last executing test programs: 2.425196658s ago: executing program 3 (id=4244): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r5 = socket(0x10, 0x803, 0xf) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000100)="ba0455111f1b8072fd972350948b", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x6, @local}, 0x10, {0x2, 0x4e23, @broadcast}, 'veth1_to_bond\x00'}) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r9, 0xc040583f, &(0x7f00000000c0)={{@_ha_fsid={[0x7ff, 0x8]}, {0x3, 0x5, 0x4}}, {{[0x8000, 0x3, 0xe, 0x5]}, 0x0, 0x1, 0xd, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x5, 0xb8]}, {0x1, 0x7, 0x0, 0x5}}, 0xe53, 0x0, '\x00'}]}}) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r9, 0xc040583f, &(0x7f00000000c0)={{@_ha_fsid={[0x7ff, 0x8]}, {0x3, 0x5, 0x4}}, {{[0x8000, 0x3, 0xe, 0x5]}, 0x0, 0x1, 0xd, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x5, 0xb8]}, {0x1, 0x7, 0x0, 0x5}}, 0xe53, 0x0, '\x00'}]}}) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400}) 2.22935984s ago: executing program 3 (id=4246): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4a6eb442812636aee8dfe95d64222f92b12be73478c249144acccaad10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d", 0xfffffffffffffd5f}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0xf3}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="ff150793392a510f5bc1694613a397f5298ecc7e", 0x14}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4a6eb442812636aee8dfe95d64222f92b12be73478c249144acccaad10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d", 0xfffffffffffffd5f}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0xf3}, {&(0x7f00000007c0)="a96a428426d96522dbf395b96cda5289bbfe3d97be8f413c48ec17c91194c66443ac9ed513c32242f54abb9a8ad671c6786dd7161962a8cf0dc4c7c0a1f86f7d1b17cc1660980f64e0b66a61b77eed3c8497ff551a20db0aa749c5ed3d49c05b1f787665fc8ed059d872289988b78549f8e5f01c2dab0e462f618669d1ca60666c010a55e46421284abe14fdfa39da550161c5410c37fbd11866c3e2f710e557408f5c4a5d494e87bcacc70ecbc69322da9f6a2388ffece43aeee909aa68d00e2137407fbcf0e749eb6ef98960c1ed54e532722c05c0038e8a9c25a560b3569cc7928a66d41c3dcf80263869467cd8a905d56a7b327d0354d81554f98b1e85ae5d86502a1b3ed1e250f71cb5c5b7aa755326d9d6ab836db15f6107023fe99229e48a9008bd8ed0141577f1f1ea58b10e6ceeacfe98ff142e57f0dd1c88ae37752e200657282cda4177730d24a77a941e21675fa53da47992cce0a954ae826fff35039dc74bd9d0e5973ee99b00200cff625fb828ebc36189f3013291fe121a0810e1008854633b5890b810817609e8311f2e34cf3b78d666a1207a4fdbf77cc2d87410bb8533054f39eeff0602c72476ea86bbd68e3bf4976c16a3a8d60b4fa1c1ff02275718e1f7028119bcb785b0d95369dea71f559a32891ad8b3ef21b0f43f8db1f88fc0984c24ea1a38bc89b3b23c4cf9a67ad08f3fb635736350dfb726f8177efadd377073ba05878ab62d2a18481922e6c48f09f057aba001fb8eb233eb23a67e74d006bdaad1fa9a8a622c17947f34b89d0fc0a6dd3a7b6fa0beabb98875112036ab1ec22090369dc72d3c385b2679f0b99af9bcc6ef785c0b51473d8864ec867ea3c754856199152f000b2afe739b5c568c1619d2af08fb2fc6844fac0035cceb0d0656d3af9bbd686fd99275e7f81aeafd33481c5778b279e5870348ec4495684bdcb71c0c8131cdc8330159d8c92adb613dac99fedb3c50c22243ee61ebb8645f94cd0994b02c5f5b544887b11b2fd3655e115889ebeb8617eb1cdb5dbec30c407ee4f09d17d2ecca77b25604cfbd308a91b0b2e8cd1249a2e1f441989657efc8584ceb7e443f2ae30191c5623b06fac91bab61a40f31f2863b4b508998ded6abd8f55e503401c2e9e298655d50ab3f775f9159d0765b4ee1fef3aa1fe608d5dade41cd16a3c1ec7868b18ff3f1449d3900f7d77489c1bb4cdb99beac51942f8a7c4ab3e3a43e13b6c69b63623a970aec5426b58c63d9ffc229efb58e7b58eb27a12b91c4a0f253e1d5f13e59ffcecb003c5e46b1cc236b9fe508b37c3f2046c53eabbc2a7b1f2c0d04a86ba8918239e1dda997c5612fb43dc86905f79f1503ac47d5ea8399dc5d5cc284a3a789d77cc5e887ce3c25ae3f7a636429873970930ebdeec9690b62f46f480a4a102cfa3ce2a61f056bedf3ca698c4f2666bf55f035daca9fb2efcfd96d18cb7afd6e2592e460c4638f261a4a7a85c290c78a921edbc01e2d7a60c6b6a2608fb52f31b73471dd610f3703242273de21261656df6cd8c3847c730819e402933a40a4c560d9651a95764179f4a1a39e60c80deece7b0eacbafd5efe40eee56424b3e0921524397bd4f554e4a0ccc6e9b2be09e0ae6810a9fef7b027ee3cff9b5e674f793579eac25cee7c4e9351a8d7412e2c6cf9ba4082059a35878771744b8d0c572e10250035630b30db9030bf67c6dca054f6a219c51984f37ec9a2e2ac6e85d97475e5821bbb376af98e1e180cd94c22a2246dc757da46421b85487b7291f68fa595451999c32c869cbabcfe6be628f0909bb62ee174c97bef3f92fbb1072d66b5d28427b1695913bb86759fc20c74acf75df87ded19a81966e7dda1be3cec73f23df8b255ceff270af0ee99253426f5d4866afd89766c498652d5c5f6d4d3d6fbb52931b10613ba80a3d8a23464c30414e89897b90d5e0c90f0c72931b5ad4cbf69c0fc2eda242a56a789af5f4f0f0fb51f26c7a102ce6e0b76cf3a1f84de55f21df446ec9b9409cd1fb919b02a515994166e7ae29ad0783e0adf2c4296ed7fc19c84378a35e83f739a3e370faef047ef39fc7926ebf06f09db535aae1d5558f83f1e434556de25e6d2aa78d4eac784a7407521e1626d038d652d0320c0558c42e9e9ac731404c26248934d23dd3a8812de7622c230888db650f7846770ddc8059447fd03ccf862574d9b548054afb63e32986caf80a57fc2fa01d904ec94ad1c8b6cb56cb782b47b5a5626ab094c196e2e1f9fd25a39ec1ad45a7ae94c9ae64ac4bb45c828295c195fbfed9171d142fb8ece8af614953ad5ca1e5d65c52c4d9633c458b5e788bfd3469328b9e6e4df03f3da9e5d3d11284e791a67d0856666ee21f8ea4b1d76d7a1f07863756029a4b5cb820edb63dc0efe6fc2577a79383f280f241b35dff9cfb92cf04451f5767f95e5d5ff0c808acddf406127e9ceb8d1f55749a5781e9b185e45072d181d069c715febebc1ab63126697d145d63b3a41ba202a387dcfdfbb96de0d05454fecc28637dfac86ce61641ee7105f4b441031bea7ae0d1787bf772cfa2f48c3062d232b23b5b328e6ea9e0de0130db2500e37d28a52c490b2fa9d39c3d5c9b8a298f2aeb348b962fee1d6a7d6d2c661113c2b8101f39dba91a3199bab5b70f5bed7871580b54bf34f2851c14b69e16ad97223ab8eb0b2725e00efa7b1e75264a65ad61cfca62f6d5d651c193c123f9bf77b3aed591e8161b767fc2977b56f3849362559dffd3414ef1e5cb2d611f7bb3d7d4c28c0a6de2993eb89c0805622f9fe4136e856e103d931aae07469efc077f9dd6df11c1eeba7468ca78e2e8027b2f672f9b965a6d88756b531321fb181702794ce58299b0cd34e481dc6760b4f9b32cfae5e0a35b4a19a4dbd26870bcb8ccb7724a294b10697763d6b3f7141bf7ca09d0871dceaf364f5aca649d77203328b8ad463a144961595e978043be434cd08dd5120bc36c5d895745ce5cc10f9a7f22baad125d60beaeb8c98279f5b3a363eda42bfc9fef669b2f4fb663700dcc5a47515b9adec65cc99cfea4cc2246dcdff878eae17441c69f4127c49fdd7935bb0c0c8053c9b788aa74a7ff174b7fc8b36ddc5ffa89fe7a98a14805ce96447e00a8b32b3f46af448aa29f326d03477bde78b147fec195cc5b253becf53a80f08ddde4529c2f53f40eb59f8598ed0c045dd60cb8ee90669091d1e2e970791f687db9b28c43c74813b6364b3a0f5762bfaa867bcdd7d44d0eccc1e0149b6ba5c4412b16493330a41352c682dfd88aff599459c6d7beb392925338e9bb1469f59dc833d0e685dc8ac9fc708123d1a1d483e6ccd45f58edac266f5517f5711402a83bacb634e4a28e8d32121be30a2aaeb2adc5cc3e2b0d15cd94b4fab7f37ffa77e477099ea6dd6167e292921f5957fc4e2f3c7a1396e60154bb638dccb5fd0d7bedc36591901dbd5cf63914c401fc79036f4a26f7b4df5fd776b7ef156c33a180ec8615ec6f24659794da3af2cb75a5905b891a0b269405d4471fbeb3e90b19f502f0b36a32f9f8bbac6a1fa6fb7a50cb563b4fa41d0f2639da50773356cce00000000000000016721701a47a54d76c93fbd00f408c270897159bf168ab2ec326978f48f7d845b6e64d856de829fd8b45b86489abb7537e372df0ddc96ed4826ee76b28d8999d7e170b1db1dc9316d51504f7cf7740f354f0255f83a31ef9c8e70d33a256e909bad11ae1217f66260dc5c52682a6e84fec98221de47463b6d37b6a100fe5893b668d316b78f1cc0f67c481c50e275d4613a0b2acf73f86898b2506dc72b427e0476ab342f3c18b0949ee09c2d56154fc7b36a44c0771851186e83619f73945258dfe80304a591b2fe7057e80a2127c5e8b00c6d4809e72d931ffd7bce4b4d9fce0cf6135c47ad63fd7f9ed8beba4de84c087fcd42eaf8474a01bd752bba36dd487c0ae725f8e7ec695aa2958616f6c59413f235f176300a9457d3caf0b4e972b6b9339b4de6e7bf29aa1af48de7a834700a9c999c0198b3f6234aee737c96e02120b79725322aafe19139cc725db0b578cfccd8666b66ae8e034e4240768f03e0ff8ee072245b28f42ceb784133e99071b36709992fa81a9736d89018a2b361877a2fb05bceb0bfa5ee0eb7fc5d78c534f6ea4edcd0f530067c530f7bea92bddc9c61b268d5bc1ad3ff852ab93f3e810002133d0d8e16b1d71e1db2bdb91d416a6bfcb4864d58da1758abff7ca03d379bd48b03f019c33c434bdf25822465ae322b38ae83dd90597db8c781f48efedb66da368f3d9f67f27612c51c07b9aeb419c32ff028a77e3abc5bd531d7bb29bd1c6c1119820abfd881f660e5a7072cdbc0e888d97cbc2105782204f34d093c1e0e6195e51e2e8b639a0f656aa21e29d0fa2a2f868b77995e7ada252a30a31b219be7c1b107ddd737654546340e424f13521ed73f0ed33ad3664f1b9b68ee60f7255119d585c09a2467b22de08104a37202cb737e934b1bdb83102b680d9cfd21c55fd00e33fba7651b2c36a87272945c371303c7e4ca181c1f7d2fe09815c1732d8d777e7b9a430d6b237c7c9fc8758e8456fb4e6ffc2aa421ab5942204e54cb52197e14aae9ae34376ac1d56d009f07babcb3d3492c87faf3e44bdd7d16dbce8148e2c7cb44d30ca29908aaf7c9ef39e791a9a988a5381942e3daf05f85be245f4ef26b08d83b1c1b58892b462783dc27602d8931d3232e5be295d479f9600cc4c3ed2e6a2fbb925c602d251b13f2ec2b7ca99fcd4bc2aa6115ddb0b842ed35c70d867734ee7518fd5299e07818f024a1682aacaa4e28d9f5db71006beb8bcc1e3a43cf27fb3d9475fbd632912d83f4e95b4390068f55f2f832a2e2c9f4ba5ca59d185a655375c6f5779d9fe5a47d1f417cf6f6405eab89f755f9a90623270c2b2a444b6b79662964199f7bedd2a2939e03ec6a334b78a6166ebf70562819a273bb6de9a3d7c2383a569cbeb08859e742ec5f947d1817c2dbfa3b72e5d3afdc45", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="ff150793392a510f5bc1694613a397f5298ecc7e", 0x14}], 0x1}}], 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 1.960281806s ago: executing program 2 (id=4249): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x25dfdc01, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x38}}, 0x44000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) 1.747915994s ago: executing program 2 (id=4252): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (rerun: 64) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x884) (rerun: 64) 1.632316162s ago: executing program 0 (id=4254): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = socket(0x2000000015, 0x80005, 0x0) r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000001800)=0x10, 0x80000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x110, r1, 0xdaea8000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x114, 0x71, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r5, 0x40047459, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x4, 0x3, {0xa, 0x4e21, 0x80000001, @rand_addr=' \x01\x00', 0x4}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="ff3cf5c0117ccb4cf62a9eb09ec68e65bfda311bd62844a6bc3378658470058cac1639086cc908bc75c5e422c5e9e9ae23340d5183d414b57f1ec090a97432fff6c6b6e18a3c472d1f6201d74b2bbd963dbdd3a763a79d8150773153f8b3988ed7ddafe8808086cc9f803df39e7c08b391738474704ff950e59665f6e1958e43c74fdf12c4b2205da5ae4d9d1a84", 0x8e}, {&(0x7f00000001c0)="99aa3065febd5398543f5c1a9f0b3928ae6f16a8e9d939041ac75b713da87e597a76dd5c52f5d16542ede271091523f2e1607356923b58e1b5cab774abed7415e261b946b36c8f47b2128f208adb2e7c38e68429644c6cefa5ca0130cdb46801ff89fb2f3f5b0f649e3c4c6e3c42a20f117d7698f96a81b830308253c6afc8a35d88e38e0aa9b3888c254bbed31ee96b7942af5d9eabea5a33a9967f20fa0a7739b00809f60132979f", 0xa9}, {&(0x7f0000000280)="80cf5d8bff663ee8d02e48472042b798c36ef1b71a7de8c5eb3b02eb2e1ac8885de0c41543d51daf9c1041a286d9204f41fcd83130594deecd7e95af766a09aa4a586b6038697fb99b3cf5cc73a63bf077043d1119d89fe1dd07d35e32d09860cf6b27b5d091c2f341e2aa705e16aa7f1f0c9976c21d31e1d06b8c70c6ffc1069d600ea4672e6321c6342a9aa0dfe64b10d0f49104797cb4ac233aaa", 0x9c}], 0x3, &(0x7f0000000380)=[{0xb0, 0x111, 0x4, "d26100d17fe38ba82ebad92e8992823a27cfc8e54a35aef2b3bb3fe298e81392fe462c00ea2fcc2c419076b471615c39079f911daa0a88c6b018679113d02bb1b102eff40c4024ef2845f7a0f3d0a69aa1ba248adf8dcd43dd252122abac89c8d3e4620963cb304e282f3045e63269707bcf8bc92923a717526d2daddb8f649138312c8adeb88f16c39f9e475eab46f443cc751bec5e9155cda8"}, {0xa8, 0x10b, 0x5d55, "f97c9f6e8aed54ce50bc138c034fb02277fb03c7fa63dc290a27355f091bc41e66a9e48877f46991c33321a1b20e5e17ade47725aa9eb2679d0b0daeba9d3d0f50f28229db9eb31b171ac00097c07cd953984370163e2fd409c9e9f7c1bf1a13a2afed822887c650ed6bb63f2d998396e157684844317b5b742cea8f40bc7256700c35b5c0f43a086364881ae25b39e1503472d7"}, {0x88, 0x10f, 0xe, "3ac6fac94b5a849740f9b402842dca001ea47dde241c35f3069160ef8c0f5b82abde24aa1edbece5d838829e55d10873f13840aebc7e2cd3f133ffbc4b7cea56e0f6cbb6906a9a0e44c0be51d59d8cadff2e19e0f6bc49f2de9eff1eb16b7e8b6044e19e7342bc182a21932d3135b0c3f2847b05ac73"}, {0x28, 0x10a, 0x786, "80afc04f172bf65550289179a4e27cecbaa627917ad3"}, {0x28, 0x119, 0x7, "d172996c30fc4c8177b765e8967ab12aeba99539"}, {0xc8, 0x114, 0x3, "1c10f71b36a868fbb990228f863b577f7e441cc9a9fa5ecacceaadb88f30581986792502e7e7e5f3e9514759d36415746419e2bb6e33fe0468012e6c09d5e138eb53dc7418d23b0cfaf24350bcca11be1c92ddf557f940ca34e50fd5f9bbf7d30770a6575dc3ce76ab243a010e3eebc1bd93316dea2b05396cce21fe490368edb10f19b733738351aac7d4429b6f4887df87bb1b4c1034b5ca91fa8db4f3f7ce0cb19d56ebad0228deac7fae5cb181678d"}, {0x1010, 0x11a, 0x5, "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"}, {0x100, 0x10d, 0x2, "cbacb6aa2cf28968eabf0150564367ada830cc02290332c5c5c9f2de52c4e2f08a2659c8071d2d40825f5bf532ce6f30dae0e79a5d5c5c3c3962d2b8357fd639ee53d0af2aa51df9e998da1ddd82864704e4b5b850e56b7d1d319f16704bfe659f70e532622eb43198ad619344336ca06b78df19112c82f0c47d2437c05120759b6deb4e78487c23667a770735c5e11d6a2b294940977606f80df79c1826c71e1899417d190ca35e3d934133c3fc0b9c6b990ed55803190aba171a242c26e48047668c3de13a948b35c79706d3cf071a151257ba4773cb4bc8293716f8ad4bcf6bd69fc3764e42a73ebd13d73339"}], 0x1408}, 0x0) 1.562444673s ago: executing program 2 (id=4256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) close(r2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.452838567s ago: executing program 0 (id=4258): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(0x4) 1.411561725s ago: executing program 0 (id=4259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x8, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x2, 0x4, 0xf, 0x80000000, [0x4006, 0x6]}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x8, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x2, 0x4, 0xf, 0x80000000, [0x4006, 0x6]}}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000040)) (async) tee(r2, r3, 0x81, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.278480318s ago: executing program 3 (id=4260): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) 1.1721606s ago: executing program 3 (id=4261): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0004ffffffff0000400001000000"], 0x14}, 0x1, 0x620b}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x300}, 0x90) 1.171847905s ago: executing program 2 (id=4262): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000240)) r3 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x10, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xa0b, 0xffffffdd, 0xa}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f0000000080)=""/205, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.171670861s ago: executing program 0 (id=4263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1f1, 0x70, 0x3, 0x1e0afae2}, {0x9, 0x3, 0x6, 0x4}, {0xfb, 0x3, 0x0, 0xfffffff9}, {0x9, 0x6, 0x7, 0x9}, {0xfffb, 0xd, 0x8, 0x400}]}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.063104483s ago: executing program 2 (id=4265): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x3, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x44b, 0xfffffffe, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14}]}, 0x48}}, 0x0) pwrite64(r7, &(0x7f00000000c0)="023d64cf3ddb707115be98fbbec5e5ce3bc179f7fc6e064a8fcaea59f2612d3399e6e22f3dd8a1087c3521", 0x2b, 0x7) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x4, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}, 0x1, 0x4000000}, 0x0) 968.582334ms ago: executing program 0 (id=4266): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0xfffffffe}, 0x48) ppoll(&(0x7f0000000000)=[{r2, 0x20}, {r2, 0x40}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x4]}, 0x8) 847.311351ms ago: executing program 2 (id=4268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="e1db", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)="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", 0x4fb}], 0x1}}], 0x2, 0x2090) r2 = socket(0x2c, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, 0x0) r3 = socket(0x23, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES64=r2, @ANYRES32=r1, @ANYRES8=r1], 0xff2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x50) 578.983901ms ago: executing program 4 (id=4271): syz_emit_ethernet(0x73, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003d3a00fc020000000000000000000000000006ff02000000000000000000000000000102009078000000006000000000001100fe88000000000000000000000000010100000000000000000000ffffe0000001330006d16600000017c17f0791"], 0x0) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) bind$phonet(r0, &(0x7f0000000080)={0x23, 0xa0, 0x9, 0xff}, 0x10) syz_emit_ethernet(0x73, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003d3a00fc020000000000000000000000000006ff02000000000000000000000000000102009078000000006000000000001100fe88000000000000000000000000010100000000000000000000ffffe0000001330006d16600000017c17f0791"], 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) listen(r1, 0x0) (async) bind$phonet(r0, &(0x7f0000000080)={0x23, 0xa0, 0x9, 0xff}, 0x10) (async) 521.388818ms ago: executing program 1 (id=4272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x16}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 498.948502ms ago: executing program 4 (id=4273): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xa, 0x3, 0xe, 0x1, r1, 0x1, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0xc}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000680001002000000000fc00000a0000000000000004000b000c00088005000800000000000800010000000000"], 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r0, 0x26}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r6, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80000, 0x7fff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 469.671744ms ago: executing program 1 (id=4274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) 385.196891ms ago: executing program 4 (id=4275): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write(r1, &(0x7f0000001140)="62cd309cd5ceb7455eadb98a10eb786c9d61363a09aba8c9c0d3e8ecccd321882363307ee15c1a57a4fd96b9afcc206e536d5ce63cb84fe2b56f9531d689d9ea4d4a138d62bb51b0034deb063c61d6a9cd470ef3dd4e0a3171d6c25a9348a680a577b8b0b6a63d655480a484e9bfb67306ab923e373ef1ac60ffadad5565631d393e", 0x82) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100), 0x8) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x4, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) (async) tee(r0, r2, 0x81, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000"], 0x38}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0) (async) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r4, 0x29, 0x8, 0x1, 0x40, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x10, 0x10, 0x3, 0xc3}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 377.14484ms ago: executing program 1 (id=4276): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xfff3, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x60000000, 0x7, 0x48fcc122a105f3e2}}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) (async) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff01, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) 342.77445ms ago: executing program 4 (id=4277): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r1, 0x29, 0x4e, &(0x7f0000000040)=0x1, 0x33) 261.123286ms ago: executing program 1 (id=4278): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x16, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f0000000040)='^\x00', 0x20040, &(0x7f00000000c0)={@align=0x1, {0x7f, 0x0, 0x0, 0x3}}, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x8000}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1410, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x1) 260.346126ms ago: executing program 3 (id=4279): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff09, 0x110c2300fe) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x4, 0x1, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) (async) r4 = socket(0xa, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0), 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x1, 0x1, 0x10, 0xd202, {{0x35, 0x4, 0x2, 0x5, 0xd4, 0x64, 0x0, 0xa, 0x2f, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x1b, 0x53, [@remote, @loopback, @empty, @empty, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0x31, 0x1, 0x9, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0x6}]}, @timestamp={0x44, 0x20, 0xa0, 0x0, 0x1, [0x5, 0x400, 0x0, 0x8001, 0x5c3, 0x6ba, 0x6d]}, @rr={0x7, 0x13, 0x46, [@remote, @broadcast, @local, @loopback]}, @cipso={0x86, 0xd, 0x0, [{0x6, 0x7, "564ed8fc12"}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x43, 0x3, 0x4, [{@loopback, 0x4362}, {@empty, 0x80000000}, {@rand_addr=0x64010100, 0xe0}, {@local, 0x8}, {@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x65c}]}, @end, @noop]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080)=ANY=[@ANYRES16=r7], 0xa) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80200008}, 0x1c) (async, rerun: 32) listen(r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r0, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000900)=[0x0], &(0x7f0000000d00)=[0x0], 0x0, 0xde, &(0x7f0000000d40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) 245.233271ms ago: executing program 4 (id=4280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x78}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xba26dd98376530ba}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 183.411139ms ago: executing program 4 (id=4281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x1c8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x174, 0x2, [@TCA_BASIC_EMATCHES={0xb8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="66c51b842c20987e"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0xb8, 0x3, [@m_connmark={0xb4, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x82, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9edbb86dd5ae3f174ba8489176ed907a788dd2e877"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ff73331", @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080)={r5, r6/1000+60000}, 0x10) read(r2, &(0x7f0000000100)=""/41, 0x29) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$kcm(0x29, 0x2, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="38976d6afa9df1421e008800000010008105b8cf675bfcdbdf25850f242ccae0fb5276587cf1ba0d75ded5907ee2fb1ed91969b3fae54b637b8e2ab1af39f54e5b2a9c6c31a2206818e7eb3dd59973314e55cd2a79fb427a0c9d75bfb30358c8d771006541330ec48fc67c4786228e9891140b2faf46bd76a68c7776494ec769af29c62cbc282d821df471afd913b20551c298be0a3d6db97e9ed8f6f8", @ANYRES32=0x0, @ANYBLOB="14d0040000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 100.814346ms ago: executing program 3 (id=4282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000130700000000000000000a010101000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d632000000ac14140000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000020000000000000000000000480001007368613338342d61767800"/240], 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r2, 0xa4, 0xd, 0x7ff}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4080) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x89fc, &(0x7f00000004c0)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 100.008969ms ago: executing program 1 (id=4283): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='caif0\x00', 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000280)={'xfrm0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000801}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa8, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x6f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x804c800}, 0x4008805) 17.506712ms ago: executing program 0 (id=4284): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) socketpair(0x2b, 0x6, 0xe3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@mpls_getnetconf={0x4c, 0x52, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffffff80}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffff153}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x44044010) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r4}, 0x10) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r7}, 0x8) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f071fff000100000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async, rerun: 32) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)="d0047cdd28bb8ac78804c4f6a3addf3c43f415db98ffaa23eb936e52e45f7d03a25c9597bce4d9e79fd3a249aa5976deae86098017ee358c37e0f2efc5413cc98ec98d76bf6f9d7deec9ab44540abec4a139fd47b4749811633776cca10ed0de2ea4a5dd54d5b7df09bd47f8f908ba91be66b5acd1c718c4be6b77f35912cb05879b8e3200000000", 0x88) (rerun: 32) 0s ago: executing program 1 (id=4285): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='qfq\x00', 0x80801, &(0x7f00000000c0)={@align=0x2, {0x4, 0x7, 0xffffffff, 0x10}}, 0xffffffff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xfff8, 0x16}, {0x8, 0xffff}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8}]}}]}, 0x38}}, 0x20040084) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xb6, &(0x7f0000000280)={@local, @random="2c09000000f8", @void, {@llc={0x4, {@snap={0x1fe, 0x1, 'g', "9e4256", 0x9300, "0f998ff2c2c11bc5bd51e29d9b1d20a4589d136665cd4f29e0bb29b29cee68e5420e58611cd7b8d0d0b118893e7be8751a02375f84214b3212c08a0129820460f265902f7db2c475c0dce1dec899cf77c0a0c69da81ff98299084716f7484570812a68e23bf338ca464d405a294a7ccd613a0f4d4f8d9e25794c39cf7d546a39bb37d76142356498e9f9f6089edf93d82544f04d0a0ad5ca803fb135e31fd2d9"}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) kernel console output (not intermixed with test programs): 329.619890][T15561] bond4: option arp_missed_max: allowed values 1 - 255 [ 329.638152][T15561] bond4 (unregistering): Released all slaves [ 329.690165][T15578] netlink: 'syz.3.2582': attribute type 1 has an invalid length. [ 329.743274][T15578] bond6: entered promiscuous mode [ 329.750857][T15578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.789042][T15581] bond6: (slave bridge5): making interface the new active one [ 329.808764][T15581] bridge5: entered promiscuous mode [ 329.819035][T15581] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 329.839820][T15573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.897201][T15578] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.938366][T15578] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 330.187045][T15602] nlmon0: Caught tx_queue_len zero misconfig [ 330.519872][ T153] veth0_to_bond: left promiscuous mode [ 330.745113][T15641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.811387][T15643] syzkaller1: entered promiscuous mode [ 330.817089][T15643] syzkaller1: entered allmulticast mode [ 330.871685][T15649] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 330.920882][T15649] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.956901][T15653] bond7: (slave geneve2): making interface the new active one [ 330.966387][T15653] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 330.977424][ T1102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.037608][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.043239][T15656] netlink: 'syz.4.2600': attribute type 3 has an invalid length. [ 331.049387][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.063673][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.280651][T15669] __nla_validate_parse: 2 callbacks suppressed [ 331.280672][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 331.297533][T15669] openvswitch: netlink: Key type 6249 is out of range max 32 [ 331.317805][T15672] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002 [ 331.513157][T15683] xt_ecn: cannot match TCP bits for non-tcp packets [ 331.637003][T15687] gretap0: entered promiscuous mode [ 331.663966][T15687] vlan2: entered promiscuous mode [ 331.725165][T15691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2611'. [ 331.726242][T15693] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 331.872083][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2614'. [ 331.891286][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 331.899167][T15706] netlink: 'syz.3.2617': attribute type 1 has an invalid length. [ 331.908884][T15706] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.2617'. [ 331.952832][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2618'. [ 332.037129][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 332.217126][T15723] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 332.248151][T15723] bond7 (unregistering): Released all slaves [ 332.550311][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 332.598016][T15745] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2627'. [ 332.660614][T15745] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2627'. [ 332.664177][T15750] netlink: 'syz.3.2628': attribute type 29 has an invalid length. [ 332.761299][T15754] lo: entered promiscuous mode [ 332.766411][T15754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.155725][ T30] audit: type=1800 audit(1776152366.677:6): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2636" name="memory.events" dev="tmpfs" ino=2829 res=0 errno=0 [ 333.567331][T15796] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 333.641764][T15803] netlink: 'syz.1.2645': attribute type 7 has an invalid length. [ 333.645851][T15796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.656919][T15801] bond4: option mode: unable to set because the bond device is up [ 333.672541][T15803] batadv0: entered promiscuous mode [ 333.680677][T15803] dummy0: entered promiscuous mode [ 333.690621][T15803] batadv0: left promiscuous mode [ 333.699861][T15803] dummy0: left promiscuous mode [ 334.029270][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.037368][ C1] lec:lec_tx_timeout: lec0 [ 334.042825][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.298512][T15832] validate_nla: 1 callbacks suppressed [ 334.298533][T15832] netlink: 'syz.2.2654': attribute type 14 has an invalid length. [ 334.318168][T15840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.370428][T15832] netlink: 'syz.2.2654': attribute type 14 has an invalid length. [ 334.695583][T15862] netlink: 'syz.1.2664': attribute type 1 has an invalid length. [ 334.753384][T15862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.780466][T15868] macsec1: entered promiscuous mode [ 334.818176][T15862] veth0_to_bond: left allmulticast mode [ 334.834169][T15862] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 334.965575][T15874] bond8: entered allmulticast mode [ 335.110805][T15894] team0: Caught tx_queue_len zero misconfig [ 335.291472][T15914] team0: Device gtp0 is up. Set it down before adding it as a team port [ 335.798919][T15939] sctp: [Deprecated]: syz.2.2685 (pid 15939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.798919][T15939] Use struct sctp_sack_info instead [ 336.118053][T15959] xfrm1: entered allmulticast mode [ 336.381224][T15974] set match dimension is over the limit! [ 336.540647][T15982] __nla_validate_parse: 87 callbacks suppressed [ 336.540670][T15982] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2698'. [ 336.715914][T15991] netlink: 'syz.4.2702': attribute type 9 has an invalid length. [ 337.048887][T16008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2705'. [ 337.132099][T16011] netlink: 'syz.2.2706': attribute type 16 has an invalid length. [ 337.147239][T16008] xt_hashlimit: overflow, rate too high: 0 [ 337.159677][T16011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2706'. [ 337.164170][T15987] geneve3: entered promiscuous mode [ 337.202457][ T1163] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 49387 - 0 [ 337.214245][ T1163] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 49387 - 0 [ 337.255417][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 337.297777][ T1163] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 49387 - 0 [ 337.321262][ T1163] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 49387 - 0 [ 337.651856][T16023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2710'. [ 337.768324][T16033] bpq0: entered promiscuous mode [ 337.805349][T16035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2715'. [ 337.862173][T16037] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2715'. [ 338.133942][T16045] bond7 (unregistering): Released all slaves [ 338.164033][T16049] netlink: 'syz.3.2720': attribute type 12 has an invalid length. [ 338.196387][T16049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2720'. [ 338.233215][T16059] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2723'. [ 338.317209][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'. [ 338.327296][T16059] block nbd2: Unsupported socket: should be TCP or UNIX. [ 338.615640][T16076] lo speed is unknown, defaulting to 1000 [ 338.791498][ T30] audit: type=1107 audit(1776152372.317:7): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6ƒ½+WA [ 338.791498][ T30] ©ã]á¥nB@TNùÈ®ñk' [ 338.832514][T16080] lo speed is unknown, defaulting to 1000 [ 338.924072][T16086] lo speed is unknown, defaulting to 1000 [ 339.049653][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.057750][ C1] lec:lec_tx_timeout: lec0 [ 340.082260][T16129] netlink: 'syz.4.2739': attribute type 3 has an invalid length. [ 340.108742][T16125] lo speed is unknown, defaulting to 1000 [ 340.356596][T16139] syzkaller0: entered promiscuous mode [ 340.362888][T16139] syzkaller0: entered allmulticast mode [ 340.792161][T16152] veth0: Caught tx_queue_len zero misconfig [ 341.041535][T16161] wireguard0: entered promiscuous mode [ 341.063974][T16173] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 341.714495][T16211] __nla_validate_parse: 6 callbacks suppressed [ 341.714517][T16211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2761'. [ 341.786988][T16211] lo: left promiscuous mode [ 341.793184][T16211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.018206][T16228] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2763'. [ 342.082601][T16233] netlink: 'syz.2.2766': attribute type 3 has an invalid length. [ 342.101403][T16233] netlink: 'syz.2.2766': attribute type 3 has an invalid length. [ 342.192820][T16233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2766'. [ 342.269520][T16251] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2769'. [ 342.282729][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 342.507904][T16261] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2772'. [ 342.508335][T16258] vlan2: entered allmulticast mode [ 342.583936][T16258] bond0: entered allmulticast mode [ 342.599948][T16258] bond_slave_0: entered allmulticast mode [ 342.619434][T16258] bond_slave_1: entered allmulticast mode [ 342.631352][T16258] bridge_slave_1: entered allmulticast mode [ 342.713451][T16269] delete_channel: no stack [ 342.845975][T16261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.874677][T16261] bond_slave_0: left allmulticast mode [ 342.900062][T16261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.920408][T16261] bond_slave_1: left allmulticast mode [ 342.930819][T16261] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 342.937426][T16292] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2780'. [ 342.950781][T16261] bridge_slave_1: left allmulticast mode [ 342.954607][T16292] netlink: 'syz.2.2780': attribute type 4 has an invalid length. [ 342.956879][T16261] bond0 (unregistering): Released all slaves [ 342.968725][T16292] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2780'. [ 342.987475][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'. [ 343.010038][T16278] tunl0: Caught tx_queue_len zero misconfig [ 343.020535][T16279] bpq0: left promiscuous mode [ 343.166471][T16303] x_tables: duplicate underflow at hook 1 [ 343.313647][T16318] netlink: 'syz.3.2786': attribute type 8 has an invalid length. [ 343.491506][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 343.688627][T16341] syzkaller0: entered promiscuous mode [ 343.724630][T16341] syzkaller0: entered allmulticast mode [ 344.052680][T16365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.062122][T16353] syz.2.2795 (16353) used greatest stack depth: 17472 bytes left [ 344.190936][T16372] netlink: 'syz.2.2798': attribute type 9 has an invalid length. [ 344.280022][T16367] lo speed is unknown, defaulting to 1000 [ 344.330039][T16379] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 344.420306][T16388] netlink: 'syz.0.2802': attribute type 1 has an invalid length. [ 344.448289][T16388] netlink: 'syz.0.2802': attribute type 11 has an invalid length. [ 344.453544][T16379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.483779][T16385] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 344.503229][T16385] bond7: entered allmulticast mode [ 344.577328][T16388] ip6gretap0: entered promiscuous mode [ 344.892379][T16400] lo speed is unknown, defaulting to 1000 [ 345.811815][T16462] netlink: 'syz.0.2824': attribute type 2 has an invalid length. [ 346.020706][T16468] x_tables: unsorted entry at hook 2 [ 346.152907][T16478] ip6t_rpfilter: unknown options [ 346.295250][T16484] netlink: 'syz.3.2832': attribute type 2 has an invalid length. [ 346.336914][T16484] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 346.601640][T16498] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 346.630155][T16498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.878795][T16519] netlink: 'syz.4.2843': attribute type 19 has an invalid length. [ 346.913864][T16519] __nla_validate_parse: 15 callbacks suppressed [ 346.913887][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 346.940554][T16519] netlink: 'syz.4.2843': attribute type 19 has an invalid length. [ 346.948427][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 347.365684][T16542] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 347.399610][T16542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.659085][T16562] netlink: 'syz.1.2858': attribute type 1 has an invalid length. [ 347.782192][T16562] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.797891][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 348.106791][T16584] nbd: must specify a device to reconfigure [ 348.291172][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.302111][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.316607][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.325931][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.335002][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.344659][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2866'. [ 348.450867][T16600] netlink: 'syz.2.2867': attribute type 1 has an invalid length. [ 348.479622][T16599] netlink: 'syz.2.2867': attribute type 1 has an invalid length. [ 348.515802][T16599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.542200][T16599] bond5: (slave geneve2): making interface the new active one [ 348.553480][T16599] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 348.606449][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2870'. [ 348.616375][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2870'. [ 348.622965][T16589] lo speed is unknown, defaulting to 1000 [ 349.040618][T16623] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2877'. [ 349.231876][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 349.292555][T16589] chnl_net:caif_netlink_parms(): no params data found [ 349.548398][T16589] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.582396][T16589] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.605062][T16589] bridge_slave_0: entered allmulticast mode [ 349.649070][T16589] bridge_slave_0: entered promiscuous mode [ 349.683991][T16589] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.702723][T16589] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.723361][T16589] bridge_slave_1: entered allmulticast mode [ 349.733375][T16589] bridge_slave_1: entered promiscuous mode [ 349.816208][T16589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.867216][T16589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.965542][T16589] team0: Port device team_slave_0 added [ 349.976405][T16589] team0: Port device team_slave_1 added [ 350.042043][T16589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.057938][T16589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.085591][T16589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.108097][T16589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.115873][T16674] Cannot find del_set index 4 as target [ 350.130966][T16589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.188605][T16589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.286413][T16589] hsr_slave_0: entered promiscuous mode [ 350.316856][T16589] hsr_slave_1: entered promiscuous mode [ 350.327009][T16589] debugfs: 'hsr0' already exists in 'hsr' [ 350.333111][T16589] Cannot create hsr debugfs directory [ 350.344161][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 350.355991][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2892'. [ 350.391188][ T5145] Bluetooth: hci5: command tx timeout [ 350.462166][T16677] syzkaller0: entered promiscuous mode [ 350.478067][T16677] syzkaller0: entered allmulticast mode [ 350.642439][T16691] netlink: 'syz.4.2896': attribute type 4 has an invalid length. [ 352.384371][T16589] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.396553][T16589] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.412650][T16704] __nla_validate_parse: 1 callbacks suppressed [ 352.412672][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 352.440821][T16704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'. [ 352.454124][T16704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2902'. [ 352.471307][ T5145] Bluetooth: hci5: command tx timeout [ 352.472754][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 352.485848][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 352.503904][T16589] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.513991][T16589] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.574876][T16712] lo: Caught tx_queue_len zero misconfig [ 352.601456][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2905'. [ 352.614885][T16712] netlink: 'syz.3.2905': attribute type 29 has an invalid length. [ 352.629027][T16589] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.654196][T16589] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.771494][T16720] syzkaller0: entered promiscuous mode [ 352.777114][T16720] syzkaller0: entered allmulticast mode [ 352.787520][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 352.798494][T16723] netlink: 'syz.2.2906': attribute type 8 has an invalid length. [ 352.816392][T16589] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.828503][T16589] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.338883][T16730] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2910'. [ 353.528961][T10070] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 354.238070][T16732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.517385][T16589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.552593][ T5145] Bluetooth: hci5: command tx timeout [ 354.561310][T16589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.582263][T16589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.604418][T16589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.638038][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 354.647731][T16589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.668847][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 354.697497][T16589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.707701][T16589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.737826][T16589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.751128][T16758] netlink: 'syz.2.2917': attribute type 30 has an invalid length. [ 354.818406][T16758] tipc: Resetting bearer [ 354.856900][T16768] pim6reg1: entered promiscuous mode [ 354.863168][T16768] pim6reg1: entered allmulticast mode [ 354.872742][T16768] Unsupported ieee802154 address type: 0 [ 355.037383][T16589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.085570][T16589] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.104403][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.111805][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.130242][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.137450][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.183262][T10070] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 355.431235][T16589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.472047][T16791] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 355.498491][T16589] veth0_vlan: entered promiscuous mode [ 355.512979][T16589] veth1_vlan: entered promiscuous mode [ 355.543693][T16589] veth0_macvtap: entered promiscuous mode [ 355.553947][T16589] veth1_macvtap: entered promiscuous mode [ 355.573881][T16589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.589066][T16589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.605990][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.616027][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.626644][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.636706][ T1102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.920555][T16775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.036370][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.096140][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.156339][T10070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.187266][T10070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.233079][T16804] x_tables: duplicate underflow at hook 1 [ 356.490314][ T6620] lec:lec_start_xmit: lec0:No lecd attached [ 356.620178][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.630178][ T5145] Bluetooth: hci5: command tx timeout [ 356.642410][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.654277][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.690907][T16828] s5ÿÿø: renamed from vlan1 [ 356.767981][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.778994][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.799978][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.814158][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.824249][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.052306][T16833] lo speed is unknown, defaulting to 1000 [ 357.122189][ T9158] IPVS: starting estimator thread 0... [ 357.229579][T16848] IPVS: using max 31 ests per chain, 74400 per kthread [ 357.501489][T16858] __nla_validate_parse: 9 callbacks suppressed [ 357.501512][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 357.509890][T11768] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.585219][T16871] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2947'. [ 357.590612][T11768] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.601999][ T153] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.698419][T16874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 357.734888][T16874] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 357.786952][T16874] team0: entered promiscuous mode [ 357.792972][T16874] team0: entered allmulticast mode [ 357.804781][ T153] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.932026][ T153] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.974977][T16833] chnl_net:caif_netlink_parms(): no params data found [ 358.176656][ T153] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.484948][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.516849][T16833] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.553112][T16833] bridge_slave_0: entered allmulticast mode [ 358.570662][T16915] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2961'. [ 358.571425][T16833] bridge_slave_0: entered promiscuous mode [ 358.590522][T16833] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.597790][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.607488][T16833] bridge_slave_1: entered allmulticast mode [ 358.616100][T16833] bridge_slave_1: entered promiscuous mode [ 358.623740][T16917] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2961'. [ 358.844248][T16833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.873979][ T5145] Bluetooth: hci3: command tx timeout [ 358.894209][T16833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.935201][ T153] bridge_slave_1: left allmulticast mode [ 358.946007][ T153] bridge_slave_1: left promiscuous mode [ 358.961336][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.795547][ T153] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 359.933817][ T153] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 359.942146][ T153] bridge4 (unregistering): left promiscuous mode [ 360.012872][ T153] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 360.021162][ T153] bridge5 (unregistering): left promiscuous mode [ 360.164226][ T153] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.174356][ T153] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.184444][ T153] .` (unregistering): Released all slaves [ 360.195866][ T153] bond1 (unregistering): Released all slaves [ 360.209108][ T153] bond0 (unregistering): Released all slaves [ 360.223255][ T153] bond2 (unregistering): Released all slaves [ 360.251401][ T153] bond3 (unregistering): Released all slaves [ 360.268557][ T153] bond4 (unregistering): (slave veth3): Releasing active interface [ 360.277404][ T153] bond4 (unregistering): Released all slaves [ 360.298373][ T153] bond5 (unregistering): Released all slaves [ 360.313258][ T153] bond6 (unregistering): Released all slaves [ 360.327825][ T153] bond7 (unregistering): Released all slaves [ 360.389492][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.413128][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 360.466441][T16833] team0: Port device team_slave_0 added [ 360.482576][T16833] team0: Port device team_slave_1 added [ 360.669835][ T153] : left promiscuous mode [ 360.785905][T16833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.794762][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.826807][T16833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.848621][T16833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.864167][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.894087][T16833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.928427][T17003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.932879][T17014] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2978'. [ 360.947738][ T153] 9: left promiscuous mode [ 360.960486][ T5145] Bluetooth: hci3: command tx timeout [ 360.974397][T17010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.996687][T17007] tipc: Enabling of bearer rejected, failed to enable media [ 361.103771][ T153] tipc: Left network mode [ 361.222287][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2979'. [ 361.247501][ T153] IPVS: stopping backup sync thread 6362 ... [ 361.306608][T16833] hsr_slave_0: entered promiscuous mode [ 361.331469][T16833] hsr_slave_1: entered promiscuous mode [ 361.360373][T16833] debugfs: 'hsr0' already exists in 'hsr' [ 361.366359][T16833] Cannot create hsr debugfs directory [ 361.523609][T17032] veth0_to_bond: left allmulticast mode [ 361.782849][T17046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2984'. [ 361.989326][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 361.997524][ C1] lec:lec_tx_timeout: lec0 [ 362.540054][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 362.694748][T17084] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2991'. [ 363.029878][ T5145] Bluetooth: hci3: command tx timeout [ 363.203753][T17109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.674286][T17135] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 363.849824][ T153] hsr_slave_0: left promiscuous mode [ 364.018542][T17154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3009'. [ 364.302465][ T153] team0 (unregistering): Port device team_slave_1 removed [ 364.354448][ T153] team0 (unregistering): Port device team_slave_0 removed [ 364.751809][T17147] ip6gre2: entered allmulticast mode [ 364.791481][T16833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.864598][T16833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.888685][T16833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.928584][T16833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.964270][T17190] netlink: 496 bytes leftover after parsing attributes in process `syz.0.3013'. [ 365.009848][T16833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.077712][T16833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.110639][ T5833] Bluetooth: hci3: command tx timeout [ 365.120696][T16833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.173392][T16833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.175485][T17199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.276223][T17199] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 365.523279][T17223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3021'. [ 365.637695][T17223] bond6: entered promiscuous mode [ 365.643887][T17223] bond6: entered allmulticast mode [ 365.651554][T17223] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.671423][ T153] IPVS: stop unused estimator thread 0... [ 365.726304][T16833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.832613][T16833] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.871694][T17244] xt_bpf: check failed: parse error [ 365.970467][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.977688][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.017414][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.024675][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.125972][T17261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3030'. [ 366.184809][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 366.245005][T17268] netlink: 'syz.1.3030': attribute type 11 has an invalid length. [ 366.266972][T17268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3030'. [ 366.374524][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'. [ 366.404899][T17273] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 366.413687][T17273] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 366.422055][T17273] netlink: 'syz.2.3031': attribute type 2 has an invalid length. [ 366.431195][T17273] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3031'. [ 366.486556][T11769] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.753774][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 366.798253][T16833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.874153][T17293] syzkaller0: entered promiscuous mode [ 367.192422][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 367.590706][T11769] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.829510][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.792347][T17342] netlink: 'syz.0.3049': attribute type 1 has an invalid length. [ 368.801051][T17342] netlink: 'syz.0.3049': attribute type 7 has an invalid length. [ 368.808828][T17342] netlink: 'syz.0.3049': attribute type 8 has an invalid length. [ 368.816864][T17342] __nla_validate_parse: 1 callbacks suppressed [ 368.816881][T17342] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3049'. [ 368.874190][T17342] NCSI netlink: No device for ifindex 65584 [ 368.891975][T16833] veth0_vlan: entered promiscuous mode [ 368.963561][T16833] veth1_vlan: entered promiscuous mode [ 369.043939][T16833] veth0_macvtap: entered promiscuous mode [ 369.066263][T16833] veth1_macvtap: entered promiscuous mode [ 369.117151][T16833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.154637][T16833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.196497][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.230857][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.251183][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.275321][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.472623][T17377] xt_TCPMSS: Only works on TCP SYN packets [ 369.494041][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.496760][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'. [ 369.517487][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.556272][T17379] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 369.605011][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.619939][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.715113][T17384] tipc: Resetting bearer [ 370.226574][T17405] sctp: [Deprecated]: syz.2.3070 (pid 17405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.226574][T17405] Use struct sctp_sack_info instead [ 370.541855][T17420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3074'. [ 370.618875][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.635186][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.636245][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3073'. [ 370.652866][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.673474][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.682182][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.954609][T17439] veth0_to_bond: entered allmulticast mode [ 371.016352][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 371.132901][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.161489][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49387 - 0 [ 371.186280][T17426] lo speed is unknown, defaulting to 1000 [ 371.304297][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.315995][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49387 - 0 [ 371.418224][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.434971][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49387 - 0 [ 371.574051][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.626485][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49387 - 0 [ 371.675134][T17475] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3090'. [ 371.675992][T17473] netlink: 'syz.0.3089': attribute type 1 has an invalid length. [ 371.755635][T17426] chnl_net:caif_netlink_parms(): no params data found [ 371.817730][ T30] audit: type=1800 audit(1776152405.337:8): pid=17478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3091" name="memory.events" dev="tmpfs" ino=64 res=0 errno=0 [ 371.855400][T17481] x_tables: duplicate underflow at hook 3 [ 372.186854][T17499] syzkaller0: entered promiscuous mode [ 372.195975][T17488] erspan0: entered promiscuous mode [ 372.214705][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 372.383164][T17513] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3099'. [ 372.447410][T17518] netlink: 'syz.4.3101': attribute type 15 has an invalid length. [ 372.678441][ T153] erspan0 (unregistering): left promiscuous mode [ 372.736664][ T153] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 372.790250][ T5833] Bluetooth: hci1: command tx timeout [ 372.817033][ T153] bond7 (unregistering): (slave geneve2): Releasing active interface [ 373.063360][ T153] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 373.230453][ T153] bond0 (unregistering): Released all slaves [ 373.241286][ T153] bond1 (unregistering): Released all slaves [ 373.255631][ T153] bond2 (unregistering): Released all slaves [ 373.276385][ T153] bond3 (unregistering): Released all slaves [ 373.290316][ T153] bond4 (unregistering): Released all slaves [ 373.305240][ T153] bond5 (unregistering): Released all slaves [ 373.318531][ T153] bond6 (unregistering): Released all slaves [ 373.335628][ T153] bond7 (unregistering): Released all slaves [ 373.352779][ T153] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 373.366911][ T153] bond8 (unregistering): Released all slaves [ 373.384572][ T153] bond9 (unregistering): Released all slaves [ 373.402556][T17426] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.410149][T17426] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.417416][T17426] bridge_slave_0: entered allmulticast mode [ 373.425873][T17426] bridge_slave_0: entered promiscuous mode [ 373.448081][T17426] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.464388][T17426] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.479663][T17426] bridge_slave_1: entered allmulticast mode [ 373.496732][T17426] bridge_slave_1: entered promiscuous mode [ 373.616073][ T153] : left promiscuous mode [ 373.725719][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3106'. [ 373.736533][T17426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.762662][T17543] netlink: 'syz.3.3107': attribute type 2 has an invalid length. [ 373.819314][ T153] tipc: Left network mode [ 373.826751][T17426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.986078][T17426] team0: Port device team_slave_0 added [ 374.020389][T17426] team0: Port device team_slave_1 added [ 374.050690][T17548] dummy0: Caught tx_queue_len zero misconfig [ 374.374368][T17426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.398064][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.455643][T17426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.533755][T17426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.551564][T17426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.619154][T17426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.872710][ T5833] Bluetooth: hci1: command tx timeout [ 375.111589][T17426] hsr_slave_0: entered promiscuous mode [ 375.128031][T17426] hsr_slave_1: entered promiscuous mode [ 375.143857][T17426] debugfs: 'hsr0' already exists in 'hsr' [ 375.170924][T17426] Cannot create hsr debugfs directory [ 375.242372][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 375.491438][ T153] hsr_slave_0: left promiscuous mode [ 375.512486][ T153] hsr_slave_1: left promiscuous mode [ 375.581506][ T153] team0 (unregistering): Port device wireguard0 removed [ 375.668877][T17615] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3120'. [ 375.890232][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 376.253162][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 376.290717][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 376.751412][T17644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.759022][T17644] IPv6: NLM_F_CREATE should be set when creating new route [ 376.766355][T17644] IPv6: NLM_F_CREATE should be set when creating new route [ 376.949681][ T5833] Bluetooth: hci1: command tx timeout [ 376.981542][T17649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3129'. [ 377.218063][T17669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3133'. [ 377.250310][ T153] IPVS: stop unused estimator thread 0... [ 377.314774][T17674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3133'. [ 377.321169][T17666] syzkaller0: entered promiscuous mode [ 377.331197][T17666] syzkaller0: entered allmulticast mode [ 377.347285][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 377.370544][T17667] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3132'. [ 377.395128][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3133'. [ 378.720942][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 379.030270][ T5833] Bluetooth: hci1: command tx timeout [ 379.236847][T17426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.286705][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.312182][T17426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.329932][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.386389][T17426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.434192][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.455726][T17426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.487303][T17426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.593864][T17736] netlink: 'syz.2.3149': attribute type 1 has an invalid length. [ 379.683258][T17709] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 379.716869][T17736] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.766493][T17724] vlan4: entered allmulticast mode [ 379.774800][T17724] bond7: entered allmulticast mode [ 379.782980][T17742] netlink: 'syz.4.3151': attribute type 4 has an invalid length. [ 379.827925][T17724] bond7: (slave geneve3): making interface the new active one [ 379.836090][T17724] geneve3: entered allmulticast mode [ 379.845344][T17724] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 379.883113][T17426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.942921][T17426] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.986846][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.994108][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.037463][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.044753][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.058528][T17749] syzkaller0: entered promiscuous mode [ 380.066158][T17749] syzkaller0: entered allmulticast mode [ 380.355278][T17761] xfrm1: entered promiscuous mode [ 380.363887][T17761] xfrm1: entered allmulticast mode [ 380.459086][T17765] syzkaller0: entered promiscuous mode [ 380.705747][T17426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.806436][T17426] veth0_vlan: entered promiscuous mode [ 380.820872][T17426] veth1_vlan: entered promiscuous mode [ 380.856059][T17426] veth0_macvtap: entered promiscuous mode [ 380.868534][T17426] veth1_macvtap: entered promiscuous mode [ 380.892580][T17426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.910403][T17426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.926925][ T1163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.946405][ T1163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.967338][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.978303][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.108798][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.126706][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.143843][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.151888][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.989488][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 383.997640][ C1] lec:lec_tx_timeout: lec0 [ 402.670434][T17816] syzkaller0: entered promiscuous mode [ 402.694003][T17816] syzkaller0: entered allmulticast mode [ 402.798799][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.808799][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.823925][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.833821][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.851730][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.044692][T17833] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 403.093929][T17822] lo speed is unknown, defaulting to 1000 [ 403.244359][T17839] netlink: 'syz.0.3167': attribute type 4 has an invalid length. [ 403.294763][T17842] __nla_validate_parse: 1 callbacks suppressed [ 403.294785][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 403.315246][T17839] netlink: 'syz.0.3167': attribute type 4 has an invalid length. [ 403.421569][T17848] netlink: 'syz.4.3169': attribute type 11 has an invalid length. [ 403.447911][T17848] netlink: 'syz.4.3169': attribute type 1 has an invalid length. [ 403.475662][T17847] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3167'. [ 403.562386][T17848] bond0: entered promiscuous mode [ 403.568162][T17848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.644208][T17846] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.654434][T17858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3172'. [ 403.689310][T17846] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 403.700411][T17846] bond0: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 403.819567][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3172'. [ 403.964322][T17822] chnl_net:caif_netlink_parms(): no params data found [ 404.017617][T17878] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 404.061878][T17878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.184772][T17879] netlink: 'syz.3.3176': attribute type 1 has an invalid length. [ 404.192774][T17879] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3176'. [ 404.351287][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3180'. [ 404.428061][T17822] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.452360][T17822] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.458185][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 404.492972][T17822] bridge_slave_0: entered allmulticast mode [ 404.503795][T17822] bridge_slave_0: entered promiscuous mode [ 404.514510][T17822] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.531206][T17822] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.540754][T17822] bridge_slave_1: entered allmulticast mode [ 404.554703][T17822] bridge_slave_1: entered promiscuous mode [ 404.626882][T17822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.641266][T17822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.702884][T17822] team0: Port device team_slave_0 added [ 404.713846][T17822] team0: Port device team_slave_1 added [ 404.728093][T17918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3187'. [ 404.751064][T17822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.758053][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.784904][T17822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.801068][T17918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.833426][T17822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.850661][T17916] openvswitch: netlink: IP tunnel dst address not specified [ 404.854541][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.885638][T17822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.950287][ T5833] Bluetooth: hci0: command tx timeout [ 405.030587][T17822] hsr_slave_0: entered promiscuous mode [ 405.037636][T17822] hsr_slave_1: entered promiscuous mode [ 405.045684][T17822] debugfs: 'hsr0' already exists in 'hsr' [ 405.051921][T17822] Cannot create hsr debugfs directory [ 405.326348][T17933] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3191'. [ 405.357861][T17822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.371844][T17822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.391889][T17933] IPv6: addrconf: prefix option has invalid lifetime [ 405.466577][T17822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.487820][T17822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.507925][T17942] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3194'. [ 405.558460][T17822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.570129][T17822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.676679][T17822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.687756][T17822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.709031][T17951] x_tables: duplicate underflow at hook 3 [ 405.939969][T17822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.953503][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.964068][T17822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.975156][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.983454][T17822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.993532][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.004351][T17822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.016281][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.107993][T17822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.136911][T17822] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.156414][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.163635][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.181030][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.188275][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.428575][T17981] vlan2: entered promiscuous mode [ 406.434739][T17981] bridge0: entered promiscuous mode [ 406.615849][T17822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.716818][T17822] veth0_vlan: entered promiscuous mode [ 406.752555][T17822] veth1_vlan: entered promiscuous mode [ 407.026814][T18009] netlink: 'syz.1.3213': attribute type 1 has an invalid length. [ 407.029723][ T5833] Bluetooth: hci0: command tx timeout [ 407.117602][T17822] veth0_macvtap: entered promiscuous mode [ 407.148536][T17822] veth1_macvtap: entered promiscuous mode [ 407.225972][T17822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.274430][T17822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.324884][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.360696][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.422898][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.443915][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.463717][T18026] netlink: 'syz.3.3220': attribute type 2 has an invalid length. [ 407.505503][T18032] x_tables: unsorted underflow at hook 1 [ 407.540079][T18033] x_tables: unsorted underflow at hook 1 [ 407.575999][T18033] nbd: couldn't find device at index 65536 [ 407.591713][T18032] nbd: couldn't find device at index 65536 [ 407.624596][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.656783][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.771428][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.795444][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.121039][T18057] netlink: 'syz.0.3227': attribute type 10 has an invalid length. [ 408.165442][T18057] team0: Device ipvlan1 failed to register rx_handler [ 408.244090][T18067] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 408.582713][T18080] __nla_validate_parse: 10 callbacks suppressed [ 408.582737][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 408.620798][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 408.688790][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.706728][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.721425][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.726452][T18091] xt_cgroup: invalid path, errno=-2 [ 408.772184][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.803452][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.922431][T18087] lo speed is unknown, defaulting to 1000 [ 409.109823][ T5833] Bluetooth: hci0: command tx timeout [ 409.455429][ T58] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.478601][T18128] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 409.498061][T18087] chnl_net:caif_netlink_parms(): no params data found [ 409.518493][T18128] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3250'. [ 409.564947][T18133] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 409.685771][ T58] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.694947][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3251'. [ 409.755870][T18133] macvlan2: entered promiscuous mode [ 409.763834][T18133] macvlan2: entered allmulticast mode [ 409.778158][T18133] bond2: entered promiscuous mode [ 409.789601][T18133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 409.813851][T18133] bond2: left promiscuous mode [ 409.888146][T18140] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 409.902495][T18140] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 409.950354][T18146] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 409.968168][ T58] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 410.045282][ T58] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 410.115370][T18087] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.123947][T18087] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.132487][T18087] bridge_slave_0: entered allmulticast mode [ 410.141008][T18087] bridge_slave_0: entered promiscuous mode [ 410.150016][T18087] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.157555][T18087] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.165982][T18087] bridge_slave_1: entered allmulticast mode [ 410.174736][T18087] bridge_slave_1: entered promiscuous mode [ 410.193347][T18172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3258'. [ 410.226793][T18087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.243589][T18087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.336301][T18087] team0: Port device team_slave_0 added [ 410.346273][T18087] team0: Port device team_slave_1 added [ 410.475276][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3259'. [ 410.525449][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 410.617766][ T58] bond2 (unregistering): (slave gretap2): Releasing active interface [ 410.869380][ T5833] Bluetooth: hci4: command tx timeout [ 411.023768][ T58] bond3 (unregistering): (slave bridge8): Releasing active interface [ 411.073190][ T58] bond1 (unregistering): Released all slaves [ 411.086443][ T58] bond2 (unregistering): Released all slaves [ 411.099798][ T58] bond3 (unregistering): Released all slaves [ 411.115932][ T58] bond4 (unregistering): Released all slaves [ 411.135996][ T58] bond0 (unregistering): Released all slaves [ 411.162616][T18177] bridge_slave_1: left allmulticast mode [ 411.168471][T18177] bridge_slave_1: left promiscuous mode [ 411.174646][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.188061][T18177] bridge_slave_0: left allmulticast mode [ 411.189599][ T5833] Bluetooth: hci0: command tx timeout [ 411.202417][T18177] bridge_slave_0: left promiscuous mode [ 411.208254][T18177] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.284348][T18087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.295010][T18087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.322159][T18087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.333682][ T58] tipc: Disabling bearer [ 411.340484][ T58] tipc: Left network mode [ 411.354519][T18087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.362554][T18087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.390796][T18087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.497963][T18087] hsr_slave_0: entered promiscuous mode [ 411.505153][T18087] hsr_slave_1: entered promiscuous mode [ 411.513996][T18087] debugfs: 'hsr0' already exists in 'hsr' [ 411.520189][T18087] Cannot create hsr debugfs directory [ 411.730386][T18187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3262'. [ 411.742968][ T58] hsr_slave_0: left promiscuous mode [ 411.751705][ T58] hsr_slave_1: left promiscuous mode [ 411.855504][ T58] ipvlan1 (unregistering): left allmulticast mode [ 411.862224][ T58] veth0_vlan (unregistering): left allmulticast mode [ 412.462372][ T58] IPVS: stop unused estimator thread 0... [ 412.664401][T18143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.700148][T18087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.742881][T18087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.767849][T18087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.804119][T18087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.824395][T18087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.862495][T18087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.876160][T18197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3266'. [ 412.887305][T18192] netlink: 'syz.1.3263': attribute type 1 has an invalid length. [ 412.895258][T18192] netlink: 'syz.1.3263': attribute type 4 has an invalid length. [ 412.903295][T18192] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.3263'. [ 412.913776][T18087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.933466][T18087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.950054][ T5833] Bluetooth: hci4: command tx timeout [ 413.085479][T18199] team0 (unregistering): Port device team_slave_0 removed [ 413.141237][T18199] team0 (unregistering): Port device team_slave_1 removed [ 413.212902][T18219] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 413.337784][T18223] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 413.436146][T18087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.529093][T18087] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.586792][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.594063][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.686440][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.693679][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.900361][T18251] __nla_validate_parse: 1 callbacks suppressed [ 413.900386][T18251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3275'. [ 414.009418][T18251] netlink: 'syz.2.3275': attribute type 2 has an invalid length. [ 414.017231][T18251] netlink: 'syz.2.3275': attribute type 8 has an invalid length. [ 414.029581][T18251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3275'. [ 414.523514][T18087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.941978][T18301] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3287'. [ 414.967407][T18302] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3286'. [ 415.030263][ T5833] Bluetooth: hci4: command tx timeout [ 415.383843][T18323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3292'. [ 415.393860][T18323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3292'. [ 415.528418][T18087] veth0_vlan: entered promiscuous mode [ 415.612010][T18087] veth1_vlan: entered promiscuous mode [ 415.670270][T18331] netlink: 'syz.2.3294': attribute type 22 has an invalid length. [ 415.716942][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3294'. [ 415.717317][T18087] veth0_macvtap: entered promiscuous mode [ 415.795249][T18087] veth1_macvtap: entered promiscuous mode [ 415.841985][T18331] netlink: 'syz.2.3294': attribute type 22 has an invalid length. [ 415.846855][ T1163] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.893706][T18087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.902921][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3294'. [ 415.920823][ T1163] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.945186][ T1163] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.977958][T18087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.995363][ T1163] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.118281][ T1163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.140724][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.177272][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.193012][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.748554][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3304'. [ 416.777168][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.788348][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.842404][T18372] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3307'. [ 416.892966][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.909803][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.012157][T18383] Bluetooth: MGMT ver 1.23 [ 417.110512][ T5833] Bluetooth: hci4: command tx timeout [ 417.209717][T18391] syzkaller1: entered promiscuous mode [ 417.215355][T18391] syzkaller1: entered allmulticast mode [ 417.763704][T18387] lec:lec_start_xmit: lec0:No lecd attached [ 418.121037][T18421] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 418.188209][T18421] bond1 (unregistering): Released all slaves [ 418.498956][T18435] syzkaller0: entered promiscuous mode [ 418.543285][T18435] syzkaller0: entered allmulticast mode [ 418.742613][T18443] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 418.872040][T18443] team1: entered promiscuous mode [ 418.898145][T18443] team1: entered allmulticast mode [ 419.217265][ T9158] IPVS: starting estimator thread 0... [ 419.310331][T18470] IPVS: using max 24 ests per chain, 57600 per kthread [ 419.378791][T18473] ipt_ECN: cannot use operation on non-tcp rule [ 419.718051][T18492] __nla_validate_parse: 3 callbacks suppressed [ 419.718074][T18492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3337'. [ 419.913096][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 419.954791][T18497] geneve0: entered promiscuous mode [ 419.964819][T18497] macvlan2: entered allmulticast mode [ 419.971325][T18497] geneve0: entered allmulticast mode [ 420.332138][T18518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3346'. [ 420.424743][T18516] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 420.457351][T18527] Bluetooth: MGMT ver 1.23 [ 420.478220][T18516] bond1 (unregistering): Released all slaves [ 420.756817][T18535] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 420.769516][T18538] netlink: 'syz.4.3351': attribute type 8 has an invalid length. [ 420.787486][T18535] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3350'. [ 420.828738][T18537] syzkaller0: entered promiscuous mode [ 420.836668][T18544] xt_hashlimit: overflow, rate too high: 0 [ 420.844108][T18537] syzkaller0: entered allmulticast mode [ 420.852348][T18542] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 421.352095][T18560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3357'. [ 422.949366][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 422.957478][ C1] lec:lec_tx_timeout: lec0 [ 422.962245][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 423.258155][T18550] veth0: entered promiscuous mode [ 423.264198][T18554] veth0: left promiscuous mode [ 423.287618][T18563] bridge_slave_0: entered promiscuous mode [ 423.400102][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 423.460712][T18579] netlink: 'syz.2.3361': attribute type 13 has an invalid length. [ 423.465727][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 423.485416][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 423.496961][T18579] veth0_macvtap: left promiscuous mode [ 423.557805][T18579] macvtap0: entered allmulticast mode [ 423.601751][T18579] macvtap0: refused to change device tx_queue_len [ 424.345525][T18623] netlink: 'syz.3.3372': attribute type 2 has an invalid length. [ 424.355175][T18623] netlink: 'syz.3.3372': attribute type 3 has an invalid length. [ 424.363419][T18623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3372'. [ 424.511755][T18629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 424.634520][T18633] netlink: 'syz.3.3375': attribute type 1 has an invalid length. [ 424.883867][T18644] veth0: entered promiscuous mode [ 424.959638][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 425.196728][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 425.281064][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3382'. [ 425.344621][T18673] netlink: 'syz.3.3382': attribute type 2 has an invalid length. [ 425.359998][T18675] delete_channel: no stack [ 425.391508][T18673] netlink: 'syz.3.3382': attribute type 2 has an invalid length. [ 425.418281][T18665] openvswitch: netlink: Missing valid actions attribute. [ 425.434155][T18665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.443376][T18675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3383'. [ 425.457262][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3384'. [ 425.466943][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3384'. [ 425.499007][T18677] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3384'. [ 425.621742][T18679] bond1: option all_slaves_active: invalid value (222) [ 425.663329][T18679] bond1 (unregistering): Released all slaves [ 425.681704][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'. [ 425.831450][T18686] IPVS: Scheduler module ip_vs_sip not found [ 426.099793][T18701] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 426.494355][ T796] IPVS: starting estimator thread 0... [ 426.546217][T18722] netlink: 'syz.3.3399': attribute type 1 has an invalid length. [ 426.610350][T18721] IPVS: using max 28 ests per chain, 67200 per kthread [ 426.611253][T18725] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 426.686197][T18722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.746362][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3400'. [ 426.792934][T18729] bond6: (slave geneve2): making interface the new active one [ 426.812430][T18737] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3400'. [ 426.824274][T18729] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 427.104703][T18734] bond1: entered promiscuous mode [ 427.532881][T18766] ve: renamed from veth0_vlan [ 427.886722][T18785] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 427.916683][T18785] netlink: 'syz.4.3416': attribute type 3 has an invalid length. [ 427.965531][T18785] NCSI netlink: No device for ifindex 813332851 [ 427.990682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 427.998806][ C1] lec:lec_tx_timeout: lec0 [ 428.003861][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 428.450194][T18809] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.459420][T18809] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 428.738657][T18814] bridge0: port 3(ipvlan2) entered blocking state [ 428.765254][T18814] bridge0: port 3(ipvlan2) entered disabled state [ 428.790968][T18814] ipvlan2: entered allmulticast mode [ 428.799705][T18814] bridge0: entered allmulticast mode [ 428.823696][T18814] ipvlan2: left allmulticast mode [ 428.839682][T18814] bridge0: left allmulticast mode [ 429.071279][ T5490] ve: left promiscuous mode [ 429.133623][ T5490] ve: entered promiscuous mode [ 429.372493][T18864] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 429.449159][T18864] bond7: (slave lo): Enslaving as an active interface with an up link [ 429.480609][T18864] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 429.824512][T18893] netlink: 'syz.1.3442': attribute type 13 has an invalid length. [ 430.077531][T18907] 8021q: VLANs not supported on ipvlan0 [ 430.107433][T18907] __nla_validate_parse: 9 callbacks suppressed [ 430.107455][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'. [ 430.292073][T18920] netlink: 'syz.4.3451': attribute type 3 has an invalid length. [ 430.309795][T18920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3451'. [ 430.340649][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 430.370474][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 430.397601][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 430.415221][T18923] netlink: 'syz.1.3453': attribute type 9 has an invalid length. [ 430.456452][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 431.314083][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'. [ 431.471499][T18966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.512790][T18970] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0 [ 431.611434][T18975] netlink: 'syz.3.3467': attribute type 10 has an invalid length. [ 431.896997][T18995] ip6gre1: entered allmulticast mode [ 432.130989][T19008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3475'. [ 432.146701][T19012] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 432.160026][T19012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.180179][T19010] syzkaller0: entered promiscuous mode [ 432.185965][T19010] syzkaller0: entered allmulticast mode [ 432.455250][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3480'. [ 432.489720][T18980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.529818][T19030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.736174][T19046] vlan2: entered promiscuous mode [ 432.750926][T19046] geneve1: entered promiscuous mode [ 432.756412][T19046] vlan2: entered allmulticast mode [ 432.764435][T19056] IPVS: length: 8 != 1152 [ 432.770064][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3483'. [ 432.771340][T19046] geneve1: entered allmulticast mode [ 432.789151][T19044] macvlan0: entered promiscuous mode [ 433.023600][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 433.031846][ C1] lec:lec_tx_timeout: lec0 [ 433.036720][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 433.808745][T19107] syzkaller0: entered promiscuous mode [ 433.815005][T19107] syzkaller0: entered allmulticast mode [ 433.901604][T19078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.913610][T19100] netlink: 'syz.1.3497': attribute type 1 has an invalid length. [ 433.929888][T19100] netlink: 'syz.1.3497': attribute type 1 has an invalid length. [ 433.951914][T19100] netlink: 'syz.1.3497': attribute type 8 has an invalid length. [ 433.960393][T19102] netlink: 'syz.4.3498': attribute type 10 has an invalid length. [ 434.326250][T19128] netlink: 'syz.1.3506': attribute type 4 has an invalid length. [ 434.352207][T19134] xt_hashlimit: size too large, truncated to 1048576 [ 434.389367][T19135] netlink: 'syz.3.3509': attribute type 1 has an invalid length. [ 434.434673][T19135] netlink: 'syz.3.3509': attribute type 3 has an invalid length. [ 434.549088][T19145] netlink: 'syz.3.3513': attribute type 3 has an invalid length. [ 434.793643][T19158] xt_hashlimit: size too large, truncated to 1048576 [ 434.802856][T19152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.810173][T19152] IPv6: NLM_F_CREATE should be set when creating new route [ 434.852217][T19160] –: renamed from vxcan1 (while UP) [ 434.966681][T19166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.974043][T19166] IPv6: NLM_F_CREATE should be set when creating new route [ 435.199742][T19166] __nla_validate_parse: 8 callbacks suppressed [ 435.199767][T19166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3519'. [ 435.294952][T19179] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3523'. [ 435.625276][T19183] xt_hashlimit: size too large, truncated to 1048576 [ 435.661025][T19186] netlink: 'syz.1.3525': attribute type 1 has an invalid length. [ 435.845646][T19203] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3529'. [ 435.878460][T19203] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3529'. [ 435.897425][T19204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.924983][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3529'. [ 435.962149][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 436.194378][T19204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.276482][T19195] tipc: Enabling of bearer rejected, failed to enable media [ 436.308622][T19197] batman_adv: batadv0: Adding interface: netdevsim0 [ 436.328810][T19197] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.389686][T19197] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 436.668323][T19230] syzkaller0: entered promiscuous mode [ 436.689120][T19250] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3537'. [ 436.702884][T19250] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3537'. [ 437.728082][T19266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.826441][T19273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3541'. [ 438.052205][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 438.060260][ C1] lec:lec_tx_timeout: lec0 [ 438.065226][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 438.475212][T19273] netem: change failed [ 438.615733][T19281] xt_NFQUEUE: number of total queues is 0 [ 438.679563][T19280] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 438.693538][T19288] validate_nla: 2 callbacks suppressed [ 438.693558][T19288] netlink: 'syz.4.3544': attribute type 23 has an invalid length. [ 438.707912][T19280] bond1: option packets_per_slave: allowed values 0 - 65535 [ 438.721278][T19280] bond1 (unregistering): Released all slaves [ 438.751171][T19289] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 439.038474][T19310] IPv6: NLM_F_REPLACE set, but no existing node found! [ 439.222422][T19300] scsi_nl_rcv_msg: discarding partial skb [ 439.228863][T19300] netlink: 'syz.0.3550': attribute type 3 has an invalid length. [ 439.542765][T19338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3561'. [ 439.571972][T19338] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 439.591761][T19346] ipt_REJECT: ECHOREPLY no longer supported. [ 439.593101][T19343] openvswitch: netlink: IPv6 tunnel dst address is zero [ 439.854277][T19310] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 439.931601][T19369] lo speed is unknown, defaulting to 1000 [ 440.048495][T19377] netlink: 'syz.0.3571': attribute type 1 has an invalid length. [ 440.154844][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 440.752756][T19422] syzkaller0: entered promiscuous mode [ 440.758430][T19422] syzkaller0: entered allmulticast mode [ 440.770681][T19422] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 441.109519][ T5833] Bluetooth: hci0: command 0x0401 tx timeout [ 443.079289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.087370][ C1] lec:lec_tx_timeout: lec0 [ 443.092362][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 443.221832][T19387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.432368][T19460] xt_cgroup: invalid path, errno=-2 [ 443.465495][T19463] __nla_validate_parse: 3 callbacks suppressed [ 443.465518][T19463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3586'. [ 443.777144][T19472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.790938][T19472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.831196][T19484] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 443.919872][T19472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.928567][T19487] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 443.940963][T19472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.044517][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 444.053925][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 444.057874][T19472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.093775][T19472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.154762][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3598'. [ 444.164803][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3598'. [ 444.235282][T19472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.246684][T19472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.290278][T19502] syzkaller0: entered promiscuous mode [ 444.300862][T19502] syzkaller0: entered allmulticast mode [ 444.488214][ T1145] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.497123][ T1145] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.514485][T19509] netlink: 'syz.1.3603': attribute type 3 has an invalid length. [ 444.542104][ T1145] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.555402][ T1145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.583487][ T1145] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.595964][ T1145] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.619098][ T1145] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.628323][ T1145] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.797618][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3610'. [ 447.506564][T19512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.731312][T19557] ip6tnl1: entered promiscuous mode [ 447.737713][T19557] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3615'. [ 447.786432][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3616'. [ 447.986429][T19571] sctp: [Deprecated]: syz.0.3619 (pid 19571) Use of int in max_burst socket option deprecated. [ 447.986429][T19571] Use struct sctp_assoc_value instead [ 448.046516][T19575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3621'. [ 448.056522][T19575] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3621'. [ 448.079047][T19575] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 448.099242][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 448.107299][ C1] lec:lec_tx_timeout: lec0 [ 448.112264][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 448.301387][T19597] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 448.454597][T19605] netlink: 'syz.0.3629': attribute type 3 has an invalid length. [ 448.597910][T19613] __nla_validate_parse: 2 callbacks suppressed [ 448.597932][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'. [ 448.767787][T19628] netlink: 'syz.1.3637': attribute type 1 has an invalid length. [ 449.193620][T19644] netlink: 'syz.1.3641': attribute type 1 has an invalid length. [ 449.268496][T19644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.299617][T19653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.310486][T19650] bond2: (slave geneve2): making interface the new active one [ 449.335097][T19650] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 449.395337][T19657] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3643'. [ 449.406333][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 449.425330][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 449.447383][T19658] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.631567][T19662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3645'. [ 450.222360][T19682] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.240625][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 450.287746][T19682] bridge_slave_0 (unregistering): left allmulticast mode [ 450.305525][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 450.348229][T19682] bridge_slave_0 (unregistering): left promiscuous mode [ 450.366465][T19682] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.912912][T19684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.963021][T19733] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20001 [ 452.061699][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.069780][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.250834][T19746] netlink: 'syz.0.3664': attribute type 1 has an invalid length. [ 452.271737][T19746] netlink: 760 bytes leftover after parsing attributes in process `syz.0.3664'. [ 452.548968][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032d51c00: rx timeout, send abort [ 452.704550][T19772] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.712503][T19772] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.833847][T19772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.850938][T19772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.972682][T19772] geneve0: left allmulticast mode [ 452.980577][ T1145] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.993684][ T1145] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.003820][ T1145] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.012856][ T1145] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.049127][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880573bd400: rx timeout, send abort [ 453.057561][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032d51c00: abort rx timeout. Force session deactivation [ 453.103628][T19786] raw_sendmsg: syz.0.3676 forgot to set AF_INET. Fix it! [ 453.113670][T19786] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3676'. [ 453.123127][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 453.123155][ C1] lec:lec_tx_timeout: lec0 [ 453.131808][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 453.259848][T19755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.434564][T19797] netlink: 'syz.2.3681': attribute type 3 has an invalid length. [ 453.443542][T19797] netlink: 'syz.2.3681': attribute type 3 has an invalid length. [ 453.463721][T19801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3682'. [ 453.520850][T19802] netlink: 'syz.0.3680': attribute type 1 has an invalid length. [ 453.557470][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880573bd400: abort rx timeout. Force session deactivation [ 453.712990][T19824] netlink: 'syz.2.3681': attribute type 13 has an invalid length. [ 453.726900][T19824] netlink: 'syz.2.3681': attribute type 17 has an invalid length. [ 453.897696][T19800] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.905261][T19800] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.268013][T19800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.309145][T19800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.701542][T19802] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 454.840139][T19824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.893484][ T1145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.909962][ T1145] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.969519][ T1145] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.009347][ T1145] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.151931][T19856] netlink: 'syz.1.3690': attribute type 1 has an invalid length. [ 455.161696][T19858] __nla_validate_parse: 1 callbacks suppressed [ 455.161716][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3692'. [ 455.203383][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 455.218852][T19856] bond3: entered promiscuous mode [ 455.224252][T19862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3690'. [ 455.234152][T19856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.255607][T19864] dvmrp0: entered allmulticast mode [ 455.313626][T19869] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3694'. [ 455.569781][T19883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3697'. [ 455.943495][T19850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.206897][T19897] veth1_macvtap: left promiscuous mode [ 456.240427][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3703'. [ 456.421326][T19906] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3706'. [ 456.518976][T19910] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3707'. [ 456.567066][T19917] netlink: 'syz.1.3708': attribute type 1 has an invalid length. [ 456.600805][T19917] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3708'. [ 456.716811][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 456.858745][T19935] macvlan0: entered promiscuous mode [ 457.103135][T19952] netlink: 'syz.4.3718': attribute type 10 has an invalid length. [ 457.128807][T19952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.143117][T19952] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 458.062035][T19995] pimreg: entered allmulticast mode [ 458.131551][T19997] IPVS: Scheduler module ip_vs_sip not found [ 458.139247][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 458.147278][ C1] lec:lec_tx_timeout: lec0 [ 458.152283][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 458.432425][T20022] netlink: 'syz.3.3741': attribute type 17 has an invalid length. [ 458.596339][T20022] erspan0: entered promiscuous mode [ 458.607745][T20022] erspan0: left promiscuous mode [ 458.617678][T20017] bond1: entered promiscuous mode [ 458.623325][T20017] bond1: entered allmulticast mode [ 458.779002][T20034] netlink: 'syz.4.3745': attribute type 20 has an invalid length. [ 458.813569][T10070] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.824829][T20034] netlink: 'syz.4.3745': attribute type 20 has an invalid length. [ 458.833573][T10070] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.847372][T20034] netlink: 'syz.4.3745': attribute type 20 has an invalid length. [ 458.852191][T10070] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.865449][T10070] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.876782][T20034] netlink: 'syz.4.3745': attribute type 20 has an invalid length. [ 458.885330][T20034] netlink: 'syz.4.3745': attribute type 20 has an invalid length. [ 458.893665][T20034] netlink: 'syz.4.3745': attribute type 20 has an invalid length. [ 459.071780][T20048] syzkaller0: entered promiscuous mode [ 459.077329][T20048] syzkaller0: entered allmulticast mode [ 459.083848][T20046] nbd3: detected capacity change from 0 to 63 [ 459.102606][T20050] block nbd3: NBD_DISCONNECT [ 459.107350][T20050] block nbd3: Disconnected due to user request. [ 459.157923][T20050] block nbd3: shutting down sockets [ 459.163632][T18852] blk_print_req_error: 136 callbacks suppressed [ 459.163651][T18852] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.208419][T18852] buffer_io_error: 138 callbacks suppressed [ 459.208439][T18852] Buffer I/O error on dev nbd3, logical block 0, async page read [ 459.273584][ T5160] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 459.285290][ T5160] Buffer I/O error on dev nbd3, logical block 1, async page read [ 459.293578][ T5160] Buffer I/O error on dev nbd3, logical block 2, async page read [ 459.301637][ T5160] Buffer I/O error on dev nbd3, logical block 3, async page read [ 459.321750][T18852] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.349532][T18852] Buffer I/O error on dev nbd3, logical block 0, async page read [ 459.357368][T18852] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.397785][T18852] Buffer I/O error on dev nbd3, logical block 1, async page read [ 459.410913][T18852] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.433672][T18852] Buffer I/O error on dev nbd3, logical block 2, async page read [ 459.442081][T18852] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.451737][T18852] Buffer I/O error on dev nbd3, logical block 3, async page read [ 459.460302][T18852] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.469956][T18852] Buffer I/O error on dev nbd3, logical block 0, async page read [ 459.477801][T18852] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.498049][T18852] Buffer I/O error on dev nbd3, logical block 1, async page read [ 459.507255][T18852] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.510142][T20068] syzkaller0: entered promiscuous mode [ 459.517023][T18852] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.532845][T18852] ldm_validate_partition_table(): Disk read failed. [ 459.540331][T18852] Dev nbd3: unable to read RDB block 0 [ 459.546577][T18852] nbd3: unable to read partition table [ 459.564197][T18852] ldm_validate_partition_table(): Disk read failed. [ 459.566333][T20068] syzkaller0: entered allmulticast mode [ 459.571407][T18852] Dev nbd3: unable to read RDB block 0 [ 459.582993][T18852] nbd3: unable to read partition table [ 459.724091][T20075] lo speed is unknown, defaulting to 1000 [ 460.410032][T20111] __nla_validate_parse: 107 callbacks suppressed [ 460.410054][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'. [ 460.590404][T20120] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3768'. [ 460.954329][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 461.000282][T20151] validate_nla: 62 callbacks suppressed [ 461.000306][T20151] netlink: 'syz.1.3777': attribute type 18 has an invalid length. [ 461.031653][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 461.070386][ T134] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.070503][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 461.090504][ T134] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.146957][ T134] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.156823][T20162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3780'. [ 461.166896][T20151] netlink: 'syz.1.3777': attribute type 18 has an invalid length. [ 461.175089][ T134] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.184686][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 461.260885][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'. [ 461.294501][T20170] netlink: 'syz.2.3782': attribute type 5 has an invalid length. [ 461.365531][T20176] netlink: 'syz.2.3782': attribute type 9 has an invalid length. [ 461.406166][T20176] netlink: 'syz.2.3782': attribute type 11 has an invalid length. [ 461.448411][T20176] netlink: 'syz.2.3782': attribute type 12 has an invalid length. [ 461.482611][T20176] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3782'. [ 461.507558][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'. [ 461.677976][T20188] syzkaller0: entered promiscuous mode [ 461.683705][T20188] syzkaller0: entered allmulticast mode [ 461.941893][T20198] vlan1: entered allmulticast mode [ 461.947120][T20198] veth0_vlan: entered allmulticast mode [ 462.116900][T20209] netlink: 'syz.3.3794': attribute type 2 has an invalid length. [ 462.149628][T20209] netlink: 'syz.3.3794': attribute type 1 has an invalid length. [ 462.273955][T20215] Cannot find set identified by id 0 to match [ 462.375593][T20228] IPVS: length: 24 != 161639123736 [ 462.450686][T20231] syzkaller0: entered promiscuous mode [ 462.457583][T20231] syzkaller0: entered allmulticast mode [ 462.738378][T20240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.791773][T20201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.159237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 463.167334][ C1] lec:lec_tx_timeout: lec0 [ 463.172367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.569886][T20241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.879064][T20300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 463.931024][T20300] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 463.949661][T20300] team0: Failed to send options change via netlink (err -105) [ 463.957175][T20300] team0: Port device batadv1 added [ 463.989791][T20304] bond2: entered promiscuous mode [ 463.999308][T20304] bond2: entered allmulticast mode [ 464.022011][T20292] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 464.154537][T20315] syzkaller0: entered promiscuous mode [ 464.180720][T20315] 0: reclassify loop, rule prio 0, protocol 800 [ 464.417247][T20327] syzkaller1: entered promiscuous mode [ 464.587322][T20339] IPVS: persistence engine module ip_vs_pe_À not found [ 464.754409][T20346] syzkaller1: entered promiscuous mode [ 464.770874][T20346] syzkaller1: entered allmulticast mode [ 464.899572][T20357] gretap1: entered promiscuous mode [ 464.905217][T20357] gretap1: entered allmulticast mode [ 465.227687][T20382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.235009][T20382] IPv6: NLM_F_CREATE should be set when creating new route [ 465.368498][T20388] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 465.446062][T20388] netlink: 'syz.1.3847': attribute type 1 has an invalid length. [ 465.487543][T20388] __nla_validate_parse: 13 callbacks suppressed [ 465.487564][T20388] netlink: 760 bytes leftover after parsing attributes in process `syz.1.3847'. [ 465.507972][T20398] lo speed is unknown, defaulting to 1000 [ 465.508295][T20396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3850'. [ 465.770672][T20421] netlink: 'syz.4.3855': attribute type 11 has an invalid length. [ 465.778572][T20421] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.3855'. [ 465.832833][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3856'. [ 465.901807][T20427] ip6gre1: entered allmulticast mode [ 465.941511][T20429] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3858'. [ 465.975781][T20429] netlink: 'syz.3.3858': attribute type 1 has an invalid length. [ 466.013717][T20429] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3858'. [ 466.067171][T20435] s5ÿÿø: renamed from vlan1 [ 466.408258][T20455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3867'. [ 466.424670][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3868'. [ 466.466497][T20456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3868'. [ 466.476669][T20456] sit0: Master is either lo or non-ether device [ 466.490598][T20459] netlink: 'syz.2.3865': attribute type 39 has an invalid length. [ 466.703458][T20476] lo speed is unknown, defaulting to 1000 [ 467.113085][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 467.135829][T20503] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 467.235240][T20512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.355935][T20520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.952908][T20559] Bluetooth: MGMT ver 1.23 [ 468.666763][T20599] xt_hashlimit: size too large, truncated to 1048576 [ 468.928625][T20614] syzkaller0: entered promiscuous mode [ 468.950140][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 468.956235][T20614] 0: reclassify loop, rule prio 0, protocol 800 [ 468.958218][ C1] lec:lec_tx_timeout: lec0 [ 468.971390][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 469.288205][T20638] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 469.338653][T20645] IPVS: length: 8 != 1152 [ 469.381395][T20641] kthread_run failed with err -4 [ 469.485720][T20653] netlink: 'syz.3.3919': attribute type 1 has an invalid length. [ 469.593863][T20659] bond8: (slave bridge5): Enslaving as a backup interface with an up link [ 469.628231][T20653] bond8: (slave bridge6): Enslaving as a backup interface with a down link [ 470.098533][T20690] tipc: Started in network mode [ 470.103801][T20690] tipc: Node identity ac141441, cluster identity 255 [ 470.121425][T20690] tipc: Enabled bearer , priority 10 [ 470.197072][T20700] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 470.734416][T20725] netlink: 'syz.3.3941': attribute type 1 has an invalid length. [ 470.776751][T20725] bond9: entered promiscuous mode [ 470.787478][T20725] bond9: entered allmulticast mode [ 470.795641][T20725] 8021q: adding VLAN 0 to HW filter on device bond9 [ 470.832343][T20730] macvlan2: entered promiscuous mode [ 470.837738][T20730] macvlan2: entered allmulticast mode [ 470.906589][T20730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 471.629741][T11767] tipc: Node number set to 2886997057 [ 471.652242][T20741] ipt_REJECT: TCP_RESET invalid for non-tcp [ 471.789035][T20749] syzkaller0: entered promiscuous mode [ 471.795091][T20749] syzkaller0: entered allmulticast mode [ 471.971414][T20767] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 472.254119][T20780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.275111][T20782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.293279][T20782] __nla_validate_parse: 15 callbacks suppressed [ 472.293304][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 472.336912][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3955'. [ 472.711296][T20812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.868996][T20825] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3970'. [ 472.949477][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 473.082566][T20822] sit1: entered promiscuous mode [ 473.087582][T20822] sit1: entered allmulticast mode [ 473.110726][ T134] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.121166][ T134] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.141025][ T134] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.159758][ T134] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.423220][T20864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3980'. [ 473.444119][T20864] netlink: 'syz.1.3980': attribute type 1 has an invalid length. [ 473.512767][T20868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3981'. [ 473.591944][T20872] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 473.708307][T20878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3985'. [ 473.933179][T20886] netlink: 'syz.2.3986': attribute type 10 has an invalid length. [ 473.958888][T20886] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 473.989252][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 473.997310][ C1] lec:lec_tx_timeout: lec0 [ 474.002536][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 474.173237][T20894] pimreg: entered allmulticast mode [ 474.489686][T20917] syzkaller0: entered promiscuous mode [ 474.495394][T20917] syzkaller0: entered allmulticast mode [ 474.499961][ T134] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 474.610847][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4000'. [ 474.667801][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4001'. [ 474.686124][T20934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4001'. [ 474.867360][T20940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.002143][T20944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4004'. [ 475.138202][T20905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.360769][T20955] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 475.415924][T20957] netlink: 'syz.1.4008': attribute type 4 has an invalid length. [ 477.022434][T20980] xt_hashlimit: size too large, truncated to 1048576 [ 477.244460][T20992] syzkaller0: entered promiscuous mode [ 477.253540][T20992] syzkaller0: entered allmulticast mode [ 477.267705][T21001] wg0: entered promiscuous mode [ 477.279447][T21001] wg0: entered allmulticast mode [ 477.299922][T21003] __nla_validate_parse: 8 callbacks suppressed [ 477.299943][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 477.556398][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 478.886784][T21015] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 479.009211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 479.017264][ C1] lec:lec_tx_timeout: lec0 [ 479.022410][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.109429][T21032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4027'. [ 479.113103][T21023] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 479.240060][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4028'. [ 479.317627][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4028'. [ 479.346330][T11767] IPVS: starting estimator thread 0... [ 479.365385][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4031'. [ 479.439564][T21050] IPVS: using max 27 ests per chain, 64800 per kthread [ 479.444136][T21038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4028'. [ 479.457323][T21049] hsr_slave_0: left promiscuous mode [ 479.481279][T21049] hsr_slave_1: left promiscuous mode [ 479.517243][T21059] netlink: 'syz.0.4034': attribute type 10 has an invalid length. [ 479.526079][T21059] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4034'. [ 479.645892][T21061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4035'. [ 479.700518][T21061] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4035'. [ 480.053821][T21094] netlink: 'syz.0.4045': attribute type 8 has an invalid length. [ 480.216537][T21107] netlink: 'syz.3.4049': attribute type 21 has an invalid length. [ 480.268981][T21109] macvtap1: entered promiscuous mode [ 480.288422][T21109] macvtap1: entered allmulticast mode [ 480.308664][T21109] veth1_vlan: entered allmulticast mode [ 480.756615][T21138] gretap0: entered promiscuous mode [ 480.766888][T21140] syzkaller1: entered promiscuous mode [ 480.774624][T21140] syzkaller1: entered allmulticast mode [ 480.794087][T21140] set match dimension is over the limit! [ 481.121600][T21163] netlink: 'syz.4.4070': attribute type 10 has an invalid length. [ 481.495718][T21178] bridge_slave_1: entered allmulticast mode [ 481.616604][T21193] netlink: 'syz.3.4079': attribute type 1 has an invalid length. [ 481.625506][T21193] netlink: 'syz.3.4079': attribute type 3 has an invalid length. [ 481.738499][T21201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.750015][T21201] bridge0: port 3(bond4) entered blocking state [ 481.756493][T21201] bridge0: port 3(bond4) entered disabled state [ 481.763628][T21201] bond4: entered allmulticast mode [ 481.773245][T21201] bond4: entered promiscuous mode [ 482.047936][T21210] lo speed is unknown, defaulting to 1000 [ 482.249117][T21188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.715018][T21247] syzkaller0: entered promiscuous mode [ 482.728230][T21247] syzkaller0: entered allmulticast mode [ 482.917613][T21263] IPVS: Error joining to the multicast group [ 482.917970][T21264] netlink: 'syz.1.4101': attribute type 17 has an invalid length. [ 482.950904][T21264] __nla_validate_parse: 9 callbacks suppressed [ 482.950925][T21264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4101'. [ 483.036321][T21264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4101'. [ 483.056156][T21264] gretap0: entered promiscuous mode [ 483.063334][T21274] Unsupported ieee802154 address type: 0 [ 483.084889][T21264] gretap0: left promiscuous mode [ 483.190003][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 483.361042][T21287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.433419][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 483.611865][T21294] syzkaller0: entered allmulticast mode [ 483.773406][T21306] syzkaller0: entered promiscuous mode [ 483.779085][T21306] syzkaller0: entered allmulticast mode [ 483.799613][T21308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.061425][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 484.069524][ C1] lec:lec_tx_timeout: lec0 [ 484.074770][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.089628][T21308] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.096856][T21308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.104512][T21308] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.111761][T21308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.411676][T21313] nbd2: detected capacity change from 0 to 63 [ 484.420901][ T5833] block nbd2: Receive control failed (result -32) [ 484.423259][T21066] block nbd2: Send control failed (result -32) [ 484.435876][ T5145] block nbd2: Receive control failed (result -32) [ 484.436385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 484.454731][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 484.469982][T21066] block nbd2: Request send failed, requeueing [ 484.492517][ T1755] block nbd2: Dead connection, failed to find a fallback [ 484.501551][ T1755] block nbd2: shutting down sockets [ 484.507392][ T1755] blk_print_req_error: 136 callbacks suppressed [ 484.507410][ T1755] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.527879][ T1755] buffer_io_error: 138 callbacks suppressed [ 484.527897][ T1755] Buffer I/O error on dev nbd2, logical block 0, async page read [ 484.545001][T21066] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.560258][T21326] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 484.566861][T21066] Buffer I/O error on dev nbd2, logical block 1, async page read [ 484.567674][T21326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.592088][T21066] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.601998][T21066] Buffer I/O error on dev nbd2, logical block 2, async page read [ 484.611967][T21066] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.622089][T21066] Buffer I/O error on dev nbd2, logical block 3, async page read [ 484.633933][T21066] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.650078][T21066] Buffer I/O error on dev nbd2, logical block 0, async page read [ 484.658233][T21066] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.668230][T21066] Buffer I/O error on dev nbd2, logical block 1, async page read [ 484.676431][T21066] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.686804][T21066] Buffer I/O error on dev nbd2, logical block 2, async page read [ 484.695239][T21066] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.705298][T21066] Buffer I/O error on dev nbd2, logical block 3, async page read [ 484.713907][T21066] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.739592][T21066] Buffer I/O error on dev nbd2, logical block 0, async page read [ 484.747835][T21066] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.777920][T21066] Buffer I/O error on dev nbd2, logical block 1, async page read [ 484.788830][T21066] ldm_validate_partition_table(): Disk read failed. [ 484.811746][T21066] Dev nbd2: unable to read RDB block 0 [ 484.825815][T21066] nbd2: unable to read partition table [ 484.856798][T21066] ldm_validate_partition_table(): Disk read failed. [ 484.865327][T21336] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4124'. [ 484.879914][T21066] Dev nbd2: unable to read RDB block 0 [ 484.888702][T21338] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4125'. [ 484.898489][T21338] 8021q: VLANs not supported on ip6tnl0 [ 484.916674][T21336] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4124'. [ 484.939924][T21066] nbd2: unable to read partition table [ 485.118756][T21352] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4131'. [ 485.137105][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 485.393158][T21368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4135'. [ 485.402977][T21368] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4135'. [ 485.412394][T21368] netlink: 'syz.2.4135': attribute type 6 has an invalid length. [ 485.433524][T21368] netlink: 'syz.2.4135': attribute type 5 has an invalid length. [ 485.666928][T21383] openvswitch: netlink: Flow key attr not present in new flow. [ 485.788948][ T12] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 485.852906][T21404] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 485.861416][T21404] netlink: 'syz.0.4145': attribute type 4 has an invalid length. [ 486.055333][T21412] vlan2: entered allmulticast mode [ 486.062241][T21412] bridge7: entered allmulticast mode [ 486.137916][T21412] bridge7: port 1(bond11) entered blocking state [ 486.144873][T21412] bridge7: port 1(bond11) entered disabled state [ 486.152473][T21412] bond11: entered allmulticast mode [ 486.160884][T21412] bond11: entered promiscuous mode [ 486.187334][T21421] netlink: 'syz.4.4152': attribute type 3 has an invalid length. [ 486.198407][T21421] IPVS: set_ctl: invalid protocol: 0 172.20.20.54:20004 [ 486.310181][T21434] netlink: 'syz.3.4155': attribute type 33 has an invalid length. [ 486.366904][T21432] bond5 (unregistering): Released all slaves [ 486.443479][T21383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.556457][T21444] pimreg3: entered allmulticast mode [ 486.596463][T21448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.656186][T21448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.997162][T21477] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 487.239849][ T1102] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 487.888854][T21492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.985276][T21548] netlink: 'syz.4.4187': attribute type 1 has an invalid length. [ 487.998874][T21548] __nla_validate_parse: 11 callbacks suppressed [ 487.998894][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4187'. [ 488.277035][T21572] veth3: entered allmulticast mode [ 488.304520][T21578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4193'. [ 488.597758][T21583] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 488.622085][ T5145] block nbd3: Receive control failed (result -107) [ 488.649917][T21598] nbd3: detected capacity change from 0 to 127 [ 488.658796][T21600] tap0: tun_chr_ioctl cmd 1074025676 [ 488.665989][T21600] tap0: owner set to 0 [ 488.672522][T21066] block nbd3: Dead connection, failed to find a fallback [ 488.674624][T21600] xt_l2tp: missing protocol rule (udp|l2tpip) [ 488.679754][T21066] block nbd3: shutting down sockets [ 488.704942][T21066] ldm_validate_partition_table(): Disk read failed. [ 488.713786][T21066] Dev nbd3: unable to read RDB block 0 [ 488.720196][T21066] nbd3: unable to read partition table [ 488.742098][T21066] ldm_validate_partition_table(): Disk read failed. [ 488.751981][T21066] Dev nbd3: unable to read RDB block 0 [ 488.760396][T21066] nbd3: unable to read partition table [ 488.911500][T21616] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4204'. [ 488.922433][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 488.935526][T21616] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4204'. [ 488.940603][T21620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.950377][T21616] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4204'. [ 489.024499][T21621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4206'. [ 489.089255][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 489.097346][ C1] lec:lec_tx_timeout: lec0 [ 489.102463][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 489.117793][T21623] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4208'. [ 489.172859][T21628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4210'. [ 489.516958][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 489.575881][T21648] bond2: option xmit_hash_policy: invalid value (64) [ 489.783343][T21648] bond2 (unregistering): Released all slaves [ 489.982578][T21661] syzkaller1: entered promiscuous mode [ 489.988125][T21661] syzkaller1: entered allmulticast mode [ 490.053968][T21666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.080523][T21668] netlink: 'syz.3.4223': attribute type 2 has an invalid length. [ 490.132732][T21668] vþ: entered promiscuous mode [ 490.338019][T21683] netlink: 'syz.2.4228': attribute type 1 has an invalid length. [ 490.385458][T21683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.446613][T21691] netlink: 'syz.1.4231': attribute type 2 has an invalid length. [ 490.455266][T21691] netlink: 'syz.1.4231': attribute type 2 has an invalid length. [ 490.473661][T21683] bond2: (slave bridge2): making interface the new active one [ 490.496108][T21683] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 490.568457][T21694] netlink: 'syz.1.4232': attribute type 9 has an invalid length. [ 490.639645][T21696] netlink: 'syz.3.4233': attribute type 39 has an invalid length. [ 491.368315][T21740] IPVS: stopping backup sync thread 18970 ... [ 491.601789][T21748] syzkaller1: entered promiscuous mode [ 491.607516][T21748] syzkaller1: entered allmulticast mode [ 491.901858][T21761] syzkaller0: entered promiscuous mode [ 491.907595][T21761] syzkaller0: entered allmulticast mode [ 491.967772][T21767] macsec1: entered promiscuous mode [ 491.973809][T21767] bridge0: entered promiscuous mode [ 491.979738][T21767] macsec1: entered allmulticast mode [ 491.985065][T21767] bridge0: entered allmulticast mode [ 491.993757][T21767] bridge0: port 1(macsec1) entered blocking state [ 492.019120][T21767] bridge0: port 1(macsec1) entered disabled state [ 492.031096][T21767] bridge0: left allmulticast mode [ 492.036170][T21767] bridge0: left promiscuous mode [ 492.315191][T21789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.809584][T21818] ipt_rpfilter: unknown options [ 492.887132][T21821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.897125][T21821] netlink: 'syz.1.4272': attribute type 4 has an invalid length. [ 493.000472][T21828] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 493.008465][T21828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.273362][T21850] __nla_validate_parse: 13 callbacks suppressed [ 493.273385][T21850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4281'. [ 493.353598][T21856] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4281'. [ 493.386711][T21858] netlink: 'syz.3.4282': attribute type 11 has an invalid length. [ 493.432853][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 493.476106][T21860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.486634][ T5145] [ 493.488999][ T5145] ====================================================== [ 493.496029][ T5145] WARNING: possible circular locking dependency detected [ 493.503137][ T5145] syzkaller #0 Not tainted [ 493.507548][ T5145] ------------------------------------------------------ [ 493.514559][ T5145] kworker/u9:1/5145 is trying to acquire lock: [ 493.520708][ T5145] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 493.531243][ T5145] [ 493.531243][ T5145] but task is already holding lock: [ 493.538612][ T5145] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 493.548881][ T5145] [ 493.548881][ T5145] which lock already depends on the new lock. [ 493.548881][ T5145] [ 493.559280][ T5145] [ 493.559280][ T5145] the existing dependency chain (in reverse order) is: [ 493.568295][ T5145] [ 493.568295][ T5145] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 493.576375][ T5145] down_write+0x96/0x200 [ 493.581142][ T5145] kernfs_add_one+0x41/0x5c0 [ 493.586251][ T5145] kernfs_create_dir_ns+0xde/0x130 [ 493.591885][ T5145] internal_create_group+0x425/0x1180 [ 493.597786][ T5145] cpuhp_invoke_callback+0x445/0x860 [ 493.603605][ T5145] cpuhp_issue_call+0x430/0x7a0 [ 493.608984][ T5145] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 493.615578][ T5145] __cpuhp_setup_state+0x3f/0x60 [ 493.621043][ T5145] do_one_initcall+0x250/0x8d0 [ 493.626334][ T5145] do_initcall_level+0x104/0x190 [ 493.631800][ T5145] do_initcalls+0x59/0xa0 [ 493.636658][ T5145] kernel_init_freeable+0x2a6/0x3e0 [ 493.642384][ T5145] kernel_init+0x1d/0x1d0 [ 493.647237][ T5145] ret_from_fork+0x51e/0xb90 [ 493.652372][ T5145] ret_from_fork_asm+0x1a/0x30 [ 493.657669][ T5145] [ 493.657669][ T5145] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 493.665492][ T5145] [ 493.665492][ T5145] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 493.673229][ T5145] cpus_read_lock+0x42/0x160 [ 493.678355][ T5145] static_key_disable+0x12/0x20 [ 493.683733][ T5145] __inet_hash_connect+0x2430/0x2440 [ 493.689544][ T5145] tcp_v4_connect+0xd5f/0x19b0 [ 493.694843][ T5145] __inet_stream_connect+0x25a/0xdd0 [ 493.700656][ T5145] inet_stream_connect+0x66/0xa0 [ 493.706126][ T5145] __sys_connect+0x312/0x450 [ 493.711238][ T5145] __x64_sys_connect+0x7a/0x90 [ 493.716527][ T5145] do_syscall_64+0x14d/0xf80 [ 493.721650][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.728152][ T5145] [ 493.728152][ T5145] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 493.735804][ T5145] lock_sock_nested+0x48/0x100 [ 493.741089][ T5145] inet_shutdown+0x6a/0x390 [ 493.746127][ T5145] nbd_mark_nsock_dead+0x2e9/0x560 [ 493.751765][ T5145] recv_work+0x1c7f/0x1d90 [ 493.756708][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 493.762781][ T5145] worker_thread+0xa53/0xfc0 [ 493.767903][ T5145] kthread+0x388/0x470 [ 493.772495][ T5145] ret_from_fork+0x51e/0xb90 [ 493.777621][ T5145] ret_from_fork_asm+0x1a/0x30 [ 493.782922][ T5145] [ 493.782922][ T5145] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 493.790574][ T5145] __mutex_lock+0x19f/0x1300 [ 493.795726][ T5145] nbd_queue_rq+0x37b/0x1100 [ 493.800865][ T5145] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 493.806944][ T5145] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 493.813802][ T5145] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 493.820306][ T5145] blk_mq_run_hw_queue+0x348/0x4f0 [ 493.825940][ T5145] blk_mq_dispatch_list+0xd16/0xe10 [ 493.831667][ T5145] blk_mq_flush_plug_list+0x48d/0x570 [ 493.837570][ T5145] __blk_flush_plug+0x3ed/0x4d0 [ 493.842950][ T5145] __submit_bio+0x28d/0x580 [ 493.847986][ T5145] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 493.854147][ T5145] block_read_full_folio+0x599/0x830 [ 493.859971][ T5145] filemap_read_folio+0x137/0x3b0 [ 493.865520][ T5145] do_read_cache_folio+0x358/0x590 [ 493.871154][ T5145] read_part_sector+0xb6/0x2b0 [ 493.876456][ T5145] adfspart_check_ICS+0xa5/0xa40 [ 493.881921][ T5145] bdev_disk_changed+0x7ba/0x1550 [ 493.887475][ T5145] blkdev_get_whole+0x380/0x510 [ 493.892852][ T5145] bdev_open+0x31e/0xd30 [ 493.897620][ T5145] blkdev_open+0x470/0x610 [ 493.902561][ T5145] do_dentry_open+0x785/0x14e0 [ 493.907856][ T5145] vfs_open+0x3b/0x340 [ 493.912468][ T5145] path_openat+0x2e08/0x3860 [ 493.917595][ T5145] do_file_open+0x23e/0x4a0 [ 493.922621][ T5145] do_sys_openat2+0x113/0x200 [ 493.927825][ T5145] __x64_sys_openat+0x138/0x170 [ 493.933203][ T5145] do_syscall_64+0x14d/0xf80 [ 493.938325][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.944744][ T5145] [ 493.944744][ T5145] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 493.951963][ T5145] __mutex_lock+0x19f/0x1300 [ 493.957088][ T5145] nbd_queue_rq+0xc6/0x1100 [ 493.962119][ T5145] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 493.968193][ T5145] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 493.975051][ T5145] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 493.981560][ T5145] blk_mq_run_hw_queue+0x348/0x4f0 [ 493.987295][ T5145] blk_mq_dispatch_list+0xd16/0xe10 [ 493.993028][ T5145] blk_mq_flush_plug_list+0x48d/0x570 [ 493.998927][ T5145] __blk_flush_plug+0x3ed/0x4d0 [ 494.004301][ T5145] __submit_bio+0x28d/0x580 [ 494.009334][ T5145] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 494.015497][ T5145] block_read_full_folio+0x599/0x830 [ 494.021307][ T5145] filemap_read_folio+0x137/0x3b0 [ 494.026860][ T5145] do_read_cache_folio+0x358/0x590 [ 494.032507][ T5145] read_part_sector+0xb6/0x2b0 [ 494.037795][ T5145] adfspart_check_ICS+0xa5/0xa40 [ 494.043258][ T5145] bdev_disk_changed+0x7ba/0x1550 [ 494.048810][ T5145] blkdev_get_whole+0x380/0x510 [ 494.054184][ T5145] bdev_open+0x31e/0xd30 [ 494.059035][ T5145] blkdev_open+0x470/0x610 [ 494.064148][ T5145] do_dentry_open+0x785/0x14e0 [ 494.069443][ T5145] vfs_open+0x3b/0x340 [ 494.074047][ T5145] path_openat+0x2e08/0x3860 [ 494.079160][ T5145] do_file_open+0x23e/0x4a0 [ 494.084197][ T5145] do_sys_openat2+0x113/0x200 [ 494.089403][ T5145] __x64_sys_openat+0x138/0x170 [ 494.094801][ T5145] do_syscall_64+0x14d/0xf80 [ 494.099921][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.106338][ T5145] [ 494.106338][ T5145] -> #4 (set->srcu){.+.+}-{0:0}: [ 494.113474][ T5145] __synchronize_srcu+0xca/0x300 [ 494.118954][ T5145] elevator_switch+0x1e8/0x7a0 [ 494.124265][ T5145] elevator_change+0x2cc/0x450 [ 494.129582][ T5145] elevator_set_default+0x36c/0x430 [ 494.135326][ T5145] blk_register_queue+0x366/0x430 [ 494.140892][ T5145] __add_disk+0x677/0xd50 [ 494.145844][ T5145] add_disk_fwnode+0xfb/0x480 [ 494.151051][ T5145] nbd_dev_add+0x72c/0xb50 [ 494.155995][ T5145] nbd_init+0x168/0x1f0 [ 494.160682][ T5145] do_one_initcall+0x250/0x8d0 [ 494.165976][ T5145] do_initcall_level+0x104/0x190 [ 494.171441][ T5145] do_initcalls+0x59/0xa0 [ 494.176301][ T5145] kernel_init_freeable+0x2a6/0x3e0 [ 494.182026][ T5145] kernel_init+0x1d/0x1d0 [ 494.186877][ T5145] ret_from_fork+0x51e/0xb90 [ 494.191992][ T5145] ret_from_fork_asm+0x1a/0x30 [ 494.197290][ T5145] [ 494.197290][ T5145] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 494.205120][ T5145] __mutex_lock+0x19f/0x1300 [ 494.210238][ T5145] elevator_change+0x1b3/0x450 [ 494.215528][ T5145] elevator_set_none+0xb5/0x140 [ 494.220906][ T5145] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 494.227243][ T5145] nbd_start_device+0x17f/0xb10 [ 494.232622][ T5145] nbd_genl_connect+0x165b/0x1cf0 [ 494.238342][ T5145] genl_family_rcv_msg_doit+0x22a/0x330 [ 494.244588][ T5145] genl_rcv_msg+0x61c/0x7a0 [ 494.249619][ T5145] netlink_rcv_skb+0x232/0x4b0 [ 494.254903][ T5145] genl_rcv+0x28/0x40 [ 494.259409][ T5145] netlink_unicast+0x80f/0x9b0 [ 494.264701][ T5145] netlink_sendmsg+0x813/0xb40 [ 494.269986][ T5145] ____sys_sendmsg+0x972/0x9f0 [ 494.275284][ T5145] ___sys_sendmsg+0x2a5/0x360 [ 494.280518][ T5145] __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.285984][ T5145] do_syscall_64+0x14d/0xf80 [ 494.291099][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.297521][ T5145] [ 494.297521][ T5145] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 494.306134][ T5145] blk_alloc_queue+0x546/0x680 [ 494.311425][ T5145] __blk_mq_alloc_disk+0x197/0x390 [ 494.317068][ T5145] nbd_dev_add+0x499/0xb50 [ 494.322006][ T5145] nbd_init+0x168/0x1f0 [ 494.326695][ T5145] do_one_initcall+0x250/0x8d0 [ 494.331988][ T5145] do_initcall_level+0x104/0x190 [ 494.337454][ T5145] do_initcalls+0x59/0xa0 [ 494.342308][ T5145] kernel_init_freeable+0x2a6/0x3e0 [ 494.348034][ T5145] kernel_init+0x1d/0x1d0 [ 494.352883][ T5145] ret_from_fork+0x51e/0xb90 [ 494.357999][ T5145] ret_from_fork_asm+0x1a/0x30 [ 494.363292][ T5145] [ 494.363292][ T5145] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 494.370505][ T5145] fs_reclaim_acquire+0x71/0x100 [ 494.375964][ T5145] kmem_cache_alloc_noprof+0x40/0x650 [ 494.381856][ T5145] __kernfs_iattrs+0xdf/0x340 [ 494.387062][ T5145] kernfs_iop_setattr+0xea/0x3f0 [ 494.392529][ T5145] notify_change+0xc1a/0xf40 [ 494.397647][ T5145] do_truncate+0x1c2/0x250 [ 494.402586][ T5145] path_openat+0x2f89/0x3860 [ 494.407724][ T5145] do_file_open+0x23e/0x4a0 [ 494.412771][ T5145] do_sys_openat2+0x113/0x200 [ 494.417983][ T5145] __x64_sys_openat+0x138/0x170 [ 494.423361][ T5145] do_syscall_64+0x14d/0xf80 [ 494.428485][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.434905][ T5145] [ 494.434905][ T5145] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 494.443427][ T5145] __lock_acquire+0x15a5/0x2cf0 [ 494.448817][ T5145] lock_acquire+0xf0/0x2e0 [ 494.453762][ T5145] down_write+0x96/0x200 [ 494.458526][ T5145] kernfs_unlink_sibling+0x71/0x180 [ 494.464249][ T5145] __kernfs_remove+0x3e7/0x660 [ 494.469538][ T5145] kernfs_remove_by_name_ns+0xaf/0x130 [ 494.475516][ T5145] sysfs_unmerge_group+0xd4/0x140 [ 494.481071][ T5145] dpm_sysfs_remove+0x76/0xd0 [ 494.486275][ T5145] device_del+0x250/0x8f0 [ 494.491131][ T5145] device_unregister+0x21/0xf0 [ 494.496422][ T5145] hci_conn_del+0xc36/0x1230 [ 494.501542][ T5145] hci_abort_conn_sync+0xdd0/0x1190 [ 494.507266][ T5145] hci_cmd_sync_work+0x213/0x400 [ 494.512728][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 494.518799][ T5145] worker_thread+0xa53/0xfc0 [ 494.523918][ T5145] kthread+0x388/0x470 [ 494.528505][ T5145] ret_from_fork+0x51e/0xb90 [ 494.533620][ T5145] ret_from_fork_asm+0x1a/0x30 [ 494.538910][ T5145] [ 494.538910][ T5145] other info that might help us debug this: [ 494.538910][ T5145] [ 494.549134][ T5145] Chain exists of: [ 494.549134][ T5145] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 494.549134][ T5145] [ 494.563576][ T5145] Possible unsafe locking scenario: [ 494.563576][ T5145] [ 494.571024][ T5145] CPU0 CPU1 [ 494.576384][ T5145] ---- ---- [ 494.581748][ T5145] lock(&root->kernfs_rwsem); [ 494.586515][ T5145] lock(cpuhp_state_mutex); [ 494.593627][ T5145] lock(&root->kernfs_rwsem); [ 494.601001][ T5145] lock(&root->kernfs_iattr_rwsem); [ 494.606290][ T5145] [ 494.606290][ T5145] *** DEADLOCK *** [ 494.606290][ T5145] [ 494.614433][ T5145] 5 locks held by kworker/u9:1/5145: [ 494.619720][ T5145] #0: ffff88804c356148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 494.630521][ T5145] #1: ffffc9000f647c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 494.643056][ T5145] #2: ffff8880430c8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 494.652907][ T5145] #3: ffff8880430c80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 494.662659][ T5145] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 494.673369][ T5145] [ 494.673369][ T5145] stack backtrace: [ 494.679258][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 494.679278][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.679289][ T5145] Workqueue: hci1 hci_cmd_sync_work [ 494.679312][ T5145] Call Trace: [ 494.679320][ T5145] [ 494.679327][ T5145] dump_stack_lvl+0xe8/0x150 [ 494.679349][ T5145] print_circular_bug+0x2e1/0x300 [ 494.679375][ T5145] check_noncircular+0x12e/0x150 [ 494.679401][ T5145] __lock_acquire+0x15a5/0x2cf0 [ 494.679424][ T5145] ? __lock_acquire+0x6b5/0x2cf0 [ 494.679453][ T5145] lock_acquire+0xf0/0x2e0 [ 494.679472][ T5145] ? kernfs_unlink_sibling+0x71/0x180 [ 494.679492][ T5145] down_write+0x96/0x200 [ 494.679506][ T5145] ? kernfs_unlink_sibling+0x71/0x180 [ 494.679522][ T5145] ? __pfx_down_write+0x10/0x10 [ 494.679536][ T5145] ? kernfs_root+0x1c/0x230 [ 494.679557][ T5145] ? kernfs_root+0x1c/0x230 [ 494.679578][ T5145] ? kernfs_root+0x1c/0x230 [ 494.679600][ T5145] ? kernfs_root+0x1ea/0x230 [ 494.679622][ T5145] kernfs_unlink_sibling+0x71/0x180 [ 494.679640][ T5145] __kernfs_remove+0x3e7/0x660 [ 494.679657][ T5145] kernfs_remove_by_name_ns+0xaf/0x130 [ 494.679674][ T5145] sysfs_unmerge_group+0xd4/0x140 [ 494.679699][ T5145] dpm_sysfs_remove+0x76/0xd0 [ 494.679723][ T5145] device_del+0x250/0x8f0 [ 494.679743][ T5145] ? klist_iter_exit+0xc1/0x100 [ 494.679766][ T5145] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 494.679784][ T5145] ? __pfx_device_del+0x10/0x10 [ 494.679804][ T5145] ? __pfx_autoremove_wake_function+0x10/0x10 [ 494.679823][ T5145] device_unregister+0x21/0xf0 [ 494.679844][ T5145] hci_conn_del+0xc36/0x1230 [ 494.679862][ T5145] ? hci_abort_conn_sync+0xa7b/0x1190 [ 494.679878][ T5145] hci_abort_conn_sync+0xdd0/0x1190 [ 494.679896][ T5145] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 494.679914][ T5145] ? abort_conn_sync+0x26/0x210 [ 494.679934][ T5145] ? abort_conn_sync+0x26/0x210 [ 494.679952][ T5145] ? abort_conn_sync+0x19c/0x210 [ 494.679970][ T5145] ? __pfx_abort_conn_sync+0x10/0x10 [ 494.679989][ T5145] hci_cmd_sync_work+0x213/0x400 [ 494.680012][ T5145] ? process_scheduled_works+0xa8d/0x18c0 [ 494.680032][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 494.680061][ T5145] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.680083][ T5145] ? assign_work+0x3d5/0x5e0 [ 494.680103][ T5145] worker_thread+0xa53/0xfc0 [ 494.680133][ T5145] kthread+0x388/0x470 [ 494.680147][ T5145] ? __pfx_worker_thread+0x10/0x10 [ 494.680167][ T5145] ? __pfx_kthread+0x10/0x10 [ 494.680181][ T5145] ret_from_fork+0x51e/0xb90 [ 494.680202][ T5145] ? __pfx_ret_from_fork+0x10/0x10 [ 494.680221][ T5145] ? __switch_to+0xc7d/0x1450 [ 494.680238][ T5145] ? __pfx_kthread+0x10/0x10 [ 494.680252][ T5145] ret_from_fork_asm+0x1a/0x30 [ 494.680280][ T5145] [ 494.946588][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5840 ms [ 494.954663][ C1] lec:lec_tx_timeout: lec0 [ 494.960263][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 500.309272][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 500.317297][ C1] lec:lec_tx_timeout: lec0 [ 500.321996][ C1] lec:lec_start_xmit: lec0:No lecd attached