo speed is unknown, defaulting to 1000 [ 341.641310][T14226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.786317][T14241] syzkaller0: entered promiscuous mode [ 341.799169][T14241] syzkaller0: entered allmulticast mode [ 342.321138][T14265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.351586][T14268] netlink: 'syz.1.2200': attribute type 6 has an invalid length. [ 342.373136][T14265] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 342.429486][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.436740][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.451088][ T5731] xfrm0 speed is unknown, defaulting to 1000 [ 342.972141][T14172] lo speed is unknown, defaulting to 1000 [ 342.993901][T14172] xfrm0 speed is unknown, defaulting to 1000 [ 343.336537][T14311] Cannot find del_set index 4 as target [ 343.634813][ T29] audit: type=1804 audit(1782776675.100:10): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2219" name="/newroot/460/cgroup.controllers" dev="tmpfs" ino=2360 res=1 errno=0 [ 343.658073][ T29] audit: type=1800 audit(1782776675.100:11): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2219" name="cgroup.controllers" dev="tmpfs" ino=2360 res=0 errno=0 [ 343.686976][T14324] 8021q: adding VLAN 0 to HW filter on device bond10 [ 343.766054][T14324] bond10 (unregistering): Released all slaves [ 343.801365][T14336] netlink: 'syz.1.2220': attribute type 1 has an invalid length. [ 344.004529][T14336] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 344.279336][T14348] __nla_validate_parse: 6 callbacks suppressed [ 344.279358][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 344.342341][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 344.768268][T14374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 344.797760][T14374] netlink: 'syz.4.2230': attribute type 7 has an invalid length. [ 344.809807][T14374] netlink: 'syz.4.2230': attribute type 8 has an invalid length. [ 344.818022][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 345.203280][T14387] bond10: Unable to set down delay as MII monitoring is disabled [ 345.219453][T14387] bond10 (unregistering): Released all slaves [ 345.553950][T14405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2239'. [ 345.567567][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 345.586683][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 345.663049][T14417] tipc: Enabled bearer , priority 0 [ 345.671833][T14417] syzkaller0: entered promiscuous mode [ 345.678150][T14417] syzkaller0: entered allmulticast mode [ 345.686882][T14417] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 345.716841][T14418] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 345.778728][T14418] tipc: Resetting bearer [ 345.832254][T14418] tipc: Disabling bearer [ 345.980112][T14430] syzkaller0: entered allmulticast mode [ 346.183663][T14438] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 346.202031][T14438] netlink: 'syz.1.2246': attribute type 4 has an invalid length. [ 346.230965][T14438] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2246'. [ 346.251186][T14438] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 346.260940][T14438] netlink: 'syz.1.2246': attribute type 4 has an invalid length. [ 346.292621][T14438] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.2246'. [ 346.348948][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 346.961584][T14475] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 346.990128][T14475] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 347.112688][T14488] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 347.157780][T14488] 8021q: adding VLAN 0 to HW filter on device bond11 [ 347.851599][T14518] veth0_macvtap: left promiscuous mode [ 348.066937][T14532] bond10 (unregistering): Released all slaves [ 348.440841][T14557] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 348.472386][T14557] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 348.770845][ T5625] block nbd0: Receive control failed (result -107) [ 348.820064][T14575] netlink: 'syz.2.2284': attribute type 5 has an invalid length. [ 348.833353][T14580] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 348.898818][T14580] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.522245][T14616] syzkaller1: entered promiscuous mode [ 349.531613][T14616] syzkaller1: entered allmulticast mode [ 349.793421][T14632] xt_TCPMSS: Only works on TCP SYN packets [ 349.840059][T14632] xt_TCPMSS: Only works on TCP SYN packets [ 350.044274][T14648] __nla_validate_parse: 9 callbacks suppressed [ 350.044295][T14648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2306'. [ 350.077241][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2306'. [ 350.104975][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2305'. [ 350.145089][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2305'. [ 350.157958][T14657] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2305'. [ 350.669551][T14681] netlink: 'syz.0.2313': attribute type 30 has an invalid length. [ 350.794106][T14688] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2315'. [ 351.013813][T14695] Cannot find add_set index 0 as target [ 351.414418][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2321'. [ 351.440942][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 351.457578][T14724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2321'. [ 351.466995][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 351.795161][T14747] netlink: 'syz.4.2328': attribute type 10 has an invalid length. [ 351.829106][T14747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.887159][T14747] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 351.923122][T14752] macvlan4: entered promiscuous mode [ 351.937765][T14752] macvlan4: entered allmulticast mode [ 352.517939][T14781] veth0_macvtap: entered allmulticast mode [ 352.556419][T14781] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 352.635092][T14788] x_tables: duplicate underflow at hook 1 [ 352.827822][T14797] syzkaller0: entered promiscuous mode [ 352.833382][T14797] syzkaller0: entered allmulticast mode [ 353.224158][T14819] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 353.231500][T14813] syzkaller0: entered promiscuous mode [ 353.246223][T14813] syzkaller0: entered allmulticast mode [ 353.304137][T14820] netlink: 'syz.2.2349': attribute type 32 has an invalid length. [ 353.587945][T14832] bridge0: Device is already in use. [ 353.629760][T14834] bond9 (unregistering): Released all slaves [ 353.705018][T14837] bridge0: Device is already in use. [ 353.840775][T14853] openvswitch: netlink: Actions may not be safe on all matching packets [ 354.050101][T14859] bond0: entered promiscuous mode [ 354.063425][T14859] batadv0: entered promiscuous mode [ 354.074425][T14864] veth1_macvtap: left promiscuous mode [ 354.309569][T14878] netlink: 'syz.0.2367': attribute type 24 has an invalid length. [ 354.645000][T14888] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 354.763127][T14901] block nbd1: Unsupported socket: should be TCP or UNIX. [ 355.040103][T14917] netlink: 'syz.3.2378': attribute type 21 has an invalid length. [ 355.067681][T14920] __nla_validate_parse: 6 callbacks suppressed [ 355.067702][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2379'. [ 355.085682][T14917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2378'. [ 355.111164][T14917] ip_vti0: left promiscuous mode [ 355.114013][T14921] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2380'. [ 355.130601][T14926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'. [ 355.149269][T14917] bridge_slave_1: left allmulticast mode [ 355.161031][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'. [ 355.181888][T14917] ipvlan1: left promiscuous mode [ 355.189502][T14917] ipvlan1: left allmulticast mode [ 355.205333][T14917] veth0_vlan: left allmulticast mode [ 355.251987][T14917] macsec0: left allmulticast mode [ 355.265741][T14917] bond0: left promiscuous mode [ 355.289169][T14917] bond0: left allmulticast mode [ 355.297021][T14917] macvlan3: left promiscuous mode [ 355.311491][T14917] macvlan3: left allmulticast mode [ 355.329599][T14917] bond8: left promiscuous mode [ 355.334590][T14917] bond9: left promiscuous mode [ 355.358526][T14917] bond9: left allmulticast mode [ 355.364749][T14917] ip6gre1: left allmulticast mode [ 355.385059][T14917] bridge0: left allmulticast mode [ 355.708315][T14917] macvlan4: left promiscuous mode [ 355.717404][T14917] macvlan4: left allmulticast mode [ 356.024812][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 356.074021][T14948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2385'. [ 356.113980][T14952] syzkaller0: entered promiscuous mode [ 356.139620][T14952] syzkaller0: entered allmulticast mode [ 356.173912][T14951] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 356.504537][T14966] netlink: 'syz.4.2392': attribute type 2 has an invalid length. [ 356.513225][T14967] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 356.552804][T14966] netlink: 'syz.4.2392': attribute type 2 has an invalid length. [ 356.640705][T14966] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2392'. [ 356.667851][T14966] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2392'. [ 356.712423][T14978] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 356.716281][T14966] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2392'. [ 356.913953][T14978] 8021q: adding VLAN 0 to HW filter on device bond11 [ 356.947918][T14998] xt_hashlimit: size too large, truncated to 1048576 [ 357.256246][T15015] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 358.023462][T15049] netlink: 'syz.4.2405': attribute type 14 has an invalid length. [ 358.166703][T15049] netlink: 'syz.4.2405': attribute type 14 has an invalid length. [ 358.437157][T15074] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 358.463266][T15074] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 358.569098][T15080] ipt_REJECT: TCP_RESET invalid for non-tcp [ 358.631684][T15085] mac80211_hwsim hwsim17 ÿ: renamed from wlan1 [ 358.965911][T15096] tipc: Enabled bearer , priority 0 [ 360.762440][T15096] tipc: Disabling bearer [ 360.890378][T15124] __nla_validate_parse: 6 callbacks suppressed [ 360.890398][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 361.008124][T15127] netlink: 'syz.3.2424': attribute type 12 has an invalid length. [ 361.215800][T15135] syzkaller0: entered promiscuous mode [ 361.240010][T15135] syzkaller0: entered allmulticast mode [ 361.267780][T15144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2429'. [ 361.405150][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2431'. [ 361.448817][T15153] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2432'. [ 361.461377][T15146] 8021q: VLANs not supported on gre0 [ 361.648540][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2435'. [ 361.892296][T15178] syzkaller0: entered promiscuous mode [ 361.905517][T15178] syzkaller0: entered allmulticast mode [ 362.078022][T15186] syzkaller0: entered promiscuous mode [ 362.085937][T15186] syzkaller0: entered allmulticast mode [ 362.258937][T15199] netlink: 'syz.2.2446': attribute type 12 has an invalid length. [ 362.598875][T15209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2451'. [ 362.636963][T15220] tipc: Enabling of bearer rejected, failed to enable media [ 362.690450][T15224] tipc: Enabling of bearer rejected, failed to enable media [ 363.121417][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 363.966930][T15284] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2472'. [ 363.981325][T15284] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2472'. [ 364.082503][T15285] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 364.127477][T15297] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2476'. [ 364.802151][T15329] syzkaller0: entered promiscuous mode [ 364.807985][T15329] syzkaller0: entered allmulticast mode [ 364.821882][T15329] tipc: Enabled bearer , priority 10 [ 364.828585][T15330] tipc: Enabling of bearer rejected, already enabled [ 365.962986][T15386] __nla_validate_parse: 10 callbacks suppressed [ 365.963007][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 365.981268][T15386] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2504'. [ 366.009462][T15388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2505'. [ 366.018702][T15388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2505'. [ 366.124304][T15393] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2507'. [ 366.294359][T15405] xt_hashlimit: size too large, truncated to 1048576 [ 367.066200][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 367.117403][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 367.268368][T15457] netlink: 'syz.2.2522': attribute type 1 has an invalid length. [ 367.302940][T15457] netlink: 'syz.2.2522': attribute type 2 has an invalid length. [ 367.348054][T15459] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2523'. [ 367.390453][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2524'. [ 367.425713][T15457] nbd1: detected capacity change from 0 to 63 [ 367.451853][T15459] bond11 (unregistering): Released all slaves [ 367.495186][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2526'. [ 367.559950][ T5625] block nbd1: Receive control failed (result -104) [ 367.997694][T15500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.063770][T15498] ipvlan2: entered allmulticast mode [ 368.114590][T15498] batadv_slave_1: entered allmulticast mode [ 368.174151][T15498] syzkaller0: entered promiscuous mode [ 368.191742][T15498] syzkaller0: entered allmulticast mode [ 368.286690][T15509] ipvlan1: entered promiscuous mode [ 368.307181][T15509] ipvlan1: entered allmulticast mode [ 368.331457][T15509] veth0_vlan: entered allmulticast mode [ 369.822693][T15605] xt_hashlimit: size too large, truncated to 1048576 [ 370.286858][T15630] dvmrp8: left allmulticast mode [ 370.429023][T15637] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 370.607431][T15644] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 370.653981][T15651] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 370.663173][T15648] netlink: 'syz.2.2575': attribute type 10 has an invalid length. [ 370.681053][T15651] netlink: 'syz.0.2576': attribute type 2 has an invalid length. [ 370.721593][T15648] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 370.837319][T15657] netlink: 'syz.4.2577': attribute type 10 has an invalid length. [ 370.856266][T15657] netlink: 'syz.4.2577': attribute type 10 has an invalid length. [ 370.900222][T15660] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 370.931551][T15660] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 370.960094][T15657] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 370.997187][T15657] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 371.211060][T15680] __nla_validate_parse: 83 callbacks suppressed [ 371.211080][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 371.260347][T15680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2583'. [ 371.422869][T15686] syzkaller0: entered promiscuous mode [ 371.432511][T15686] syzkaller0: entered allmulticast mode [ 373.287524][T15716] sctp: [Deprecated]: syz.2.2593 (pid 15716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.287524][T15716] Use struct sctp_sack_info instead [ 373.323628][T15718] netlink: 'syz.1.2594': attribute type 21 has an invalid length. [ 373.379067][T15723] syzkaller0: entered promiscuous mode [ 373.410603][T15723] syzkaller0: entered allmulticast mode [ 373.806006][T15752] veth1: entered allmulticast mode [ 373.827072][T15749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2604'. [ 373.887935][T15755] xt_hashlimit: size too large, truncated to 1048576 [ 373.953051][T15757] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2606'. [ 373.998065][T15757] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 374.023630][T15757] 0ªX¹¦Dö»: entered allmulticast mode [ 374.168115][T15766] gre0: entered promiscuous mode [ 374.173926][T15766] gre0: entered allmulticast mode [ 374.268415][T15768] bond12: option lp_interval: invalid value (0) [ 374.289803][T15768] bond12: option lp_interval: allowed values 1 - 2147483647 [ 374.328948][T15768] bond12 (unregistering): Released all slaves [ 374.353532][T15774] netlink: 'syz.4.2611': attribute type 21 has an invalid length. [ 374.561091][T15776] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.592501][T15776] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.804963][T15791] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2615'. [ 374.822759][T15776] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.845961][T15776] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.995659][T15797] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2618'. [ 375.061199][T15776] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.085540][T15776] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.318413][T15776] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.334752][T15776] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.521083][T15828] xt_hashlimit: size too large, truncated to 1048576 [ 375.530040][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.875260][ T57] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.902733][ T57] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.959498][ T57] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.980520][ T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.011199][ T1131] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.022706][ T1131] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.093240][T11811] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.120236][T11811] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.164841][T15851] nbd: must specify a device to reconfigure [ 376.240985][T15854] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 376.368516][T15869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.443979][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2635'. [ 376.460078][T15858] 8021q: adding VLAN 0 to HW filter on device bond13 [ 376.492066][T15858] bond12: (slave bond13): making interface the new active one [ 376.500454][T15858] bond12: (slave bond13): Enslaving as an active interface with an up link [ 376.578481][T15868] bond12: (slave gretap0): Enslaving as a backup interface with an up link [ 376.640965][T15854] 8021q: adding VLAN 0 to HW filter on device bond12 [ 376.708985][T15884] tipc: Enabling of bearer rejected, failed to enable media [ 376.889912][T15889] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2645'. [ 376.917507][T15889] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2645'. [ 376.950517][T15889] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2645'. [ 377.271764][T15911] xt_policy: output policy not valid in PREROUTING and INPUT [ 377.291719][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2650'. [ 377.490568][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'. [ 377.610700][T15930] atomic_op ffff88807d9dd998 conn xmit_atomic 0000000000000000 [ 377.734757][T15934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2658'. [ 377.753387][T15940] tipc: Enabling of bearer rejected, failed to enable media [ 377.767492][T15940] openvswitch: netlink: IPv4 tunnel dst address is zero [ 377.882989][T15947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.129929][T15959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.332104][T15972] only policy match revision 0 supported [ 378.333742][T15972] unable to load match [ 378.582022][T15983] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2674'. [ 378.976905][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2679'. [ 379.027081][ T313] tipc: Subscription rejected, illegal request [ 379.107132][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 379.618082][T16021] netlink: 'syz.2.2686': attribute type 3 has an invalid length. [ 379.640466][T16021] netlink: 'syz.2.2686': attribute type 1 has an invalid length. [ 379.663511][T16021] openvswitch: netlink: IP tunnel dst address not specified [ 379.734568][T16021] bond10: (slave erspan0): Device is not bonding slave [ 379.742398][T16021] bond10: option active_slave: invalid value (erspan0) [ 379.756287][T16021] bond10 (unregistering): Released all slaves [ 380.396090][T16055] tunl0: entered promiscuous mode [ 380.417997][T16055] netlink: 'syz.2.2694': attribute type 3 has an invalid length. [ 380.955132][T16088] netlink: 'syz.3.2702': attribute type 32 has an invalid length. [ 381.044216][T16088] bond12: option coupled_control: invalid value (192) [ 381.068737][T16088] bond12 (unregistering): Released all slaves [ 381.122239][T16096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.134377][T16096] netlink: 'syz.0.2704': attribute type 3 has an invalid length. [ 381.264490][T16084] syzkaller0: entered promiscuous mode [ 381.298645][T16084] syzkaller0: entered allmulticast mode [ 381.503138][T16110] xt_l2tp: invalid flags combination: 8 [ 381.561654][T16112] __nla_validate_parse: 7 callbacks suppressed [ 381.561672][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 381.612473][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2707'. [ 381.628153][T16112] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.2708'. [ 381.669073][T16112] netlink: 'syz.2.2708': attribute type 1 has an invalid length. [ 382.047716][T16134] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2715'. [ 382.432032][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'. [ 382.520565][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'. [ 382.583392][T16144] bridge0: port 3(team0) entered disabled state [ 382.590762][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.639789][T16144] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.749552][T16159] xfrm1: entered promiscuous mode [ 382.781821][T16159] xfrm1: entered allmulticast mode [ 383.019143][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 383.075694][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'. [ 383.092296][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 383.101960][T16198] netlink: 'syz.1.2730': attribute type 12 has an invalid length. [ 383.120180][T16201] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 383.154441][T16198] netlink: 'syz.1.2730': attribute type 11 has an invalid length. [ 383.292665][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'. [ 383.313359][T16201] 8021q: adding VLAN 0 to HW filter on device bond11 [ 383.340432][T16205] bond11: (slave gretap1): making interface the new active one [ 383.350315][T16205] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 383.628306][T16232] sctp: [Deprecated]: syz.1.2737 (pid 16232) Use of int in maxseg socket option. [ 383.628306][T16232] Use struct sctp_assoc_value instead [ 383.653838][T16226] netlink: 'syz.0.2738': attribute type 2 has an invalid length. [ 383.752064][T16229] tipc: Enabling of bearer rejected, failed to enable media [ 384.647560][T16284] netlink: zone id is out of range [ 384.670644][T16284] netlink: zone id is out of range [ 384.701548][T16284] netlink: zone id is out of range [ 384.743426][T16284] netlink: zone id is out of range [ 384.756311][T16284] netlink: zone id is out of range [ 384.771178][T16284] netlink: zone id is out of range [ 384.787534][T16284] netlink: zone id is out of range [ 384.804257][T16284] netlink: zone id is out of range [ 384.820467][T16284] netlink: zone id is out of range [ 384.841233][T16284] netlink: zone id is out of range [ 385.120200][T16302] geneve3: entered promiscuous mode [ 385.133772][T16302] geneve3: entered allmulticast mode [ 385.159691][ T57] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 385.187283][ T57] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 385.199320][ T57] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 385.220034][ T57] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 385.405385][T16315] validate_nla: 2 callbacks suppressed [ 385.405479][T16315] netlink: 'syz.3.2763': attribute type 1 has an invalid length. [ 385.572596][T16315] bond12: entered promiscuous mode [ 385.578624][T16315] 8021q: adding VLAN 0 to HW filter on device bond12 [ 385.618199][T16321] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 385.677875][T16318] bond12: (slave bridge6): making interface the new active one [ 385.700232][T16318] bridge6: entered promiscuous mode [ 385.724050][T16318] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 385.787236][T16329] 0·: renamed from hsr0 (while UP) [ 385.802806][T16329] 0·: entered allmulticast mode [ 385.814672][T16329] hsr_slave_0: entered allmulticast mode [ 385.849165][T16329] hsr_slave_1: entered allmulticast mode [ 386.221477][T16352] bond0: Device is already in use. [ 386.596853][T16375] IPv6: Can't replace route, no match found [ 386.786905][T16377] syzkaller0: entered promiscuous mode [ 386.814600][T16377] syzkaller0: entered allmulticast mode [ 386.879923][T16391] tipc: Enabling of bearer rejected, failed to enable media [ 386.980725][T16389] bridge0: port 1(syz_tun) entered blocking state [ 386.987428][T16389] bridge0: port 1(syz_tun) entered forwarding state [ 387.389076][T16413] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 387.413405][T16409] __nla_validate_parse: 5 callbacks suppressed [ 387.413424][T16409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2792'. [ 387.460591][T16409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2792'. [ 387.566084][T16421] netlink: 'syz.3.2796': attribute type 83 has an invalid length. [ 387.573781][T16423] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2797'. [ 387.760943][T16427] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2799'. [ 387.793567][T16427] netlink: 'syz.4.2799': attribute type 9 has an invalid length. [ 387.793711][T16432] bridge5: entered promiscuous mode [ 387.807964][T16432] bridge5: entered allmulticast mode [ 388.448510][T16458] ip6erspan0: entered allmulticast mode [ 388.481055][T16461] macvlan0: entered promiscuous mode [ 388.523304][T16470] netlink: 'syz.2.2811': attribute type 1 has an invalid length. [ 388.540933][T16470] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2811'. [ 391.216400][T16534] netlink: 'syz.0.2828': attribute type 2 has an invalid length. [ 391.243908][T16534] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 391.270913][T16538] net_ratelimit: 7 callbacks suppressed [ 391.271000][T16538] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 391.287757][T16538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.487214][T16548] tipc: Enabling of bearer rejected, failed to enable media [ 392.133366][T16585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2837'. [ 392.387264][T16599] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 392.415764][T16599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.504399][T16603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2843'. [ 392.568805][T16606] netlink: 'syz.0.2844': attribute type 1 has an invalid length. [ 392.589385][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'. [ 392.610736][T16606] netlink: 'syz.0.2844': attribute type 5 has an invalid length. [ 392.628592][T16606] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2844'. [ 392.967692][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'. [ 392.982907][T16624] can: request_module (can-proto-0) failed. [ 393.048545][T16633] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2852'. [ 393.217075][T16633] syzkaller0: entered promiscuous mode [ 393.232193][T16633] syzkaller0: entered allmulticast mode [ 393.706303][ T4942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.719649][ T4942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.732025][ T4942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.742993][ T4942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.753213][ T4942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.795913][ T48] bond6: (slave ip6gretap1): link status up again after 0 ms [ 393.846554][T11818] bond6: (slave ip6gretap1): link status up again after 0 ms [ 393.918390][ T57] bond6: (slave ip6gretap1): link status up again after 0 ms [ 393.966834][ T57] bond6: (slave ip6gretap1): link status up again after 0 ms [ 394.025866][ T57] bond6: (slave ip6gretap1): link status up again after 0 ms [ 394.066660][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 394.100293][T16674] netlink: 'syz.4.2861': attribute type 83 has an invalid length. [ 394.313894][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2862'. [ 394.495416][T16682] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 394.717845][ T48] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.785559][ T48] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.116204][ T48] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.155151][ T48] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.188494][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2871'. [ 395.502556][ T48] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.551217][ T48] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.826624][ T4942] Bluetooth: hci5: command tx timeout [ 395.873240][ T48] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.887128][ T48] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.969853][T16661] lo speed is unknown, defaulting to 1000 [ 395.998844][T16756] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2877'. [ 396.178605][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 396.370125][T16762] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 396.394218][T16762] bond10 (unregistering): Released all slaves [ 396.466722][ T12] net_ratelimit: 9 callbacks suppressed [ 396.466742][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 396.626265][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 396.758769][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'. [ 396.836504][T11815] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 397.065488][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 397.133304][ T48] team0: left allmulticast mode [ 397.152421][ T48] team_slave_0: left allmulticast mode [ 397.176238][ T48] team_slave_1: left allmulticast mode [ 397.194871][ T48] team0: left promiscuous mode [ 397.213933][ T48] team_slave_0: left promiscuous mode [ 397.239564][ T48] team_slave_1: left promiscuous mode [ 397.271040][ T48] bridge0: port 3(team0) entered disabled state [ 397.322953][ T48] bridge_slave_1: left allmulticast mode [ 397.351037][ T48] bridge_slave_1: left promiscuous mode [ 397.380239][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.419019][ T48] bridge_slave_0: left allmulticast mode [ 397.437743][ T48] bridge_slave_0: left promiscuous mode [ 397.458149][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.584158][ T48] tipc: Resetting bearer [ 397.740420][ T1533] block nbd1: Possible stuck request ffff888027505080: control (read@0,1024B). Runtime 30 seconds [ 397.767889][ T1533] block nbd1: Possible stuck request ffff888027505240: control (read@1024,1024B). Runtime 30 seconds [ 397.779051][ T1533] block nbd1: Possible stuck request ffff888027505400: control (read@2048,1024B). Runtime 30 seconds [ 397.792437][ T1533] block nbd1: Possible stuck request ffff8880275055c0: control (read@3072,1024B). Runtime 30 seconds [ 397.896148][ T4942] Bluetooth: hci5: command tx timeout [ 398.074347][ T48] tipc: Disabling bearer [ 398.211742][ T48] bond11 (unregistering): (slave gretap1): Releasing active interface [ 398.354553][ T48] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 398.364210][ T48] bridge4 (unregistering): left promiscuous mode [ 398.380453][ T48] bridge4 (unregistering): left allmulticast mode [ 398.395180][ T48] bond0 (unregistering): (slave bridge5): Releasing backup interface [ 398.404632][ T48] bridge5 (unregistering): left promiscuous mode [ 398.438245][ T48] bond1 (unregistering): Released all slaves [ 398.463151][ T48] bond2 (unregistering): Released all slaves [ 398.488406][ T48] bond3 (unregistering): Released all slaves [ 398.518410][ T48] bond4 (unregistering): Released all slaves [ 398.549019][ T48] bond5 (unregistering): Released all slaves [ 398.579969][ T48] bond6 (unregistering): Released all slaves [ 398.603133][ T48] bond7 (unregistering): Released all slaves [ 398.633272][ T48] bond8 (unregistering): Released all slaves [ 398.666772][ T48] bond0 (unregistering): Released all slaves [ 398.689338][ T48] bond9 (unregistering): Released all slaves [ 398.710740][ T48] bond10 (unregistering): Released all slaves [ 398.741843][ T48] bond11 (unregistering): Released all slaves [ 398.817493][T16810] vcan1: entered promiscuous mode [ 398.850967][T16810] vcan1: entered allmulticast mode [ 398.955530][ T1131] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 399.017812][T16857] xt_hashlimit: size too large, truncated to 1048576 [ 399.088102][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 399.131841][ T48] tipc: Disabling bearer [ 399.163825][ T48] tipc: Left network mode [ 399.227190][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 399.366720][ T1131] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 399.522224][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 399.573495][T16874] netlink: 'syz.3.2895': attribute type 13 has an invalid length. [ 399.839503][T16661] lo speed is unknown, defaulting to 1000 [ 399.858128][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 399.892098][T16661] xfrm0 speed is unknown, defaulting to 1000 [ 399.989607][ T4942] Bluetooth: hci5: command tx timeout [ 400.560183][T16869] __nla_validate_parse: 1 callbacks suppressed [ 400.560203][T16869] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2893'. [ 401.159351][T16868] lo speed is unknown, defaulting to 1000 [ 401.401926][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'. [ 401.430916][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2906'. [ 401.452696][T16902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2902'. [ 401.470269][T16902] netlink: 75 bytes leftover after parsing attributes in process `syz.2.2902'. [ 401.565481][T11818] net_ratelimit: 5 callbacks suppressed [ 401.565501][T11818] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 401.804358][T16943] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 401.863447][T16940] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2909'. [ 402.055512][ T4942] Bluetooth: hci5: command tx timeout [ 402.123507][T16940] bond13: (slave bridge8): making interface the new active one [ 402.133037][T16940] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 402.145399][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.261171][T16952] vxcan2: entered promiscuous mode [ 402.271594][T16952] vxcan2: entered allmulticast mode [ 402.316797][ T1131] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.326671][T16954] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1Y#­¦ûËŒ [ 402.326671][T16954] d]WÊ”+NC”m­÷Y<ƒ­9Åê [ 402.505411][T16964] xt_l2tp: missing protocol rule (udp|l2tpip) [ 402.511701][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.558517][T16661] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.575457][T16661] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.595642][T16661] bridge_slave_0: entered allmulticast mode [ 402.605176][T16661] bridge_slave_0: entered promiscuous mode [ 402.623913][T16661] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.647675][T16661] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.671756][T16661] bridge_slave_1: entered allmulticast mode [ 402.700223][T16661] bridge_slave_1: entered promiscuous mode [ 402.782955][T16970] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 402.839282][T16661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.874414][T16661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.895937][T16868] lo speed is unknown, defaulting to 1000 [ 403.051176][T16868] xfrm0 speed is unknown, defaulting to 1000 [ 403.126050][T16983] xt_hashlimit: size too large, truncated to 1048576 [ 403.157125][T16661] team0: Port device team_slave_0 added [ 403.184185][T16661] team0: Port device team_slave_1 added [ 403.537641][T16661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.559279][T16661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.635425][T16661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.869820][T16661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.887499][T16661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.928983][T16661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.040075][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 404.093714][T17009] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2923'. [ 404.339620][T17009] 8021q: VLANs not supported on ip_vti0 [ 404.366147][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'. [ 404.402807][T16661] hsr_slave_0: entered promiscuous mode [ 404.417872][T16661] hsr_slave_1: entered promiscuous mode [ 404.434562][T17012] netlink: 'syz.1.2924': attribute type 1 has an invalid length. [ 404.455702][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.464100][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.496497][ T48] veth1_vlan: left promiscuous mode [ 404.677445][T17019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2926'. [ 405.251365][ T48] team0 (unregistering): Port device team_slave_1 removed [ 405.275016][ T48] team0 (unregistering): Port device team_slave_0 removed [ 405.321296][T11811] smc: removing ib device syz1 [ 405.436777][T17012] 8021q: adding VLAN 0 to HW filter on device bond14 [ 405.445482][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 405.474916][T16166] syz1: Port: 1 Link DOWN [ 405.809029][T11811] smbdirect: ib_dev[syz1] removed [ 406.716074][T17072] netlink: 'syz.1.2938': attribute type 11 has an invalid length. [ 406.742379][T17072] netlink: 1092 bytes leftover after parsing attributes in process `syz.1.2938'. [ 406.808268][T17078] netlink: 'syz.2.2941': attribute type 7 has an invalid length. [ 406.835957][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 406.940032][T17078] netlink: 'syz.2.2941': attribute type 7 has an invalid length. [ 407.013844][ T63] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.054254][ T63] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.222511][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 407.325704][T17096] netlink: 'syz.2.2946': attribute type 1 has an invalid length. [ 407.339967][T17096] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2946'. [ 407.451747][ T63] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.526872][ T63] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.565021][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.599517][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 407.758054][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.841394][T17111] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 408.035543][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 408.550098][T17135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.560443][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 408.685538][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 408.836906][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 408.900473][T17150] netlink: 'syz.2.2951': attribute type 10 has an invalid length. [ 408.953830][T17151] netlink: 'syz.2.2951': attribute type 10 has an invalid length. [ 409.080733][T17156] netlink: zone id is out of range [ 409.114961][T17156] netlink: zone id is out of range [ 409.130527][T17156] netlink: zone id is out of range [ 409.288435][T17153] bond14: entered promiscuous mode [ 409.300312][T17153] bond14: entered allmulticast mode [ 409.318271][T17153] 8021q: adding VLAN 0 to HW filter on device bond14 [ 409.544813][T17169] netlink: 'syz.3.2954': attribute type 12 has an invalid length. [ 409.922297][T16661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.977997][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.019721][T16661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.070193][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.242741][T16661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.276728][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.316395][T16661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.381647][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.422323][ T48] IPVS: stop unused estimator thread 0... [ 410.443043][T17201] bridge0: entered promiscuous mode [ 410.463009][T17201] bridge0: entered allmulticast mode [ 410.622843][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 410.701199][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 410.741095][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 410.792241][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 410.807720][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 410.889129][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 410.956852][T16661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.004956][T16661] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.055182][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.062549][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.132523][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.139792][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.223637][T17234] batadv1: entered allmulticast mode [ 411.679042][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'. [ 411.792918][T17268] IPVS: set_ctl: invalid protocol: 135 172.30.0.4:20003 [ 412.076032][T11806] net_ratelimit: 13 callbacks suppressed [ 412.076053][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.261421][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.471903][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.597103][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.639089][T16661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.791177][T16661] veth0_vlan: entered promiscuous mode [ 412.810574][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.811721][T17304] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2977'. [ 412.850250][T17304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2977'. [ 412.851044][T16661] veth1_vlan: entered promiscuous mode [ 412.957363][T16661] veth0_macvtap: entered promiscuous mode [ 412.986242][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 413.003660][T16661] veth1_macvtap: entered promiscuous mode [ 413.082425][T16661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.117254][T16661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.163220][ T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.189891][ T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.212452][ T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.233597][ T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.295912][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 413.415677][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 413.525589][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 413.657037][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 414.592766][T17256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.812892][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.855126][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.955192][T11806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.987501][T11806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.998877][T17421] syzkaller0: entered promiscuous mode [ 416.024376][T17421] syzkaller0: entered allmulticast mode [ 416.143676][T17432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2995'. [ 416.167724][T17434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2994'. [ 416.895005][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.908990][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 416.920089][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 416.938159][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 416.950286][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.122261][T17468] syzkaller0: entered promiscuous mode [ 417.128292][T17468] syzkaller0: entered allmulticast mode [ 417.135377][T11811] net_ratelimit: 19 callbacks suppressed [ 417.135393][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 417.414247][T17489] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 417.455149][T17493] sctp: [Deprecated]: syz.4.3007 (pid 17493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.455149][T17493] Use struct sctp_sack_info instead [ 417.576177][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 418.024869][T17488] netlink: 'syz.2.3009': attribute type 11 has an invalid length. [ 418.280384][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3014'. [ 419.015503][ T4942] Bluetooth: hci0: command tx timeout [ 419.875391][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 419.989464][T17533] IPv6: sit2: Disabled Multicast RS [ 420.043114][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 420.186397][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 420.214387][T17545] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3017'. [ 420.243792][T17552] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 420.319420][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 420.445409][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 420.486811][T17560] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 420.559212][T17566] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 420.576414][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 420.679152][T17571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3024'. [ 420.709223][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 420.977349][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'. [ 421.095483][ T4942] Bluetooth: hci0: command tx timeout [ 421.103673][T17465] lo speed is unknown, defaulting to 1000 [ 421.110698][T17591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 421.239877][T17594] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 421.669830][T17610] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 421.714618][T17611] netlink: 'syz.0.3033': attribute type 12 has an invalid length. [ 421.800566][T17465] lo speed is unknown, defaulting to 1000 [ 421.938037][T17465] xfrm0 speed is unknown, defaulting to 1000 [ 422.193147][ T12] net_ratelimit: 5 callbacks suppressed [ 422.193166][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 422.306581][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3041'. [ 422.599518][T17659] netlink: 'syz.0.3046': attribute type 13 has an invalid length. [ 422.653710][T17651] syzkaller0: entered promiscuous mode [ 422.660653][T17651] syzkaller0: entered allmulticast mode [ 422.828074][T17665] IPv6: sit1: Disabled Multicast RS [ 422.895629][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 423.175694][ T4942] Bluetooth: hci0: command tx timeout [ 423.215494][T17676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 423.581433][T17685] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 424.024256][T17695] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 424.032381][T17695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.255823][ T4942] Bluetooth: hci0: command tx timeout [ 425.622375][T17465] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.644939][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.660905][T17465] bridge_slave_0: entered allmulticast mode [ 425.677370][T17465] bridge_slave_0: entered promiscuous mode [ 425.707574][T17465] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.728374][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.747285][T17710] "syz.4.3059" (17710) uses obsolete ecb(arc4) skcipher [ 425.764689][T17465] bridge_slave_1: entered allmulticast mode [ 425.779808][T17465] bridge_slave_1: entered promiscuous mode [ 425.904585][T17465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.949862][T17465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.063536][T17721] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3063'. [ 426.090771][T17465] team0: Port device team_slave_0 added [ 426.114072][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 426.127399][T17465] team0: Port device team_slave_1 added [ 426.239574][T17465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.264659][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.295204][T17730] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 426.314723][T17730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.348822][T17465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.382098][T17465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.403180][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.441744][T17465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.473692][T17733] netlink: 'syz.2.3067': attribute type 3 has an invalid length. [ 426.492915][T17733] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3067'. [ 426.672277][T17465] hsr_slave_0: entered promiscuous mode [ 426.701211][T17465] hsr_slave_1: entered promiscuous mode [ 426.716109][T17465] debugfs: 'hsr0' already exists in 'hsr' [ 426.722057][T17465] Cannot create hsr debugfs directory [ 426.756550][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3069'. [ 426.843505][T17752] netlink: 'syz.4.3069': attribute type 9 has an invalid length. [ 426.851616][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 426.973003][T17754] syzkaller1: entered promiscuous mode [ 426.981422][T17754] syzkaller1: entered allmulticast mode [ 426.991264][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'. [ 427.006320][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.034923][T17758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 427.058978][T17756] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 427.072273][T17756] bond10 (unregistering): Released all slaves [ 427.350024][T17773] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 427.369046][T17773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.559199][T17780] bond15: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 427.566758][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 427.579366][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'. [ 427.594268][T17780] bond15 (unregistering): Released all slaves [ 427.756470][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.817829][ T1533] block nbd1: Possible stuck request ffff888027505080: control (read@0,1024B). Runtime 60 seconds [ 427.828631][ T1533] block nbd1: Possible stuck request ffff888027505240: control (read@1024,1024B). Runtime 60 seconds [ 427.839622][ T1533] block nbd1: Possible stuck request ffff888027505400: control (read@2048,1024B). Runtime 60 seconds [ 427.850600][ T1533] block nbd1: Possible stuck request ffff8880275055c0: control (read@3072,1024B). Runtime 60 seconds [ 427.960213][T17798] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3083'. [ 427.971476][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.156686][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.421788][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.520302][T17828] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 428.547916][T17828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.580542][T17830] tipc: Enabled bearer , priority 0 [ 428.592293][T17830] syzkaller0: entered promiscuous mode [ 428.598616][T17830] syzkaller0: entered allmulticast mode [ 428.609227][T17830] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 428.680296][T17830] tipc: Resetting bearer [ 428.739252][T17829] tipc: Resetting bearer [ 428.757666][T17829] tipc: Disabling bearer [ 428.769006][T17836] veth1_to_bond: entered allmulticast mode [ 428.777413][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 428.806704][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.832263][T17836] veth1_to_bond (unregistering): left allmulticast mode [ 429.054153][T17465] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.084982][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.106854][T17465] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.150422][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.175121][T17465] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.194321][T17856] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 429.230096][T17857] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 429.250688][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.273540][T17465] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.320449][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.406304][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 429.516335][T17878] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 429.709335][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.809271][T17465] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.844866][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.852243][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.872985][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.880207][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.021095][T17899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.272861][T17911] netlink: 'syz.2.3108': attribute type 11 has an invalid length. [ 430.797585][T17938] Cannot find set identified by id 65534 to match [ 430.941737][T17946] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 431.367770][T17965] xt_hashlimit: size too large, truncated to 1048576 [ 431.433550][T17970] syzkaller1: entered promiscuous mode [ 431.470236][T17970] syzkaller1: left promiscuous mode [ 431.491427][T17465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.574938][T17465] veth0_vlan: entered promiscuous mode [ 431.602129][T17465] veth1_vlan: entered promiscuous mode [ 431.648142][T17465] veth0_macvtap: entered promiscuous mode [ 431.674520][T17465] veth1_macvtap: entered promiscuous mode [ 431.717662][T17973] __nla_validate_parse: 6 callbacks suppressed [ 431.717682][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 431.734279][T17973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'. [ 431.765194][T17465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.782480][T17465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.802674][T11811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.826752][T11811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.846595][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.862859][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.445858][ T57] net_ratelimit: 22 callbacks suppressed [ 432.445876][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.565522][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.675998][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.785492][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.895664][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.005466][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.125560][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.245547][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.355765][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.467043][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.484854][T17919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.681036][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.721582][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.842781][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.864403][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.052398][T18006] syzkaller1: entered promiscuous mode [ 434.077100][T18017] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 434.077100][T18017] Please contact the netfilter-devel mailing list or update your nftables rules. [ 434.111299][T18006] syzkaller1: entered allmulticast mode [ 434.124297][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.180778][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.197452][T18025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.230676][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.245615][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.303503][T18025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.316332][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.340158][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 434.961533][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.976395][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.986658][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.997283][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.005979][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.189992][T18066] netlink: 'syz.1.3141': attribute type 1 has an invalid length. [ 435.215581][T18066] netlink: 'syz.1.3141': attribute type 1 has an invalid length. [ 435.408561][ T5641] bridge0: port 1(syz_tun) entered disabled state [ 435.439928][T18081] netlink: 'syz.2.3143': attribute type 16 has an invalid length. [ 435.469789][ T5641] syz_tun (unregistering): left allmulticast mode [ 435.492999][ T5641] syz_tun (unregistering): left promiscuous mode [ 435.513664][ T5641] bridge0: port 1(syz_tun) entered disabled state [ 435.585238][T18086] netlink: 'syz.1.3145': attribute type 11 has an invalid length. [ 436.002563][T18103] netlink: 'syz.1.3150': attribute type 33 has an invalid length. [ 436.061653][T18105] syzkaller0: entered promiscuous mode [ 436.072359][T18105] syzkaller0: entered allmulticast mode [ 436.459799][T18120] netlink: 'syz.1.3156': attribute type 1 has an invalid length. [ 436.729045][T18125] bond15: (slave geneve5): Opening slave failed [ 436.791298][T18142] netlink: 'syz.0.3160': attribute type 7 has an invalid length. [ 436.819858][T18142] __nla_validate_parse: 192 callbacks suppressed [ 436.819879][T18142] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3160'. [ 436.930170][T18150] netlink: 'syz.0.3160': attribute type 16 has an invalid length. [ 436.946008][T18150] netlink: 'syz.0.3160': attribute type 17 has an invalid length. [ 436.966893][T18127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.978120][T18127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.990060][T18127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 437.000500][T18127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.069144][T18127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.079985][T18127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.096691][ T4942] Bluetooth: hci3: command tx timeout [ 437.129653][T18133] 8021q: adding VLAN 0 to HW filter on device bond15 [ 437.164567][ T810] lo speed is unknown, defaulting to 1000 [ 437.190088][T18147] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.200992][T18147] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.270766][T18058] lo speed is unknown, defaulting to 1000 [ 437.361900][T18150] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.369251][T18150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.408710][T18150] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.415943][T18150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.499272][T18150] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 437.580011][T18150] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 437.599560][T18150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.658520][ T5745] xfrm0 speed is unknown, defaulting to 1000 [ 437.732014][T18058] lo speed is unknown, defaulting to 1000 [ 437.746169][ T48] net_ratelimit: 18 callbacks suppressed [ 437.746188][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 437.797885][T18058] xfrm0 speed is unknown, defaulting to 1000 [ 437.991186][T18166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.000280][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 438.139152][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 438.400399][T18138] lo speed is unknown, defaulting to 1000 [ 438.445578][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 438.556084][T18184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3173'. [ 438.605472][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 438.806468][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 438.819128][T18190] netlink: 'syz.3.3174': attribute type 1 has an invalid length. [ 438.853218][T18194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3175'. [ 438.869268][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 439.049965][T18138] lo speed is unknown, defaulting to 1000 [ 439.071767][T18138] xfrm0 speed is unknown, defaulting to 1000 [ 439.123955][T18058] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.137665][T18058] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.148364][T18058] bridge_slave_0: entered allmulticast mode [ 439.166581][T18058] bridge_slave_0: entered promiscuous mode [ 439.175508][ T4942] Bluetooth: hci3: command tx timeout [ 439.221538][T18058] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.230002][T18058] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.237563][T18058] bridge_slave_1: entered allmulticast mode [ 439.245657][T18058] bridge_slave_1: entered promiscuous mode [ 439.379111][T18058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.392318][T18058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.571327][T18058] team0: Port device team_slave_0 added [ 439.601227][T18058] team0: Port device team_slave_1 added [ 439.732371][T18226] sock: sock_timestamping_bind_phc: sock not bind to device [ 439.883028][T18058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.913978][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.946202][T18058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.026550][T18058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.045426][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.124250][T18058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.278500][T18235] syzkaller0: entered promiscuous mode [ 440.292167][T18235] syzkaller0: entered allmulticast mode [ 440.307250][T18237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.337707][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 440.395387][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 440.409140][T18239] validate_nla: 1 callbacks suppressed [ 440.409159][T18239] netlink: 'syz.3.3187': attribute type 12 has an invalid length. [ 440.424554][T18239] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3187'. [ 440.522579][T18242] netlink: 'syz.1.3189': attribute type 24 has an invalid length. [ 440.627525][T18058] hsr_slave_0: entered promiscuous mode [ 440.654377][T18058] hsr_slave_1: entered promiscuous mode [ 440.671183][T18058] debugfs: 'hsr0' already exists in 'hsr' [ 440.677686][T18058] Cannot create hsr debugfs directory [ 440.701515][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 441.264879][ T4942] Bluetooth: hci3: command tx timeout [ 442.845881][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 442.966748][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 443.171045][T18058] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.188401][T18058] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.223214][T18058] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.306313][T18296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 443.345555][ T4942] Bluetooth: hci3: command tx timeout [ 443.361523][T18293] veth0_to_bond: entered allmulticast mode [ 443.516493][T18305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.566030][T18058] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.576263][T18058] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.588200][T18058] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.676645][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 443.752269][T18058] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.798416][T18058] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.844727][T18058] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.909587][T18321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.995773][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.007925][T18058] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.030584][T18058] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.052108][T18058] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.196396][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.327562][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.430989][T18340] netlink: 'syz.0.3212': attribute type 1 has an invalid length. [ 444.475448][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.680276][T18348] pimreg: entered allmulticast mode [ 444.735414][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.870571][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.927215][T18058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.949285][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.970161][T18058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.010933][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.037537][T18058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.076745][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.118829][T18058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.157756][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.212018][ T5287] veth0_vlan: left promiscuous mode [ 445.254877][T16170] veth0_vlan: entered promiscuous mode [ 445.419392][T18382] Bluetooth: MGMT ver 1.23 [ 445.433057][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 445.644581][T18058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.759906][T18394] vlan3: entered promiscuous mode [ 445.776033][T18394] bridge0: entered promiscuous mode [ 445.783661][T18396] netlink: 'syz.3.3224': attribute type 11 has an invalid length. [ 445.837331][T18058] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.899917][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.907185][T11806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.987277][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.994485][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.113248][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'. [ 446.240776][T18412] gre1: entered promiscuous mode [ 446.263352][T18412] gre1: entered allmulticast mode [ 446.312494][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 446.348937][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3230'. [ 446.449244][T18424] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 446.654859][T18440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3232'. [ 446.747006][T18443] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 447.078611][T18446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.104606][T18465] netlink: 'syz.2.3238': attribute type 10 has an invalid length. [ 447.119842][T18446] bond1: (slave bond2): making interface the new active one [ 447.142323][T18446] bond1: (slave bond2): Enslaving as an active interface with an up link [ 447.257447][T18449] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 447.322287][T18475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.358529][T18475] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 447.373130][T18475] bond0 (unregistering): Released all slaves [ 447.496268][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 447.504840][ T4942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 447.739840][T18486] xt_bpf: check failed: parse error [ 447.885750][ T63] net_ratelimit: 9 callbacks suppressed [ 447.885769][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 448.037769][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 448.188521][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 448.219430][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3250'. [ 448.253572][T18518] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3251'. [ 448.329980][T18058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.366433][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 448.507912][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 448.643859][T18538] netlink: 'syz.3.3255': attribute type 32 has an invalid length. [ 448.647299][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 448.684166][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 448.837299][T18538] bond3: Setting coupled_control to off (0) [ 448.876567][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 449.047240][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 449.144638][T18552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3257'. [ 449.168410][T18058] veth0_vlan: entered promiscuous mode [ 449.189404][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 449.241612][T18058] veth1_vlan: entered promiscuous mode [ 449.280684][T18563] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3260'. [ 449.325436][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 449.512317][T18058] veth0_macvtap: entered promiscuous mode [ 449.536327][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 449.551791][T18058] veth1_macvtap: entered promiscuous mode [ 449.583665][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 449.650222][T18058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.713445][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 449.770113][T18058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.816981][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.877846][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.907728][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.951903][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.281591][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.313869][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.438096][T18602] netlink: 'syz.3.3272': attribute type 15 has an invalid length. [ 450.453060][T18600] netlink: 'syz.0.3269': attribute type 2 has an invalid length. [ 450.461691][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.482164][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3272'. [ 450.491319][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.977896][T18621] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3277'. [ 451.051982][T18624] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3278'. [ 451.138498][T18624] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.145954][T18624] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.259396][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.274417][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.287500][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.298694][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.308051][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.932300][T18655] sit1: entered promiscuous mode [ 451.937531][T18655] sit1: entered allmulticast mode [ 452.034143][T18663] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3287'. [ 452.289023][T18678] netlink: 'syz.4.3290': attribute type 30 has an invalid length. [ 452.301670][T18667] syzkaller0: entered promiscuous mode [ 452.308328][T18667] syzkaller0: entered allmulticast mode [ 453.420715][ T5625] Bluetooth: hci4: command tx timeout [ 454.308599][T18692] __nla_validate_parse: 2 callbacks suppressed [ 454.308620][T18692] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3293'. [ 454.365388][ T63] net_ratelimit: 15 callbacks suppressed [ 454.365409][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.441491][T18697] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3294'. [ 454.526899][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.618099][T18706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'. [ 454.645358][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.761981][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3298'. [ 454.771140][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.843333][T18713] syzkaller0: entered promiscuous mode [ 454.861298][T18713] syzkaller0: entered allmulticast mode [ 455.005564][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.126376][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.155436][T18728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3304'. [ 455.332774][T18742] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20002 [ 455.442724][T18628] lo speed is unknown, defaulting to 1000 [ 455.448645][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.500921][ T4942] Bluetooth: hci4: command tx timeout [ 455.557279][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.569098][T18754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.616246][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 455.717086][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 456.073415][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'. [ 456.093041][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'. [ 456.149866][T18780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'. [ 456.231386][T18780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'. [ 456.372306][T18628] lo speed is unknown, defaulting to 1000 [ 456.393845][T18628] xfrm0 speed is unknown, defaulting to 1000 [ 456.842901][T18816] netlink: 'syz.4.3325': attribute type 1 has an invalid length. [ 456.862145][T18816] nbd: couldn't find a device at index -1518993400 [ 456.962497][T18816] xt_l2tp: v2 doesn't support IP mode [ 457.180376][T18832] tc_dump_action: action bad kind [ 457.524518][T18839] tipc: Started in network mode [ 457.534599][T18839] tipc: Node identity eedc13e93062, cluster identity 4711 [ 457.542911][T18839] tipc: Enabled bearer , priority 0 [ 457.566901][T18854] xt_socket: unknown flags 0x8 [ 457.585891][ T4942] Bluetooth: hci4: command tx timeout [ 457.600372][T18843] syzkaller0: entered promiscuous mode [ 457.618927][T18843] syzkaller0: entered allmulticast mode [ 457.752397][T18847] bond16: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 457.774107][T18847] bond16 (unregistering): Released all slaves [ 457.801830][T18839] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 457.822559][T18628] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.841667][T18628] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.850650][T18628] bridge_slave_0: entered allmulticast mode [ 457.858944][T18628] bridge_slave_0: entered promiscuous mode [ 457.872295][T18860] tipc: Resetting bearer [ 457.898733][ T1533] block nbd1: Possible stuck request ffff888027505080: control (read@0,1024B). Runtime 90 seconds [ 457.909583][ T1533] block nbd1: Possible stuck request ffff888027505240: control (read@1024,1024B). Runtime 90 seconds [ 457.921122][ T1533] block nbd1: Possible stuck request ffff888027505400: control (read@2048,1024B). Runtime 90 seconds [ 457.932329][ T1533] block nbd1: Possible stuck request ffff8880275055c0: control (read@3072,1024B). Runtime 90 seconds [ 457.952394][T18628] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.966993][T18628] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.985974][T18628] bridge_slave_1: entered allmulticast mode [ 457.997570][T18628] bridge_slave_1: entered promiscuous mode [ 458.016242][T18838] tipc: Resetting bearer [ 458.036302][T18838] tipc: Disabling bearer [ 458.046981][T18864] tipc: Started in network mode [ 458.051926][T18864] tipc: Node identity 6ace38984308, cluster identity 4711 [ 458.062590][T18864] tipc: Enabled bearer , priority 0 [ 458.070501][T18867] syzkaller0: entered promiscuous mode [ 458.078920][T18867] syzkaller0: entered allmulticast mode [ 458.106060][T18870] macvtap0: Device is already in use. [ 458.114409][T18868] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 458.238967][ T9] IPVS: starting estimator thread 0... [ 458.246798][T18628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.268582][T18868] tipc: Resetting bearer [ 458.289499][T18628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.347045][T18876] IPVS: using max 27 ests per chain, 64800 per kthread [ 458.373431][T18861] tipc: Resetting bearer [ 458.405232][T18861] tipc: Disabling bearer [ 458.477433][T18628] team0: Port device team_slave_0 added [ 458.524507][T18628] team0: Port device team_slave_1 added [ 458.669916][T18628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.702390][T18628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.787350][T18628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.820275][T18628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.845653][T18628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.921367][T18628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.998744][T18899] vlan4: entered allmulticast mode [ 459.017878][T18899] bond0: entered allmulticast mode [ 459.040555][T18899] bond_slave_0: entered allmulticast mode [ 459.068496][T18899] bond_slave_1: entered allmulticast mode [ 459.080120][T18899] batadv0: entered allmulticast mode [ 459.118699][T18905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.171712][T18905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.378153][T18628] hsr_slave_0: entered promiscuous mode [ 459.413025][T18628] hsr_slave_1: entered promiscuous mode [ 459.438619][T18628] debugfs: 'hsr0' already exists in 'hsr' [ 459.445082][T18925] IPv6: NLM_F_REPLACE set, but no existing node found! [ 459.452466][T18628] Cannot create hsr debugfs directory [ 459.463428][T18926] IPv6: NLM_F_REPLACE set, but no existing node found! [ 459.496618][ T313] net_ratelimit: 10 callbacks suppressed [ 459.496636][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 459.656927][ T4942] Bluetooth: hci4: command tx timeout [ 459.676214][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.009502][T18945] __nla_validate_parse: 8 callbacks suppressed [ 460.009522][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 460.043487][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 460.259148][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.323031][T18957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3361'. [ 460.334095][T18628] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.503167][T18967] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 460.517030][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.568935][T18628] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.697978][T18972] veth1_macvtap: left promiscuous mode [ 460.713496][T18972] macsec0: entered promiscuous mode [ 460.724967][T18972] macsec0: entered allmulticast mode [ 460.778656][T18628] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.844995][T18972] veth1_macvtap: entered promiscuous mode [ 460.858790][T18972] veth1_macvtap: entered allmulticast mode [ 460.876115][T18972] macsec0: left promiscuous mode [ 460.881641][T18972] macsec0: left allmulticast mode [ 460.887207][T18972] veth1_macvtap: left allmulticast mode [ 460.904498][T18628] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.999449][T18972] syzkaller0: entered promiscuous mode [ 461.005144][T18972] syzkaller0: entered allmulticast mode [ 462.909146][T18981] syzkaller0: entered promiscuous mode [ 462.915692][T18981] syzkaller0: entered allmulticast mode [ 462.927278][T18982] tipc: Enabled bearer , priority 0 [ 462.996869][T18971] tipc: Resetting bearer [ 463.068152][T18971] tipc: Disabling bearer [ 463.105607][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 463.229413][T19001] netlink: 59755 bytes leftover after parsing attributes in process `syz.4.3371'. [ 463.276762][T19001] netlink: 59755 bytes leftover after parsing attributes in process `syz.4.3371'. [ 463.297217][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 463.376692][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 463.525578][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 463.677614][T18628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.729910][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.785580][T18628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.802836][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.898050][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 463.922276][T18628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.960569][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.987663][T19043] openvswitch: netlink: Missing valid actions attribute. [ 463.995029][T19037] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3379'. [ 464.010577][T19042] ip6tnl0: Caught tx_queue_len zero misconfig [ 464.029415][T18628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.034879][T19042] netlink: 'syz.0.3381': attribute type 33 has an invalid length. [ 464.051513][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.112549][T19042] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 464.130091][T19042] bond1 (unregistering): Released all slaves [ 464.270611][T19054] tipc: Enabled bearer , priority 0 [ 464.323959][T19062] syzkaller0: entered promiscuous mode [ 464.333837][T19062] syzkaller0: entered allmulticast mode [ 464.439910][T19062] tipc: Resetting bearer [ 464.490573][T19069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3386'. [ 464.508920][T19062] tipc: Disabling bearer [ 464.549835][T19068] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3385'. [ 464.587230][ T313] net_ratelimit: 3 callbacks suppressed [ 464.587249][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 464.731025][T19078] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3389'. [ 464.761769][T18628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.805420][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 464.878564][T18628] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.902590][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.909849][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.959332][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.966548][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.015640][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.205563][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.358343][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.476030][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.522092][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3388'. [ 465.637209][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.753309][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3398'. [ 465.776124][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.786035][T19120] netlink: 344 bytes leftover after parsing attributes in process `syz.0.3399'. [ 465.919111][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 466.065407][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 466.119843][T19138] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3401'. [ 466.159629][T19138] netlink: 'syz.4.3401': attribute type 24 has an invalid length. [ 466.220280][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3402'. [ 466.493220][T18628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.660569][T18628] veth0_vlan: entered promiscuous mode [ 466.715028][T18628] veth1_vlan: entered promiscuous mode [ 466.899473][T18628] veth0_macvtap: entered promiscuous mode [ 466.944850][T18628] veth1_macvtap: entered promiscuous mode [ 467.041437][T18628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.082655][T18628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.114031][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.143365][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.171678][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.221600][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.454071][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.490668][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.534325][T19184] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3416'. [ 467.618495][T19186] syzkaller0: entered promiscuous mode [ 467.627460][T11811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.628692][T19186] syzkaller0: entered allmulticast mode [ 467.644107][T11811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.698490][T19192] x_tables: duplicate underflow at hook 1 [ 468.000686][T19201] netlink: 'syz.4.3423': attribute type 39 has an invalid length. [ 468.009267][T19203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3424'. [ 468.284290][T19214] veth1_macvtap: left promiscuous mode [ 468.303987][T19214] macsec0: entered promiscuous mode [ 468.415663][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.431745][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.444564][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.468365][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.479604][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.809684][T19231] netlink: 'syz.0.3431': attribute type 9 has an invalid length. [ 468.863606][T19229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3431'. [ 469.108912][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3435'. [ 469.143436][T19251] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3437'. [ 469.188334][T19254] netlink: 'syz.0.3436': attribute type 32 has an invalid length. [ 469.599056][T19270] team0: Caught tx_queue_len zero misconfig [ 469.647231][ T313] net_ratelimit: 21 callbacks suppressed [ 469.647251][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 469.819836][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 469.978597][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.143253][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.234293][T19220] lo speed is unknown, defaulting to 1000 [ 470.325775][T19293] ip6gretap0: entered promiscuous mode [ 470.347727][T19293] ip6gretap0: entered allmulticast mode [ 470.357249][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.505875][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.535949][ T5625] Bluetooth: hci1: command tx timeout [ 470.615041][T19306] syzkaller0: entered promiscuous mode [ 470.629001][T19306] syzkaller0: entered allmulticast mode [ 470.746940][T19301] tipc: Started in network mode [ 470.752405][T19301] tipc: Node identity 6a8a5c0f6f63, cluster identity 4711 [ 470.761142][T19301] tipc: Enabled bearer , priority 0 [ 470.771838][T19300] tipc: Resetting bearer [ 470.836785][T19300] tipc: Disabling bearer [ 470.871234][T19220] lo speed is unknown, defaulting to 1000 [ 470.885970][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.898884][T19220] xfrm0 speed is unknown, defaulting to 1000 [ 471.106939][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 471.226230][ T810] IPVS: starting estimator thread 0... [ 471.327100][T19328] IPVS: using max 27 ests per chain, 64800 per kthread [ 471.355459][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 471.560917][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 472.091925][T19220] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.107247][T19220] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.125807][T19220] bridge_slave_0: entered allmulticast mode [ 472.142964][T19220] bridge_slave_0: entered promiscuous mode [ 472.193018][T19220] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.212032][T19220] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.220235][T19220] bridge_slave_1: entered allmulticast mode [ 472.228566][T19220] bridge_slave_1: entered promiscuous mode [ 472.268235][T19362] __nla_validate_parse: 5 callbacks suppressed [ 472.268253][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3461'. [ 472.350971][T19220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.421674][T19220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.560196][T19220] team0: Port device team_slave_0 added [ 472.603393][T19220] team0: Port device team_slave_1 added [ 472.616264][ T5625] Bluetooth: hci1: command tx timeout [ 472.732899][T19220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.749312][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 472.767078][T19220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.802706][T19386] xt_hashlimit: overflow, rate too high: 0 [ 472.847593][T19220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.852202][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3469'. [ 472.876868][T19388] sctp: [Deprecated]: syz.3.3469 (pid 19388) Use of int in max_burst socket option. [ 472.876868][T19388] Use struct sctp_assoc_value instead [ 472.879805][T19220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.902465][T19220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.930089][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3469'. [ 472.939727][T19220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.160454][T19393] netlink: 'syz.3.3470': attribute type 12 has an invalid length. [ 473.208327][T19220] hsr_slave_0: entered promiscuous mode [ 473.215433][T19220] hsr_slave_1: entered promiscuous mode [ 473.222006][T19220] debugfs: 'hsr0' already exists in 'hsr' [ 473.228982][T19220] Cannot create hsr debugfs directory [ 473.234719][T19393] netlink: 'syz.3.3470': attribute type 3 has an invalid length. [ 473.270470][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3472'. [ 473.490305][T19413] syzkaller0: entered promiscuous mode [ 473.497642][T19413] syzkaller0: entered allmulticast mode [ 473.652037][T19420] syzkaller0: entered promiscuous mode [ 473.657748][T19420] syzkaller0: entered allmulticast mode [ 473.699574][T19420] netlink: 'syz.4.3478': attribute type 1 has an invalid length. [ 473.771739][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3479'. [ 473.856534][T19220] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.878811][T19220] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.891278][T19220] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 474.134111][T19220] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.163798][T19220] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.174676][T19220] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 474.343156][T19220] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.366087][T19220] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.391191][T19220] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 474.422212][T19435] xt_socket: unknown flags 0x50 [ 474.518404][T19220] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.531350][T19220] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.567007][T19220] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 474.670785][T19442] net_ratelimit: 6 callbacks suppressed [ 474.670807][T19442] syzkaller0: mtu less than device minimum [ 474.692018][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 474.701806][ T5625] Bluetooth: hci1: command tx timeout [ 474.717019][T19437] syzkaller0: entered allmulticast mode [ 474.800360][T19457] netlink: 'syz.0.3488': attribute type 2 has an invalid length. [ 474.832064][T19453] ±ÿª¨úrBº“: renamed from lo (while UP) [ 474.925562][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.055496][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.205380][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.389315][T19476] bond1: option min_links: invalid value (18446744073709551614) [ 475.403106][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'. [ 475.413785][T19484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3497'. [ 475.450672][T19476] bond1: option min_links: allowed values 0 - 2147483647 [ 475.479378][T19476] bond1 (unregistering): Released all slaves [ 475.745047][T19220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 475.794183][T19220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.828489][T19220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 475.884840][T19220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.913389][T19501] macvlan0: entered promiscuous mode [ 475.945747][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.974680][T19220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.008685][T19220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.022830][T19220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.060071][T19220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.159958][T19518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.239990][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 476.313452][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3509'. [ 476.347921][T19220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.388155][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 476.410001][T19220] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.442600][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.449823][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.532123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.539381][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.705419][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 476.776151][ T5625] Bluetooth: hci1: command tx timeout [ 477.022163][T19556] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3518'. [ 477.288275][T19566] tipc: Enabled bearer , priority 0 [ 477.297497][T19566] syzkaller0: entered promiscuous mode [ 477.303094][T19566] syzkaller0: entered allmulticast mode [ 477.314012][T19566] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 477.356472][T19566] tipc: Resetting bearer [ 477.440591][T19571] netlink: 'syz.0.3523': attribute type 11 has an invalid length. [ 477.449951][T19571] netlink: 'syz.0.3523': attribute type 11 has an invalid length. [ 477.460046][T19571] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3523'. [ 477.472083][T19571] tipc: Enabling of bearer rejected, failed to enable media [ 477.682734][T19581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3525'. [ 477.700555][T19220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.880596][T19220] veth0_vlan: entered promiscuous mode [ 477.890964][T19588] netlink: 'syz.0.3526': attribute type 1 has an invalid length. [ 477.910299][T19220] veth1_vlan: entered promiscuous mode [ 478.048128][T19220] veth0_macvtap: entered promiscuous mode [ 478.107279][T19565] tipc: Resetting bearer [ 478.169405][T19565] tipc: Disabling bearer [ 478.227925][T19220] veth1_macvtap: entered promiscuous mode [ 478.324147][T19220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.342938][T19601] Cannot find add_set index 2 as target [ 478.395795][T19220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.458821][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.491230][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.516081][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.542673][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.860737][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.894244][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.037558][ T313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.061321][ T313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.493981][T19629] bond1: option min_links: invalid value (18446744073709551614) [ 479.561953][T19629] bond1: option min_links: allowed values 0 - 2147483647 [ 479.611170][T19629] bond1 (unregistering): Released all slaves [ 479.614206][T19643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3539'. [ 479.863884][T19630] bond1: option min_links: invalid value (18446744073709551614) [ 479.880461][T19630] bond1: option min_links: allowed values 0 - 2147483647 [ 479.952474][T19630] bond1 (unregistering): Released all slaves [ 480.004434][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 480.041083][T19650] Cannot find set identified by id 65534 to match [ 480.129245][T19640] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 480.152999][T19640] bond4: option packets_per_slave: allowed values 0 - 65535 [ 480.166733][T19640] bond4 (unregistering): Released all slaves [ 480.396797][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 480.397998][ T12] net_ratelimit: 45 callbacks suppressed [ 480.398047][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.411157][T19664] netlink: 'syz.1.3545': attribute type 22 has an invalid length. [ 480.466505][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 480.564709][T19663] syzkaller0: entered promiscuous mode [ 480.580591][T19663] syzkaller0: entered allmulticast mode [ 480.617440][T11806] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.625131][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 480.652868][T19664] netlink: 'syz.1.3545': attribute type 22 has an invalid length. [ 480.683790][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 480.927080][T19679] netlink: 'syz.3.3549': attribute type 16 has an invalid length. [ 480.935218][T19679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3549'. [ 482.612681][ T14] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.623232][ T14] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.633380][T19670] debugfs: '1ùà^!' already exists in 'ieee80211' [ 482.652780][T19675] gre0: entered promiscuous mode [ 482.662073][T19675] gre0: entered allmulticast mode [ 482.675695][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 482.711169][ T14] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.729388][ T14] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.797175][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 482.915983][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 483.006903][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3554'. [ 483.057568][T19689] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.066924][T19689] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.156707][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 483.315589][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 483.401769][T19717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3561'. [ 483.447823][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 483.487298][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3561'. [ 483.535706][T19723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3561'. [ 483.596657][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 483.740848][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 483.762574][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3564'. [ 483.799613][T19737] netlink: 'syz.2.3566': attribute type 4 has an invalid length. [ 484.017314][T19737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3566'. [ 484.102830][T19738] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002 [ 484.769325][T19790] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 484.785060][T19790] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3581'. [ 485.061101][T19809] : renamed from bond0 (while UP) [ 485.103761][T19812] netlink: 'syz.4.3587': attribute type 1 has an invalid length. [ 485.198984][T19815] Bluetooth: MGMT ver 1.23 [ 485.475456][T11811] net_ratelimit: 13 callbacks suppressed [ 485.475489][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.574470][T19832] bond0: entered promiscuous mode [ 485.585795][T19832] bond_slave_0: entered promiscuous mode [ 485.607003][T19832] bond_slave_1: entered promiscuous mode [ 485.647801][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.777510][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.931478][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 486.004730][T19857] netlink: 'syz.4.3600': attribute type 11 has an invalid length. [ 486.008179][T19851] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 486.027261][T19857] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3600'. [ 486.065781][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 486.187132][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 486.305645][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 486.435365][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 486.557457][ T63] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 486.641855][T19887] openvswitch: netlink: IP tunnel dst address not specified [ 486.707535][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3607'. [ 486.872530][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 486.910473][T19898] netlink: 'syz.4.3612': attribute type 17 has an invalid length. [ 486.961449][T19895] macvtap1: entered promiscuous mode [ 486.988035][T19895] vlan0: entered promiscuous mode [ 487.018545][T19895] macvtap1: entered allmulticast mode [ 487.038359][T19895] vlan0: entered allmulticast mode [ 487.040899][T19900] GUP no longer grows the stack in syz.1.3613 (19900): 200000003000-20000000a000 (200000001000) [ 487.054540][T19895] veth0_vlan: entered allmulticast mode [ 487.063575][T19900] CPU: 1 UID: 0 PID: 19900 Comm: syz.1.3613 Not tainted syzkaller #0 PREEMPT(full) [ 487.063601][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.063627][T19900] Call Trace: [ 487.063706][T19900] [ 487.063767][T19900] dump_stack_lvl+0xe8/0x150 [ 487.063897][T19900] __get_user_pages+0x238c/0x2720 [ 487.063953][T19900] ? __gup_longterm_locked+0xc3b/0x15c0 [ 487.064040][T19900] __gup_longterm_locked+0xd52/0x15c0 [ 487.064082][T19900] ? lock_acquire+0x106/0x350 [ 487.064135][T19900] gup_fast_fallback+0x1d8c/0x20e0 [ 487.064190][T19900] ? __pfx_gup_fast_fallback+0x10/0x10 [ 487.064218][T19900] ? is_valid_gup_args+0x11f/0x200 [ 487.064255][T19900] ? get_user_pages_fast+0x4d/0xb0 [ 487.064284][T19900] __iov_iter_get_pages_alloc+0x378/0xa40 [ 487.064345][T19900] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 487.064386][T19900] iov_iter_get_pages2+0x5e/0xa0 [ 487.064409][T19900] __se_sys_vmsplice+0x7b5/0x1660 [ 487.064452][T19900] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 487.064476][T19900] ? __pfx_futex_wait+0x10/0x10 [ 487.064619][T19900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.064693][T19900] do_syscall_64+0x174/0x580 [ 487.064819][T19900] ? trace_irq_disable+0x3b/0x140 [ 487.064847][T19900] ? clear_bhb_loop+0x40/0x90 [ 487.064894][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.064917][T19900] RIP: 0033:0x7fa79759ce59 [ 487.064970][T19900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.065020][T19900] RSP: 002b:00007fa79845a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 487.065088][T19900] RAX: ffffffffffffffda RBX: 00007fa797815fa0 RCX: 00007fa79759ce59 [ 487.065104][T19900] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 487.065119][T19900] RBP: 00007fa797632e6f R08: 0000000000000000 R09: 0000000000000000 [ 487.065132][T19900] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 487.065146][T19900] R13: 00007fa797816038 R14: 00007fa797815fa0 R15: 00007ffeb199cd78 [ 487.065183][T19900] [ 487.501058][T19904] [ 487.503474][T19904] ====================================================== [ 487.510533][T19904] WARNING: possible circular locking dependency detected [ 487.517684][T19904] syzkaller #0 Not tainted [ 487.522148][T19904] ------------------------------------------------------ [ 487.529188][T19904] syz.2.3614/19904 is trying to acquire lock: [ 487.535276][T19904] ffff888025aeb418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 487.544871][T19904] [ 487.544871][T19904] but task is already holding lock: [ 487.552252][T19904] ffff888025aeaef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 487.562505][T19904] [ 487.562505][T19904] which lock already depends on the new lock. [ 487.562505][T19904] [ 487.572927][T19904] [ 487.572927][T19904] the existing dependency chain (in reverse order) is: [ 487.581965][T19904] [ 487.581965][T19904] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 487.590708][T19904] blk_alloc_queue+0x544/0x690 [ 487.596027][T19904] __blk_mq_alloc_disk+0x194/0x390 [ 487.601710][T19904] nbd_dev_add+0x494/0xb60 [ 487.606715][T19904] nbd_init+0x15f/0x1e0 [ 487.611532][T19904] do_one_initcall+0x250/0x870 [ 487.616933][T19904] do_initcall_level+0x10a/0x1a0 [ 487.622528][T19904] do_initcalls+0x59/0xa0 [ 487.627420][T19904] kernel_init_freeable+0x29d/0x3e0 [ 487.633159][T19904] kernel_init+0x1d/0x1d0 [ 487.638069][T19904] ret_from_fork+0x514/0xb70 [ 487.643214][T19904] ret_from_fork_asm+0x1a/0x30 [ 487.648513][T19904] [ 487.648513][T19904] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 487.655758][T19904] fs_reclaim_acquire+0x71/0x100 [ 487.661251][T19904] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 487.667600][T19904] __alloc_skb+0x1d7/0x7a0 [ 487.672624][T19904] __ip6_append_data+0x2ec4/0x40c0 [ 487.678333][T19904] ip6_append_data+0x108/0x270 [ 487.683632][T19904] rawv6_sendmsg+0x1298/0x18c0 [ 487.688986][T19904] sock_sendmsg_nosec+0x10e/0x180 [ 487.694605][T19904] ____sys_sendmsg+0x54e/0x850 [ 487.699917][T19904] ___sys_sendmsg+0x2a5/0x360 [ 487.705132][T19904] __x64_sys_sendmsg+0x1b1/0x290 [ 487.710600][T19904] do_syscall_64+0x174/0x580 [ 487.715721][T19904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.722172][T19904] [ 487.722172][T19904] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 487.729918][T19904] lock_sock_nested+0x41/0x100 [ 487.735222][T19904] inet_shutdown+0x6a/0x390 [ 487.740375][T19904] nbd_mark_nsock_dead+0x2cb/0x550 [ 487.746024][T19904] recv_work+0x1cee/0x1e10 [ 487.750989][T19904] process_scheduled_works+0xa8e/0x14e0 [ 487.757081][T19904] worker_thread+0xa47/0xfb0 [ 487.762211][T19904] kthread+0x388/0x470 [ 487.766811][T19904] ret_from_fork+0x514/0xb70 [ 487.771926][T19904] ret_from_fork_asm+0x1a/0x30 [ 487.777220][T19904] [ 487.777220][T19904] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 487.784879][T19904] __mutex_lock+0x19d/0x1550 [ 487.790046][T19904] nbd_queue_rq+0x373/0x1150 [ 487.795174][T19904] blk_mq_dispatch_rq_list+0x499/0x1990 [ 487.801264][T19904] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 487.808121][T19904] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 487.814746][T19904] blk_mq_run_work_fn+0x16c/0x300 [ 487.820321][T19904] process_scheduled_works+0xa8e/0x14e0 [ 487.826424][T19904] worker_thread+0xa47/0xfb0 [ 487.831550][T19904] kthread+0x388/0x470 [ 487.836154][T19904] ret_from_fork+0x514/0xb70 [ 487.841283][T19904] ret_from_fork_asm+0x1a/0x30 [ 487.846588][T19904] [ 487.846588][T19904] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 487.853811][T19904] __mutex_lock+0x19d/0x1550 [ 487.858936][T19904] nbd_queue_rq+0xc1/0x1150 [ 487.863991][T19904] blk_mq_dispatch_rq_list+0x499/0x1990 [ 487.870096][T19904] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 487.876989][T19904] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 487.883506][T19904] blk_mq_run_work_fn+0x16c/0x300 [ 487.889065][T19904] process_scheduled_works+0xa8e/0x14e0 [ 487.895153][T19904] worker_thread+0xa47/0xfb0 [ 487.900290][T19904] kthread+0x388/0x470 [ 487.904897][T19904] ret_from_fork+0x514/0xb70 [ 487.910019][T19904] ret_from_fork_asm+0x1a/0x30 [ 487.915314][T19904] [ 487.915314][T19904] -> #1 (set->srcu){.+.+}-{0:0}: [ 487.922460][T19904] __synchronize_srcu+0xc9/0x2f0 [ 487.927959][T19904] elevator_switch+0x1e8/0x7b0 [ 487.933277][T19904] elevator_change+0x2fa/0x480 [ 487.938587][T19904] elevator_set_default+0x375/0x440 [ 487.944329][T19904] blk_register_queue+0x3f3/0x4e0 [ 487.949881][T19904] __add_disk+0x6cb/0xe30 [ 487.954773][T19904] add_disk_fwnode+0xfb/0x4b0 [ 487.960002][T19904] nbd_dev_add+0x733/0xb60 [ 487.964963][T19904] nbd_init+0x15f/0x1e0 [ 487.969668][T19904] do_one_initcall+0x250/0x870 [ 487.974967][T19904] do_initcall_level+0x10a/0x1a0 [ 487.980451][T19904] do_initcalls+0x59/0xa0 [ 487.985328][T19904] kernel_init_freeable+0x29d/0x3e0 [ 487.991058][T19904] kernel_init+0x1d/0x1d0 [ 487.995921][T19904] ret_from_fork+0x514/0xb70 [ 488.001053][T19904] ret_from_fork_asm+0x1a/0x30 [ 488.006377][T19904] [ 488.006377][T19904] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 488.014238][T19904] __lock_acquire+0x1520/0x2cf0 [ 488.019635][T19904] lock_acquire+0x106/0x350 [ 488.024671][T19904] __mutex_lock+0x19d/0x1550 [ 488.029787][T19904] elevator_change+0x1af/0x480 [ 488.035094][T19904] elevator_set_none+0xb5/0x140 [ 488.040501][T19904] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 488.046842][T19904] nbd_start_device+0x189/0xb30 [ 488.052229][T19904] nbd_genl_connect+0x1597/0x1c10 [ 488.057786][T19904] genl_family_rcv_msg_doit+0x233/0x340 [ 488.063988][T19904] genl_rcv_msg+0x614/0x7a0 [ 488.069030][T19904] netlink_rcv_skb+0x226/0x4a0 [ 488.074333][T19904] genl_rcv+0x28/0x40 [ 488.078862][T19904] netlink_unicast+0x7bb/0x940 [ 488.084160][T19904] netlink_sendmsg+0x813/0xb40 [ 488.089461][T19904] sock_sendmsg_nosec+0x13a/0x180 [ 488.095040][T19904] ____sys_sendmsg+0x54e/0x850 [ 488.100340][T19904] ___sys_sendmsg+0x2a5/0x360 [ 488.105601][T19904] __x64_sys_sendmsg+0x1b1/0x290 [ 488.111082][T19904] do_syscall_64+0x174/0x580 [ 488.116205][T19904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.122637][T19904] [ 488.122637][T19904] other info that might help us debug this: [ 488.122637][T19904] [ 488.132867][T19904] Chain exists of: [ 488.132867][T19904] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 488.132867][T19904] [ 488.146619][T19904] Possible unsafe locking scenario: [ 488.146619][T19904] [ 488.154106][T19904] CPU0 CPU1 [ 488.159554][T19904] ---- ---- [ 488.164933][T19904] lock(&q->q_usage_counter(io)#51); [ 488.170338][T19904] lock(fs_reclaim); [ 488.176853][T19904] lock(&q->q_usage_counter(io)#51); [ 488.184764][T19904] lock(&q->elevator_lock); [ 488.189367][T19904] [ 488.189367][T19904] *** DEADLOCK *** [ 488.189367][T19904] [ 488.197524][T19904] 6 locks held by syz.2.3614/19904: [ 488.202787][T19904] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 488.211034][T19904] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 488.220027][T19904] #2: ffff888025af39c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 488.231443][T19904] #3: ffff888025af38d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 488.242429][T19904] #4: ffff888025aeaef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 488.253079][T19904] #5: ffff888025aeaf28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 488.263981][T19904] [ 488.263981][T19904] stack backtrace: [ 488.269896][T19904] CPU: 0 UID: 0 PID: 19904 Comm: syz.2.3614 Not tainted syzkaller #0 PREEMPT(full) [ 488.269916][T19904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.269926][T19904] Call Trace: [ 488.269933][T19904] [ 488.269940][T19904] dump_stack_lvl+0xe8/0x150 [ 488.269961][T19904] print_circular_bug+0x2e1/0x300 [ 488.269984][T19904] check_noncircular+0x12e/0x150 [ 488.270008][T19904] __lock_acquire+0x1520/0x2cf0 [ 488.270034][T19904] ? elevator_change+0x1af/0x480 [ 488.270058][T19904] lock_acquire+0x106/0x350 [ 488.270073][T19904] ? elevator_change+0x1af/0x480 [ 488.270103][T19904] __mutex_lock+0x19d/0x1550 [ 488.270119][T19904] ? elevator_change+0x1af/0x480 [ 488.270144][T19904] ? rcu_is_watching+0x15/0xb0 [ 488.270166][T19904] ? elevator_change+0x1af/0x480 [ 488.270191][T19904] ? __pfx___mutex_lock+0x10/0x10 [ 488.270205][T19904] ? enable_work+0x17f/0x230 [ 488.270220][T19904] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.270248][T19904] ? __cancel_work_sync+0xf7/0x110 [ 488.270264][T19904] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 488.270283][T19904] elevator_change+0x1af/0x480 [ 488.270317][T19904] elevator_set_none+0xb5/0x140 [ 488.270342][T19904] ? __pfx_elevator_set_none+0x10/0x10 [ 488.270369][T19904] ? xa_load+0x1db/0x210 [ 488.270389][T19904] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 488.270407][T19904] ? kernfs_add_one+0x480/0x5e0 [ 488.270466][T19904] ? nbd_start_device+0x17d/0xb30 [ 488.270488][T19904] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 488.270511][T19904] ? sysfs_add_file_mode_ns+0x258/0x300 [ 488.270538][T19904] nbd_start_device+0x189/0xb30 [ 488.270559][T19904] ? device_create_file+0xf4/0x1b0 [ 488.270589][T19904] nbd_genl_connect+0x1597/0x1c10 [ 488.270610][T19904] ? __pfx_nbd_genl_connect+0x10/0x10 [ 488.270628][T19904] ? rcu_is_watching+0x15/0xb0 [ 488.270647][T19904] ? trace_kmalloc+0x2a/0xf0 [ 488.270674][T19904] ? __kmalloc_noprof+0x396/0x720 [ 488.270700][T19904] ? __nla_parse+0x40/0x60 [ 488.270739][T19904] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 488.270765][T19904] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 488.270792][T19904] genl_family_rcv_msg_doit+0x233/0x340 [ 488.270821][T19904] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.270849][T19904] ? __lock_acquire+0x683/0x2cf0 [ 488.270869][T19904] genl_rcv_msg+0x614/0x7a0 [ 488.270895][T19904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.270917][T19904] ? __pfx_nbd_genl_connect+0x10/0x10 [ 488.270940][T19904] netlink_rcv_skb+0x226/0x4a0 [ 488.270958][T19904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.270980][T19904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.271004][T19904] ? down_read+0x2be/0x330 [ 488.271022][T19904] genl_rcv+0x28/0x40 [ 488.271042][T19904] netlink_unicast+0x7bb/0x940 [ 488.271062][T19904] netlink_sendmsg+0x813/0xb40 [ 488.271085][T19904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.271105][T19904] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.271138][T19904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.271155][T19904] sock_sendmsg_nosec+0x13a/0x180 [ 488.271179][T19904] ____sys_sendmsg+0x54e/0x850 [ 488.271198][T19904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.271220][T19904] ? import_iovec+0x73/0xa0 [ 488.271238][T19904] ___sys_sendmsg+0x2a5/0x360 [ 488.271254][T19904] ? __lock_acquire+0x683/0x2cf0 [ 488.271272][T19904] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.271290][T19904] ? futex_wait+0x2a2/0x390 [ 488.271330][T19904] ? __fget_files+0x2a/0x420 [ 488.271351][T19904] ? __fget_files+0x3a2/0x420 [ 488.271370][T19904] __x64_sys_sendmsg+0x1b1/0x290 [ 488.271389][T19904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.271414][T19904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.271431][T19904] do_syscall_64+0x174/0x580 [ 488.271445][T19904] ? trace_irq_disable+0x3b/0x140 [ 488.271459][T19904] ? clear_bhb_loop+0x40/0x90 [ 488.271477][T19904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.271493][T19904] RIP: 0033:0x7f565319ce59 [ 488.271509][T19904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.271523][T19904] RSP: 002b:00007f5653f99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.271540][T19904] RAX: ffffffffffffffda RBX: 00007f5653415fa0 RCX: 00007f565319ce59 [ 488.271552][T19904] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 488.271563][T19904] RBP: 00007f5653232e6f R08: 0000000000000000 R09: 0000000000000000 [ 488.271573][T19904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.271583][T19904] R13: 00007f5653416038 R14: 00007f5653415fa0 R15: 00007ffd5ffbcf68 [ 488.271602][T19904] [ 488.728330][ T1533] block nbd1: Possible stuck request ffff888027505080: control (read@0,1024B). Runtime 120 seconds [ 488.739237][ T1533] block nbd1: Possible stuck request ffff888027505240: control (read@1024,1024B). Runtime 120 seconds [ 488.750353][ T1533] block nbd1: Possible stuck request ffff888027505400: control (read@2048,1024B). Runtime 120 seconds [ 488.761442][ T1533] block nbd1: Possible stuck request ffff8880275055c0: control (read@3072,1024B). Runtime 120 seconds [ 488.809130][ T4942] block nbd2: Receive control failed (result -107) [ 488.809200][ T5625] block nbd2: Receive control failed (result -32) [ 488.845482][T19904] nbd2: detected capacity change from 0 to 63 [ 488.852837][ T1533] block nbd2: Dead connection, failed to find a fallback [ 488.860059][ T1533] block nbd2: shutting down sockets [ 488.865342][ T1533] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.874441][ T1533] Buffer I/O error on dev nbd2, logical block 0, async page read [ 488.896391][ T1533] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.905673][ T1533] Buffer I/O error on dev nbd2, logical block 1, async page read [ 488.913603][ T1533] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.924787][ T1533] Buffer I/O error on dev nbd2, logical block 2, async page read [ 488.933876][ T1533] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.943461][ T1533] Buffer I/O error on dev nbd2, logical block 3, async page read [ 488.956026][ T1533] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.965210][ T1533] Buffer I/O error on dev nbd2, logical block 0, async page read [ 488.973723][ T1533] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.983403][ T1533] Buffer I/O error on dev nbd2, logical block 1, async page read [ 488.992437][ T1533] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 489.001695][ T1533] Buffer I/O error on dev nbd2, logical block 2, async page read [ 489.010055][ T1533] Buffer I/O error on dev nbd2, logical block 3, async page read [ 489.020331][ T1533] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 489.031703][ T1533] Buffer I/O error on dev nbd2, logical block 0, async page read [ 489.039895][ T1533] Buffer I/O error on dev nbd2, logical block 1, async page read [ 489.048666][ T1533] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 489.062052][ T1533] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 489.073252][T16799] ldm_validate_partition_table(): Disk read failed. [ 489.082608][T16799] Dev nbd2: unable to read RDB block 0 [ 489.090561][T16799] nbd2: unable to read partition table [ 489.107035][T16799] ldm_validate_partition_table(): Disk read failed. [ 489.116780][T16799] Dev nbd2: unable to read RDB block 0 [ 489.123975][T16799] nbd2: unable to read partition table [ 490.555338][ T313] net_ratelimit: 22 callbacks suppressed [ 490.555354][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.675411][ T14] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.785558][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.895366][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 491.005485][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 491.125508][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 491.235686][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 491.345609][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 491.455344][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 491.565359][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 492.138347][ T4992] udevd[4992]: worker [13763] /devices/virtual/block/nbd1 is taking a long time [ 495.665463][ T313] net_ratelimit: 36 callbacks suppressed [ 495.665492][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 495.785402][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 495.895400][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 496.005909][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 496.115414][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 496.225463][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 496.335673][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 496.445392][ T313] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 496.555380][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 496.665322][T11811] bond6: (slave ip6gretap1): failed to get link speed/duplex