last executing test programs: 10.82109869s ago: executing program 3 (id=6187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfdc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x5, 0x1d, 0x1, 0x1, 0x7, 0x5}}, {0xe, 0x2, [0xffff, 0x2, 0xc0, 0x3, 0x20]}}, {{0x1c, 0x1, {0x0, 0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x5}}, {0xe, 0x2, [0x2, 0x9, 0x8, 0xc, 0x1]}}]}]}, 0xb4}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfdc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x5, 0x1d, 0x1, 0x1, 0x7, 0x5}}, {0xe, 0x2, [0xffff, 0x2, 0xc0, 0x3, 0x20]}}, {{0x1c, 0x1, {0x0, 0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x5}}, {0xe, 0x2, [0x2, 0x9, 0x8, 0xc, 0x1]}}]}]}, 0xb4}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000200)="9eaf4d1972a4ea7ae75e8a69af2eb55e4697e3b9b0a126d765426788036e65df6ea683183aa4a77a563d1cae459b85a2cb8113df34d8bb7c797b28db7efee022b75b5523ef8799b45d144e81ecc4c1e88bd3b59f13d74de0573ab5a1e4fbba9ccddc370618c30d2d977e16da367d2f6db591be922055b123cb5a4cf8da7ee81c05bf4316443fbb108b6ce13dce8e8efe3761df75b2b250e3ab3ffb4f97e17a311add64258649c56efb1f880224", 0xad}, 0x1, 0x0, 0x0, 0x50}, 0x1) 9.959773619s ago: executing program 3 (id=6197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000c000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00!\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbaaaaaaaaaaaa080045000024fffd000000119078ac1e0001e0000001000017c10010907801000000d482449a"], 0x0) 9.786684825s ago: executing program 3 (id=6198): sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x4004084) (async, rerun: 32) r0 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x40}, 0xfffe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[], 0x48}}, 0x4040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x148}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c810) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020702", 0x4}, {&(0x7f0000000140)="683f0057954e8374745111caea99bc671e3d", 0x12}], 0x3) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x9, 0x1, 0x40, 0x77deb795}]}) 9.532677545s ago: executing program 3 (id=6203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004c0000000e00010800000000000000696d0000000f0002006e657464657673696d3000000f00b2007365636f6e646e616d650000"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010000030900010073797a300000000008000240000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a320000000898000000060a01040000000000000000010000000900020073797a31000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000608000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000040900010073797a3000000000140000001100010000000000000000000300000a"], 0x114}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x22, 0x6, 0x58, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x10, 0x1, 0x100}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7800, 0x0, 0x400, 0x80000000, {{0x25, 0x4, 0x3, 0x1b, 0x94, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, {[@timestamp={0x44, 0x10, 0xfa, 0x0, 0x5, [0x1000000, 0x9, 0x5]}, @timestamp_prespec={0x44, 0x2c, 0x7e, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x101}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x74}, {@multicast1, 0x1a}, {@initdev={0xac, 0x1e, 0x83, 0x0}, 0x1}, {@rand_addr=0x64010102}]}, @ssrr={0x89, 0x1f, 0xb9, [@empty, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}]}, @rr={0x7, 0x17, 0x77, [@remote, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xc, "8c2d209671cc75254a13"}]}}}}}) r9 = socket(0x14, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x801) ioctl$sock_SIOCGIFINDEX(r9, 0x61d0, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000340)={@broadcast, @empty, 0x0}, &(0x7f00000003c0)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x41}}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', r10}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe4, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) 9.246613554s ago: executing program 3 (id=6208): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) 6.941017592s ago: executing program 4 (id=6236): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000add000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r4, 0x0, 0x20000f2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="70dd47b6b9f7817226eb6528c8667438000a5edd76c2a8ed3dbc6ddbac1767b6f708ca978d35c9d5616a9cecbf6101f75dd581911a8121307a09ca44c2d16bec81f686ae52638a7ffe"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e21, 0x44000000, @loopback, 0xfffffffd}, 0x1c) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0)=0xffa, 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000100)=0x10) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x7, 0x80000005, 0x6, 0x40000004, 0x380]}, &(0x7f0000000240)=0x54) 6.018128192s ago: executing program 4 (id=6243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f0000000c40), 0x0, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, r2}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104fcffffff8000000040000000", @ANYRES32=0x0, @ANYBLOB="451f0000fbdf0002440012800b000100697036677265000034000280060018000800000004001200060002000101000014000600fc020000000000000000000000000000050017000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00ce9fa6440003930000f101ab320e716eb2f08b680a202d28f6af1e9d44d411b3fae4ffa7ff08f92f34e6a2e5ae453dab6a00"/62, @ANYRESDEC=0x0, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYRESOCT=r3, @ANYRES64=r1, @ANYBLOB="b19d29f87aa06e7c4568caedc3902e1e401077751c8aed68f1a922d365222327aed1892887bac7a7d55fe36816f5981b34fb25cf4715c17a", @ANYRES64=r5, @ANYBLOB="3b501f54ed", @ANYRES8=r0, @ANYBLOB="2b6ef2d6cef9b47952b3d1ca3f7a35bf6a24a50156d55b5a8daabfbd44b63ed2234e0006b95b3b2a0e3171a167afb748ac279df87793173f257c72282db1acc0cdb6f67cc37e6d774e256f8b257da8abb9987fe2ce81ee53d64083d4c71ace5dc02237e7c18b1436a6eb", @ANYRES16=r7], 0x50) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x6020400) ioctl$PPPIOCSNPMODE(r13, 0x4004743c, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRESOCT=r12, @ANYRES32=r14, @ANYRES64=r8, @ANYRES32, @ANYBLOB="cee1214d9d882316e11ca942cbadaa1a4c06359b377f720f4b89c3a901179de0514b0cfa90ff6f9e2e91ee18d8967818000000000000", @ANYRES64=0x0, @ANYBLOB="8dfc4f92cfbff1aff5a68390508095bc212f8ca95a9415289f301195adf4792de5ecac28a371960ac2b36dbd6bde82c4c58849aa70", @ANYRESDEC], 0x20) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000001a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001cc0)=@newqdisc={0x25c, 0x24, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xfff3, 0x8}, {0xd, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x8, 0xe, 0x0, 0x9, 0x1, 0x3}}, {0xa, 0x2, [0x28e, 0x0, 0x0]}}, {{0x1c, 0x1, {0xf9, 0x4, 0xe, 0x40, 0x1, 0x7, 0x7fff, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0x4]}}, {{0x1c, 0x1, {0x2, 0x6, 0x0, 0x8000, 0x1, 0x4, 0xd, 0x6}}, {0x10, 0x2, [0x2, 0xa, 0xb116, 0x3, 0x8, 0x9]}}, {{0x1c, 0x1, {0x7, 0x7, 0x6e, 0x7fffffff, 0x0, 0x33d80598, 0x7, 0xa}}, {0x18, 0x2, [0x1, 0x9, 0xe2b, 0x16e1, 0x4a30, 0x7fff, 0x5, 0x81, 0x5, 0x8]}}, {{0x1c, 0x1, {0x4, 0x9, 0x6, 0x21, 0x2, 0x688, 0x10000, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}, {{0x1c, 0x1, {0xff, 0x2, 0x100, 0xac6, 0x2, 0x81, 0x9, 0x9}}, {0x16, 0x2, [0x14ef, 0x9, 0x4, 0x1, 0x8, 0x0, 0xec56, 0x3, 0x8]}}, {{0x1c, 0x1, {0x8, 0x9, 0x8, 0x75, 0x0, 0x5, 0x1, 0x4}}, {0xc, 0x2, [0x8, 0x7, 0x10, 0x2]}}, {{0x1c, 0x1, {0x1, 0xd, 0xfffb, 0x3, 0x1, 0x0, 0x800, 0x2}}, {0x8, 0x2, [0x89c, 0xda20]}}, {{0x1c, 0x1, {0x4, 0x2, 0x1, 0x9, 0x1, 0x3, 0x2, 0x6}}, {0x10, 0x2, [0x4, 0x6, 0x0, 0xd6, 0x8000, 0xfff8]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x16}}, @TCA_RATE={0x6, 0x5, {0x83, 0x10}}, @TCA_RATE={0x6, 0x5, {0x2d, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0xaf, 0x4c}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff69ca}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x0, 0x0, 0x1, 0x100, 0xb5c, 0x4}}, {0xc, 0x2, [0x6, 0x1, 0xda, 0x2]}}, {{0x1c, 0x1, {0x7, 0x3, 0xfffd, 0x8000, 0x0, 0xd, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x6, 0x1, 0x2, 0x7fff, 0x1, 0x8, 0x7, 0x1}}, {0x6, 0x2, [0xfff7]}}]}]}, 0x25c}}, 0x20040044) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r15) 5.141755005s ago: executing program 4 (id=6254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'dvmrp0\x00', 0x58e425f532bca53c}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x5, 0x40, 0x0, 0xb, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d4, 0x95, 0x6, 0xd4, 0x2, 0x60000000}, @sadb_sa={0x2, 0x1, 0x0, 0xf, 0x0, 0x7, 0x1, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x10000000, @mcast2, 0xfff}}]}, 0x58}, 0x1, 0x7}, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'sit0\x00'}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x63cf046e}], 0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) close(r5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000240)={"49d0238acce98405ba245a6aa65193d4", 0x0, 0x0, {0x7fffffffffffffff, 0x7}, {0x0, 0x6}, 0x10000, [0x0, 0xffffffffffffffe5, 0x9, 0x3, 0x40, 0x3, 0x2, 0xaa, 0x86e4, 0x2, 0x5, 0xa1, 0x4, 0x3, 0x7, 0x5d0]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000dc0)={{r4}, r9, 0x10, @unused=[0x9, 0x2, 0xfffffffffffffffb, 0x2], @subvolid=0x849}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 4.424085008s ago: executing program 0 (id=6261): r0 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000040)) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x20001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", 'J`\x00', "00958a00"}, 0x38) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x800079, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc00) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 4.340853126s ago: executing program 2 (id=6262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000100)=0x28) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x54}}, 0x20000d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0x2}, 0xa) 4.273660435s ago: executing program 1 (id=6263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400bfff07010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0209040202"], 0x10}}, 0x20000c04) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x0, r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x702, 0xff61, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "7d52f5", 0x10, 0x11, 0x1, @remote, @local, {[], {0x4e24, 0x4e23, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 4.241896046s ago: executing program 2 (id=6264): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xb, 0x0, 0x8, 0xfffffffe}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015140300"], 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x44, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0x2}, [{0x30, 0x1, [@m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r14) 4.152641305s ago: executing program 0 (id=6265): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x8810) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000140)=ANY=[@ANYBLOB="28d4b5f2562e86dea65b25ebb404f0095a95d497f3bd786ffac9d8d2a747d03818785d", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25060000001400080069703667726574617030000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@restrict={0x6, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x9}, @union={0x6, 0x1, 0x0, 0x5, 0x1, 0x53e, [{0x10, 0x0, 0xd0b2}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0xf, 0xffff}, {0x7}]}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000480)=""/15, 0x81, 0xf, 0x0, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009aee00008500000006005100bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0x17, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.994009821s ago: executing program 1 (id=6266): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24040894) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x0) 3.992200173s ago: executing program 4 (id=6267): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff00}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x32}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8b}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @jmp={0x5, 0x0, 0x3, 0xb, 0x0, 0x40, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000140)='GPL\x00', 0x2, 0xb9, &(0x7f0000000180)=""/185, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x18e84, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x84, 0x48080}}, 0x20}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000002380)={'ah\x00'}, &(0x7f00000023c0)=0x1e) 3.984678222s ago: executing program 0 (id=6268): r0 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x6}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='-4'], 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x7, 0x60c0d039, 0x0, {{0x6, 0x4, 0x2, 0x3b, 0x18, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast2, @local, {[@end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xfffffffffffffebf, 0x0, 0x0, 0x33, '\x00', r3, @fallback=0x25}, 0x94) 3.853940267s ago: executing program 0 (id=6269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8044010b800800090000000000080009000000000008000a"], 0x174}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x8c, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x1000, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x4080894) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 3.837263547s ago: executing program 4 (id=6270): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400def9b1f652d8b6c900001000010000000000000000000000000a24000000060a0904000000000000000002000000040004800900020073797a3200000000140000001100010000000000000000000000000a"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000802) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYRES8=r6, @ANYRES16=r7], 0xfd6c) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x74}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.132474897s ago: executing program 1 (id=6271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008510000086"], &(0x7f0000000080)='GPL\x00', 0x9, 0xff9, &(0x7f0000000cc0)=""/4089, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.026647572s ago: executing program 0 (id=6272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @local, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) close(0x3) socket$rds(0x15, 0x5, 0x0) 1.024449689s ago: executing program 4 (id=6273): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000180)={0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4001001f447ab08802000000000000000028bd706119abd8fc3920ecd772bd2b26c569c0d6e403dbb10ddeb4f62c49ad860169034444e416e514868802d09d7074ff5cfa0cf918cf47f987", @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x2, 0x8bd, 0x1, 0x10001, 0x9}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r15, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x8c}}, 0x24008044) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x800) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r16, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r17, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4) 994.767222ms ago: executing program 2 (id=6274): r0 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000040)) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x20001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", 'J`\x00', "00958a00"}, 0x38) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x800079, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc00) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 943.056961ms ago: executing program 1 (id=6275): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x200}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) 729.211573ms ago: executing program 2 (id=6276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000010400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8a45020001000000140400028000"/28], 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x8000) 629.424088ms ago: executing program 2 (id=6277): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x401}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000f9ffffff850000000900000008000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000000000027543a735b643d492800000000f0c2008abef778582b83fa0631dc580bb5cd7f067417cac249924b9f5d4b90f77bcef25c02e8e201aeeb44ee68879d2b2c16bcc4153bc7b8c4ab92a35371f66227e2a3c9b6213d0a1e696d4878b832498b2fa35c86d35b358c0aa8d3b0a06ff68fffdbf8ef881e3d00cab9862b49e94f5365f608775bf3cdc2ecf66a64dc2052ffd864276767be990bca7cde427ff974994c122ef299904b889f1a9f6f66fd055ac3e65609c84a70b5a5d445a105159c672902c992e0b3d070bddf95d43be21d2f383a710f1321a9f61466bc9ed35a6301f573d0c2c506d1f5f4fa703ae4bd0f12362217f810722a81a053598712b65d63e4308c2a938ec3c9f1f3effe9d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000020000000900"/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc) 621.532909ms ago: executing program 2 (id=6278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0xa}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb", 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047459, 0x0) ioctl$TUNGETVNETLE(r4, 0x40047459, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r8) r11 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r11, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000380)={0x38, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x38}}, 0x4008000) socket$qrtr(0x2a, 0x2, 0x0) 332.966754ms ago: executing program 0 (id=6279): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x80000, 0xa) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x6) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff85000000060000009a41280110000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000bad1a0080520412863cb73794ac996189a9d648b2d3feadd9e842c1b8e358f5d5eaca39a10538a224b11298d12337a217e5df8d14d674ca273414b110922b6ef123cab4db56ae9263d69662b0dafc26cd84cffa05704256460e05ff5de0fe6960c2b633fa7d3b28d865a5ac18026b2bc46a9b21f0b11c860709c2b5ceac464adfffab3e9682cf4304bd18206eab57516f34948add7f2a527da951b7e34c9bc8513f31c60c420f40392a6bdd673433e0c234cfe4244e2aa60813b96ca9b386a8b995a03f50c3153419d948b3a0bcde02ef6df1a8eb723de93690d766983a331d535ed9bb9dfde76233a9405cfb435ae565a0b8c4586c7750311fc8590b41af81fce7ed66a78988d14b622dbc6f1ebed90b80bf22f9130400e1615ed"], &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff159}, 0xffffffffffffff53) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT=r5], 0x48) socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x6, 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e1e, @private=0xa010102}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x2, @local, 0x5}], 0x6c) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r6, 0x0, 0x4b) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 296.231511ms ago: executing program 3 (id=6210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x7008, 0x30}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r3, 0x3, 0x30}, 0xc) write$tun(r1, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x48, &(0x7f0000000440)={0xd010b45d, {{0xa, 0x4e23, 0x5, @remote, 0x7}}, {{0xa, 0x4e22, 0xbd3a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdd3}}}, 0x108) 186.604462ms ago: executing program 1 (id=6280): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100039040000000002000000000003e4", @ANYRES32=0x0, @ANYBLOB="a18e9cf403000000"], 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000006edb333f58c72f6b74eb60ea44c73c6c90f534849b3f36ba7015438fe70d809dcd5df29871a42f4b81e99c7d8a1ce2238bb7bd99031e42ca6bea4d53c1bb3cf939adb41cb2915a0bb650eee946fb0fcf592f4aefb8a4e56f03a5b298a84196bce5b59f69d91d486653214b981f0bea70eab4f3"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 0s ago: executing program 1 (id=6281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0xffd, 0x6, 0x1d, 0x5, 0x4, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x4000010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x168, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1}, [@NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x0, 0x2}, 0xe) listen(r5, 0xa1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=ANY=[@ANYBLOB="18020000020000000000000008000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@initdev, @remote, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x10, 0xfff3}, {0x5, 0x7}, {0x5, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x48010) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/161, 0xa1}], 0x1, 0x8b, 0x400) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_red={{0x8}, {0x40, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x5}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x4}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8}, @TCA_RED_MAX_P={0x8, 0x3, 0x9}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}, @TCA_RED_FLAGS={0xc, 0x4, {0x7}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffd2c}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd53}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080e1}, 0xc890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @broadcast}) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): p0 (unregistering): left allmulticast mode [ 542.888034][ T47] bond12 (unregistering): (slave erspan1): Releasing active interface [ 542.928284][ T47] batman_adv: batadv0: Removing interface: vlan3 [ 542.966252][ T47] bond11 (unregistering): (slave geneve3): Releasing active interface [ 543.057318][ T810] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 543.066271][ T47] tipc: Disabling bearer [ 543.192674][ T47] bond13 (unregistering): (slave bridge10): Releasing backup interface [ 543.200966][ T47] bridge10 (unregistering): left promiscuous mode [ 543.207614][ T47] bridge10 (unregistering): left allmulticast mode [ 543.232842][ T47] bond0 (unregistering): Released all slaves [ 543.245772][ T47] bond1 (unregistering): Released all slaves [ 543.292391][ T47] bond2 (unregistering): Released all slaves [ 543.311749][ T47] bond3 (unregistering): Released all slaves [ 543.330474][ T47] bond4 (unregistering): Released all slaves [ 543.348806][ T47] bond5 (unregistering): Released all slaves [ 543.379704][ T47] bond6 (unregistering): Released all slaves [ 543.399204][ T47] bond7 (unregistering): left promiscuous mode [ 543.413742][ T47] bond7 (unregistering): Released all slaves [ 543.433773][ T47] bond8 (unregistering): Released all slaves [ 543.452734][ T47] bond9 (unregistering): Released all slaves [ 543.473463][ T47] bond10 (unregistering): Released all slaves [ 543.507134][ T47] bond11 (unregistering): Released all slaves [ 543.528495][ T47] bond12 (unregistering): Released all slaves [ 543.551521][ T47] bond13 (unregistering): Released all slaves [ 543.830576][T14584] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 544.013982][ T47] tipc: Disabling bearer [ 544.052448][ T47] tipc: Left network mode [ 544.283942][T17844] Bluetooth: hci2: link tx timeout [ 544.289430][T17844] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 544.302239][T17844] Bluetooth: hci2: link tx timeout [ 544.307637][T17844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 544.503023][T24034] tipc: Enabling of bearer rejected, already enabled [ 544.511548][T24033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4898'. [ 544.603405][T24039] tipc: Enabled bearer , priority 16 [ 544.795709][T24031] infiniband syz1: set down [ 544.800376][T24031] infiniband syz1: added bond0 [ 544.922100][T14583] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 544.935955][T24031] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 544.951066][T24031] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 544.968190][T24031] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 544.980113][T14583] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 545.009185][T24031] RDS/IB: syz1: added [ 545.013275][T24031] smc: adding ib device syz1 with port count 1 [ 545.019524][T24031] smc: ib device syz1 port 1 has no pnetid [ 545.102517][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4901'. [ 545.124051][T24049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.133016][T24049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.153727][T24049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.197790][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4901'. [ 545.215055][T24049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.231461][T24049] batman_adv: batadv0: Interface deactivated: dummy0 [ 545.247659][T24049] batman_adv: batadv0: Removing interface: dummy0 [ 545.259314][ T810] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 545.325804][T24045] netlink: 'syz.4.4901': attribute type 10 has an invalid length. [ 545.333725][T24045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4901'. [ 545.342876][T24045] dummy0: entered promiscuous mode [ 545.784668][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4907'. [ 545.817531][T24065] netlink: 'syz.2.4907': attribute type 1 has an invalid length. [ 545.837802][T24065] macvtap1: entered allmulticast mode [ 545.881274][T24065] macvtap2: entered allmulticast mode [ 546.001863][T24068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4908'. [ 546.370033][T17844] Bluetooth: hci2: command 0x0405 tx timeout [ 546.477172][T24078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4910'. [ 546.642845][T24080] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 546.818247][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4914'. [ 546.873208][T24087] tipc: Resetting bearer [ 546.887835][T24087] bond1: left promiscuous mode [ 546.893720][T24087] bond3: left promiscuous mode [ 546.898508][T24087] bridge2: left promiscuous mode [ 546.918436][T24087] vlan1: left allmulticast mode [ 546.923990][T24087] bond3: left allmulticast mode [ 546.930801][T24087] bridge2: left allmulticast mode [ 546.943824][T24087] veth7: left allmulticast mode [ 546.950379][T24087] vlan2: left allmulticast mode [ 546.955251][T24087] bond5: left allmulticast mode [ 546.960435][T24087] sit1: left promiscuous mode [ 546.970419][T24087] macvtap1: left allmulticast mode [ 546.975694][T24087] macvtap2: left allmulticast mode [ 547.018048][T14581] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.061802][T14581] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.080827][T14581] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.100034][T14581] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.171066][T24084] lo speed is unknown, defaulting to 1000 [ 547.336655][T24098] lo speed is unknown, defaulting to 1000 [ 547.860109][T24084] lo speed is unknown, defaulting to 1000 [ 548.227114][T24098] lo speed is unknown, defaulting to 1000 [ 548.366953][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4923'. [ 548.377686][T24117] netlink: 'syz.3.4923': attribute type 1 has an invalid length. [ 548.408306][T24119] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4924'. [ 548.460783][T17844] Bluetooth: hci2: command 0x0405 tx timeout [ 548.520821][T24119] lo speed is unknown, defaulting to 1000 [ 548.687749][T24107] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 548.693871][T24107] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 548.753721][T24107] tipc: Resetting bearer [ 548.896594][T24107] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 548.912715][T24107] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 548.967672][T24107] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 548.973625][T24107] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 548.984267][T24107] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.991574][T24107] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 549.003199][T24119] lo speed is unknown, defaulting to 1000 [ 549.018672][T24107] tipc: Resetting bearer [ 549.449583][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 549.894879][T24157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4932'. [ 549.919996][T24157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4932'. [ 550.234768][T24152] lo speed is unknown, defaulting to 1000 [ 551.506541][ T47] hsr_slave_0: left promiscuous mode [ 551.513183][ T47] hsr_slave_1: left promiscuous mode [ 551.529272][ T47] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 551.536455][ T47] batman_adv: batadv0: Removing interface: ipvlan2 [ 551.583448][ T47] veth0_macvtap: left allmulticast mode [ 551.597640][ T47] veth0_macvtap: left promiscuous mode [ 551.627379][T24165] netlink: 'syz.2.4935': attribute type 1 has an invalid length. [ 552.325634][T24152] lo speed is unknown, defaulting to 1000 [ 552.366757][T24165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.391597][T24166] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 552.446403][T24166] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 552.492228][ T5763] lo speed is unknown, defaulting to 1000 [ 552.493483][T24190] netlink: 'syz.0.4938': attribute type 2 has an invalid length. [ 552.507395][T24190] netlink: 'syz.0.4938': attribute type 1 has an invalid length. [ 552.515664][T24190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4938'. [ 552.532043][ T5763] syś2: Port: 1 Link DOWN [ 552.545958][T24173] bond6: (slave ip6gretap1): making interface the new active one [ 552.573268][T24173] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 552.664488][T24190] lo: entered allmulticast mode [ 552.691683][T24190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.069470][T24207] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4944'. [ 553.081668][T24207] openvswitch: netlink: Flow key attr not present in new flow. [ 553.310304][T24214] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4945'. [ 553.427322][T14581] smbdirect: ib_dev[syś2] removed [ 553.603841][ T47] IPVS: stop unused estimator thread 0... [ 554.423221][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4954'. [ 554.456048][T24266] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4957'. [ 554.752345][T24270] pim6reg: entered allmulticast mode [ 554.773488][T24270] pim6reg: left allmulticast mode [ 554.880580][T24280] xt_hashlimit: size too large, truncated to 1048576 [ 555.151423][T24288] netlink: 'syz.0.4961': attribute type 1 has an invalid length. [ 555.495862][T24307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 555.652298][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4969'. [ 555.693338][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4969'. [ 555.716702][T24319] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4969'. [ 555.732909][T24324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4970'. [ 555.776702][T24324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4970'. [ 555.798350][T24317] netlink: 'syz.0.4969': attribute type 11 has an invalid length. [ 555.850352][T24317] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4969'. [ 556.084442][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4972'. [ 556.131581][T24341] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4974'. [ 558.338333][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 558.967856][T24490] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 559.090355][T24490] 8021q: adding VLAN 0 to HW filter on device bond17 [ 559.461748][T24498] bond17: (slave veth9): Enslaving as an active interface with a down link [ 559.596353][T24499] bond17: (slave veth11): Enslaving as an active interface with a down link [ 559.635685][T24517] __nla_validate_parse: 3 callbacks suppressed [ 559.635702][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5010'. [ 559.648662][T24471] lo speed is unknown, defaulting to 1000 [ 559.697175][T24490] bond17: entered allmulticast mode [ 560.153341][T24533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5014'. [ 560.245443][T24533] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 560.573212][T24540] bond0: Removing last ns target with arp_interval on [ 560.833160][T24552] netlink: 'syz.1.5019': attribute type 2 has an invalid length. [ 561.485535][T24563] tipc: Enabling of bearer rejected, already enabled [ 561.662560][T24565] tipc: New replicast peer: 255.255.255.255 [ 561.695628][T24565] tipc: Enabled bearer , priority 26 [ 562.009025][T24581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5026'. [ 562.043665][T24584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5027'. [ 562.072375][T24581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.236499][T24590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5029'. [ 562.284816][T24590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5029'. [ 562.327121][T24590] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5029'. [ 562.346245][T24599] netlink: 'syz.0.5032': attribute type 3 has an invalid length. [ 562.380381][T24595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5031'. [ 562.395589][T24591] netlink: 'syz.4.5029': attribute type 1 has an invalid length. [ 562.488662][T24608] netlink: 'syz.0.5032': attribute type 3 has an invalid length. [ 562.504493][T24591] 8021q: adding VLAN 0 to HW filter on device bond18 [ 562.590431][T24611] lo: left allmulticast mode [ 562.663541][T24611] gre0: left promiscuous mode [ 562.687810][T24611] gre0: left allmulticast mode [ 562.712620][T24617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5033'. [ 562.746015][T24617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5033'. [ 562.770759][T24611] erspan0: left promiscuous mode [ 562.801102][T24608] block nbd0: NBD_DISCONNECT [ 562.820625][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.907925][T24611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.947618][T24611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.002397][T24611] tipc: Resetting bearer [ 563.009367][T24611] tipc: Resetting bearer [ 563.032087][T24611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.046576][T24611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.072330][T24611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 563.084101][T24611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.107861][T24611] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 563.147618][ T5763] lo speed is unknown, defaulting to 1000 [ 563.170285][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.171473][ T5763] syz2: Port: 1 Link ACTIVE [ 563.177842][ T8351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.258830][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.266031][ T8351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.335927][ T5736] tipc: Node number set to 2879557816 [ 564.086615][T24662] syzkaller1: entered promiscuous mode [ 564.126927][T24662] syzkaller1: entered allmulticast mode [ 564.789287][T24699] __nla_validate_parse: 3 callbacks suppressed [ 564.789352][T24699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5056'. [ 564.840081][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'. [ 564.863510][T24703] syzkaller0: entered promiscuous mode [ 564.874191][T24703] syzkaller0: entered allmulticast mode [ 565.045391][T24717] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5057'. [ 565.100036][T24719] netlink: 'syz.1.5061': attribute type 32 has an invalid length. [ 565.323650][T24722] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5061'. [ 565.370754][T24725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5063'. [ 565.393147][T24725] netlink: 'syz.2.5063': attribute type 4 has an invalid length. [ 565.641550][T24736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5067'. [ 565.678537][T24736] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5067'. [ 565.694041][T24738] xt_hashlimit: size too large, truncated to 1048576 [ 566.346399][T24761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5073'. [ 566.373646][T24761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5073'. [ 566.447923][T24764] vxcan0: entered allmulticast mode [ 567.513207][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5087'. [ 567.617680][T24814] mac80211_hwsim hwsim45 syzkaller0: Caught tx_queue_len zero misconfig [ 567.672809][T24824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.806421][T24831] x_tables: duplicate underflow at hook 3 [ 568.124228][T24848] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 568.177594][T24833] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 568.203889][T24833] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 568.304213][T24855] netlink: 'syz.0.5098': attribute type 1 has an invalid length. [ 568.464275][T24855] bond9: (slave gretap1): making interface the new active one [ 568.481649][T24855] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 568.545049][T24855] macvlan3: entered promiscuous mode [ 568.556602][T24855] macvlan3: entered allmulticast mode [ 568.572153][T24855] bond9: entered promiscuous mode [ 568.592043][T24855] gretap1: entered promiscuous mode [ 568.611886][T24855] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 568.630572][T24855] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 568.694775][T24855] bond9: left promiscuous mode [ 568.730048][T24855] gretap1: left promiscuous mode [ 569.218581][T24883] xt_ipcomp: unknown flags 1D [ 569.406443][T24891] netlink: 'syz.0.5108': attribute type 32 has an invalid length. [ 569.442302][T24891] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 569.662750][T24905] veth9: entered promiscuous mode [ 569.880373][T24918] xt_l2tp: missing protocol rule (udp|l2tpip) [ 569.968510][T24923] __nla_validate_parse: 8 callbacks suppressed [ 569.968527][T24923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5121'. [ 570.089981][T24928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.101274][T24927] sctp: [Deprecated]: syz.4.5122 (pid 24927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.101274][T24927] Use struct sctp_sack_info instead [ 570.214714][T24932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5123'. [ 570.292035][T24938] x_tables: duplicate entry at hook 2 [ 570.346538][T24940] netlink: 'syz.2.5127': attribute type 11 has an invalid length. [ 571.007308][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5136'. [ 573.636536][T24971] rdma_op ffff888057ef81f0 conn xmit_rdma 0000000000000000 [ 573.893780][T24988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5141'. [ 574.154258][T24995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5145'. [ 574.181611][T24996] IPVS: length: 15 != 8 [ 574.373314][T25006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5147'. [ 574.482354][T25003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5148'. [ 574.596569][T25015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5152'. [ 574.686561][T25024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5156'. [ 574.891203][T25037] netlink: 'syz.2.5161': attribute type 1 has an invalid length. [ 574.898980][T25037] netlink: 'syz.2.5161': attribute type 2 has an invalid length. [ 574.996075][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5165'. [ 575.037738][T25048] ip6erspan0: entered allmulticast mode [ 575.079535][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 575.226680][T25061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5169'. [ 575.438608][T25074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5174'. [ 575.473094][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5172'. [ 575.482573][T25077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5176'. [ 575.502195][T25079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5176'. [ 575.620921][T25091] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 575.647306][T25091] veth0_macvtap: entered allmulticast mode [ 575.664279][T25091] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 575.713502][T25094] IPv6: sit3: Disabled Multicast RS [ 575.724248][T25094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5180'. [ 575.792402][T25094] nbd: nbd1 already in use [ 575.906350][T25078] macsec0: entered promiscuous mode [ 576.131428][T25123] tipc: Resetting bearer [ 576.281637][T25136] syzkaller1: entered promiscuous mode [ 576.328296][T25136] syzkaller1: entered allmulticast mode [ 576.432649][T25142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5194'. [ 576.435936][T25151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.562600][T25155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5198'. [ 576.606952][T25159] bridge_slave_0: left allmulticast mode [ 576.612922][T25159] bridge_slave_0: left promiscuous mode [ 576.627195][T25159] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.637586][T25159] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.655127][T25159] bond0: (slave bond_slave_0): Releasing backup interface [ 576.664822][T25159] bond0: (slave bond_slave_1): Releasing backup interface [ 576.678585][T25159] team0: Port device team_slave_0 removed [ 576.686955][T25159] team0: Port device team_slave_1 removed [ 576.693641][T25159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.707320][T25164] netlink: 'syz.4.5200': attribute type 10 has an invalid length. [ 576.732410][T25161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5201'. [ 577.211201][T25175] netlink: 'syz.3.5205': attribute type 10 has an invalid length. [ 577.567889][T25192] netlink: 'syz.1.5211': attribute type 1 has an invalid length. [ 577.665179][T25192] veth7: entered allmulticast mode [ 577.700917][T25197] syzkaller1: entered promiscuous mode [ 577.712213][T25197] syzkaller1: entered allmulticast mode [ 578.243917][T25224] netlink: 'syz.0.5219': attribute type 5 has an invalid length. [ 578.337132][T25229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.357754][T25229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.373662][T25229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.387712][T25229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.402555][T25229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.441977][T25229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.477033][T25232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.530061][T25229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.910193][T25243] netlink: 'syz.4.5226': attribute type 7 has an invalid length. [ 578.918255][T25243] netlink: 'syz.4.5226': attribute type 8 has an invalid length. [ 578.925995][T25243] netlink: 'syz.4.5226': attribute type 8 has an invalid length. [ 578.933736][T25243] netlink: 'syz.4.5226': attribute type 4 has an invalid length. [ 579.350127][T25256] bond10: entered promiscuous mode [ 579.355718][T25256] 8021q: adding VLAN 0 to HW filter on device bond10 [ 579.473928][T25258] syzkaller0: entered promiscuous mode [ 579.479446][T25258] syzkaller0: entered allmulticast mode [ 580.522265][T25282] __nla_validate_parse: 15 callbacks suppressed [ 580.522283][T25282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5234'. [ 580.610557][T25283] validate_nla: 3 callbacks suppressed [ 580.610574][T25283] netlink: 'syz.4.5234': attribute type 10 has an invalid length. [ 580.624778][T25283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5234'. [ 583.062279][T25283] team0: Port device geneve1 added [ 583.068717][T14581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.088879][T14581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.109862][T14581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.152455][T14581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.233832][T25297] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.5238'. [ 583.332193][T25301] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 583.382182][T14585] bridge_slave_1: left allmulticast mode [ 583.394172][T14585] bridge_slave_1: left promiscuous mode [ 583.408442][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.449294][T14585] bridge_slave_0: left allmulticast mode [ 583.456274][T14585] bridge_slave_0: left promiscuous mode [ 583.464563][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.556209][T14585] pimreg: left allmulticast mode [ 583.653322][T14585] bond0 (unregistering): (slave ip6gretap0): Releasing active interface [ 584.114306][T14585] team0: Port device geneve1 removed [ 584.249422][T14585] bond1 (unregistering): Released all slaves [ 584.274077][T14585] bond2 (unregistering): Released all slaves [ 584.292733][T14585] bond3 (unregistering): Released all slaves [ 584.317495][T14585] bond4 (unregistering): Released all slaves [ 584.369392][T14585] bond5 (unregistering): Released all slaves [ 584.417500][T14585] bond6 (unregistering): Released all slaves [ 584.423508][T25329] sctp: [Deprecated]: syz.3.5247 (pid 25329) Use of int in maxseg socket option. [ 584.423508][T25329] Use struct sctp_assoc_value instead [ 584.453285][T14585] bond7 (unregistering): (slave veth7): Releasing active interface [ 584.463753][T14585] bond7 (unregistering): (slave veth9): Releasing active interface [ 584.473498][T14585] bond7 (unregistering): Released all slaves [ 584.499400][T14585] bond0 (unregistering): Released all slaves [ 584.514056][T14585] bond8 (unregistering): (slave bond9): Releasing backup interface [ 584.522741][T14585] bond8 (unregistering): Released all slaves [ 584.542254][T14585] bond9 (unregistering): Released all slaves [ 584.562854][T14585] bond10 (unregistering): Released all slaves [ 584.944499][T25295] lo speed is unknown, defaulting to 1000 [ 585.053349][T25344] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 585.297860][T25344] bond10 (unregistering): Released all slaves [ 585.376389][T14585] tipc: Disabling bearer [ 585.397772][T14585] tipc: Disabling bearer [ 585.442940][T14585] tipc: Left network mode [ 585.461524][T25342] syzkaller1: entered promiscuous mode [ 585.469225][T25342] syzkaller1: entered allmulticast mode [ 585.796019][T14585] IPVS: stopping backup sync thread 8936 ... [ 585.896082][T25373] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 585.901924][T25373] syzkaller1: Linktype set failed because interface is up [ 586.361948][T25378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5259'. [ 586.847807][T25399] veth0_macvtap: left allmulticast mode [ 586.916353][T25399] veth9: left promiscuous mode [ 587.425426][T25426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5269'. [ 587.445488][T25426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5269'. [ 587.503914][T25426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5269'. [ 588.252302][T25440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 590.499080][T25456] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 590.563374][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5280'. [ 590.787418][T25468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5282'. [ 590.823827][T25468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5282'. [ 590.870216][T25469] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5282'. [ 591.186591][T14585] hsr_slave_0: left promiscuous mode [ 591.236268][T14585] hsr_slave_1: left promiscuous mode [ 591.244271][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.263878][T14585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.303870][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.325519][T14585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.344696][T14585] batman_adv: batadv0: Removing interface: ipvlan0 [ 591.353129][T25488] ieee802154 phy0 wpan0: encryption failed: -90 [ 591.411812][T25479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5284'. [ 591.648401][T25491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5289'. [ 591.665434][T25491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5289'. [ 591.766295][T14585] team0 (unregistering): Port device team_slave_1 removed [ 591.933118][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'. [ 591.953751][T25471] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.124559][T25494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5290'. [ 592.148717][T25498] netlink: 'syz.2.5291': attribute type 13 has an invalid length. [ 592.196128][T25498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5291'. [ 592.302633][T25501] netlink: 'syz.1.5293': attribute type 1 has an invalid length. [ 592.398021][T25501] bond9: entered promiscuous mode [ 592.403529][T25501] 8021q: adding VLAN 0 to HW filter on device bond9 [ 592.489649][T25520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5299'. [ 592.849873][T25530] lo speed is unknown, defaulting to 1000 [ 593.421302][T25539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5304'. [ 593.436174][T25539] ip6gre2: entered promiscuous mode [ 593.441412][T25539] ip6gre2: entered allmulticast mode [ 593.452704][T25539] netlink: 'syz.2.5304': attribute type 6 has an invalid length. [ 593.462966][T25539] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5304'. [ 593.472128][T25540] netlink: 'syz.1.5305': attribute type 1 has an invalid length. [ 593.503735][T25540] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5305'. [ 593.533424][T25543] netlink: 'syz.1.5305': attribute type 83 has an invalid length. [ 593.550432][T25540] NCSI netlink: No device for ifindex 0 [ 593.559943][T25542] netlink: 'syz.0.5306': attribute type 2 has an invalid length. [ 593.583069][T25540] tipc: Enabling of bearer rejected, already enabled [ 593.621436][T25545] syzkaller1: entered promiscuous mode [ 593.627514][T25545] syzkaller1: entered allmulticast mode [ 593.647612][T14585] IPVS: stop unused estimator thread 0... [ 594.029196][T25567] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 594.217027][T25578] siw: device registration error -23 [ 594.264732][T25579] tipc: Enabled bearer , priority 0 [ 594.283558][T25571] syzkaller0: entered promiscuous mode [ 594.291787][T25574] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 594.307957][T25571] syzkaller0: entered allmulticast mode [ 594.986006][T25570] tipc: Resetting bearer [ 595.063283][T25570] tipc: Disabling bearer [ 595.586303][T25605] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 595.755522][T25613] bond11: Invalid ad_actor_system MAC address. [ 595.762009][T25613] bond11: option ad_actor_system: invalid value (7) [ 595.775933][T25613] bond11 (unregistering): Released all slaves [ 596.436568][T25659] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 596.478976][T25659] xt_hashlimit: size too large, truncated to 1048576 [ 596.569165][T25672] __nla_validate_parse: 5 callbacks suppressed [ 596.569183][T25672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5339'. [ 596.604057][T25665] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 596.619813][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5339'. [ 596.630501][T25665] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 596.648470][T25665] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 596.823114][T25684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5341'. [ 596.933606][T25684] 8021q: adding VLAN 0 to HW filter on device bond10 [ 597.082968][T25701] mac80211_hwsim hwsim54 syzkaller0: left promiscuous mode [ 597.109477][T25701] bridge4: left promiscuous mode [ 597.114769][T25701] bond8: left promiscuous mode [ 597.130125][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5345'. [ 597.430480][T25725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5351'. [ 597.446084][T25725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5351'. [ 597.510232][T25719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5350'. [ 597.619308][T25733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5353'. [ 597.628303][T25733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5353'. [ 597.637237][T25733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5353'. [ 597.709666][T25723] netlink: 'syz.2.5351': attribute type 1 has an invalid length. [ 597.737687][T25741] netlink: 'syz.0.5354': attribute type 9 has an invalid length. [ 597.792278][ T8357] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.801113][ T8357] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.828981][T25748] netlink: 'syz.4.5356': attribute type 32 has an invalid length. [ 597.841231][ T8357] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.849819][ T8357] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.957527][T25753] netlink: 'syz.1.5358': attribute type 1 has an invalid length. [ 597.994778][T25753] bond10: entered promiscuous mode [ 598.002791][T25753] bond10: entered allmulticast mode [ 598.008398][T25753] 8021q: adding VLAN 0 to HW filter on device bond10 [ 598.034740][T25760] erspan1: entered allmulticast mode [ 598.048668][T25760] bond10: (slave erspan1): making interface the new active one [ 598.056246][T25760] erspan1: entered promiscuous mode [ 598.063711][T25760] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 598.072869][T25759] syzkaller0: entered promiscuous mode [ 598.079051][T25759] syzkaller0: entered allmulticast mode [ 598.137321][T25763] netlink: 'syz.1.5361': attribute type 3 has an invalid length. [ 599.127299][T25804] netlink: 'syz.4.5374': attribute type 1 has an invalid length. [ 599.136177][T25810] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 599.186995][T25813] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 599.196056][T25811] netlink: 'syz.1.5376': attribute type 15 has an invalid length. [ 599.712961][T25825] udevd[25825]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 599.883864][T25849] netlink: 'syz.4.5385': attribute type 13 has an invalid length. [ 600.152542][T25873] IPVS: Unknown mcast interface: vcan0 [ 600.188834][ T47] bond15: (slave ip6gretap1): link status up again after 0 ms [ 600.211846][ T5763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 600.220150][ T47] bond15: (slave ip6gretap1): link status up again after 0 ms [ 600.313226][T14581] bond15: (slave ip6gretap1): link status up again after 0 ms [ 600.323243][T14581] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.439148][ T47] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.489407][ T5763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 600.558453][ T47] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.591504][T25890] tunl0: Caught tx_queue_len zero misconfig [ 600.681466][T14585] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.799672][ T47] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.951689][T25908] netlink: 'syz.4.5403': attribute type 13 has an invalid length. [ 600.969180][T25908] netlink: 'syz.4.5403': attribute type 17 has an invalid length. [ 601.010410][T25905] bridge0: port 5(vlan2) entered disabled state [ 601.299645][T25908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.310550][T25908] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.320986][T25908] dummy0: left promiscuous mode [ 601.365871][T25908] bridge0: port 5(vlan2) entered blocking state [ 601.372372][T25908] bridge0: port 5(vlan2) entered forwarding state [ 601.404364][T25908] veth1_macvtap: left promiscuous mode [ 601.410241][T25908] veth1_macvtap: left allmulticast mode [ 601.419099][T25908] veth0_macvtap: left promiscuous mode [ 601.459895][T25908] veth0_macvtap: entered promiscuous mode [ 601.482602][T25908] veth1_macvtap: entered promiscuous mode [ 601.499382][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.512376][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 601.524562][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 601.537165][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.550273][T25908] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 602.010141][T25928] 8021q: adding VLAN 0 to HW filter on device bond11 [ 602.065229][T25931] __nla_validate_parse: 18 callbacks suppressed [ 602.065247][T25931] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5409'. [ 602.272681][T25935] bond11: (slave geneve4): making interface the new active one [ 602.319405][T25935] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 602.365537][T14581] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.385982][T14581] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.447311][T14581] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.474825][T14581] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.595055][T25923] lo speed is unknown, defaulting to 1000 [ 602.665476][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 602.792131][T25959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5415'. [ 602.819604][T25962] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5416'. [ 602.838348][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5415'. [ 603.297738][T25983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5422'. [ 603.719673][T26001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.831901][T26004] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5428'. [ 604.185457][T26014] syzkaller1: entered promiscuous mode [ 604.199487][T26014] syzkaller1: entered allmulticast mode [ 604.457380][T26023] nbd: nbd2 already in use [ 604.480873][T26023] block nbd2: NBD_DISCONNECT [ 604.501940][T26023] block nbd2: Send disconnect failed -32 [ 604.529737][T26023] block nbd2: shutting down sockets [ 604.605181][T26030] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 604.770795][T26039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5440'. [ 604.791397][T26041] validate_nla: 2 callbacks suppressed [ 604.791447][T26041] netlink: 'syz.0.5438': attribute type 1 has an invalid length. [ 604.810261][T26035] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5437'. [ 604.891106][T26041] 8021q: adding VLAN 0 to HW filter on device bond12 [ 604.958858][T26041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5438'. [ 605.148623][T26055] dvmrp0: entered allmulticast mode [ 605.683389][T26050] lo speed is unknown, defaulting to 1000 [ 606.236830][T26097] netlink: 'syz.2.5455': attribute type 1 has an invalid length. [ 606.273672][T26097] 8021q: adding VLAN 0 to HW filter on device bond9 [ 607.276823][T26129] netlink: 'syz.1.5460': attribute type 1 has an invalid length. [ 607.324047][T26129] __nla_validate_parse: 11 callbacks suppressed [ 607.324065][T26129] netlink: 276 bytes leftover after parsing attributes in process `syz.1.5460'. [ 608.128925][T26147] nbd: must specify a device to reconfigure [ 608.146597][T26149] bridge0: port 5(vlan2) entered disabled state [ 608.195671][T26151] xt_bpf: check failed: parse error [ 608.272378][T26151] netlink: 'syz.4.5469': attribute type 1 has an invalid length. [ 608.324894][T25299] udevd[25299]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 608.348889][T26158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5469'. [ 608.358292][T26158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5469'. [ 608.444342][T26149] ip6tnl1: left allmulticast mode [ 608.449756][T26149] vlan3: left promiscuous mode [ 608.454648][T26149] bridge0: left promiscuous mode [ 608.461029][T26149] bond12: left promiscuous mode [ 608.466965][T26149] ip6gre1: left promiscuous mode [ 608.471923][T26149] ip6gre1: left allmulticast mode [ 608.477899][T26149] veth5: left promiscuous mode [ 608.483341][T26149] bridge3: left promiscuous mode [ 608.488304][T26149] bridge3: left allmulticast mode [ 608.494371][T26149] bond17: left allmulticast mode [ 608.501692][ T10] uyz0: Port: 1 Link DOWN [ 608.708347][T26157] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.824139][T26157] tipc: Resetting bearer [ 608.893165][T26157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.924727][T26157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.075668][T14587] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.088444][T14587] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.121018][ T10] lo speed is unknown, defaulting to 1000 [ 609.142381][ T10] syz2: Port: 1 Link DOWN [ 609.153856][T14587] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.233016][T14585] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.265579][T14585] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.285482][T14585] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.303183][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5475'. [ 609.313508][T14585] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.340094][T14585] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.357077][T14585] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.377100][T14585] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.414239][T14585] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.432974][T14585] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.526373][T26192] bridge0: port 1(ipvlan1) entered blocking state [ 609.543064][T26192] bridge0: port 1(ipvlan1) entered disabled state [ 609.551134][T26195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5480'. [ 609.558256][T26192] ipvlan1: entered allmulticast mode [ 609.565866][T26192] bridge0: entered allmulticast mode [ 609.586242][T26196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5479'. [ 609.595573][T26192] ipvlan1: left allmulticast mode [ 609.595597][T26192] bridge0: left allmulticast mode [ 609.691303][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5483'. [ 609.847537][T26213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5484'. [ 610.804823][T26230] netlink: 'syz.1.5488': attribute type 1 has an invalid length. [ 610.813044][T26230] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5488'. [ 613.059689][T26235] pim6reg: entered allmulticast mode [ 613.242968][T26239] gretap2: entered promiscuous mode [ 613.566607][T26262] netlink: 'syz.4.5500': attribute type 4 has an invalid length. [ 613.591350][T26262] netlink: 'syz.4.5500': attribute type 4 has an invalid length. [ 613.678059][T26272] sctp: [Deprecated]: syz.3.5502 (pid 26272) Use of int in maxseg socket option. [ 613.678059][T26272] Use struct sctp_assoc_value instead [ 613.861763][T26263] lo speed is unknown, defaulting to 1000 [ 614.317930][T26300] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 614.555475][T26312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5518'. [ 614.877182][T26322] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 614.968953][T26330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.098364][T26339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5525'. [ 615.166813][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5525'. [ 615.226813][T26345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5530'. [ 615.306556][T26352] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5530'. [ 615.390787][T26362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.519504][T26335] lo speed is unknown, defaulting to 1000 [ 615.673309][T26373] netlink: 'syz.1.5537': attribute type 2 has an invalid length. [ 615.746576][T26376] sctp: [Deprecated]: syz.1.5537 (pid 26376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 615.746576][T26376] Use struct sctp_sack_info instead [ 615.982414][T26345] lo speed is unknown, defaulting to 1000 [ 616.809375][T26385] netlink: 'syz.0.5540': attribute type 4 has an invalid length. [ 616.862586][T26385] sctp: [Deprecated]: syz.0.5540 (pid 26385) Use of int in max_burst socket option. [ 616.862586][T26385] Use struct sctp_assoc_value instead [ 616.879194][T26387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'. [ 616.909754][T26385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5540'. [ 618.335086][T26437] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 618.347119][T26432] syzkaller1: entered promiscuous mode [ 618.352980][T26437] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 618.362292][T26432] syzkaller1: entered allmulticast mode [ 618.371352][T26407] lo speed is unknown, defaulting to 1000 [ 618.760849][T26449] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5558'. [ 618.881581][T26454] xt_hashlimit: size too large, truncated to 1048576 [ 618.936086][T26456] set match dimension is over the limit! [ 619.344818][T26464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5564'. [ 619.373032][T26464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5564'. [ 619.681287][T26478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5567'. [ 619.693257][T26478] sctp: [Deprecated]: syz.0.5567 (pid 26478) Use of int in maxseg socket option. [ 619.693257][T26478] Use struct sctp_assoc_value instead [ 620.067835][T26497] netlink: 'syz.3.5572': attribute type 1 has an invalid length. [ 620.090802][T26497] netlink: 'syz.3.5572': attribute type 2 has an invalid length. [ 620.118219][T26497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5572'. [ 620.164047][T26497] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5572'. [ 620.730310][ T8357] smc: removing ib device syz1 [ 620.779121][T26497] bond0 (unregistering): Released all slaves [ 620.879296][T26521] netlink: 'syz.1.5573': attribute type 6 has an invalid length. [ 620.898902][T26521] netlink: 'syz.1.5573': attribute type 7 has an invalid length. [ 620.932632][T26521] netlink: 'syz.1.5573': attribute type 8 has an invalid length. [ 620.965959][T26521] netlink: 'syz.1.5573': attribute type 15 has an invalid length. [ 621.052776][ T8357] smbdirect: ib_dev[syz1] removed [ 621.173941][T26556] netlink: 'syz.0.5578': attribute type 1 has an invalid length. [ 621.394898][T26556] 8021q: adding VLAN 0 to HW filter on device bond13 [ 621.505541][T26560] bond13: (slave geneve5): making interface the new active one [ 621.534856][T26560] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 623.770115][ T8351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.780525][ T8351] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.961491][ T8351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.977207][ T8351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.289801][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.463642][T26580] lo speed is unknown, defaulting to 1000 [ 624.499142][T26594] netlink: 63 bytes leftover after parsing attributes in process `syz.1.5587'. [ 624.810978][T26609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5592'. [ 624.839041][T26609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5592'. [ 624.974395][T26586] lo speed is unknown, defaulting to 1000 [ 625.549606][T26631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5598'. [ 625.563769][T26630] openvswitch: netlink: Missing valid actions attribute. [ 625.600688][T26630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.820857][T26647] netlink: 'syz.3.5603': attribute type 1 has an invalid length. [ 625.894768][T26655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5603'. [ 625.908175][T26640] nbd: couldn't find device at index 0 [ 625.914945][T26647] bond0: entered promiscuous mode [ 625.919687][T26649] netlink: 'syz.1.5602': attribute type 4 has an invalid length. [ 625.934118][T26647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.942810][T26654] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5605'. [ 625.962605][T26655] bond0: entered allmulticast mode [ 625.975049][T26640] dvmrp0: left allmulticast mode [ 626.031015][T26647] bond0: (slave bridge7): making interface the new active one [ 626.039250][T26647] bridge7: entered promiscuous mode [ 626.044689][T26647] bridge7: entered allmulticast mode [ 626.046023][T26661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5607'. [ 626.061331][T26647] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 626.205170][T26663] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5608'. [ 626.210356][T26667] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 626.229527][T26666] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 626.247091][T26666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.315942][T26675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5613'. [ 626.789262][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5620'. [ 626.835014][T26694] team0: entered promiscuous mode [ 626.844404][T26694] team0: entered allmulticast mode [ 626.855792][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5620'. [ 626.872278][T26694] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.946123][T26695] team1: entered promiscuous mode [ 626.951810][T26695] team1: entered allmulticast mode [ 626.958879][T26695] 8021q: adding VLAN 0 to HW filter on device team1 [ 627.542403][T26727] netlink: 'syz.0.5627': attribute type 9 has an invalid length. [ 628.084668][T26740] bond10: entered promiscuous mode [ 628.091162][T26740] 8021q: adding VLAN 0 to HW filter on device bond10 [ 628.681677][T26778] batadv_slave_1: left promiscuous mode [ 628.701169][T26778] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 628.759936][T26780] vlan3: entered allmulticast mode [ 629.162179][T26799] syzkaller1: entered promiscuous mode [ 629.167749][T26799] syzkaller1: entered allmulticast mode [ 629.339960][T26806] xt_connbytes: Forcing CT accounting to be enabled [ 629.425059][T26806] can: request_module (can-proto-3) failed. [ 629.647742][T26821] team0: Port device syz_tun added [ 629.690968][T26821] team0: Port device syz_tun removed [ 629.716046][T26821] team0: Port device dummy0 removed [ 629.730580][T26821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 629.997771][T26838] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 630.129400][T26852] __nla_validate_parse: 12 callbacks suppressed [ 630.129416][T26852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5663'. [ 630.157314][T26857] vlan0: entered promiscuous mode [ 630.229276][T26863] openvswitch: netlink: IP tunnel dst address not specified [ 630.574629][T26885] netlink: 'syz.0.5671': attribute type 12 has an invalid length. [ 630.601807][T26885] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5671'. [ 630.691381][T26888] x_tables: duplicate entry at hook 1 [ 630.712721][T26893] netlink: 'syz.0.5673': attribute type 3 has an invalid length. [ 630.864415][T26900] tipc: Enabled bearer , priority 0 [ 630.907145][T26900] syzkaller0: entered promiscuous mode [ 630.925103][T26900] syzkaller0: entered allmulticast mode [ 630.940832][T26899] tipc: Resetting bearer [ 630.947438][T26908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5677'. [ 630.957544][T26897] tipc: Resetting bearer [ 630.981011][T26897] tipc: Disabling bearer [ 631.062603][T26910] netlink: 'syz.1.5678': attribute type 1 has an invalid length. [ 631.127055][T26910] bond11: (slave geneve2): making interface the new active one [ 631.140163][T26910] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 631.150610][T14584] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.172149][T14584] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.194376][T14584] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.208031][T26910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5678'. [ 631.214738][T14584] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.217392][T26918] netlink: 'syz.2.5680': attribute type 1 has an invalid length. [ 631.244799][T26910] 8021q: adding VLAN 0 to HW filter on device bond11 [ 631.323218][ T29] audit: type=1800 audit(1780466290.780:10): pid=26923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5681" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2416 res=0 errno=0 [ 631.351741][T26910] tipc: Resetting bearer [ 632.368888][T26970] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 632.384775][T26970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5699'. [ 632.567805][T26978] openvswitch: netlink: IP tunnel dst address not specified [ 632.650953][T26982] ip6tnl6: entered allmulticast mode [ 632.849601][T26987] netlink: 'syz.4.5706': attribute type 1 has an invalid length. [ 632.944479][T26991] gretap3: entered allmulticast mode [ 632.966142][T26991] bond21: (slave gretap3): making interface the new active one [ 632.987242][T26991] bond21: (slave gretap3): Enslaving as an active interface with an up link [ 632.997299][T26976] lo speed is unknown, defaulting to 1000 [ 633.337032][T27008] netlink: 'syz.1.5711': attribute type 21 has an invalid length. [ 633.346312][T27008] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5711'. [ 633.375174][T27008] netlink: 'syz.1.5711': attribute type 4 has an invalid length. [ 633.387223][T27009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5711'. [ 633.404203][T27008] netlink: 'syz.1.5711': attribute type 3 has an invalid length. [ 633.428345][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5711'. [ 633.453220][T27008] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5711'. [ 633.654789][T27018] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5714'. [ 634.024455][T17844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.036574][T17844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.047816][T17844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.060602][T17844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.070417][T17844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.130433][T27031] sctp: [Deprecated]: syz.3.5719 (pid 27031) Use of int in maxseg socket option. [ 634.130433][T27031] Use struct sctp_assoc_value instead [ 634.296701][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.310687][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.320680][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.343100][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.355738][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.849022][T27077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.263035][T27053] lo speed is unknown, defaulting to 1000 [ 635.278993][T27093] __nla_validate_parse: 2 callbacks suppressed [ 635.279010][T27093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5734'. [ 635.363759][T27099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5736'. [ 635.698692][T27029] lo speed is unknown, defaulting to 1000 [ 636.003701][T27121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5741'. [ 636.076084][T27116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5741'. [ 636.108397][T27116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5741'. [ 636.333302][T27131] nbd: nbd3 already in use [ 636.419883][ T5645] Bluetooth: hci1: command tx timeout [ 636.661623][T27029] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.669582][T27029] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.678692][T27029] bridge_slave_0: entered allmulticast mode [ 636.687003][T27029] bridge_slave_0: entered promiscuous mode [ 636.697585][T27029] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.715609][T27029] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.729873][T27029] bridge_slave_1: entered allmulticast mode [ 636.750635][T27029] bridge_slave_1: entered promiscuous mode [ 636.798949][T27029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.824302][T27029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.891025][T27029] team0: Port device team_slave_0 added [ 636.910740][T27029] team0: Port device team_slave_1 added [ 636.986260][T27029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.993861][T27029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.020775][T27029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.043461][T27029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.051342][T27029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.081788][T27029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.188017][T27029] hsr_slave_0: entered promiscuous mode [ 637.195167][T27029] hsr_slave_1: entered promiscuous mode [ 637.202585][T27029] debugfs: 'hsr0' already exists in 'hsr' [ 637.208551][T27029] Cannot create hsr debugfs directory [ 637.234288][T27168] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 637.249616][T27168] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5754'. [ 637.296307][T27168] syzkaller1: entered promiscuous mode [ 637.305623][T27168] syzkaller1: entered allmulticast mode [ 637.561075][T27029] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.572448][T27029] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.582559][T27029] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 637.616839][T27172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5756'. [ 637.668482][T27172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 637.764581][T27029] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.792462][T27029] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.817990][T27029] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 637.859745][T27188] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 637.946682][T27029] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.958756][T27029] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.970940][T27029] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 638.027040][T27029] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.039950][T27029] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.053261][T27029] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 638.087963][T27198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5765'. [ 638.335833][T27208] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5768'. [ 638.359408][T27208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5768'. [ 638.498837][ T5645] Bluetooth: hci1: command 0x041b tx timeout [ 638.534819][T27200] gretap3: entered allmulticast mode [ 638.596935][T27029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.618702][T27029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.627346][T27029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.638575][T27029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.703192][T27029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.728865][T27029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.752639][T27029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.780832][T27029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.804918][T27226] ipip1: entered promiscuous mode [ 638.943917][T27240] bond11: option arp_all_targets: invalid value (247) [ 638.954082][T27240] bond11 (unregistering): Released all slaves [ 639.006054][T27243] syzkaller0: entered promiscuous mode [ 639.018669][T27243] syzkaller0: entered allmulticast mode [ 639.212835][T27029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.240475][T27029] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.266846][T14584] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.274102][T14584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.293413][T14584] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.300623][T14584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.655955][T27273] netlink: 'syz.3.5785': attribute type 1 has an invalid length. [ 639.892831][T27284] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 639.989767][T27258] infiniband syz0: set down [ 639.994331][T27258] infiniband syz0: added bond_slave_1 [ 640.108587][T27258] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 640.150049][T27258] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 640.188681][T27258] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 640.257218][T27301] netlink: 'syz.2.5791': attribute type 1 has an invalid length. [ 640.286211][T27258] RDS/IB: syz0: added [ 640.300240][T27258] smc: adding ib device syz0 with port count 1 [ 640.321729][T27258] smc: ib device syz0 port 1 has no pnetid [ 640.366774][T27301] 8021q: adding VLAN 0 to HW filter on device bond11 [ 640.437050][T27029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.578388][T17844] Bluetooth: hci1: command 0x041b tx timeout [ 640.583766][T27029] veth0_vlan: entered promiscuous mode [ 640.627879][T27313] netlink: 'syz.2.5794': attribute type 27 has an invalid length. [ 640.648026][T27029] veth1_vlan: entered promiscuous mode [ 640.792002][T27029] veth0_macvtap: entered promiscuous mode [ 640.829070][T27029] veth1_macvtap: entered promiscuous mode [ 640.868262][T27320] __nla_validate_parse: 4 callbacks suppressed [ 640.868287][T27320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5797'. [ 640.879989][T27029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.917552][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5797'. [ 640.927319][T27029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.964682][T14581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.984714][T14581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.007413][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5797'. [ 641.031136][T14581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.090758][T14581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.244463][T27325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5799'. [ 641.264591][T14581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.281076][T14581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.375721][T14584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.385350][T14584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.489221][T27331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.518927][T27331] tipc: Resetting bearer [ 641.542704][T27331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.662723][T27331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 641.698681][T27331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.753831][T27331] veth1_macvtap: left promiscuous mode [ 641.776266][T27331] veth0_macvtap: left promiscuous mode [ 641.792585][T27331] veth0_macvtap: entered promiscuous mode [ 641.800416][T27331] veth1_macvtap: entered promiscuous mode [ 641.847349][T27331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.872957][T27331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 641.882363][T27331] tipc: Resetting bearer [ 641.893150][T27331] 8021q: adding VLAN 0 to HW filter on device bond3 [ 641.915896][T27331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 641.969793][T27331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 641.981234][T27331] 8021q: adding VLAN 0 to HW filter on device eth0 [ 641.990225][T27331] 8021q: adding VLAN 0 to HW filter on device eth1 [ 641.998849][T27331] 8021q: adding VLAN 0 to HW filter on device eth2 [ 642.007692][T27331] 8021q: adding VLAN 0 to HW filter on device eth3 [ 642.020989][T27331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 642.035186][T27331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 642.045010][T27331] 8021q: adding VLAN 0 to HW filter on device bond8 [ 642.053972][ T5763] bridge3: entered promiscuous mode [ 642.063606][ T5763] veth1_to_hsr: entered promiscuous mode [ 642.111177][ T8357] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.123072][ T8357] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.147085][ T8357] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.164955][ T8357] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.190820][ T8357] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.209886][ T8357] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.274351][ T8357] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.302164][ T8357] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.627225][T27356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.658901][T17844] Bluetooth: hci1: command 0x041b tx timeout [ 642.684863][T14581] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 642.702564][T14581] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 642.710654][T14722] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 642.885420][T27356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.082757][T27394] bond12: entered allmulticast mode [ 643.103112][T27395] netlink: 'syz.3.5818': attribute type 21 has an invalid length. [ 643.108593][T18388] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 643.125335][T27394] macvlan2: entered promiscuous mode [ 643.131293][T27394] macvlan2: entered allmulticast mode [ 643.137818][T27394] bond12: entered promiscuous mode [ 643.144796][T27394] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 643.159432][T27394] bond12: left promiscuous mode [ 643.189063][T27395] netlink: 'syz.3.5818': attribute type 1 has an invalid length. [ 643.198297][T27395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5818'. [ 643.302581][T27399] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0 [ 643.311274][T27399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.336710][T27356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.584655][T27356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.603549][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'. [ 643.657517][ T29] audit: type=1804 audit(1780466303.110:11): pid=27410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5825" name="/newroot/544/cgroup.controllers" dev="tmpfs" ino=2786 res=1 errno=0 [ 643.685054][ T29] audit: type=1800 audit(1780466303.110:12): pid=27410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5825" name="cgroup.controllers" dev="tmpfs" ino=2786 res=0 errno=0 [ 643.699751][T18388] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 643.709486][ T29] audit: type=1804 audit(1780466303.150:13): pid=27410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5825" name="/newroot/544/cgroup.controllers" dev="tmpfs" ino=2786 res=1 errno=0 [ 643.980773][T27416] team0: No ports can be present during mode change [ 644.157330][T27432] netlink: 'syz.4.5830': attribute type 1 has an invalid length. [ 644.170499][T27432] netlink: 'syz.4.5830': attribute type 4 has an invalid length. [ 644.739061][T17844] Bluetooth: hci1: command 0x041b tx timeout [ 646.337594][T27435] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 646.346056][ T8357] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.402085][ T8357] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.530718][T14587] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.586526][T27444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5834'. [ 646.637262][ T8357] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.817195][T14726] IPVS: starting estimator thread 0... [ 646.919422][T27474] IPVS: using max 35 ests per chain, 84000 per kthread [ 646.930623][T27466] 8021q: adding VLAN 0 to HW filter on device bond23 [ 646.941441][T27466] bond22: (slave bond23): Enslaving as an active interface with an up link [ 646.978510][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 647.002277][T27481] syzkaller1: entered promiscuous mode [ 647.033992][T27481] syzkaller1: entered allmulticast mode [ 647.043729][T27488] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5844'. [ 647.066766][T27488] nbd: must specify at least one socket [ 647.111556][T27481] tipc: Resetting bearer [ 647.115337][T27502] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 647.127093][T27481] mac80211_hwsim hwsim54 syzkaller0: left promiscuous mode [ 647.140222][T27481] mac80211_hwsim hwsim54 syzkaller0: left allmulticast mode [ 647.152708][T27481] bridge4: left allmulticast mode [ 647.159192][T27481] bond9: left allmulticast mode [ 647.165382][T27481] gretap2: left promiscuous mode [ 647.176564][T27481] bond0: left promiscuous mode [ 647.185390][T27481] bridge7: left promiscuous mode [ 647.192984][T27481] bond0: left allmulticast mode [ 647.199577][T27481] bridge7: left allmulticast mode [ 647.212755][T27481] gretap3: left allmulticast mode [ 647.225503][T27481] syzkaller1: left promiscuous mode [ 647.234982][T27481] syzkaller1: left allmulticast mode [ 647.452604][T27528] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 647.462035][T27528] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode [ 647.477437][T27528] netlink: 'syz.3.5852': attribute type 1 has an invalid length. [ 647.502435][T27528] 8021q: adding VLAN 0 to HW filter on device bond11 [ 648.016295][T27505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.146173][T27541] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 648.150284][T27540] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 648.248751][T27546] netlink: 'syz.4.5858': attribute type 10 has an invalid length. [ 648.274353][T27546] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.296550][T27546] bond0: (slave team0): Enslaving as an active interface with an up link [ 648.405738][T27552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5861'. [ 648.461080][T27547] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.469008][T27547] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.572423][T27547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.591131][T27547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.696638][T14584] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.725364][T14584] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.764307][T14584] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.799929][T14584] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.068953][T27574] vlan4: entered promiscuous mode [ 649.170990][T27581] tipc: Enabling of bearer rejected, already enabled [ 649.188808][T27581] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5869'. [ 649.192275][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'. [ 649.321586][T27579] sctp: [Deprecated]: syz.2.5868 (pid 27579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 649.321586][T27579] Use struct sctp_sack_info instead [ 649.332004][T27589] netlink: 'syz.3.5871': attribute type 29 has an invalid length. [ 649.353577][T27579] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 649.367663][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5871'. [ 649.541269][T27601] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5877'. [ 649.576204][T27601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.695968][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5881'. [ 650.076115][T27641] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 650.079903][T27640] netlink: 'syz.2.5888': attribute type 3 has an invalid length. [ 650.294864][T27652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5891'. [ 650.447754][T27659] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5893'. [ 650.765610][T27678] netlink: 'syz.2.5900': attribute type 4 has an invalid length. [ 650.774980][T27678] .`: renamed from bond0 (while UP) [ 650.832116][T27681] syzkaller1: entered promiscuous mode [ 650.848503][T27681] syzkaller1: entered allmulticast mode [ 650.865614][T27683] netlink: 'syz.2.5902': attribute type 7 has an invalid length. [ 650.880079][T27683] netlink: 'syz.2.5902': attribute type 8 has an invalid length. [ 651.163128][T27693] 8021q: adding VLAN 0 to HW filter on device bond12 [ 651.181760][T27693] bond12: (slave batadv1): Opening slave failed [ 651.511365][T27717] netlink: 'syz.4.5913': attribute type 1 has an invalid length. [ 651.633278][T27723] bond24: (slave gretap4): making interface the new active one [ 651.649849][T27723] bond24: (slave gretap4): Enslaving as an active interface with an up link [ 651.689670][T27717] bond24: (slave bridge11): Enslaving as an active interface with a down link [ 651.721729][T27725] __nla_validate_parse: 3 callbacks suppressed [ 651.721748][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5915'. [ 651.753597][T27717] macvlan0: entered promiscuous mode [ 651.767982][T27717] macvlan0: entered allmulticast mode [ 651.776096][T27717] bond24: entered promiscuous mode [ 651.782817][T27730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5915'. [ 651.796069][T27717] gretap4: entered promiscuous mode [ 651.805195][T27717] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 651.810756][T27731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5916'. [ 651.818187][T27730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5915'. [ 651.839053][T27717] bond24: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 651.866209][T27717] bond24: left promiscuous mode [ 651.871427][T27717] gretap4: left promiscuous mode [ 652.077135][T27742] netlink: 'syz.4.5919': attribute type 4 has an invalid length. [ 652.098480][T27742] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5919'. [ 652.126441][T27742] wlan0: mtu less than device minimum [ 652.231966][T27750] xt_hashlimit: max too large, truncated to 1048576 [ 652.301274][T27759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5921'. [ 652.563901][T27775] netlink: 'syz.3.5926': attribute type 1 has an invalid length. [ 652.657871][T27775] 8021q: adding VLAN 0 to HW filter on device bond13 [ 652.665510][T27784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5928'. [ 652.709992][T27782] bond13: (slave veth3): Enslaving as an active interface with a down link [ 652.747314][T27784] vlan4: entered promiscuous mode [ 652.754051][T27784] gretap0: entered promiscuous mode [ 652.795024][T27775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 652.811954][T27775] bond13: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 652.882584][T27790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5930'. [ 652.996829][T27794] bridge0: port 3(batadv2) entered blocking state [ 653.010843][T27794] bridge0: port 3(batadv2) entered disabled state [ 653.024335][T27794] batadv2: entered allmulticast mode [ 653.046995][T27794] batadv2: entered promiscuous mode [ 653.214771][T27809] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5938'. [ 653.225951][T27809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.463889][T27832] netlink: 'syz.1.5943': attribute type 30 has an invalid length. [ 653.483902][T27832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5943'. [ 653.495394][T14587] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 653.505182][T14587] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 653.553867][T27832] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 653.567090][T27832] bond1 (unregistering): Released all slaves [ 653.783480][T27854] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 653.843423][T27852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.071883][T27871] xt_hashlimit: size too large, truncated to 1048576 [ 654.112519][T27873] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 654.142521][T27873] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 654.183910][T27876] bridge_slave_0 (unregistering): left allmulticast mode [ 654.220845][T27880] netlink: 'syz.1.5952': attribute type 1 has an invalid length. [ 654.222753][T27876] bridge_slave_0 (unregistering): left promiscuous mode [ 654.298533][T27876] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.020590][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 655.037702][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 655.051677][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 655.065433][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 655.074628][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 655.154864][T27909] netlink: 'syz.0.5958': attribute type 8 has an invalid length. [ 655.224286][T27909] veth1_to_team: entered promiscuous mode [ 655.258384][T27909] veth1_to_team: left promiscuous mode [ 655.618671][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 656.227314][T27945] netlink: 'syz.1.5963': attribute type 1 has an invalid length. [ 656.464149][T27956] netlink: 'syz.2.5965': attribute type 4 has an invalid length. [ 656.513225][T27954] netlink: 'syz.2.5965': attribute type 4 has an invalid length. [ 656.694834][T27903] lo speed is unknown, defaulting to 1000 [ 657.139506][T17844] Bluetooth: hci5: command tx timeout [ 657.293349][T27981] __nla_validate_parse: 7 callbacks suppressed [ 657.293369][T27981] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5970'. [ 657.767626][T14587] vlan2: left allmulticast mode [ 657.773378][T14587] bridge_slave_1: left allmulticast mode [ 657.809996][T14587] vlan2: left promiscuous mode [ 657.825033][T14587] bridge_slave_1: left promiscuous mode [ 657.839908][T14587] bridge0: port 5(vlan2) entered disabled state [ 657.870830][T14587] batadv2: left allmulticast mode [ 657.889228][T14587] batadv2: left promiscuous mode [ 657.895543][T14587] bridge0: port 4(batadv2) entered disabled state [ 657.927073][T14587] batadv1: left allmulticast mode [ 657.939103][T14587] batadv1: left promiscuous mode [ 657.949175][T14587] bridge0: port 3(batadv1) entered disabled state [ 658.130437][T14587] bond15 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 658.142117][T14587] bond15 (unregistering): (slave ip6gretap1): Releasing backup interface [ 658.153615][T14587] bond15 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 2e:7d:2f:54:19:3d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 658.382198][T14587] bond21 (unregistering): (slave gretap3): Releasing active interface [ 658.407760][T14587] bond24 (unregistering): (slave gretap4): Releasing active interface [ 658.421231][T14587] bond24 (unregistering): (slave gretap4): the permanent HWaddr of slave - 9a:c3:bb:97:90:94 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 658.536910][T14587] bond11 (unregistering): (slave geneve3): Releasing active interface [ 658.553140][T14587] team0: Port device geneve1 removed [ 658.642347][T14587] bond24 (unregistering): (slave bridge11): Releasing active interface [ 658.677433][T14587] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 658.686848][T14587] bond0 (unregistering): (slave team0): Releasing backup interface [ 658.696572][T14587] bond0 (unregistering): Released all slaves [ 658.706735][T14587] bond1 (unregistering): Released all slaves [ 658.723428][T14587] bond2 (unregistering): Released all slaves [ 658.736786][T14587] bond3 (unregistering): Released all slaves [ 658.751065][T14587] bond4 (unregistering): Released all slaves [ 658.766078][T14587] bond5 (unregistering): Released all slaves [ 658.780676][T14587] bond6 (unregistering): Released all slaves [ 658.807550][T14587] bond7 (unregistering): Released all slaves [ 658.826282][T14587] bond8 (unregistering): Released all slaves [ 658.840954][T14587] bond9 (unregistering): Released all slaves [ 658.854603][T14587] bond10 (unregistering): Released all slaves [ 658.875363][T14587] bond11 (unregistering): Released all slaves [ 658.889376][T14587] bond12 (unregistering): Released all slaves [ 658.912480][T14587] bond13 (unregistering): Released all slaves [ 658.925968][T14587] bond14 (unregistering): Released all slaves [ 658.940618][T14587] bond15 (unregistering): (slave veth5): Releasing backup interface [ 658.949474][T14587] bond15 (unregistering): Released all slaves [ 658.970527][T14587] bond16 (unregistering): Released all slaves [ 658.985111][T14587] bond17 (unregistering): (slave veth9): Releasing active interface [ 658.994891][T14587] bond17 (unregistering): (slave veth11): Releasing active interface [ 659.005217][T14587] bond17 (unregistering): Released all slaves [ 659.022946][T14587] bond18 (unregistering): Released all slaves [ 659.036408][T14587] bond19 (unregistering): Released all slaves [ 659.050303][T14587] bond20 (unregistering): Released all slaves [ 659.066906][T14587] bond21 (unregistering): Released all slaves [ 659.088018][T14587] bond22 (unregistering): (slave bond23): Releasing backup interface [ 659.099753][T14587] bond22 (unregistering): Released all slaves [ 659.113638][T14587] bond23 (unregistering): Released all slaves [ 659.126813][T14587] bond24 (unregistering): Released all slaves [ 659.167905][T27981] 0·: renamed from hsr0 [ 659.185519][T27981] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.205175][T27981] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.216318][T27981] 0·: entered allmulticast mode [ 659.221401][T17844] Bluetooth: hci5: command tx timeout [ 659.229715][T27981] hsr_slave_0: entered allmulticast mode [ 659.235404][T27981] hsr_slave_1: entered allmulticast mode [ 659.243717][T27981] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 659.263998][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 659.476458][T14587] hmó3)ó: left promiscuous mode [ 659.678381][T28010] netlink: 'syz.3.5977': attribute type 6 has an invalid length. [ 659.713444][T28010] netlink: 'syz.3.5977': attribute type 7 has an invalid length. [ 659.773342][T28010] netlink: 'syz.3.5977': attribute type 8 has an invalid length. [ 659.805579][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5978'. [ 659.882836][T14587] tipc: Disabling bearer [ 659.893557][T14587] tipc: Left network mode [ 659.996077][T28013] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 660.035226][T28013] bond14 (unregistering): Released all slaves [ 660.066615][T28021] tipc: Enabled bearer , priority 0 [ 660.109450][T28008] d: renamed from syzkaller0 [ 660.139861][T28008] tipc: Disabling bearer [ 660.842534][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 660.969338][T28078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5991'. [ 660.997392][T28072] tipc: Enabled bearer , priority 10 [ 661.231269][T28083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5990'. [ 661.295157][T27903] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.300407][T17844] Bluetooth: hci5: command tx timeout [ 661.322431][T27903] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.362660][T27903] bridge_slave_0: entered allmulticast mode [ 661.402793][T27903] bridge_slave_0: entered promiscuous mode [ 661.546908][T27903] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.570028][T27903] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.605620][T27903] bridge_slave_1: entered allmulticast mode [ 661.637529][T27903] bridge_slave_1: entered promiscuous mode [ 661.731661][T28115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5995'. [ 661.751885][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 661.794511][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5995'. [ 661.832200][T28117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 661.945267][T28127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5994'. [ 662.041140][T27903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.212349][T27903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.262487][T28144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5998'. [ 662.373327][T28146] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 662.382990][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 662.392894][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5998'. [ 662.405772][T27903] team0: Port device team_slave_0 added [ 662.414962][T28144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5998'. [ 662.431232][T27903] team0: Port device team_slave_1 added [ 662.726454][T27903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.745435][T27903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.794980][T27903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.842840][T27903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.869589][T27903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.992574][T27903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.087185][T28153] bridge0: entered allmulticast mode [ 663.160141][T28177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6003'. [ 663.319877][T14587] hsr_slave_0: left promiscuous mode [ 663.336749][T14587] hsr_slave_1: left promiscuous mode [ 663.378246][T17844] Bluetooth: hci5: command tx timeout [ 663.737001][ T47] smc: removing ib device uyz0 [ 663.785750][T28197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6006'. [ 663.883784][T27903] hsr_slave_0: entered promiscuous mode [ 663.893025][T27903] hsr_slave_1: entered promiscuous mode [ 663.954803][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 664.090342][ T47] smbdirect: ib_dev[uyz0] removed [ 664.291480][T28210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6011'. [ 666.658755][T28219] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 668.286005][T28214] 8021q: adding VLAN 0 to HW filter on device .` [ 668.317183][T28214] mac80211_hwsim hwsim56 wlan0: left promiscuous mode [ 668.341582][T28214] tipc: Resetting bearer [ 668.380885][T28214] ip6gre2: left promiscuous mode [ 668.389130][T14722] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 668.399911][T28214] bond10: left promiscuous mode [ 668.409505][T28214] ipip1: left promiscuous mode [ 668.416868][T28214] 8021q: adding VLAN 0 to HW filter on device bond12 [ 668.529956][T28232] FAULT_INJECTION: forcing a failure. [ 668.529956][T28232] name failslab, interval 1, probability 0, space 0, times 0 [ 668.575711][T28232] CPU: 0 UID: 0 PID: 28232 Comm: syz.2.6014 Not tainted syzkaller #0 PREEMPT(full) [ 668.575735][T28232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.575745][T28232] Call Trace: [ 668.575753][T28232] [ 668.575760][T28232] dump_stack_lvl+0xe8/0x150 [ 668.575789][T28232] should_fail_ex+0x412/0x560 [ 668.575813][T28232] should_failslab+0xa8/0x100 [ 668.575834][T28232] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 668.575855][T28232] ? __alloc_skb+0x186/0x7d0 [ 668.575872][T28232] ? __alloc_skb+0x1d0/0x7d0 [ 668.575885][T28232] ? __local_bh_enable_ip+0xd0/0x130 [ 668.575949][T28232] __alloc_skb+0x1d0/0x7d0 [ 668.575965][T28232] ? netlink_ack_tlv_len+0x6c/0x210 [ 668.575987][T28232] netlink_ack+0x146/0xa50 [ 668.576003][T28232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 668.576092][T28232] ? ref_tracker_free+0x693/0x840 [ 668.576146][T28232] ? __pfx_ref_tracker_free+0x10/0x10 [ 668.576162][T28232] ? __asan_memcpy+0x40/0x70 [ 668.576180][T28232] ? __skb_clone+0x63/0x7a0 [ 668.576231][T28232] netlink_rcv_skb+0x2b6/0x4b0 [ 668.576250][T28232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 668.576275][T28232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 668.576304][T28232] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.576321][T28232] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.576343][T28232] netlink_unicast+0x75c/0x8e0 [ 668.576370][T28232] netlink_sendmsg+0x813/0xb40 [ 668.576398][T28232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.576418][T28232] ? aa_sock_msg_perm+0xf1/0x1b0 [ 668.576443][T28232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 668.576468][T28232] ____sys_sendmsg+0x972/0x9f0 [ 668.576487][T28232] ? __might_fault+0xaf/0x130 [ 668.576514][T28232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.576541][T28232] ? import_iovec+0x73/0xa0 [ 668.576565][T28232] ___sys_sendmsg+0x2a5/0x360 [ 668.576582][T28232] ? __lock_acquire+0x6b5/0x2cf0 [ 668.576606][T28232] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.576654][T28232] ? __fget_files+0x2a/0x420 [ 668.576674][T28232] ? __fget_files+0x3a0/0x420 [ 668.576702][T28232] __x64_sys_sendmsg+0x1bd/0x2a0 [ 668.576724][T28232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.576751][T28232] ? __pfx_ksys_write+0x10/0x10 [ 668.576781][T28232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.576799][T28232] do_syscall_64+0x174/0x580 [ 668.576819][T28232] ? trace_irq_disable+0x3b/0x140 [ 668.576842][T28232] ? clear_bhb_loop+0x40/0x90 [ 668.576862][T28232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.576879][T28232] RIP: 0033:0x7f643719ce59 [ 668.576895][T28232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.576908][T28232] RSP: 002b:00007f6438044028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.576926][T28232] RAX: ffffffffffffffda RBX: 00007f6437415fa0 RCX: 00007f643719ce59 [ 668.576938][T28232] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 668.576947][T28232] RBP: 00007f6438044090 R08: 0000000000000000 R09: 0000000000000000 [ 668.576958][T28232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.576968][T28232] R13: 00007f6437416038 R14: 00007f6437415fa0 R15: 00007ffcb7e51c78 [ 668.576997][T28232] [ 668.698575][T18388] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 669.032042][T28242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6016'. [ 669.052680][T14587] IPVS: stop unused estimator thread 0... [ 669.117708][T17844] block nbd2: Receive control failed (result -1) [ 669.742586][T28258] xfrm1: entered allmulticast mode [ 669.846739][T28239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 669.952004][T28274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6022'. [ 670.187337][T28281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6024'. [ 670.238746][T28281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6024'. [ 670.402699][T28294] FAULT_INJECTION: forcing a failure. [ 670.402699][T28294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.467920][T28294] CPU: 0 UID: 0 PID: 28294 Comm: syz.3.6026 Not tainted syzkaller #0 PREEMPT(full) [ 670.467943][T28294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.467953][T28294] Call Trace: [ 670.467959][T28294] [ 670.467967][T28294] dump_stack_lvl+0xe8/0x150 [ 670.467991][T28294] should_fail_ex+0x412/0x560 [ 670.468015][T28294] _copy_to_user+0x31/0xb0 [ 670.468035][T28294] simple_read_from_buffer+0xe1/0x170 [ 670.468061][T28294] proc_fail_nth_read+0x1bb/0x230 [ 670.468086][T28294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.468107][T28294] ? rw_verify_area+0x2a6/0x4d0 [ 670.468127][T28294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.468146][T28294] vfs_read+0x20c/0xa70 [ 670.468170][T28294] ? __pfx___mutex_lock+0x10/0x10 [ 670.468192][T28294] ? __pfx_vfs_read+0x10/0x10 [ 670.468214][T28294] ? __fget_files+0x2a/0x420 [ 670.468244][T28294] ? __fget_files+0x3a0/0x420 [ 670.468260][T28294] ? __fget_files+0x2a/0x420 [ 670.468286][T28294] ksys_read+0x150/0x270 [ 670.468309][T28294] ? __pfx_ksys_read+0x10/0x10 [ 670.468339][T28294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.468357][T28294] do_syscall_64+0x174/0x580 [ 670.468373][T28294] ? trace_irq_disable+0x3b/0x140 [ 670.468396][T28294] ? clear_bhb_loop+0x40/0x90 [ 670.468417][T28294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.468433][T28294] RIP: 0033:0x7f9f68f5d68e [ 670.468449][T28294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 670.468462][T28294] RSP: 002b:00007f9f69e4afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.468480][T28294] RAX: ffffffffffffffda RBX: 00007f9f69e4b6c0 RCX: 00007f9f68f5d68e [ 670.468492][T28294] RDX: 000000000000000f RSI: 00007f9f69e4b0a0 RDI: 0000000000000004 [ 670.468502][T28294] RBP: 00007f9f69e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 670.468512][T28294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.468521][T28294] R13: 00007f9f69216038 R14: 00007f9f69215fa0 R15: 00007ffd29c57438 [ 670.468551][T28294] [ 670.726601][T27903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 671.023584][T27903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.046653][T28303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6027'. [ 671.068226][T28303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6027'. [ 671.107010][T28303] netlink: 'syz.0.6027': attribute type 4 has an invalid length. [ 671.131136][T27903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 671.179054][T27903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.221893][T27903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.420277][T28320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6030'. [ 671.506888][T27903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.554651][T27903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 671.602960][T27903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.772585][T28355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6035'. [ 671.911866][T27903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.961813][T27903] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.970384][T28364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6037'. [ 672.012493][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.019705][ T8357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.071602][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.078845][ T8357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.113869][T28369] tipc: Enabling of bearer rejected, already enabled [ 672.167738][T28370] nbd: couldn't find a device at index 0 [ 672.205726][T28376] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 672.217049][T28370] ieee802154 phy0 wpan0: encryption failed: -22 [ 672.895711][T28406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6045'. [ 672.898611][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 673.212770][T27903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.480774][T28430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.873237][T28455] xt_hashlimit: max too large, truncated to 1048576 [ 674.143109][T28463] lo speed is unknown, defaulting to 1000 [ 674.146563][T27903] veth0_vlan: entered promiscuous mode [ 674.209979][T27903] veth1_vlan: entered promiscuous mode [ 674.335275][T27903] veth0_macvtap: entered promiscuous mode [ 674.369848][T27903] veth1_macvtap: entered promiscuous mode [ 674.445830][T27903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.485381][T27903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.507887][T28484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6058'. [ 674.527877][T14586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.555520][T14586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.586559][T14586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.613416][T14586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.022056][T28494] vlan2: entered promiscuous mode [ 675.045064][T14585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.072801][T14585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.223262][T14586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.257302][T14586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.516366][T14586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.553240][T14586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.212792][T28540] netlink: 'syz.4.6069': attribute type 10 has an invalid length. [ 676.385474][T28540] team0: Port device veth1_to_hsr added [ 676.642178][T28561] tipc: Started in network mode [ 676.660451][T28561] tipc: Node identity e6dc0bbe373b, cluster identity 4711 [ 676.686464][T28561] tipc: Enabled bearer , priority 0 [ 676.879461][T28568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6076'. [ 676.934309][T28553] tipc: Disabling bearer [ 677.418481][T28578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6076'. [ 678.065994][T28616] lo speed is unknown, defaulting to 1000 [ 678.095268][T28616] lo speed is unknown, defaulting to 1000 [ 678.135631][T28616] lo speed is unknown, defaulting to 1000 [ 678.224410][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 678.239792][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 678.252792][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 678.267034][ T5645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 678.276642][ T5645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 678.286251][T28616] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 678.290839][T28625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6090'. [ 678.316284][T28616] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 678.456095][T28625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6090'. [ 678.538338][T28616] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 678.630656][T28616] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 678.800979][T28616] lo speed is unknown, defaulting to 1000 [ 678.867658][T28616] lo speed is unknown, defaulting to 1000 [ 678.983920][T28616] lo speed is unknown, defaulting to 1000 [ 679.034186][T28616] lo speed is unknown, defaulting to 1000 [ 679.096015][T28616] lo speed is unknown, defaulting to 1000 [ 679.129942][T28616] lo speed is unknown, defaulting to 1000 [ 679.294734][T28624] lo speed is unknown, defaulting to 1000 [ 679.325084][T28648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6096'. [ 679.865715][T28624] lo speed is unknown, defaulting to 1000 [ 680.057144][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6106'. [ 680.196156][T28686] IPv6: NLM_F_REPLACE set, but no existing node found! [ 680.245406][T28686] IPv6: NLM_F_REPLACE set, but no existing node found! [ 680.420942][ T5645] Bluetooth: hci4: command tx timeout [ 680.542152][T28709] IPVS: ip_vs_edit_dest(): server weight less than zero [ 680.562396][T28702] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6112'. [ 680.596733][T28624] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.627914][T28624] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.656004][T28624] bridge_slave_0: entered allmulticast mode [ 680.680161][T28624] bridge_slave_0: entered promiscuous mode [ 680.723751][T28624] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.756581][T28624] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.782526][T28624] bridge_slave_1: entered allmulticast mode [ 680.812093][T28624] bridge_slave_1: entered promiscuous mode [ 681.034517][T28713] lo speed is unknown, defaulting to 1000 [ 681.048418][T28721] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6115'. [ 681.131757][T28729] bond1 (unregistering): Released all slaves [ 681.178834][T28624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.195537][T28624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.234102][T28715] dvmrp0: entered allmulticast mode [ 681.336704][T28624] team0: Port device team_slave_0 added [ 681.345738][T28624] team0: Port device team_slave_1 added [ 681.442338][T28624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.468814][T28624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.501334][T28624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.512998][T28713] lo speed is unknown, defaulting to 1000 [ 681.514534][T28624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.526136][T28624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.554784][T28624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.786842][T28748] 8021q: VLANs not supported on wg2 [ 681.839671][T28624] hsr_slave_0: entered promiscuous mode [ 681.883172][T28624] hsr_slave_1: entered promiscuous mode [ 681.909101][T28624] debugfs: 'hsr0' already exists in 'hsr' [ 681.925026][T28624] Cannot create hsr debugfs directory [ 682.107920][T28764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6125'. [ 682.354191][T28774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6128'. [ 682.401996][T28624] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.499389][T17844] Bluetooth: hci4: command tx timeout [ 682.526743][T28624] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.599332][T28624] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.705837][T28624] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.942240][T28624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 682.968677][T28624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.986817][T28624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 683.000570][T28624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.009622][T28624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 683.030276][T28624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.041345][T28791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6136'. [ 683.053359][T28624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 683.063338][T28796] netlink: 'syz.3.6137': attribute type 1 has an invalid length. [ 683.074503][T28624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.100274][T28796] bond14: entered promiscuous mode [ 683.109178][T28796] bond14: entered allmulticast mode [ 683.114736][T28796] 8021q: adding VLAN 0 to HW filter on device bond14 [ 683.144747][T28798] erspan1: entered allmulticast mode [ 683.155776][T28798] bond14: (slave erspan1): making interface the new active one [ 683.164007][T28798] erspan1: entered promiscuous mode [ 683.171810][T28798] bond14: (slave erspan1): Enslaving as an active interface with an up link [ 683.249577][T28806] ip6tnl1: entered allmulticast mode [ 683.271535][T28796] syz.3.6137 (28796) used obsolete PPPIOCDETACH ioctl [ 683.377674][T28624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.434670][T28624] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.462812][T14586] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.470039][T14586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.493029][T14585] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.500282][T14585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.916104][T28838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6149'. [ 683.989387][T28847] veth0: entered promiscuous mode [ 684.026979][T28847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6152'. [ 684.135134][T28858] Cannot find add_set index 4 as target [ 684.379722][T28624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.512243][T28624] veth0_vlan: entered promiscuous mode [ 684.536245][T28624] veth1_vlan: entered promiscuous mode [ 684.579050][T17844] Bluetooth: hci4: command 0x040f tx timeout [ 684.631800][T28624] veth0_macvtap: entered promiscuous mode [ 684.647340][T28624] veth1_macvtap: entered promiscuous mode [ 684.655511][T28877] No such timeout policy "syz1" [ 684.673054][T28624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.700921][T28624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.733580][T14585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.757664][T14585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.781868][T14585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.804017][T14585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.810554][T28887] netlink: 'syz.4.6162': attribute type 16 has an invalid length. [ 684.824440][T28887] netlink: 'syz.4.6162': attribute type 3 has an invalid length. [ 684.833336][T28887] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.6162'. [ 685.028027][T28892] xt_NFQUEUE: number of total queues is 0 [ 685.081249][T28892] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6163'. [ 685.093200][T14587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.108590][T14587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.184579][T14585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.208032][T14585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.560701][T28928] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6174'. [ 685.578869][T28929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6174'. [ 685.648372][T28929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6174'. [ 685.714086][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.926859][T28948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6178'. [ 686.055610][T28956] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 686.304618][T28972] lo speed is unknown, defaulting to 1000 [ 686.461476][T28986] tipc: Enabled bearer , priority 26 [ 686.489438][T28986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6192'. [ 686.574302][T28988] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 686.589849][T28972] lo speed is unknown, defaulting to 1000 [ 686.615378][T28986] macvlan4: entered promiscuous mode [ 686.630293][T28986] macvlan4: entered allmulticast mode [ 686.638690][T28986] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 686.669176][ T5645] Bluetooth: hci4: command 0x040f tx timeout [ 686.780162][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6189'. [ 686.831870][T28974] macvlan2: entered promiscuous mode [ 686.837470][T28974] bond0: entered promiscuous mode [ 686.847227][T28974] bond_slave_0: entered promiscuous mode [ 686.853561][T28974] bond_slave_1: entered promiscuous mode [ 686.861312][T28974] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 686.926924][T28974] dvmrp0: entered allmulticast mode [ 687.552471][T29026] netlink: 'syz.3.6203': attribute type 178 has an invalid length. [ 687.588475][ T810] tipc: Node number set to 3521579966 [ 687.717601][T29033] syzkaller0: entered promiscuous mode [ 687.733048][T29033] syzkaller0: entered allmulticast mode [ 687.750975][T29033] tipc: Started in network mode [ 687.766262][T29033] tipc: Node identity 4a0dc1a87009, cluster identity 4711 [ 687.785103][T29033] tipc: Enabled bearer , priority 0 [ 687.846686][T29033] tipc: Resetting bearer [ 687.947965][T29033] tipc: Disabling bearer [ 688.192654][T17844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 688.210018][T17844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 688.221078][T17844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 688.230140][T17844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 688.241266][T17844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 688.639223][T29083] bond1: entered promiscuous mode [ 688.650587][T29083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 688.683092][T29083] netlink: 'syz.0.6218': attribute type 5 has an invalid length. [ 688.691270][T29083] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6218'. [ 688.701692][T29083] ipvlan0: entered allmulticast mode [ 688.707125][T29083] veth0_vlan: entered allmulticast mode [ 688.744519][T29058] lo speed is unknown, defaulting to 1000 [ 688.750646][T17844] Bluetooth: hci4: command 0x040f tx timeout [ 688.874638][T29058] lo speed is unknown, defaulting to 1000 [ 689.208867][T29104] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 689.349704][T29119] syzkaller0: entered promiscuous mode [ 689.390302][T29119] syzkaller0: entered allmulticast mode [ 689.453305][T29126] netlink: 'syz.4.6225': attribute type 1 has an invalid length. [ 689.464890][T29126] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6225'. [ 689.486667][T29058] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.496554][T29058] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.504278][T29058] bridge_slave_0: entered allmulticast mode [ 689.512056][T29058] bridge_slave_0: entered promiscuous mode [ 689.572135][T29058] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.586829][T29058] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.603601][T29058] bridge_slave_1: entered allmulticast mode [ 689.626644][T29058] bridge_slave_1: entered promiscuous mode [ 689.727510][T29058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.740754][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 689.748609][T29139] tipc: Enabling of bearer rejected, failed to enable media [ 689.768987][T29058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.794418][T29148] netlink: 'syz.0.6229': attribute type 11 has an invalid length. [ 689.823306][T29140] bond0: entered promiscuous mode [ 689.829078][T29140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.836617][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 689.879905][T29139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.887973][T29139] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 689.901652][T29139] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 689.915772][T29139] bond0: (slave vti0): making interface the new active one [ 689.923531][T29139] vti0: entered promiscuous mode [ 689.930229][T29139] bond0: (slave vti0): Enslaving as an active interface with an up link [ 689.948963][T29160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6232'. [ 689.975213][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 690.045036][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 690.057822][T29058] team0: Port device team_slave_0 added [ 690.071844][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 690.085703][T29058] team0: Port device team_slave_1 added [ 690.087749][T29163] nbd: couldn't find a device at index 0 [ 690.092515][T29164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6235'. [ 690.137023][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 690.137958][T29164] wg1: Master is either lo or non-ether device [ 690.201959][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 690.205858][T29058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.228815][T29058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.275071][T29058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.300056][T29140] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 690.303208][T29058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.328945][T29058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.359614][T17844] Bluetooth: hci3: command tx timeout [ 690.377898][T29058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.527380][T29058] hsr_slave_0: entered promiscuous mode [ 690.571998][T29058] hsr_slave_1: entered promiscuous mode [ 690.591018][T29058] debugfs: 'hsr0' already exists in 'hsr' [ 690.608863][T29058] Cannot create hsr debugfs directory [ 690.819235][T17844] Bluetooth: hci4: command 0x040f tx timeout [ 690.852528][T29185] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.6241'. [ 690.966440][T29187] openvswitch: netlink: IP tunnel TTL not specified. [ 691.104023][T29196] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6244'. [ 691.277585][T29204] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 691.587654][T29219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6251'. [ 691.627447][T29223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6252'. [ 691.636626][T29219] 8021q: adding VLAN 0 to HW filter on device bond13 [ 691.650318][T29223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 691.657591][T29223] IPv6: NLM_F_CREATE should be set when creating new route [ 691.685113][T29219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 691.828819][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'. [ 691.871683][T29227] : entered promiscuous mode [ 691.910298][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'. [ 691.943927][T29227] openvswitch: : Dropping previously announced user features [ 692.306263][T29235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.335331][T29261] netlink: 'syz.1.6258': attribute type 11 has an invalid length. [ 692.358724][T29058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 692.398999][T29058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.471119][T17844] Bluetooth: hci3: command tx timeout [ 692.479286][T29058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 692.519189][T29058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.528300][T29058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 692.546338][T29058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.572932][T29265] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6258'. [ 692.599810][T29265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6258'. [ 692.609103][T29265] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6258'. [ 692.633883][T29058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 692.661211][T29058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.885181][T29058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.984322][T29058] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.017713][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.024921][ T8351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.053439][T14585] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.060665][T14585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.517859][T29058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.565085][T29058] veth0_vlan: entered promiscuous mode [ 693.576042][T29058] veth1_vlan: entered promiscuous mode [ 693.605353][T29058] veth0_macvtap: entered promiscuous mode [ 693.615105][T29058] veth1_macvtap: entered promiscuous mode [ 693.634748][T29058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.649927][T29058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.665384][T14587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.674502][T14587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.684806][T14587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.694954][T14587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.498799][T17844] Bluetooth: hci3: command tx timeout [ 695.805862][T29282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.973937][T14587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.015999][T14587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.084567][T29321] ip6gretap1: entered promiscuous mode [ 696.109783][T29321] ip6gretap1: entered allmulticast mode [ 696.187232][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.198438][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.213014][T29330] __nla_validate_parse: 1 callbacks suppressed [ 696.213031][T29330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6273'. [ 696.292728][T29335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6276'. [ 696.407014][T29340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6278'. [ 696.590803][T17844] Bluetooth: hci3: command tx timeout [ 697.020937][T29330] [ 697.023310][T29330] ====================================================== [ 697.030329][T29330] WARNING: possible circular locking dependency detected [ 697.037361][T29330] syzkaller #0 Not tainted [ 697.041765][T29330] ------------------------------------------------------ [ 697.048770][T29330] syz.4.6273/29330 is trying to acquire lock: [ 697.054817][T29330] ffff88802a07c6b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 697.064297][T29330] [ 697.064297][T29330] but task is already holding lock: [ 697.071654][T29330] ffff88802a07c190 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 697.081830][T29330] [ 697.081830][T29330] which lock already depends on the new lock. [ 697.081830][T29330] [ 697.092215][T29330] [ 697.092215][T29330] the existing dependency chain (in reverse order) is: [ 697.101214][T29330] [ 697.101214][T29330] -> #6 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 697.109817][T29330] blk_alloc_queue+0x546/0x680 [ 697.115165][T29330] __blk_mq_alloc_disk+0x197/0x390 [ 697.120857][T29330] nbd_dev_add+0x499/0xb50 [ 697.125889][T29330] nbd_genl_connect+0x962/0x1cf0 [ 697.131335][T29330] genl_family_rcv_msg_doit+0x22a/0x330 [ 697.137427][T29330] genl_rcv_msg+0x61c/0x7a0 [ 697.142452][T29330] netlink_rcv_skb+0x232/0x4b0 [ 697.147737][T29330] genl_rcv+0x28/0x40 [ 697.152234][T29330] netlink_unicast+0x75c/0x8e0 [ 697.157521][T29330] netlink_sendmsg+0x813/0xb40 [ 697.162794][T29330] ____sys_sendmsg+0x972/0x9f0 [ 697.168072][T29330] ___sys_sendmsg+0x2a5/0x360 [ 697.173298][T29330] __x64_sys_sendmsg+0x1bd/0x2a0 [ 697.178746][T29330] do_syscall_64+0x174/0x580 [ 697.183853][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.190258][T29330] [ 697.190258][T29330] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 697.197453][T29330] fs_reclaim_acquire+0x71/0x100 [ 697.202902][T29330] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 697.209227][T29330] __alloc_skb+0x1d0/0x7d0 [ 697.214153][T29330] __ip6_append_data+0x2d3c/0x3f60 [ 697.219880][T29330] ip6_append_data+0x10f/0x280 [ 697.225159][T29330] rawv6_sendmsg+0x12d3/0x18e0 [ 697.230532][T29330] ____sys_sendmsg+0x80a/0x9f0 [ 697.235809][T29330] ___sys_sendmsg+0x2a5/0x360 [ 697.240996][T29330] __x64_sys_sendmsg+0x1bd/0x2a0 [ 697.246439][T29330] do_syscall_64+0x174/0x580 [ 697.251539][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.257942][T29330] [ 697.257942][T29330] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 697.265659][T29330] lock_sock_nested+0x41/0x100 [ 697.270937][T29330] inet_shutdown+0x6a/0x390 [ 697.276032][T29330] nbd_mark_nsock_dead+0x2e9/0x560 [ 697.281660][T29330] recv_work+0x1c2e/0x1d40 [ 697.286586][T29330] process_scheduled_works+0xb5d/0x1860 [ 697.292670][T29330] worker_thread+0xa53/0xfc0 [ 697.297768][T29330] kthread+0x389/0x470 [ 697.302351][T29330] ret_from_fork+0x514/0xb70 [ 697.307503][T29330] ret_from_fork_asm+0x1a/0x30 [ 697.312777][T29330] [ 697.312777][T29330] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 697.320408][T29330] __mutex_lock+0x1a3/0x1550 [ 697.325512][T29330] nbd_queue_rq+0x37b/0x1100 [ 697.330616][T29330] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 697.336693][T29330] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 697.343563][T29330] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 697.350058][T29330] blk_mq_run_hw_queue+0x348/0x4f0 [ 697.355679][T29330] blk_mq_dispatch_list+0xd16/0xe10 [ 697.361388][T29330] blk_mq_flush_plug_list+0x48d/0x570 [ 697.367267][T29330] __blk_flush_plug+0x3ed/0x4d0 [ 697.372629][T29330] __submit_bio+0x28d/0x580 [ 697.377650][T29330] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 697.383794][T29330] block_read_full_folio+0x599/0x830 [ 697.389633][T29330] filemap_read_folio+0x137/0x3b0 [ 697.395191][T29330] do_read_cache_folio+0x358/0x590 [ 697.400815][T29330] read_part_sector+0xb6/0x2b0 [ 697.406159][T29330] adfspart_check_ICS+0xb1/0x960 [ 697.411601][T29330] bdev_disk_changed+0x817/0x1770 [ 697.417131][T29330] blkdev_get_whole+0x380/0x510 [ 697.422545][T29330] bdev_open+0x31e/0xd30 [ 697.427295][T29330] blkdev_open+0x470/0x610 [ 697.432223][T29330] do_dentry_open+0x822/0x13a0 [ 697.437495][T29330] vfs_open+0x3b/0x340 [ 697.442067][T29330] path_openat+0x2e08/0x3860 [ 697.447163][T29330] do_file_open+0x23e/0x4a0 [ 697.452178][T29330] do_sys_openat2+0x113/0x200 [ 697.457360][T29330] __x64_sys_openat+0x138/0x170 [ 697.462717][T29330] do_syscall_64+0x174/0x580 [ 697.467812][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.474211][T29330] [ 697.474211][T29330] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 697.481407][T29330] __mutex_lock+0x1a3/0x1550 [ 697.486510][T29330] nbd_queue_rq+0xc6/0x1100 [ 697.491524][T29330] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 697.497586][T29330] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 697.504434][T29330] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 697.510941][T29330] blk_mq_run_hw_queue+0x348/0x4f0 [ 697.516567][T29330] blk_mq_dispatch_list+0xd16/0xe10 [ 697.522273][T29330] blk_mq_flush_plug_list+0x48d/0x570 [ 697.528159][T29330] __blk_flush_plug+0x3ed/0x4d0 [ 697.533515][T29330] __submit_bio+0x28d/0x580 [ 697.538525][T29330] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 697.544663][T29330] block_read_full_folio+0x599/0x830 [ 697.550452][T29330] filemap_read_folio+0x137/0x3b0 [ 697.555984][T29330] do_read_cache_folio+0x358/0x590 [ 697.561605][T29330] read_part_sector+0xb6/0x2b0 [ 697.566878][T29330] adfspart_check_ICS+0xb1/0x960 [ 697.572320][T29330] bdev_disk_changed+0x817/0x1770 [ 697.577851][T29330] blkdev_get_whole+0x380/0x510 [ 697.583214][T29330] bdev_open+0x31e/0xd30 [ 697.587967][T29330] blkdev_open+0x470/0x610 [ 697.592890][T29330] do_dentry_open+0x822/0x13a0 [ 697.598164][T29330] vfs_open+0x3b/0x340 [ 697.602736][T29330] path_openat+0x2e08/0x3860 [ 697.607830][T29330] do_file_open+0x23e/0x4a0 [ 697.612839][T29330] do_sys_openat2+0x113/0x200 [ 697.618021][T29330] __x64_sys_openat+0x138/0x170 [ 697.623382][T29330] do_syscall_64+0x174/0x580 [ 697.628482][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.634879][T29330] [ 697.634879][T29330] -> #1 (set->srcu){.+.+}-{0:0}: [ 697.641987][T29330] __synchronize_srcu+0xca/0x300 [ 697.647430][T29330] elevator_switch+0x1e8/0x7a0 [ 697.652702][T29330] elevator_change+0x2cc/0x450 [ 697.657977][T29330] elevator_set_default+0x36c/0x430 [ 697.663680][T29330] blk_register_queue+0x3e9/0x4e0 [ 697.669214][T29330] __add_disk+0x677/0xd50 [ 697.674053][T29330] add_disk_fwnode+0xfb/0x480 [ 697.679241][T29330] nbd_dev_add+0x72c/0xb50 [ 697.684168][T29330] nbd_init+0x168/0x1f0 [ 697.688933][T29330] do_one_initcall+0x250/0x870 [ 697.694210][T29330] do_initcall_level+0x104/0x190 [ 697.699655][T29330] do_initcalls+0x59/0xa0 [ 697.704499][T29330] kernel_init_freeable+0x2a6/0x3e0 [ 697.710228][T29330] kernel_init+0x1d/0x1d0 [ 697.715079][T29330] ret_from_fork+0x514/0xb70 [ 697.720184][T29330] ret_from_fork_asm+0x1a/0x30 [ 697.725459][T29330] [ 697.725459][T29330] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 697.733261][T29330] __lock_acquire+0x15a5/0x2cf0 [ 697.738643][T29330] lock_acquire+0x106/0x350 [ 697.743652][T29330] __mutex_lock+0x1a3/0x1550 [ 697.748757][T29330] elevator_change+0x1b3/0x450 [ 697.754031][T29330] elevator_set_none+0xb5/0x140 [ 697.759385][T29330] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 697.765700][T29330] nbd_start_device+0x17f/0xb10 [ 697.771064][T29330] nbd_genl_connect+0x165b/0x1cf0 [ 697.776596][T29330] genl_family_rcv_msg_doit+0x22a/0x330 [ 697.782658][T29330] genl_rcv_msg+0x61c/0x7a0 [ 697.787682][T29330] netlink_rcv_skb+0x232/0x4b0 [ 697.792956][T29330] genl_rcv+0x28/0x40 [ 697.797457][T29330] netlink_unicast+0x75c/0x8e0 [ 697.802730][T29330] netlink_sendmsg+0x813/0xb40 [ 697.808012][T29330] ____sys_sendmsg+0x972/0x9f0 [ 697.813332][T29330] ___sys_sendmsg+0x2a5/0x360 [ 697.818516][T29330] __x64_sys_sendmsg+0x1bd/0x2a0 [ 697.823964][T29330] do_syscall_64+0x174/0x580 [ 697.829062][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.835460][T29330] [ 697.835460][T29330] other info that might help us debug this: [ 697.835460][T29330] [ 697.845671][T29330] Chain exists of: [ 697.845671][T29330] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#69 [ 697.845671][T29330] [ 697.859411][T29330] Possible unsafe locking scenario: [ 697.859411][T29330] [ 697.866855][T29330] CPU0 CPU1 [ 697.872213][T29330] ---- ---- [ 697.877565][T29330] lock(&q->q_usage_counter(io)#69); [ 697.882928][T29330] lock(fs_reclaim); [ 697.889417][T29330] lock(&q->q_usage_counter(io)#69); [ 697.897302][T29330] lock(&q->elevator_lock); [ 697.901876][T29330] [ 697.901876][T29330] *** DEADLOCK *** [ 697.901876][T29330] [ 697.910012][T29330] 6 locks held by syz.4.6273/29330: [ 697.915290][T29330] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 697.923478][T29330] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 697.932429][T29330] #2: ffff8880321511c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 697.943813][T29330] #3: ffff8880321510d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 697.954760][T29330] #4: ffff88802a07c190 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 697.965361][T29330] #5: ffff88802a07c1c8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 697.976226][T29330] [ 697.976226][T29330] stack backtrace: [ 697.982101][T29330] CPU: 0 UID: 0 PID: 29330 Comm: syz.4.6273 Not tainted syzkaller #0 PREEMPT(full) [ 697.982116][T29330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 697.982125][T29330] Call Trace: [ 697.982133][T29330] [ 697.982141][T29330] dump_stack_lvl+0xe8/0x150 [ 697.982158][T29330] print_circular_bug+0x2e1/0x300 [ 697.982177][T29330] check_noncircular+0x12e/0x150 [ 697.982195][T29330] __lock_acquire+0x15a5/0x2cf0 [ 697.982209][T29330] ? ktime_get+0x45/0x220 [ 697.982232][T29330] ? elevator_change+0x1b3/0x450 [ 697.982245][T29330] lock_acquire+0x106/0x350 [ 697.982258][T29330] ? elevator_change+0x1b3/0x450 [ 697.982276][T29330] __mutex_lock+0x1a3/0x1550 [ 697.982290][T29330] ? elevator_change+0x1b3/0x450 [ 697.982305][T29330] ? rcu_is_watching+0x15/0xb0 [ 697.982321][T29330] ? work_grab_pending+0x3d1/0x990 [ 697.982335][T29330] ? elevator_change+0x1b3/0x450 [ 697.982349][T29330] ? __pfx___mutex_lock+0x10/0x10 [ 697.982361][T29330] ? enable_work+0x17f/0x230 [ 697.982374][T29330] ? lockdep_hardirqs_on+0x7a/0x110 [ 697.982390][T29330] ? __cancel_work_sync+0xf7/0x110 [ 697.982404][T29330] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 697.982420][T29330] elevator_change+0x1b3/0x450 [ 697.982436][T29330] elevator_set_none+0xb5/0x140 [ 697.982450][T29330] ? __pfx_elevator_set_none+0x10/0x10 [ 697.982466][T29330] ? xa_load+0x1db/0x210 [ 697.982559][T29330] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 697.982580][T29330] ? kernfs_add_one+0x477/0x5c0 [ 697.982599][T29330] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 697.982618][T29330] ? sysfs_add_file_mode_ns+0x259/0x300 [ 697.982634][T29330] nbd_start_device+0x17f/0xb10 [ 697.982655][T29330] ? device_create_file+0xf4/0x1b0 [ 697.982748][T29330] nbd_genl_connect+0x165b/0x1cf0 [ 697.982764][T29330] ? __pfx___nla_validate_parse+0x10/0x10 [ 697.982784][T29330] ? __pfx_nbd_genl_connect+0x10/0x10 [ 697.982801][T29330] ? rcu_is_watching+0x15/0xb0 [ 697.982815][T29330] ? trace_kmalloc+0x2a/0xf0 [ 697.982833][T29330] ? __nla_parse+0x40/0x60 [ 697.982847][T29330] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 697.982865][T29330] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 697.982883][T29330] genl_family_rcv_msg_doit+0x22a/0x330 [ 697.982902][T29330] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 697.982922][T29330] ? __lock_acquire+0x6b5/0x2cf0 [ 697.982937][T29330] genl_rcv_msg+0x61c/0x7a0 [ 697.982954][T29330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.982969][T29330] ? __pfx_nbd_genl_connect+0x10/0x10 [ 697.982990][T29330] netlink_rcv_skb+0x232/0x4b0 [ 697.983003][T29330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.983019][T29330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.983037][T29330] ? down_read+0x270/0x2e0 [ 697.983088][T29330] ? genl_rcv+0xd/0x40 [ 697.983103][T29330] genl_rcv+0x28/0x40 [ 697.983118][T29330] netlink_unicast+0x75c/0x8e0 [ 697.983133][T29330] netlink_sendmsg+0x813/0xb40 [ 697.983149][T29330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.983164][T29330] ? aa_sock_msg_perm+0xf1/0x1b0 [ 697.983183][T29330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.983201][T29330] ____sys_sendmsg+0x972/0x9f0 [ 697.983215][T29330] ? __might_fault+0xaf/0x130 [ 697.983232][T29330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.983248][T29330] ? import_iovec+0x73/0xa0 [ 697.983264][T29330] ___sys_sendmsg+0x2a5/0x360 [ 697.983277][T29330] ? __lock_acquire+0x6b5/0x2cf0 [ 697.983290][T29330] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.983305][T29330] ? futex_wait+0x2a2/0x390 [ 697.983337][T29330] ? __fget_files+0x2a/0x420 [ 697.983351][T29330] ? __fget_files+0x3a0/0x420 [ 697.983368][T29330] __x64_sys_sendmsg+0x1bd/0x2a0 [ 697.983382][T29330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.983398][T29330] ? rcu_is_watching+0x15/0xb0 [ 697.983414][T29330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.983427][T29330] do_syscall_64+0x174/0x580 [ 697.983439][T29330] ? trace_irq_disable+0x3b/0x140 [ 697.983456][T29330] ? clear_bhb_loop+0x40/0x90 [ 697.983469][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.983482][T29330] RIP: 0033:0x7f27fc39ce59 [ 697.983495][T29330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.983506][T29330] RSP: 002b:00007f27fd224028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.983521][T29330] RAX: ffffffffffffffda RBX: 00007f27fc616090 RCX: 00007f27fc39ce59 [ 697.983530][T29330] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000010 [ 697.983538][T29330] RBP: 00007f27fc432d6f R08: 0000000000000000 R09: 0000000000000000 [ 697.983546][T29330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 697.983554][T29330] R13: 00007f27fc616128 R14: 00007f27fc616090 R15: 00007ffedfed4c58 [ 697.983568][T29330] [ 698.713902][T17844] block nbd4: Receive control failed (result -32) [ 698.734190][T17844] block nbd4: Receive control failed (result -32) [ 698.744654][T17844] block nbd4: Receive control failed (result -32) [ 699.007857][ T8357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.192054][ T8357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.248178][ T8357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.362795][ T8357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.485958][ T8357] bridge_slave_1: left allmulticast mode [ 699.494391][ T8357] bridge_slave_1: left promiscuous mode [ 699.501620][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.518937][ T8357] bridge_slave_0: left allmulticast mode [ 699.525542][ T8357] bridge_slave_0: left promiscuous mode [ 699.531477][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.638365][ T8357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.650665][ T8357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.663265][ T8357] bond0 (unregistering): Released all slaves [ 699.672836][ T8357] bond1 (unregistering): Released all slaves [ 699.721947][ T8357] : left promiscuous mode [ 699.767680][ T8357] tipc: Left network mode [ 699.797716][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 699.963778][ T8357] hsr_slave_0: left promiscuous mode [ 699.972058][ T8357] hsr_slave_1: left promiscuous mode [ 699.977973][ T8357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.985814][ T8357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.995746][ T8357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.015848][ T8357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.028981][ T8357] veth1_macvtap: left promiscuous mode [ 700.035321][ T8357] veth0_macvtap: left promiscuous mode [ 700.041240][ T8357] veth1_vlan: left promiscuous mode [ 700.046816][ T8357] veth0_vlan: left promiscuous mode [ 700.170929][ T8357] team0 (unregistering): Port device team_slave_1 removed [ 700.181741][ T8357] team0 (unregistering): Port device team_slave_0 removed [ 700.241675][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 700.543693][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 700.593893][ T8357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.634722][ T8357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.673145][ T8357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.707137][ T8357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.803940][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 700.821016][ T8357] bridge_slave_1: left allmulticast mode [ 700.828134][ T8357] bridge_slave_1: left promiscuous mode [ 700.834081][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.843800][ T8357] bridge_slave_0: left allmulticast mode [ 700.850219][ T8357] bridge_slave_0: left promiscuous mode [ 700.856321][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.906286][ T8357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.916846][ T8357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.926533][ T8357] bond0 (unregistering): Released all slaves [ 701.245147][ T8357] hsr_slave_0: left promiscuous mode [ 701.251202][ T8357] hsr_slave_1: left promiscuous mode [ 701.256868][ T8357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.264481][ T8357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.272250][ T8357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.279883][ T8357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.290267][ T8357] veth1_macvtap: left promiscuous mode [ 701.295724][ T8357] veth0_macvtap: left promiscuous mode [ 701.301349][ T8357] veth1_vlan: left promiscuous mode [ 701.306580][ T8357] veth0_vlan: left promiscuous mode [ 701.393175][ T8357] team0 (unregistering): Port device team_slave_1 removed [ 701.407254][ T8357] team0 (unregistering): Port device team_slave_0 removed [ 701.446104][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 701.737583][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 701.955441][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 702.148747][ T5295] 8021q: adding VLAN 0 to HW filter on device eth8 [ 705.538426][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!