last executing test programs: 11.24741809s ago: executing program 1 (id=9277): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000000)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x17) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001cc0)={'syztnl0\x00', &(0x7f0000001bc0)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x5, 0x973, {{0x5, 0x4, 0x2, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4401001010000104000000000010000000000eff0f8b2a945cc6206d5f681fd426f1140792af9462cae56e70357038832340fbdce0d6faae10ef8b2a2893956f7006784167ff7193a39b4cf688119e37", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 11.079252594s ago: executing program 1 (id=9281): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000a02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x1f0, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8}]}}}, @IFLA_VFINFO_LIST={0x17c, 0x16, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x2}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1ff, 0x57, 0x8, 0x88a8}}, {0x14, 0x1, {0x6, 0x5a4, 0xffffffd2, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x37b, 0x2, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff9, 0x2}}]}, {0x11c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x101, 0xfffffe00}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffb, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x100}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x628, 0x1000, 0x8100}}, {0x14, 0x1, {0x1, 0x31, 0x5, 0x8100}}, {0x14, 0x1, {0xe163, 0x1fb, 0x5, 0x88a8}}, {0x14, 0x1, {0x451, 0xe3f, 0x1, 0x88a8}}, {0x14, 0x1, {0xca, 0xb2, 0x9, 0x88a8}}, {0x14, 0x1, {0xff, 0xef, 0x5, 0x88a8}}, {0x14, 0x1, {0xffffec5a, 0xef0, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x446, 0x2, 0x8100}}, {0x14, 0x1, {0x8, 0x7bb, 0x9, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0xf2a}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffff8000, 0xfffffffffffffffb}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb, 0xe}}]}]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$unix(0x1, 0x5, 0x0) 10.64388277s ago: executing program 1 (id=9286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff7, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0x0, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x3, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x100, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0x1, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x3, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x144, 0x12, 0x2, 0x70bd2d, 0x25dfdbfe, {0x2b, 0x6, 0xfc, 0x4, {0x4e22, 0x4e21, [0xfffffffc, 0xf6, 0x3, 0x7], [0x4, 0x1, 0x0, 0x65], r2, [0x2189, 0x8fd]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "edecb0980206f69607bbe4b8c105d967f7f4e25ec227dd35f137b91d432cb0d4e5969f1dc765c7ab29ec8dbc333ba69bb59db009932d613943a77ea423efd873a8bb6796efe74f800114e02c4a8fb9ec619a0d790ec5683fd319bfd1efa82b758aca749a2444edcd97bc2640455e7049b8fab7287ca37f53e21d9ac5dcb13c1aa1c9b4386c9f3ba4de036295167c56b299a81a18a43a42bce1fc4fb829db3f0d051f366a6887c15e9a4de769555dec4cf9efc80dfe1f828178801a7a4b6d19f15c0b17603cbe13258c971637f421befcebb91a389ccf39e1dac44186560a6e830ab7b17869cfc90ddfd88a16c770c8baf4"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 10.160294502s ago: executing program 1 (id=9289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900060000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x25d6, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x24048015}, 0x811) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xa8}}, 0x0) 9.896598949s ago: executing program 1 (id=9292): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xb, 0x5}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) read$nci(r1, 0x0, 0x0) write$nci(r1, &(0x7f0000000580)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x5, @f_listen={0xe, 0x2, 0x4, 0x82, 0x9, 0x2, 0x8, {0x8, "8b71ca6a361dd7ee"}, 0x3, 0xa, 0x7, 0x5}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 8.396513565s ago: executing program 1 (id=9306): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x100) accept4(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) sendto(r0, 0x0, 0xe00, 0x68ec, &(0x7f00000004c0)=@phonet={0x23, 0x6, 0x12, 0xd}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'vlan1\x00', @random="017335fffff8"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000089a000fe0000000095", @ANYRESDEC=r1, @ANYRES8=r2, @ANYRES8=r1], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) 2.788366929s ago: executing program 3 (id=9362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0xfffffffffffffca0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x3c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x10, 0x4853, 0x400000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl(r3, 0x8b22, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000140009050000000000000000020100fe", @ANYRES32=r6, @ANYBLOB="080003000000000208000200ac"], 0x28}}, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r5}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x58, &(0x7f00000003c0)=ANY=[@ANYBLOB="9f0fb34289a8aaaaaaaaaabb88a816008100390088480000000062d2ff0600162100fe800000000000000000000000000029ff02000000000000000000000000008075dbe4cfd440de06710000000000000000000000000037f5b1cd40315d7cd482df930f1eabf6e77857622ff4f62959ea52ed74e61a6b3ac7792c69494ddc5677ef5eb082290dc8745b604116157fe4b2975835ed051d091187ba59a423e6dc58a769b6122355dcca9bf93e2e9589"], &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) 2.67388664s ago: executing program 2 (id=9365): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbb, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6c, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0x7, "c8f46976e7"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "9ee54763f3"}}}}}, 0x0) 2.476782977s ago: executing program 2 (id=9366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@remote, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xc4}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x4, 0x6, 0x5ca42eb8, 0x8, 0xd, 0x101, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) 2.316200991s ago: executing program 0 (id=9367): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x0, {0x3}}, 0x14}}, 0x0) 2.238231462s ago: executing program 3 (id=9368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x4, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) write$tun(r0, &(0x7f0000001440)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28a671fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69b7c57fa78d312c5abb5eea30720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba812d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c202dedbc7cc70723ddb56accb1eb266787"}}, 0xfca) 2.176748654s ago: executing program 2 (id=9369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r2, 0x0, &(0x7f0000005e00)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x1d8, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) syz_init_net_socket$x25(0xb, 0x5, 0x27) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0x1, &(0x7f0000000100)="6341e62f4870a3d276f4c8a8c081bfedef4337e55568dc51a0812ff1b97daeee525d6c5ef9c11fcd41ac1a259c3ca3089c408cc0a1806f2865be6878bb52252da75b5c0c33353ba55af5bb36e04fda09a5606c56bdb7117d9f8dc85608b2788980338d9ba1caa2c4369b49d12309ff80c1d22f1235196a028164bc961fa834dc8f5f972428d4ab8bcdc86979ab8ac4303a31e2b9da7a5e10163bef0867f15bbe545517ef623e4057fc59", &(0x7f00000001c0)=@tcp=r4}, 0x20) 2.007272256s ago: executing program 0 (id=9371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r2, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0x0, 0x220, 0x150, 0x220, 0x220, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x7, 0x8001, 0x9, 0x40000009, 0x539, 0x8, 0xe92c, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0xffff, 0x24, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x50, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x92, 0x52}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x408c4}, 0x0) 1.815124827s ago: executing program 2 (id=9372): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) close(r2) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r5, @ANYBLOB="fbcbf0fa133ad2a25a9081e245c6385dcf193294040010dfc7c3778a669da240f0cdd69d332a80"], 0x1c}}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r9, 0x203, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000082}, 0x24048008) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00}, 0x48) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c00000e5c00", @ANYRES16=r6, @ANYBLOB="040028bd7000fddbdf251b00000008000300", @ANYRES32=r8, @ANYBLOB="10002e800c0004000202aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x8001) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r10, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x400, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010101}]}}}]}, 0x3c}}, 0x0) 1.704450965s ago: executing program 0 (id=9373): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.692999667s ago: executing program 4 (id=9374): r0 = socket(0x21, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r2, 0xf7fb6818eeda6d45, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x440c0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0xfffffff8, @remote, 0xb71}}, 0x7fffffff, 0x0, 0xffff, 0x43, 0x8, 0x9, 0x9d}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x1, 0x600, 0x8200, 0xfff, 0xffff27e6, 0x300000, 0x80000001, 0x5541, r3}, &(0x7f0000000300)=0x20) r4 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x102, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) 1.567609174s ago: executing program 4 (id=9375): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbb, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6c, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0x7, "c8f46976e7"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "9ee54763f3"}}}}}, 0x0) 1.472572941s ago: executing program 2 (id=9376): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast2, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x4dad, 0x4) write(r0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2021, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, r2, 0xc52db000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250900000024000180090006006c626c630000000006000100020000000a0300000000000000000000e1604a77e62097616a7397ec363902154dda866d681d215579d039d590bfe2df819959596338784c1c16485518eb135d91ee06e0a9aff812101f1f17ba75743546cdf4c78fc1f0ece34f3a509cbc2b731cd5a7b435b831a760358bfceae8d664d5d53c172dd4422f48f7b8f13cf1d948a990922c51166ba55146f59516e60a1746de2fe67425bc4525957db767be57bedf1cb46d8b90cf7cdd3bf77fb9ca886e137f1414b2"], 0x38}, 0x1, 0x0, 0x0, 0x200088d0}, 0x4080) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x83, &(0x7f00000000c0), 0x8) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r8, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x50, &(0x7f0000abaff9), 0x10) 1.472196778s ago: executing program 3 (id=9377): socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000380), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) r6 = openat$cgroup_int(r5, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/19, 0x13) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x48000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="05002ebd000000000800000008000300", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x24000001) 1.374581264s ago: executing program 4 (id=9378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) (async) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) socket$inet(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x300, 0x0, 0x80000000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x4}, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) (async, rerun: 64) close(0x3) (async, rerun: 64) unshare(0x40000000) 1.268537818s ago: executing program 0 (id=9379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000013c0)={0x1, 0x8, 0xbe, &(0x7f0000001440)=""/190}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r1, @ANYRESOCT=r4, @ANYRES8=r0], 0x7c}}, 0x0) r6 = accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14, 0x0) setsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f00000003c0)="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", 0x1000) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000000027000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000070900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000)=0x100000000, 0x7) sendfile(r1, r11, 0x0, 0x20000000002) 1.188469295s ago: executing program 3 (id=9380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x54}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 1.104018766s ago: executing program 3 (id=9381): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\a\x00\x00\x00@\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000c0020300003eb9d3adfb751535c4e1791c74cbcd8468a34706a982794e5052747b5c4f6a066593121b4018978fac119953b1d6558e62aac4399f"], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000004000f80"], 0x68}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) (async) socket$inet(0x2, 0x3, 0x30) (async) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="159debf01e3dde6ba3e9281a1425d5f9dadb2c6af6465637f8ec57afbb3a79b8ab"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.012140122s ago: executing program 4 (id=9382): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048040}, 0x80) 836.454075ms ago: executing program 3 (id=9383): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x3, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 743.249492ms ago: executing program 0 (id=9384): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e, 0x10}]}, 0x38}}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 732.664874ms ago: executing program 4 (id=9385): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000)=0x5f6, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x1fa, 0x4) listen(r0, 0x80) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 544.367985ms ago: executing program 0 (id=9386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)="79ec13923dadaf8ba59889f32706cdbd7073f268e52910c43bde837ab5337e76904b96070358b94341ccb46917a326fbda4a7355a039dca54d0416ca8e7977f517d95269a72adb04d816ffe6c475dc46a05f91910a1e7bdf2540f5012c041b33ecbb0e0f2e0f8d2587b190b5299f06e23ac06e923719fa0eaa808e559ca6ff41769a7c61ef31633e34e52e2ff56c719e6dd4bf0d295bf17307a89738dbc6762c0771e2cc983cd6d7ebd089a62504cb1251a742a23bec2d93e06044815b54b8ec93b7b72c71180da2f0b4818fc384ddd9a273e5d7ae46f7e7c31a4892a0ef5c36a6e7a3", 0xe3}, {&(0x7f00000003c0)="ce0f868564bad24654a3ea1cccde450abbc8b4e04dc9a8ab45c393d91c2a31485aec881720fdd0a7b9bd1138d06c1f6c9af3a13c3ef974e098e257d9d916a6b7935436aca7128ffb81eab8ca6fef9ea7f997ae6b5384c71263d0755d9df99bee3e71ae546e9dd1430f1e", 0x6a}, {&(0x7f0000000440)="b17857527dfa60ebf0c277e4d9ccefb9315cdfcbfed3477b0b02e83cbbd8edab8c290b8ca5c278d9deb0af1537df4c6a02fad8fc5bc419eda788df74499f0f679dc883331faef63a68ec8844ec73a21a280c037a3f48cf6f90520f173bcbc430f5c732358dbc17d9b9cb688e420a1693b70bda5b050edb1833047288a380b30a6768c192ff3e4365711e1b82e6a069862a8fe17ef06c50c010375531d8e03763caa42c4ac441a228a8ac6e7494cd3e6c6d125e13", 0xb4}, {&(0x7f0000000500)}], 0x4, 0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="541d0000020601020000000000000000000000000c000780080012400006000010000300686173683a69ffff6d61630a0000000500040000000000090002797a3100000000050001000700"/84], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="18000000000000000000000000105500850000007c0000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) 35.867361ms ago: executing program 4 (id=9387): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbf, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6f, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xa, "c8f46976e79e56c7"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "9ee54763f3"}}}}}, 0x0) 0s ago: executing program 2 (id=9388): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'veth0_to_team\x00', 0x1}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x48, {0x2, 0x4e23, @rand_addr=0x64010101}, 'macsec0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): callbacks suppressed [ 756.759602][T31165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7328'. [ 756.776779][T31166] netlink: 'syz.3.7328': attribute type 29 has an invalid length. [ 756.784980][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7328'. [ 756.847232][T31159] syzkaller0: entered allmulticast mode [ 756.991163][T31180] xt_hashlimit: size too large, truncated to 1048576 [ 757.322264][T31189] bond4: invalid ARP target 0.0.0.0 specified for addition [ 757.352192][T31189] bond4: option arp_ip_target: invalid value (0) [ 757.380299][T31189] bond4 (unregistering): Released all slaves [ 757.450153][T31204] netlink: 'syz.0.7342': attribute type 33 has an invalid length. [ 757.545086][T31204] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 757.616177][T31204] bond4 (unregistering): Released all slaves [ 757.875696][T31232] syzkaller1: entered promiscuous mode [ 757.881246][T31232] syzkaller1: entered allmulticast mode [ 757.975782][T31238] sock: sock_timestamping_bind_phc: sock not bind to device [ 758.023144][T31238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7351'. [ 758.074686][ T3577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 758.156091][ T3577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 758.185169][ T3577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 758.215344][ T3577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 758.316828][T31250] Unsupported ieee802154 address type: 0 [ 758.549662][T31266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7361'. [ 758.681516][T31275] net_ratelimit: 141 callbacks suppressed [ 758.722810][T31275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.758605][T31281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7366'. [ 758.919053][T31284] wireguard0: entered promiscuous mode [ 758.937576][T31284] wireguard0: entered allmulticast mode [ 758.960639][T31284] team0: Device wireguard0 is of different type [ 759.574934][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 759.983759][T31301] netlink: 'syz.3.7371': attribute type 1 has an invalid length. [ 760.056307][T31301] bond3: entered promiscuous mode [ 760.085124][T31301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.148210][T31309] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 760.160810][T31309] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 760.172617][T31309] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 760.192987][T31301] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7371'. [ 760.373478][T31317] bond4: (slave ip6gretap0): Device is not bonding slave [ 760.387953][T31317] bond4: option active_slave: invalid value (ip6gretap0) [ 760.410895][T31317] bond4 (unregistering): Released all slaves [ 760.557419][T31334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.566675][T31332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.591503][T31332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.763302][T31343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7383'. [ 760.792825][T31342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7383'. [ 760.928637][T31355] openvswitch: netlink: IP tunnel dst address not specified [ 760.998275][T31352] syzkaller0: entered promiscuous mode [ 761.004746][T31352] syzkaller0: entered allmulticast mode [ 761.014411][T31360] netlink: 'syz.3.7387': attribute type 1 has an invalid length. [ 761.258041][T31374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7393'. [ 762.930883][T31381] sch_fq: defrate 0 ignored. [ 762.992358][T31381] Unknown options in mask b7f2 [ 763.163262][T31400] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003 [ 763.204082][T31400] netlink: 'syz.1.7399': attribute type 33 has an invalid length. [ 763.224782][T31407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7400'. [ 763.285386][T31400] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 763.319540][T31400] bond3 (unregistering): Released all slaves [ 763.562979][T31427] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 763.749893][T31430] veth1_macvtap: renamed from veth0_vlan [ 763.799099][T31440] netlink: 'syz.2.7409': attribute type 5 has an invalid length. [ 763.993519][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7415'. [ 764.123381][T31458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7416'. [ 764.186843][T31458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7416'. [ 764.536586][T31482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7423'. [ 764.655317][T31494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7423'. [ 764.712965][T31494] nbd: device at index 64 is going down [ 764.837369][T31438] udevd[31438]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 765.265071][T31524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7431'. [ 765.314379][T31524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7431'. [ 765.425190][ T5490] veth1_macvtap: left promiscuous mode [ 765.489692][ T5490] veth1_macvtap: entered promiscuous mode [ 765.526654][T31516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.784962][T31553] x_tables: ip6_tables: TPROXY target: only valid in mangle table, not [ 765.847018][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7438'. [ 765.950326][T31548] macvtap1: entered promiscuous mode [ 765.955841][T31548] vlan0: entered promiscuous mode [ 765.961415][T31548] macvtap1: entered allmulticast mode [ 765.967054][T31548] vlan0: entered allmulticast mode [ 765.976164][T31548] veth1_macvtap: entered allmulticast mode [ 766.398959][T31590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7444'. [ 766.574959][T31593] netlink: 'syz.1.7447': attribute type 1 has an invalid length. [ 766.608984][T31593] netlink: 'syz.1.7447': attribute type 2 has an invalid length. [ 767.396289][T31645] erspan0: entered promiscuous mode [ 767.418464][T31645] erspan0: left promiscuous mode [ 767.498183][T31649] netlink: 'syz.1.7463': attribute type 9 has an invalid length. [ 767.551419][T31657] delete_channel: no stack [ 767.668307][T31659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 768.054090][T31687] veth0_virt_wifi: entered promiscuous mode [ 768.060336][T31687] veth0_virt_wifi: entered allmulticast mode [ 768.322039][T31699] __nla_validate_parse: 15 callbacks suppressed [ 768.322062][T31699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7480'. [ 768.344448][T31690] bond4: option resend_igmp: invalid value (32767) [ 768.351149][T31690] bond4: option resend_igmp: allowed values 0 - 255 [ 768.366374][T31690] bond4 (unregistering): Released all slaves [ 768.381774][T31702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7481'. [ 768.461329][T31699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7480'. [ 768.515885][T31699] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.523698][T31699] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.646957][T31712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7480'. [ 768.821820][T31730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7487'. [ 769.154996][T31756] lo: entered promiscuous mode [ 769.167136][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.195113][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.232884][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.255682][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.301454][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.326339][T31762] tipc: Enabling of bearer rejected, failed to enable media [ 769.335504][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.364400][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.390569][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.420594][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.463344][T31756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.509942][T31771] syzkaller1: entered promiscuous mode [ 769.516531][T31771] syzkaller1: entered allmulticast mode [ 769.545007][T31770] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 769.705540][T31777] netlink: 'syz.4.7502': attribute type 30 has an invalid length. [ 769.770134][T31782] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 769.816693][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 769.937851][T31789] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.7508'. [ 769.979113][T31792] netlink: 'syz.3.7506': attribute type 21 has an invalid length. [ 770.001731][T31792] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7506'. [ 770.011020][T31792] netlink: 'syz.3.7506': attribute type 5 has an invalid length. [ 770.052528][T31792] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7506'. [ 770.358263][T31809] team0: left promiscuous mode [ 770.365992][T31809] team_slave_0: left promiscuous mode [ 770.385953][T31809] team_slave_1: left promiscuous mode [ 770.409906][T31825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7516'. [ 770.568996][T31809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.593354][T31809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.629429][T31809] veth0_virt_wifi: left promiscuous mode [ 770.635472][T31809] veth0_virt_wifi: left allmulticast mode [ 770.776259][T31809] veth3: left allmulticast mode [ 770.846071][T31809] bond2: left promiscuous mode [ 770.864109][T31816] batadv_slave_0: entered promiscuous mode [ 770.920994][T31825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7516'. [ 770.936557][T15400] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.945783][T15400] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.958322][T15400] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.980610][T31814] batadv_slave_0: left promiscuous mode [ 770.990354][T15400] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.221826][T31903] nbd1: detected capacity change from 0 to 63 [ 772.242762][ T5836] block nbd1: Receive control failed (result -104) [ 772.249380][ T5846] block nbd1: Receive control failed (result -32) [ 772.489228][T31939] netlink: 'syz.4.7549': attribute type 1 has an invalid length. [ 772.525945][T31942] geneve3: entered promiscuous mode [ 772.531244][T31942] geneve3: entered allmulticast mode [ 772.586158][T31939] bond5: entered promiscuous mode [ 772.592653][T31939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.600181][T30921] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.616008][T30921] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.642812][T30921] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.653003][T30921] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.681250][T31948] netlink: 'syz.2.7551': attribute type 9 has an invalid length. [ 772.692978][T31948] netlink: 'syz.2.7551': attribute type 11 has an invalid length. [ 772.713617][T31948] netlink: 'syz.2.7551': attribute type 12 has an invalid length. [ 772.752462][T31939] bond5: (slave bridge3): making interface the new active one [ 772.768388][T31939] bridge3: entered promiscuous mode [ 772.785003][T31939] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 773.064337][T31972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 773.096218][T31972] bond4: entered promiscuous mode [ 773.101512][T31972] bond4: entered allmulticast mode [ 773.108876][T31972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 773.120568][T31972] team0: Port device bond4 added [ 773.139778][T31972] vxcan3: entered promiscuous mode [ 773.145392][T31972] bond4: (slave vxcan3): refused to change device type [ 773.218114][T31980] IPv6: NLM_F_CREATE should be specified when creating new route [ 773.228287][T31980] netlink: 'syz.1.7559': attribute type 1 has an invalid length. [ 773.236569][T31980] netlink: 'syz.1.7559': attribute type 7 has an invalid length. [ 773.245192][T31980] netlink: 'syz.1.7559': attribute type 8 has an invalid length. [ 773.379890][T31989] netlink: 'syz.3.7563': attribute type 4 has an invalid length. [ 773.412026][T31989] netlink: 'syz.3.7563': attribute type 4 has an invalid length. [ 773.815523][T32009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.835192][T32009] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.849066][T32011] tipc: New replicast peer: 255.255.255.255 [ 773.858281][T32011] tipc: Enabled bearer , priority 10 [ 773.866185][T32014] __nla_validate_parse: 83 callbacks suppressed [ 773.866206][T32014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7570'. [ 773.885807][T32014] tipc: Disabling bearer [ 774.355970][T32046] netlink: 'syz.0.7580': attribute type 2 has an invalid length. [ 774.387496][T32046] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7580'. [ 774.483422][T32053] sctp: [Deprecated]: syz.1.7583 (pid 32053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 774.483422][T32053] Use struct sctp_sack_info instead [ 774.738281][T32071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7589'. [ 774.767000][T32071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7589'. [ 774.995657][T32081] nbd: couldn't find a device at index 1048580 [ 775.315147][T32107] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7599'. [ 775.348352][T32107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7599'. [ 775.772115][T32127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7606'. [ 775.980741][T32139] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.7611'. [ 776.196148][T32156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7617'. [ 776.445325][T32172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7620'. [ 776.463764][T32163] syzkaller0: entered promiscuous mode [ 776.469447][T32163] syzkaller0: entered allmulticast mode [ 776.483832][T32172] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 776.523721][T32172] team1: entered promiscuous mode [ 776.534609][T32172] team1: entered allmulticast mode [ 778.802721][T32231] net_ratelimit: 57 callbacks suppressed [ 778.802742][T32231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.070122][T32249] __nla_validate_parse: 1 callbacks suppressed [ 779.070144][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7641'. [ 779.091278][T32247] validate_nla: 2 callbacks suppressed [ 779.091298][T32247] netlink: 'syz.3.7640': attribute type 72 has an invalid length. [ 780.237413][T32307] bond5: entered promiscuous mode [ 780.328877][T32318] netlink: 'syz.0.7653': attribute type 72 has an invalid length. [ 780.687207][T32337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7658'. [ 780.893612][T32337] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.901445][T32337] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.936927][T32350] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.7663'. [ 781.419846][T32375] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.7670'. [ 781.658889][T30922] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 781.668365][T32388] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7672'. [ 781.702473][T30922] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.711278][T30922] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.739728][T30922] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.904655][T32398] syzkaller0: entered promiscuous mode [ 781.910202][T32398] syzkaller0: entered allmulticast mode [ 781.981226][T32410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7675'. [ 782.021426][T32406] syzkaller0: entered promiscuous mode [ 782.033304][T32404] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.7678'. [ 782.043715][T32406] syzkaller0: entered allmulticast mode [ 782.348861][T32427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7682'. [ 782.390565][T32428] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7683'. [ 782.594496][T32435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7686'. [ 783.069655][T32466] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.076927][T32466] bridge0: port 2(bridge_slave_1) entered listening state [ 783.084600][T32466] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.091842][T32466] bridge0: port 1(bridge_slave_0) entered listening state [ 783.189300][T32474] netlink: 'syz.1.7700': attribute type 8 has an invalid length. [ 783.205980][T32474] pimreg3: entered allmulticast mode [ 783.559882][T32496] netlink: 'syz.1.7706': attribute type 4 has an invalid length. [ 783.697286][T32503] delete_channel: no stack [ 784.034665][T10892] IPVS: starting estimator thread 0... [ 784.132818][T32521] IPVS: using max 29 ests per chain, 69600 per kthread [ 784.224703][T32523] __nla_validate_parse: 6 callbacks suppressed [ 784.224724][T32523] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7719'. [ 784.296028][T32528] netlink: set zone limit has 4 unknown bytes [ 784.479523][T32540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7726'. [ 784.494942][T32540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7726'. [ 784.566008][T32545] netlink: 'syz.4.7727': attribute type 1 has an invalid length. [ 784.607397][T32550] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 784.668697][T32545] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.683557][T32556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7729'. [ 784.918141][T32566] IPVS: length: 63 != 24 [ 784.990261][T32568] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.7734'. [ 785.072590][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7736'. [ 785.088435][T32572] gretap0: entered promiscuous mode [ 785.396916][T32592] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 785.735042][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7747'. [ 785.756708][T32609] netlink: 'syz.4.7748': attribute type 28 has an invalid length. [ 785.771767][T32609] netlink: 'syz.4.7748': attribute type 3 has an invalid length. [ 785.800054][T32609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7748'. [ 786.204512][T32627] netlink: 'syz.3.7754': attribute type 12 has an invalid length. [ 786.214732][T32632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7753'. [ 786.230036][T32627] netlink: 'syz.3.7754': attribute type 29 has an invalid length. [ 786.254120][T32627] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7754'. [ 786.277397][T32627] netlink: 'syz.3.7754': attribute type 2 has an invalid length. [ 787.108350][T32672] syzkaller1: entered promiscuous mode [ 787.127538][T32672] syzkaller1: entered allmulticast mode [ 787.943720][T32730] macvlan0: entered promiscuous mode [ 787.949187][T32716] netlink: 'syz.1.7784': attribute type 1 has an invalid length. [ 787.961278][T32734] netlink: 'syz.3.7787': attribute type 4 has an invalid length. [ 787.976744][T32725] syzkaller0: entered promiscuous mode [ 787.982614][T32716] netlink: 'syz.1.7784': attribute type 1 has an invalid length. [ 787.985393][T32725] syzkaller0: entered allmulticast mode [ 788.178313][T32746] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 788.340799][T32755] bond0: entered promiscuous mode [ 788.365812][T32755] bond_slave_0: entered promiscuous mode [ 788.380116][T32755] bond_slave_1: entered promiscuous mode [ 788.395811][T32755] batadv0: entered promiscuous mode [ 788.402640][T32755] debugfs: 'hsr1' already exists in 'hsr' [ 788.409629][T32755] Cannot create hsr debugfs directory [ 788.417263][T32755] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 788.427763][T32755] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 788.445504][T32755] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 788.453810][T32755] bond0: left promiscuous mode [ 788.458720][T32755] bond_slave_0: left promiscuous mode [ 788.465169][T32755] bond_slave_1: left promiscuous mode [ 788.472864][T32755] batadv0: left promiscuous mode [ 788.815333][ T311] block nbd2: Unsupported socket: should be TCP or UNIX. [ 789.137550][ T326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.300285][ T334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 789.457444][ T342] netlink: 'syz.0.7814': attribute type 2 has an invalid length. [ 789.887665][ T361] __nla_validate_parse: 9 callbacks suppressed [ 789.887688][ T361] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7821'. [ 789.984020][ T369] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7823'. [ 790.078379][ T373] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7821'. [ 790.292182][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 790.508249][ T390] syzkaller1: entered promiscuous mode [ 790.523834][ T390] syzkaller1: entered allmulticast mode [ 791.170473][ T410] validate_nla: 1 callbacks suppressed [ 791.170496][ T410] netlink: 'syz.3.7836': attribute type 12 has an invalid length. [ 791.238474][ T413] netlink: 'syz.2.7838': attribute type 8 has an invalid length. [ 791.257635][ T413] sch_fq: defrate 0 ignored. [ 791.391418][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7840'. [ 791.617178][ T432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7845'. [ 791.627605][ T429] netlink: 'syz.3.7843': attribute type 1 has an invalid length. [ 791.760764][ T439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 791.770609][ T439] bond4: (slave bond5): making interface the new active one [ 791.779774][ T439] bond4: (slave bond5): Enslaving as an active interface with an up link [ 791.820165][ T439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7843'. [ 791.843004][ T429] bond4: (slave gretap3): Enslaving as a backup interface with an up link [ 791.854488][ T439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 791.940420][ T450] netlink: 'syz.1.7850': attribute type 2 has an invalid length. [ 791.963876][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7850'. [ 791.979413][ T451] netlink: 'syz.1.7850': attribute type 2 has an invalid length. [ 791.989936][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7850'. [ 792.589890][ T496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7865'. [ 792.604836][ T496] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 792.746802][ T512] veth0: entered promiscuous mode [ 792.783132][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7867'. [ 792.808119][ T516] netlink: 'syz.1.7871': attribute type 1 has an invalid length. [ 792.820355][ T512] veth0 (unregistering): left promiscuous mode [ 792.871401][ T516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.913381][ T520] bond3: (slave veth7): Enslaving as an active interface with a down link [ 792.944628][ T516] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 792.963355][ T516] bond3: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 793.043687][ T520] netlink: 'syz.1.7871': attribute type 1 has an invalid length. [ 793.061652][ T520] netlink: 'syz.1.7871': attribute type 2 has an invalid length. [ 793.534852][ T562] netlink: 'syz.4.7886': attribute type 29 has an invalid length. [ 793.607599][ T570] netlink: 'syz.4.7886': attribute type 29 has an invalid length. [ 793.825080][ T576] hsr_slave_1 (unregistering): left promiscuous mode [ 793.851022][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.865474][ T581] bridge_slave_1: left allmulticast mode [ 793.871484][ T581] bridge_slave_1: left promiscuous mode [ 793.878937][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.897789][ T581] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 794.228240][ T608] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 794.315397][ T612] 8021q: adding VLAN 0 to HW filter on device bond6 [ 794.337313][ T613] bond6: (slave geneve2): making interface the new active one [ 794.348119][ T613] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 794.361143][T30908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.400589][T30908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.431182][T30908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.468222][T30908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.501490][ T620] tipc: Enabling of bearer rejected, media not registered [ 794.930827][ T645] : renamed from team_slave_1 (while UP) [ 795.302067][ T668] __nla_validate_parse: 14 callbacks suppressed [ 795.302092][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7919'. [ 795.356139][ T675] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7921'. [ 795.604481][ T692] syzkaller0: entered promiscuous mode [ 795.610046][ T692] syzkaller0: entered allmulticast mode [ 796.146956][ T716] bond7: (slave gre0): Device is not bonding slave [ 796.158488][ T716] bond7: option active_slave: invalid value (gre0) [ 796.176602][ T716] bond7 (unregistering): Released all slaves [ 796.377823][ T730] x_tables: duplicate entry at hook 3 [ 796.416080][ T731] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 796.908914][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7947'. [ 796.940728][ T760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7947'. [ 796.958996][ T760] validate_nla: 3 callbacks suppressed [ 796.959075][ T760] netlink: 'syz.4.7947': attribute type 14 has an invalid length. [ 796.980201][ T760] netlink: 'syz.4.7947': attribute type 13 has an invalid length. [ 797.004359][ T766] netlink: 'syz.3.7949': attribute type 1 has an invalid length. [ 797.032978][ T767] netlink: 'syz.3.7949': attribute type 1 has an invalid length. [ 797.108735][ T775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7949'. [ 797.963022][ T822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7965'. [ 797.982547][ T822] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 798.014576][ T822] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7965'. [ 798.188539][ T829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7965'. [ 798.367506][ T836] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7968'. [ 798.842701][ T826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7966'. [ 798.866080][ T826] xt_cluster: node mask cannot exceed total number of nodes [ 799.282764][ T882] netlink: zone id is out of range [ 799.303829][ T882] netlink: zone id is out of range [ 799.319309][ T882] netlink: zone id is out of range [ 799.329460][ T882] netlink: get zone limit has 4 unknown bytes [ 799.414344][ T886] netlink: 'syz.2.7986': attribute type 20 has an invalid length. [ 799.462849][T30910] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.475933][ T886] netlink: 'syz.2.7986': attribute type 20 has an invalid length. [ 799.486329][T30910] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.509720][T30910] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.533740][T30910] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.520029][ T971] __nla_validate_parse: 6 callbacks suppressed [ 800.520049][ T971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8005'. [ 800.679551][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8012'. [ 800.730709][ T984] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 800.765612][ T984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 800.811511][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8012'. [ 800.866021][ T991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8015'. [ 801.248057][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8023'. [ 801.278637][ T1022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8022'. [ 801.301663][ T1022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8022'. [ 801.324066][ T1022] netlink: 'syz.2.8022': attribute type 1 has an invalid length. [ 801.969421][ T1067] syzkaller0: entered promiscuous mode [ 801.976603][ T1067] syzkaller0: entered allmulticast mode [ 801.988712][ T1071] netlink: 'syz.4.8035': attribute type 1 has an invalid length. [ 801.998035][ T1071] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8035'. [ 802.030956][ T1070] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8036'. [ 802.071333][ T1070] gretap0: left promiscuous mode [ 802.294873][ T5170] block nbd1: Connection timed out, retrying (0/2 alive) [ 802.303759][ T5170] block nbd1: Connection timed out, retrying (0/2 alive) [ 802.311002][ T5170] block nbd1: Connection timed out, retrying (0/2 alive) [ 802.319925][ T5170] block nbd1: Connection timed out, retrying (0/2 alive) [ 802.331074][ T5170] block nbd1: Dead connection, failed to find a fallback [ 802.340438][ T5170] block nbd1: shutting down sockets [ 802.347256][ T5170] blk_print_req_error: 138 callbacks suppressed [ 802.347286][ T5170] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.365265][ T5170] buffer_io_error: 138 callbacks suppressed [ 802.365286][ T5170] Buffer I/O error on dev nbd1, logical block 3, async page read [ 802.380242][ T5170] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.389957][ T5170] Buffer I/O error on dev nbd1, logical block 2, async page read [ 802.398017][ T5170] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.407994][ T5170] Buffer I/O error on dev nbd1, logical block 1, async page read [ 802.415859][ T5170] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.425515][ T5170] Buffer I/O error on dev nbd1, logical block 0, async page read [ 802.436188][T31497] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.449362][T31497] Buffer I/O error on dev nbd1, logical block 0, async page read [ 802.457537][T31497] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.467560][T31497] Buffer I/O error on dev nbd1, logical block 1, async page read [ 802.475687][T31497] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.485647][T31497] Buffer I/O error on dev nbd1, logical block 2, async page read [ 802.494834][T31497] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.504457][T31497] Buffer I/O error on dev nbd1, logical block 3, async page read [ 802.512458][T31497] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.522456][T31497] Buffer I/O error on dev nbd1, logical block 0, async page read [ 802.530303][T31497] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.540147][T31497] Buffer I/O error on dev nbd1, logical block 1, async page read [ 802.548947][T31497] ldm_validate_partition_table(): Disk read failed. [ 802.556628][T31497] Dev nbd1: unable to read RDB block 0 [ 802.562982][T31497] nbd1: unable to read partition table [ 802.573163][T31497] ldm_validate_partition_table(): Disk read failed. [ 802.580595][T31497] Dev nbd1: unable to read RDB block 0 [ 802.596687][T31497] nbd1: unable to read partition table [ 802.676244][ T1086] vlan0 (unregistering): left allmulticast mode [ 802.683873][ T1086] veth1_macvtap (unregistering): left allmulticast mode [ 802.691023][ T1086] vlan0 (unregistering): left promiscuous mode [ 803.743884][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8050'. [ 803.895418][ T1154] xt_l2tp: missing protocol rule (udp|l2tpip) [ 805.412278][ T1229] IPv6: NLM_F_CREATE should be specified when creating new route [ 805.444683][ T1229] netlink: 'syz.2.8072': attribute type 11 has an invalid length. [ 805.708842][ T1238] __nla_validate_parse: 1 callbacks suppressed [ 805.708862][ T1238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8076'. [ 805.794673][ T1235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8075'. [ 805.849945][ T1244] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8076'. [ 806.157014][ T1261] netlink: 'syz.2.8082': attribute type 4 has an invalid length. [ 806.164929][ T1261] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8082'. [ 806.317472][ T1272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.665749][ T1291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8087'. [ 806.704678][ T1296] netlink: 'syz.3.8088': attribute type 62 has an invalid length. [ 806.889179][ T1309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8092'. [ 806.942757][ T1309] netlink: 'syz.3.8092': attribute type 1 has an invalid length. [ 806.950563][ T1309] netlink: 'syz.3.8092': attribute type 2 has an invalid length. [ 807.071144][ T1319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8095'. [ 807.087967][ T1319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8095'. [ 807.119308][ T1319] x_tables: unsorted entry at hook 1 [ 807.130535][ T1319] netlink: 496 bytes leftover after parsing attributes in process `syz.2.8095'. [ 807.328756][ T1334] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8099'. [ 807.764216][ T1363] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 807.782920][ T1363] bond7: (slave lo): Enslaving as an active interface with an up link [ 807.804999][ T1363] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 807.920487][ T1371] blkio.reset_stats is deprecated [ 808.700972][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 809.944162][ T1496] netlink: 'syz.2.8138': attribute type 1 has an invalid length. [ 812.048989][ T1496] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 812.253200][ T1549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.329432][ T1555] ip6t_srh: unknown srh invflags 4000 [ 812.778935][ T1491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 813.044251][ T1576] __nla_validate_parse: 3 callbacks suppressed [ 813.044274][ T1576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8149'. [ 813.082584][ T1579] netlink: 'syz.4.8152': attribute type 21 has an invalid length. [ 813.090674][ T1579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8152'. [ 813.153999][ T1582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8153'. [ 813.172774][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 813.270290][ T1588] netlink: 'syz.4.8156': attribute type 13 has an invalid length. [ 813.297066][ T1588] veth0_macvtap: left promiscuous mode [ 813.307131][ T1588] macvtap0: entered allmulticast mode [ 813.325385][ T1588] macvtap0: refused to change device tx_queue_len [ 813.353083][ T1588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8156'. [ 813.377635][ T1590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8157'. [ 813.473364][ T1597] lo: entered allmulticast mode [ 813.478956][ T1597] lo: left allmulticast mode [ 813.494692][ T1597] netlink: 'syz.2.8160': attribute type 11 has an invalid length. [ 813.509228][ T1597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8160'. [ 813.509348][T30908] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 813.524624][ T1597] netlink: 'syz.2.8160': attribute type 11 has an invalid length. [ 813.533678][ T1597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8160'. [ 813.648677][ T1608] netlink: 'syz.2.8162': attribute type 16 has an invalid length. [ 813.665382][ T1608] netlink: 'syz.2.8162': attribute type 17 has an invalid length. [ 813.674550][ T1608] lo: left promiscuous mode [ 813.684315][ T1608] tunl0: left promiscuous mode [ 813.691092][ T1608] gre0: left promiscuous mode [ 813.725669][ T1608] erspan0: left promiscuous mode [ 813.732863][ T1612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.742513][ T1608] ip_vti0: left promiscuous mode [ 813.773788][ T1608] bond0: left promiscuous mode [ 813.778869][ T1608] bond_slave_0: left promiscuous mode [ 813.787985][ T1608] bond_slave_1: left promiscuous mode [ 813.823918][ T1608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.866855][ T1608] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.901723][ T1608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 813.928584][ T1623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.322494][ T1590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.337996][ T1633] netlink: 'syz.2.8167': attribute type 1 has an invalid length. [ 816.364743][ T1633] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8167'. [ 816.396649][ T1633] netlink: 'syz.2.8167': attribute type 1 has an invalid length. [ 816.417262][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8167'. [ 816.536965][ T1648] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 816.672466][ T1654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8175'. [ 816.784083][ T1654] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 816.868047][ T1654] team1: entered promiscuous mode [ 816.883920][ T1654] team1: entered allmulticast mode [ 817.079345][ T1685] netlink: 'syz.4.8184': attribute type 4 has an invalid length. [ 817.090647][ T1685] netlink: 'syz.4.8184': attribute type 4 has an invalid length. [ 817.154767][ T1685] lo: left promiscuous mode [ 817.236720][T30908] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 820.051423][ T1683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.168944][ T1713] __nla_validate_parse: 3 callbacks suppressed [ 820.168967][ T1713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8191'. [ 820.219123][ T1713] netlink: 'syz.1.8191': attribute type 5 has an invalid length. [ 820.253424][ T1713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8191'. [ 820.273537][ T1713] geneve2: entered promiscuous mode [ 820.278823][ T1713] geneve2: entered allmulticast mode [ 820.286206][T30921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 820.295826][T30921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 820.304813][T30921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 820.314948][T30921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 820.344857][ T1720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.417899][ T1724] bridge0: Caught tx_queue_len zero misconfig [ 820.477802][ T1728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8196'. [ 820.699229][ T1743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8200'. [ 820.722557][ T1743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8200'. [ 820.769338][ T1745] syzkaller0: entered promiscuous mode [ 820.780115][ T1745] syzkaller0: entered allmulticast mode [ 820.801165][ T1750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8202'. [ 820.928332][ T1755] netlink: 'syz.0.8204': attribute type 29 has an invalid length. [ 820.938671][ T1755] netlink: 'syz.0.8204': attribute type 29 has an invalid length. [ 820.991434][ T1761] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 821.409080][ T1783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8212'. [ 821.418268][ T1783] netlink: 'syz.2.8212': attribute type 1 has an invalid length. [ 821.596056][ T1800] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 821.633806][ T1802] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 821.950864][ T1829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8225'. [ 822.385978][ T1848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8231'. [ 822.473714][ T1849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8231'. [ 823.192342][ T1881] openvswitch: netlink: IPv4 tun info is not correct [ 823.345562][ T1886] geneve3: entered promiscuous mode [ 823.365249][ T1886] geneve3: entered allmulticast mode [ 823.384556][T30922] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 823.417691][T30922] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 823.495758][ T1891] bond_slave_0: Caught tx_queue_len zero misconfig [ 823.504516][T30922] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 823.544262][T30922] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 823.807644][ T1906] netdevsim netdevsim3: Direct firmware load for .. @ failed with error -2 [ 823.903329][T30911] wlan1: Trigger new scan to find an IBSS to join [ 823.935774][ T1906] netdevsim netdevsim3: Falling back to sysfs fallback for: .. @ [ 824.078116][ T1924] netlink: 'syz.2.8255': attribute type 5 has an invalid length. [ 824.151854][ T1927] netlink: 'syz.3.8251': attribute type 11 has an invalid length. [ 824.884135][ T1955] netlink: 'syz.3.8263': attribute type 1 has an invalid length. [ 825.366572][ T1955] 8021q: adding VLAN 0 to HW filter on device bond8 [ 825.393403][ T1968] bridge0: entered allmulticast mode [ 825.480665][ T1975] xt_hashlimit: size too large, truncated to 1048576 [ 825.748025][ T1990] netlink: 'syz.3.8271': attribute type 1 has an invalid length. [ 825.792741][ T1990] __nla_validate_parse: 7 callbacks suppressed [ 825.792763][ T1990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8271'. [ 825.834318][ T1990] netlink: 'syz.3.8271': attribute type 1 has an invalid length. [ 825.851992][ T1990] netlink: 'syz.3.8271': attribute type 8 has an invalid length. [ 825.882603][ T1990] netlink: 606 bytes leftover after parsing attributes in process `syz.3.8271'. [ 826.318480][ T2012] syzkaller0: entered promiscuous mode [ 826.335527][ T2012] syzkaller0: entered allmulticast mode [ 826.390054][ T2016] netlink: 'syz.3.8280': attribute type 1 has an invalid length. [ 826.401036][ T2016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8280'. [ 826.421307][T10892] IPVS: starting estimator thread 0... [ 826.473102][ T2022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8281'. [ 826.542314][ T2021] IPVS: using max 26 ests per chain, 62400 per kthread [ 826.621706][ T2026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8284'. [ 826.823742][ T2039] IPv6: NLM_F_CREATE should be specified when creating new route [ 826.867592][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8287'. [ 827.126830][ T2055] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 827.153854][ T2055] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 827.172862][ T2055] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 827.289276][ T2050] syzkaller1: entered promiscuous mode [ 827.306708][ T2050] syzkaller1: entered allmulticast mode [ 827.489095][ T2068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8296'. [ 827.500129][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8296'. [ 827.512732][ T2068] netlink: 'syz.1.8296': attribute type 1 has an invalid length. [ 827.520636][ T2068] netlink: 'syz.1.8296': attribute type 2 has an invalid length. [ 827.574370][ T2069] netlink: 'syz.1.8296': attribute type 1 has an invalid length. [ 827.597394][ T2069] netlink: 'syz.1.8296': attribute type 2 has an invalid length. [ 827.819344][ T2089] tipc: Enabling of bearer rejected, failed to enable media [ 827.875537][ T2091] syzkaller0: entered promiscuous mode [ 827.881082][ T2091] syzkaller0: entered allmulticast mode [ 827.997939][ T2098] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 828.039132][ T2103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8305'. [ 828.197427][ T2112] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 828.337172][ T2121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8308'. [ 828.677083][T30908] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 831.597702][ T2131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.833477][ T2200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8321'. [ 831.858004][ T2199] netlink: 'syz.0.8318': attribute type 72 has an invalid length. [ 831.913147][ T2207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8317'. [ 832.187502][ T2225] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003 [ 832.437551][ T2232] tipc: Started in network mode [ 832.458654][ T2232] tipc: Node identity ac14140f, cluster identity 4711 [ 832.486125][ T2232] tipc: New replicast peer: 255.255.255.255 [ 832.493754][ T2232] tipc: Enabled bearer , priority 10 [ 832.571189][ T2252] netlink: 'syz.3.8330': attribute type 1 has an invalid length. [ 832.583186][ T2252] netlink: 'syz.3.8330': attribute type 1 has an invalid length. [ 832.616702][T15400] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 832.759535][ T2266] syzkaller0: entered promiscuous mode [ 832.766348][ T2266] syzkaller0: entered allmulticast mode [ 832.776491][ T2267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8335'. [ 832.785873][ T2267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8335'. [ 832.795520][ T2267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8335'. [ 832.816774][T15400] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.825933][ T2267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8335'. [ 832.833741][T15400] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.844324][T15400] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.845567][ T2267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8335'. [ 832.859741][T15400] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.879577][ T2267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8335'. [ 833.612151][T10893] tipc: Node number set to 2886997007 [ 833.776953][ T2284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8340'. [ 833.786923][ T2284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8340'. [ 833.796909][ T2283] netlink: 'syz.4.8339': attribute type 4 has an invalid length. [ 833.810849][ T2283] .`: renamed from bond0 (while UP) [ 834.248629][ T2299] netem: change failed [ 835.449635][ T2244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.626667][ T2308] netlink: 'syz.3.8346': attribute type 21 has an invalid length. [ 843.253309][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.260587][ C0] bridge0: topology change detected, propagating [ 843.903151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.915611][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 855.016175][ T2316] netlink: 'syz.0.8348': attribute type 1 has an invalid length. [ 855.024260][ T2318] __nla_validate_parse: 4 callbacks suppressed [ 855.024277][ T2318] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8351'. [ 855.067517][ T2316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 855.095774][ T2327] netlink: 'syz.4.8352': attribute type 8 has an invalid length. [ 855.122554][ T2327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8352'. [ 855.430604][ T2343] xt_CONNSECMARK: invalid mode: 0 [ 855.568459][ T2353] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8358'. [ 855.626049][T15400] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 856.070798][ T2400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8364'. [ 858.543572][ T2357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.760619][ T2411] delete_channel: no stack [ 858.765567][ T2419] netlink: 'syz.2.8369': attribute type 39 has an invalid length. [ 858.787811][T30911] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 858.823692][T30911] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 858.869512][T30911] bond0: now running without any active interface! [ 858.975539][ T2420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8369'. [ 859.094258][ T2436] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.8373'. [ 859.120904][ T2419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8369'. [ 859.130585][ T2419] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8369'. [ 859.386184][ T2455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8380'. [ 859.432350][ T2455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8380'. [ 859.534783][T30921] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 862.386757][ T2467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 862.588295][ T2514] netlink: 'syz.3.8393': attribute type 3 has an invalid length. [ 862.745346][ T2524] __nla_validate_parse: 1 callbacks suppressed [ 862.745370][ T2524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8396'. [ 862.838256][ T2536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8400'. [ 862.854284][ T2531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8398'. [ 862.866874][ T2531] bond0: ARP target 8.4.0.0 is already present [ 862.875131][ T2531] bond0: option arp_ip_target: invalid value (1032) [ 863.810890][ T2616] netlink: 'syz.4.8416': attribute type 32 has an invalid length. [ 863.819146][ T2616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8416'. [ 863.829263][ T2613] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8417'. [ 863.852591][ T2613] netlink: 'syz.0.8417': attribute type 10 has an invalid length. [ 863.873499][ T2616] bond0: Setting coupled_control to off (0) [ 863.912344][ T2624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8419'. [ 864.176201][ T2646] netlink: 'syz.0.8421': attribute type 1 has an invalid length. [ 864.186403][ T2647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.197258][ T2647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.216195][ T2647] batman_adv: batadv0: Removing interface: netdevsim0 [ 864.228551][ T2649] netlink: 'syz.4.8424': attribute type 2 has an invalid length. [ 864.236459][ T2649] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8424'. [ 864.308159][ T2646] 8021q: adding VLAN 0 to HW filter on device bond5 [ 864.325675][ T2651] bridge_slave_1: left allmulticast mode [ 864.331390][ T2651] bridge_slave_1: left promiscuous mode [ 864.387970][ T2651] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.408294][ T2651] bond0: (slave bond_slave_0): Releasing backup interface [ 864.425185][ T2651] bond0: (slave bond_slave_1): Releasing backup interface [ 864.471227][ T2651] team0: Port device team_slave_0 removed [ 864.512902][ T2651] team0: Port device  removed [ 864.518585][ T2651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 864.549806][ T2673] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8428'. [ 864.580165][ T2636] bond5: (slave veth0_to_bond): making interface the new active one [ 864.624534][ T2636] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 864.718126][ T2660] bond5: (slave veth5): Enslaving as an active interface with a down link [ 864.757633][ T2682] netlink: 'syz.2.8431': attribute type 1 has an invalid length. [ 864.780862][ T2646] bond5: (slave veth7): Enslaving as an active interface with a down link [ 864.818480][ T2683] netlink: 'syz.2.8431': attribute type 10 has an invalid length. [ 864.866514][ T2682] bond9: entered promiscuous mode [ 864.873473][ T2682] 8021q: adding VLAN 0 to HW filter on device bond9 [ 864.882977][ T2683] bond0: (slave wlan1): Opening slave failed [ 864.984894][ T2695] netlink: 'syz.3.8433': attribute type 1 has an invalid length. [ 865.002041][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8434'. [ 865.384451][ T2723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8441'. [ 865.617205][ T2743] netlink: 'syz.3.8447': attribute type 83 has an invalid length. [ 865.894563][ T2764] hsr_slave_0: left promiscuous mode [ 866.343212][ T2795] nbd: socks must be embedded in a SOCK_ITEM attr [ 866.449298][ T2802] lo: Caught tx_queue_len zero misconfig [ 866.623121][ T2805] macvtap1: entered promiscuous mode [ 866.628655][ T2805] vlan0: entered promiscuous mode [ 866.634561][ T2805] macvtap1: entered allmulticast mode [ 866.640165][ T2805] vlan0: entered allmulticast mode [ 866.647345][ T2805] veth0_vlan: entered allmulticast mode [ 866.654437][ T2803] netlink: 'syz.4.8464': attribute type 29 has an invalid length. [ 867.313039][ T2856] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 867.395737][ T2861] vcan0: entered promiscuous mode [ 867.401016][ T2861] vcan0: entered allmulticast mode [ 867.745061][ T30] audit: type=1107 audit(1776067024.724:6): pid=2879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 867.876804][ T2887] __nla_validate_parse: 8 callbacks suppressed [ 867.876827][ T2887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8485'. [ 867.989935][ T2892] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8487'. [ 868.002870][ T2893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8486'. [ 868.190851][ T2901] netlink: 'syz.1.8491': attribute type 11 has an invalid length. [ 868.213451][ T2901] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.8491'. [ 868.255246][ T2901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8491'. [ 868.522776][ T2923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8496'. [ 868.607480][ T2923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8496'. [ 868.679747][ T2933] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8499'. [ 868.945386][ T2943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8503'. [ 869.226348][ T2968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8510'. [ 869.564339][ T2985] validate_nla: 2 callbacks suppressed [ 869.564361][ T2985] netlink: 'syz.0.8517': attribute type 1 has an invalid length. [ 869.588928][ T2989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.659054][ T2985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 869.861085][ T3005] netlink: 'syz.3.8524': attribute type 2 has an invalid length. [ 869.901961][ T3005] netlink: 'syz.3.8524': attribute type 2 has an invalid length. [ 870.134230][ T3023] netlink: 'syz.3.8529': attribute type 2 has an invalid length. [ 870.145721][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.474531][ T3040] syzkaller0: entered promiscuous mode [ 870.480096][ T3040] syzkaller0: entered allmulticast mode [ 871.404583][ T3090] xfrm1: entered promiscuous mode [ 871.435219][ T3090] xfrm1: entered allmulticast mode [ 871.789808][ T3119] syzkaller0: entered promiscuous mode [ 871.807424][ T3119] 0: reclassify loop, rule prio 0, protocol 800 [ 871.828785][ T3121] mac80211_hwsim hwsim74 wlan0: Caught tx_queue_len zero misconfig [ 871.834906][ T3119] netlink: 'syz.4.8559': attribute type 3 has an invalid length. [ 871.857980][ T3119] netlink: 'syz.4.8559': attribute type 1 has an invalid length. [ 872.462340][ T3151] syzkaller0: entered promiscuous mode [ 872.468036][ T3151] syzkaller0: entered allmulticast mode [ 872.829933][ T3171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.899761][ T3173] __nla_validate_parse: 27 callbacks suppressed [ 872.899784][ T3173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8579'. [ 874.280862][ T3189] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 874.388061][ T3191] netlink: 'syz.4.8583': attribute type 16 has an invalid length. [ 874.418417][ T3191] netlink: 'syz.4.8583': attribute type 17 has an invalid length. [ 874.457295][ T3202] netlink: 'syz.2.8587': attribute type 13 has an invalid length. [ 874.486992][ T3191] 8021q: adding VLAN 0 to HW filter on device .` [ 874.498888][ T3191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.519141][ T3202] macvtap0: entered allmulticast mode [ 874.722824][ T3208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8588'. [ 875.003238][ T3227] bond9 (unregistering): Released all slaves [ 875.110483][ T3235] x_tables: duplicate underflow at hook 3 [ 875.156907][ T3237] netlink: 'syz.3.8599': attribute type 16 has an invalid length. [ 875.166100][ T3237] netlink: 'syz.3.8599': attribute type 17 has an invalid length. [ 875.177693][ T3238] x_tables: duplicate underflow at hook 1 [ 875.215091][ T3239] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 875.234955][ T3237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 875.411067][ T3245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8602'. [ 875.442692][ T3247] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8603'. [ 875.596918][ T3253] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 875.757865][ T3262] netlink: 'syz.4.8609': attribute type 24 has an invalid length. [ 875.817568][ T3262] netlink: 'syz.4.8609': attribute type 83 has an invalid length. [ 875.978676][ T3277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8615'. [ 876.015231][ T3277] openvswitch: netlink: Flow actions attr not present in new flow. [ 876.028362][ T3281] netlink: 'syz.4.8616': attribute type 11 has an invalid length. [ 876.036896][ T3281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8616'. [ 876.093572][T15410] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 876.389462][ T3299] bond7: (slave gre0): Device is not bonding slave [ 876.404295][ T3299] bond7: option active_slave: invalid value (gre0) [ 876.419546][ T3299] bond7 (unregistering): Released all slaves [ 878.913985][ T3273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 879.113302][ T3326] Cannot find add_set index 46338 as target [ 879.157324][ T3328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8628'. [ 879.207763][ T3328] hsr0: entered promiscuous mode [ 879.240902][ T3328] macvlan3: entered allmulticast mode [ 879.267932][ T3328] hsr0: entered allmulticast mode [ 879.299567][ T3328] hsr_slave_0: entered allmulticast mode [ 879.307756][ T3328] hsr_slave_1: entered allmulticast mode [ 879.396101][ T3339] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8633'. [ 879.477488][ T3349] erspan0: entered promiscuous mode [ 879.774879][ T3365] veth7: entered allmulticast mode [ 879.866452][ T3372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8643'. [ 879.959951][ T3367] veth1_vlan: left allmulticast mode [ 880.027236][T30921] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.059183][T30921] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 880.070839][T30921] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 880.101099][T30921] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.152227][T30921] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 880.193835][T30921] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 880.218227][T30921] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.278185][T30921] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 880.321959][T30921] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 880.330920][T30921] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.346670][ T3405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8652'. [ 880.362111][T30921] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 880.371289][T30921] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 880.767585][ T3432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8658'. [ 881.243498][ T3455] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8665'. [ 881.256378][ T3458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8663'. [ 881.549738][ T3470] bond7: (slave ip6tnl0): Device is not bonding slave [ 881.580660][ T3470] bond7: option active_slave: invalid value (ip6tnl0) [ 881.657314][ T3470] bond7 (unregistering): Released all slaves [ 882.107625][ T3511] IPVS: set_ctl: invalid protocol: 1 172.30.1.1:20004 [ 882.361244][ T3532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8682'. [ 882.520225][ T3542] netlink: 'syz.3.8687': attribute type 8 has an invalid length. [ 882.569357][ T3542] netlink: 'syz.3.8687': attribute type 10 has an invalid length. [ 882.599022][ T3542] team0: Port device H added [ 882.710123][ T3551] netlink: 'syz.0.8690': attribute type 1 has an invalid length. [ 882.765401][ T3555] vcan0: entered promiscuous mode [ 882.770567][ T3555] vcan0: entered allmulticast mode [ 882.974863][ T3567] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 883.115356][ T3574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.160184][ T3579] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 883.212481][ T3579] IPv6: sit3: Disabled Multicast RS [ 883.263114][ T3583] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8701'. [ 883.346396][ T3583] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 883.388781][ T3589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8702'. [ 883.413321][ T3583] bond7 (unregistering): Released all slaves [ 883.886546][ T3618] netlink: 'syz.4.8711': attribute type 1 has an invalid length. [ 884.230690][ T3634] syzkaller1: entered promiscuous mode [ 884.238273][ T3634] syzkaller1: entered allmulticast mode [ 884.248953][ T3634] sch_tbf: burst 12 is lower than device bridge4 mtu (1514) ! [ 884.456703][ T3641] __nla_validate_parse: 2 callbacks suppressed [ 884.456724][ T3641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8715'. [ 884.604448][ T3650] netlink: 'syz.0.8718': attribute type 22 has an invalid length. [ 884.614651][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8718'. [ 884.626733][ T3650] netlink: 'syz.0.8718': attribute type 22 has an invalid length. [ 884.635078][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8718'. [ 884.824058][ T3669] netlink: 29 bytes leftover after parsing attributes in process `syz.0.8722'. [ 884.840151][ T3665] macsec1: entered promiscuous mode [ 884.845835][ T3665] batadv0: entered promiscuous mode [ 884.864431][ T3669] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.8722'. [ 884.878051][ T3666] netlink: zone id is out of range [ 884.888846][ T3665] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 884.897945][ T3666] netlink: zone id is out of range [ 884.908161][ T3665] batadv0: left promiscuous mode [ 884.914206][ T3666] netlink: zone id is out of range [ 884.921256][ T3666] netlink: zone id is out of range [ 884.928849][ T3666] netlink: zone id is out of range [ 884.947659][ T3666] netlink: zone id is out of range [ 884.954140][ T3666] netlink: zone id is out of range [ 884.962853][ T3666] netlink: zone id is out of range [ 884.968087][ T3666] netlink: zone id is out of range [ 884.995167][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8722'. [ 885.222249][ T3687] netlink: 'syz.4.8729': attribute type 2 has an invalid length. [ 885.250286][ T3692] netlink: 'syz.4.8729': attribute type 2 has an invalid length. [ 885.270017][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8730'. [ 885.282197][ T3687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8729'. [ 885.310121][ T3692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8729'. [ 885.392081][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8732'. [ 886.060766][ T3735] netlink: 'syz.0.8744': attribute type 16 has an invalid length. [ 886.085775][ T3735] netlink: 'syz.0.8744': attribute type 17 has an invalid length. [ 886.200405][ T3737] syzkaller0: entered promiscuous mode [ 886.221127][ T3737] syzkaller0: entered allmulticast mode [ 886.858960][ T3777] x_tables: duplicate underflow at hook 1 [ 887.684471][ T3825] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 887.685207][ T3824] Unsupported ieee802154 address type: 0 [ 887.718982][ T3825] bond7: (slave lo): Enslaving as an active interface with an up link [ 887.744295][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 887.756187][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 887.764468][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 887.782626][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 887.797003][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.267410][ T3850] netlink: 'syz.3.8782': attribute type 10 has an invalid length. [ 888.287151][ T3850] team0: Device ipvlan1 failed to register rx_handler [ 888.727426][ T3829] chnl_net:caif_netlink_parms(): no params data found [ 888.940997][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.948424][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.956020][ T3829] bridge_slave_0: entered allmulticast mode [ 888.966290][ T3829] bridge_slave_0: entered promiscuous mode [ 888.975960][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.983426][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.990820][ T3829] bridge_slave_1: entered allmulticast mode [ 888.999037][ T3829] bridge_slave_1: entered promiscuous mode [ 889.042546][ T3829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.056267][ T3829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.157310][ T3829] team0: Port device team_slave_0 added [ 889.171324][ T3892] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 889.182611][ T3892] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 889.214356][ T3829] team0: Port device team_slave_1 added [ 889.297887][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.306125][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.333752][ T3829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.347893][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.365090][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.392710][ T3829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.416769][ T3907] netlink: 'syz.4.8793': attribute type 30 has an invalid length. [ 889.442251][ T3902] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 889.454286][ T3902] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 889.462709][ T3902] gretap4: entered promiscuous mode [ 889.468727][ T3902] gretap4: entered allmulticast mode [ 889.502337][ T3910] netlink: 'syz.1.8796': attribute type 15 has an invalid length. [ 889.510603][ T3910] __nla_validate_parse: 10 callbacks suppressed [ 889.510623][ T3910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8796'. [ 889.538868][ T3907] bond8: option arp_missed_max: invalid value (0) [ 889.548392][ T3907] bond8: option arp_missed_max: allowed values 1 - 255 [ 889.560684][ T3907] bond8 (unregistering): Released all slaves [ 889.683145][ T3829] hsr_slave_0: entered promiscuous mode [ 889.695892][ T3829] hsr_slave_1: entered promiscuous mode [ 889.705453][ T3829] debugfs: 'hsr0' already exists in 'hsr' [ 889.711236][ T3829] Cannot create hsr debugfs directory [ 889.783447][ T3922] netlink: 'syz.0.8799': attribute type 12 has an invalid length. [ 889.845639][ T3922] bond7: option primary_reselect: invalid value (255) [ 889.861341][ T3922] bond7 (unregistering): Released all slaves [ 889.893324][ T5836] Bluetooth: hci1: command tx timeout [ 889.978764][ T3930] vlan2: entered allmulticast mode [ 890.067944][ T3934] netlink: 808 bytes leftover after parsing attributes in process `syz.1.8803'. [ 890.229158][ T3941] netlink: 'syz.1.8807': attribute type 1 has an invalid length. [ 890.239399][ T3939] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 890.340205][ T3941] bond4: entered promiscuous mode [ 890.359626][ T3941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 890.407850][ T3829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.427980][ T3829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.493217][ T3947] bond4: (slave bridge6): making interface the new active one [ 890.501001][ T3947] bridge6: entered promiscuous mode [ 890.507682][ T3947] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 890.616534][ T3829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.629084][ T3829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.657508][ T3958] netlink: 'syz.3.8811': attribute type 1 has an invalid length. [ 890.726458][ T3829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.750556][ T3829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.835358][ T3829] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.873301][ T3829] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.997064][ T3976] bridge_slave_0 (unregistering): left promiscuous mode [ 891.006007][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.091422][ T3829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 891.104699][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.113756][ T3829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 891.127981][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.136673][ T3829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 891.152969][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.223604][ T3829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 891.251029][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 891.418176][ T3998] syzkaller1: entered promiscuous mode [ 891.424640][ T3998] syzkaller1: entered allmulticast mode [ 891.505601][ T3829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.519895][ T4001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8822'. [ 891.565166][ T3829] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.588581][T30922] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.595848][T30922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.649684][T15410] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.656931][T15410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.679827][ T4005] xt_l2tp: unknown flags: 10 [ 891.739792][ T4007] netlink: 'syz.4.8825': attribute type 2 has an invalid length. [ 891.913919][ T4017] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.8829'. [ 891.974349][ T5836] Bluetooth: hci1: command tx timeout [ 892.208491][ T4031] bridge7: entered promiscuous mode [ 892.224601][ T4031] bridge7: entered allmulticast mode [ 892.236857][ T4031] team0: Port device bridge7 added [ 892.267566][ T4032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8833'. [ 892.380272][ T3829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.506590][ T3829] veth0_vlan: entered promiscuous mode [ 892.549254][ T3829] veth1_vlan: entered promiscuous mode [ 892.661264][ T3829] veth0_macvtap: entered promiscuous mode [ 892.712857][ T3829] veth1_macvtap: entered promiscuous mode [ 892.720329][ T4060] syzkaller1: entered promiscuous mode [ 892.756325][ T4060] syzkaller1: entered allmulticast mode [ 892.791170][ T4060] netlink: 'syz.4.8840': attribute type 21 has an invalid length. [ 892.820310][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.836812][ T4060] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8840'. [ 892.867274][ T4065] pim6reg527: entered allmulticast mode [ 892.887009][ T4065] netlink: 'syz.3.8842': attribute type 2 has an invalid length. [ 892.903983][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.976976][ T4070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8844'. [ 892.991098][ T4070] netlink: 'syz.0.8844': attribute type 62 has an invalid length. [ 892.999702][T30913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.023712][ T4070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8844'. [ 893.044568][T30913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.117487][T30913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.134495][T30913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.159629][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8844'. [ 893.515761][T30911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.535942][T30911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.804809][T30911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.829613][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8851'. [ 893.845372][T30911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.865402][ T4093] syzkaller0: entered promiscuous mode [ 893.870938][ T4093] syzkaller0: entered allmulticast mode [ 894.053238][ T5836] Bluetooth: hci1: command tx timeout [ 894.380516][ T4128] netlink: 'syz.2.8855': attribute type 10 has an invalid length. [ 894.431359][ T4128] team0: Device vxcan1 is of different type [ 894.826298][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 894.838821][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 894.848983][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 894.860643][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 894.872983][ T4156] netlink: 'syz.1.8861': attribute type 2 has an invalid length. [ 894.885039][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 894.934997][ T4160] __nla_validate_parse: 5 callbacks suppressed [ 894.935021][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8863'. [ 895.000270][ T4160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8863'. [ 895.011331][ T4160] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8863'. [ 895.021712][ T4160] bridge_slave_0: entered allmulticast mode [ 895.028243][ T4160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8863'. [ 895.037342][ T4160] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8863'. [ 895.108879][ T4165] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8864'. [ 895.275619][ T4171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8865'. [ 895.295079][ T4169] netlink: 'syz.4.8866': attribute type 1 has an invalid length. [ 895.424830][ T4179] bond8: entered promiscuous mode [ 895.429942][ T4179] bond8: entered allmulticast mode [ 895.452661][ T4179] 8021q: adding VLAN 0 to HW filter on device bond8 [ 895.534225][ T4169] bridge5: entered promiscuous mode [ 895.546833][ T4169] bridge5: entered allmulticast mode [ 895.550532][T30921] net_ratelimit: 137 callbacks suppressed [ 895.550599][T30921] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 895.571063][ T4169] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 895.635813][ T4179] bridge6: entered promiscuous mode [ 895.661222][ T4179] bridge6: entered allmulticast mode [ 895.675512][ T4179] bond8: (slave bridge6): Enslaving as a backup interface with a down link [ 895.702430][T30913] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 895.753852][ T4157] chnl_net:caif_netlink_parms(): no params data found [ 895.843167][ T4196] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.8872'. [ 895.902595][ T4201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8873'. [ 896.046927][ T4157] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.061412][ T4215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8877'. [ 896.071667][ T4157] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.079000][ T4157] bridge_slave_0: entered allmulticast mode [ 896.096881][ T4157] bridge_slave_0: entered promiscuous mode [ 896.131779][ T5846] Bluetooth: hci1: command tx timeout [ 896.264647][ T4232] openvswitch: netlink: IP tunnel dst address not specified [ 896.283490][ T4157] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.291414][ T4157] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.300092][ T4157] bridge_slave_1: entered allmulticast mode [ 896.309703][ T4157] bridge_slave_1: entered promiscuous mode [ 896.408091][ T4157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.421232][ T4157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.600482][ T4246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 896.646777][ T4157] team0: Port device team_slave_0 added [ 896.679097][ T4157] team0: Port device team_slave_1 added [ 896.754072][ T4157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.761275][ T4157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.806298][ T4157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.856863][ T4157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.876983][ T4257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.882071][ T4157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.922341][ T4157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.934382][ T5846] Bluetooth: hci3: command tx timeout [ 897.005744][ T4157] hsr_slave_0: entered promiscuous mode [ 897.015425][ T4157] hsr_slave_1: entered promiscuous mode [ 897.022509][ T4157] debugfs: 'hsr0' already exists in 'hsr' [ 897.028285][ T4157] Cannot create hsr debugfs directory [ 897.784934][ T5846] block nbd2: Receive control failed (result -32) [ 897.926024][ T4305] bond9: entered promiscuous mode [ 897.936115][ T4305] 8021q: adding VLAN 0 to HW filter on device bond9 [ 898.295054][ T4314] netlink: 'syz.2.8904': attribute type 2 has an invalid length. [ 898.367195][ T4157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 898.399403][ T4157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 898.416500][ T4157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 898.456493][ T4157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 898.494696][ T4157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 898.528736][ T4157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 898.540498][ T4157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 898.564833][ T4157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 898.819899][ T4157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.879311][ T4157] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.899349][T15410] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.906608][T15410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.977190][T30922] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.984446][T30922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.013648][ T5846] Bluetooth: hci3: command tx timeout [ 899.315498][ T4380] netlink: 'syz.0.8922': attribute type 13 has an invalid length. [ 899.350959][ T4380] gretap0: refused to change device tx_queue_len [ 899.367403][ T4380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 899.429971][ T4157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.501387][ T4386] netlink: 'syz.2.8924': attribute type 12 has an invalid length. [ 899.545336][ T4391] erspan0: entered promiscuous mode [ 899.550765][ T4391] erspan0: entered allmulticast mode [ 899.576566][ T4157] veth0_vlan: entered promiscuous mode [ 899.609185][ T4157] veth1_vlan: entered promiscuous mode [ 899.640743][ T4393] netlink: 'syz.0.8926': attribute type 3 has an invalid length. [ 899.650331][ T4393] netlink: 'syz.0.8926': attribute type 1 has an invalid length. [ 899.690526][ T4157] veth0_macvtap: entered promiscuous mode [ 899.705509][ T4157] veth1_macvtap: entered promiscuous mode [ 899.749583][ T4157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.769340][ T4157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.811202][T30910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.846877][T30910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.877091][T30910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.892405][T30922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.127658][T30911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.164691][T30911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.253361][T30911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.261316][T30911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.285718][ T4420] netlink: 'syz.0.8934': attribute type 4 has an invalid length. [ 900.421060][ T4425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 900.596692][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.807785][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.829504][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.837760][ T4453] __nla_validate_parse: 10 callbacks suppressed [ 900.837781][ T4453] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8941'. [ 900.889731][ T4454] siw: device registration error -23 [ 901.013283][T30913] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.021446][T30913] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.040684][T30913] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.065696][T30913] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.092647][ T5846] Bluetooth: hci3: command tx timeout [ 901.101851][T30913] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.110890][T30913] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.150991][T30913] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.163491][T30913] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.297062][ T4458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8944'. [ 901.343803][ T4464] pim6reg: entered allmulticast mode [ 901.564720][ T4473] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8947'. [ 901.586464][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8947'. [ 901.631369][ T4480] syzkaller1: entered promiscuous mode [ 901.639191][ T4480] syzkaller1: entered allmulticast mode [ 901.660342][ T4473] netlink: 31 bytes leftover after parsing attributes in process `syz.4.8947'. [ 901.689062][ T4473] netlink: 'syz.4.8947': attribute type 3 has an invalid length. [ 901.706580][ T4473] netlink: 'syz.4.8947': attribute type 2 has an invalid length. [ 901.715496][ T4473] netlink: 31 bytes leftover after parsing attributes in process `syz.4.8947'. [ 902.116075][ T4504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8954'. [ 902.264288][ T4511] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 902.276933][ T4511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8956'. [ 902.350265][ T4517] netlink: 'syz.4.8958': attribute type 21 has an invalid length. [ 902.789222][T19033] IPVS: starting estimator thread 0... [ 902.843874][ T4535] IPVS: sh: FWM 3 0x00000003 - no destination available [ 902.891636][ T4545] IPVS: using max 27 ests per chain, 64800 per kthread [ 902.917886][ T4554] netlink: 'syz.2.8971': attribute type 1 has an invalid length. [ 902.926020][ T4554] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.8971'. [ 902.954247][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8971'. [ 903.174185][ T5846] Bluetooth: hci3: command tx timeout [ 903.249766][ T4566] netlink: 'syz.2.8974': attribute type 3 has an invalid length. [ 903.257719][ T4566] netlink: 'syz.2.8974': attribute type 1 has an invalid length. [ 903.273158][ T4569] vcan0: entered allmulticast mode [ 903.320080][ T4572] xt_l2tp: unknown flags: 10 [ 903.533588][ T4582] syzkaller1: entered promiscuous mode [ 903.539136][ T4582] syzkaller1: entered allmulticast mode [ 903.630040][ T4584] openvswitch: netlink: IP tunnel dst address not specified [ 903.679938][ T4591] 9: entered promiscuous mode [ 906.587429][ T4584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.821881][ T4648] validate_nla: 2 callbacks suppressed [ 906.821899][ T4648] netlink: 'syz.0.8993': attribute type 10 has an invalid length. [ 906.945194][ T4650] syzkaller1: entered promiscuous mode [ 906.950741][ T4650] syzkaller1: entered allmulticast mode [ 907.077671][ T4667] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 907.200318][ T4674] xt_HMARK: spi-set and port-set can't be combined [ 907.297768][ T4672] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 907.314108][ T4672] bond6 (unregistering): Released all slaves [ 907.410394][ T4681] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 907.452835][ T4681] bond6 (unregistering): Released all slaves [ 907.495699][ T4694] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 907.770436][ T4711] netlink: 'syz.0.9011': attribute type 4 has an invalid length. [ 907.869752][ T4714] netlink: 'syz.3.9013': attribute type 2 has an invalid length. [ 908.098037][ T4723] __nla_validate_parse: 5 callbacks suppressed [ 908.098060][ T4723] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9016'. [ 908.137039][ T4729] syzkaller1: entered promiscuous mode [ 908.152118][ T4729] syzkaller1: entered allmulticast mode [ 908.382565][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9022'. [ 908.538423][ T4759] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9026'. [ 908.598826][ T4765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9027'. [ 908.609335][ T4765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9027'. [ 908.619997][ T4759] syzkaller1: entered promiscuous mode [ 908.630098][ T4765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9027'. [ 908.707451][ T4774] netlink: 'syz.0.9031': attribute type 39 has an invalid length. [ 908.786163][ T4778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9032'. [ 908.865194][ T4779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9031'. [ 908.930616][ T4782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9033'. [ 909.127604][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9038'. [ 909.137923][ T4796] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 909.156015][ T4798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.187260][ T4796] team1: entered promiscuous mode [ 909.192667][ T4796] team1: entered allmulticast mode [ 909.720327][ T4832] netlink: 'syz.2.9051': attribute type 11 has an invalid length. [ 909.752267][ T4832] netlink: 'syz.2.9051': attribute type 4 has an invalid length. [ 909.866953][ T4842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.881042][ T4840] syzkaller0: entered promiscuous mode [ 910.041594][ T4841] pim6reg: entered allmulticast mode [ 910.162288][ T4849] xt_nfacct: accounting object `syz1' does not exist [ 910.295211][ T4858] delete_channel: no stack [ 910.409560][ T4863] netlink: 'syz.4.9063': attribute type 4 has an invalid length. [ 910.450952][ T4864] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 910.703637][ T4881] gre0: entered promiscuous mode [ 910.708660][ T4881] gre0: entered allmulticast mode [ 910.865552][ T4893] Bluetooth: MGMT ver 1.23 [ 910.980721][ T4905] netlink: 'syz.2.9077': attribute type 4 has an invalid length. [ 911.015899][ T4905] netlink: 'syz.2.9077': attribute type 4 has an invalid length. [ 911.029389][ T4906] Bluetooth: MGMT ver 1.23 [ 911.127516][ T4913] netlink: 'syz.2.9077': attribute type 10 has an invalid length. [ 911.909738][ T4925] netlink: 'syz.4.9081': attribute type 1 has an invalid length. [ 911.919395][ T4925] netlink: 'syz.4.9081': attribute type 2 has an invalid length. [ 912.916165][ T4913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.940786][ T4913] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 931.578788][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 935.523808][ T4967] netlink: 'syz.4.9091': attribute type 3 has an invalid length. [ 936.183536][ T4997] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 936.207214][ T4997] __nla_validate_parse: 9 callbacks suppressed [ 936.207233][ T4997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9099'. [ 936.487495][ T5022] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9108'. [ 936.559896][ T5027] syzkaller0: create flow: hash 4126386409 index 1 [ 936.571037][ T5024] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9109'. [ 936.590804][ T5026] 8021q: VLANs not supported on ip6tnl0 [ 936.746101][ T5037] tipc: Enabling of bearer rejected, failed to enable media [ 936.774669][ T5019] syzkaller0: delete flow: hash 4126386409 index 1 [ 936.934454][ T5047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9117'. [ 936.966037][ T5043] xt_ecn: cannot match TCP bits for non-tcp packets [ 938.609334][ T5056] netlink: 'syz.3.9119': attribute type 13 has an invalid length. [ 938.619959][ T5055] netlink: 'syz.3.9119': attribute type 13 has an invalid length. [ 938.750684][ T5059] netlink: 'syz.0.9123': attribute type 1 has an invalid length. [ 938.765520][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9121'. [ 938.777699][ T5059] netlink: 'syz.0.9123': attribute type 1 has an invalid length. [ 938.787074][ T5060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9121'. [ 938.862244][ T5068] netlink: 'syz.4.9124': attribute type 2 has an invalid length. [ 938.881411][ T5068] netlink: 'syz.4.9124': attribute type 1 has an invalid length. [ 938.891201][ T5068] netlink: 'syz.4.9124': attribute type 3 has an invalid length. [ 938.900709][ T5068] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9124'. [ 938.921342][ T5066] pim6reg1: entered promiscuous mode [ 938.927127][ T5066] pim6reg1: entered allmulticast mode [ 938.936421][ T5068] NCSI netlink: No device for ifindex 813332851 [ 939.345370][ T5099] sctp: [Deprecated]: syz.4.9134 (pid 5099) Use of int in max_burst socket option. [ 939.345370][ T5099] Use struct sctp_assoc_value instead [ 939.363549][ T5096] netlink: 'syz.1.9136': attribute type 1 has an invalid length. [ 939.372869][ T5101] sctp: [Deprecated]: syz.3.9137 (pid 5101) Use of int in maxseg socket option. [ 939.372869][ T5101] Use struct sctp_assoc_value instead [ 939.425651][ T5104] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9135'. [ 939.467286][ T5106] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9136'. [ 939.493855][ T5108] netlink: 'syz.2.9135': attribute type 1 has an invalid length. [ 939.892291][ T5123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9141'. [ 940.133755][ T5134] macvtap0: refused to change device tx_queue_len [ 940.207982][ T5137] ipt_rpfilter: unknown options [ 940.382831][ T5147] Cannot find add_set index 2 as target [ 940.548205][ T5158] nbd: nbd1 already in use [ 940.908441][ T5194] netlink: 'syz.4.9159': attribute type 11 has an invalid length. [ 940.926279][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.959002][ T5185] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.968191][ T5194] validate_nla: 1 callbacks suppressed [ 940.968215][ T5194] netlink: 'syz.4.9159': attribute type 1 has an invalid length. [ 940.998713][ T5198] openvswitch: netlink: Message has 8 unknown bytes. [ 941.006203][ T5198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.021874][ T5185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 965.476531][ T5221] __nla_validate_parse: 5 callbacks suppressed [ 965.476553][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9166'. [ 965.503751][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9166'. [ 965.511332][T30911] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 965.545678][T30911] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.574821][T30911] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.602541][T30911] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.700998][ T5237] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9170'. [ 966.018083][ T5255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9175'. [ 966.346968][ T5270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9176'. [ 967.423700][ T30] audit: type=1800 audit(1776067124.394:7): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9180" name="memory.events" dev="tmpfs" ino=242 res=0 errno=0 [ 967.528393][ T30] audit: type=1804 audit(1776067124.504:8): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9180" name="/newroot/44/memory.events" dev="tmpfs" ino=242 res=1 errno=0 [ 968.560151][ T5306] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 968.629724][ T5306] bond7 (unregistering): Released all slaves [ 968.653734][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.664407][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.672642][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.688642][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.705097][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 969.537613][ T5356] netlink: 165 bytes leftover after parsing attributes in process `syz.2.9199'. [ 969.690071][T30914] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.769423][ T5314] chnl_net:caif_netlink_parms(): no params data found [ 969.953684][T30914] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.048822][ T5380] sctp: [Deprecated]: syz.1.9206 (pid 5380) Use of int in max_burst socket option deprecated. [ 970.048822][ T5380] Use struct sctp_assoc_value instead [ 970.146414][T30914] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.204073][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9209'. [ 970.314914][T30914] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.353793][ T5314] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.371346][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.386758][ T5314] bridge_slave_0: entered allmulticast mode [ 970.397683][ T5314] bridge_slave_0: entered promiscuous mode [ 970.428092][ T5314] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.456740][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.472750][ T5314] bridge_slave_1: entered allmulticast mode [ 970.491018][ T5314] bridge_slave_1: entered promiscuous mode [ 970.544049][ T5406] netlink: 'syz.1.9215': attribute type 1 has an invalid length. [ 970.563964][ T5407] netlink: 'syz.1.9215': attribute type 1 has an invalid length. [ 970.633965][ T5406] bond6: entered promiscuous mode [ 970.642158][ T5406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 970.666528][ T5314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.768090][ T5314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.778344][ T5836] Bluetooth: hci0: command tx timeout [ 970.903973][T30921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.926740][T30921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.989467][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9218'. [ 971.009296][T30913] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.020155][T30913] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.029775][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9218'. [ 971.046808][ T5314] team0: Port device team_slave_0 added [ 971.076952][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9218'. [ 971.091399][ T5314] team0: Port device team_slave_1 added [ 971.128858][T30913] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.153150][T30913] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.213928][ T5314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.231763][ T5314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.284189][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9222'. [ 971.296884][ T5314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.323199][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9223'. [ 971.349675][ T5432] netlink: 'syz.1.9223': attribute type 1 has an invalid length. [ 971.353676][ T5428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9222'. [ 971.381120][T30914] bridge_slave_0: left allmulticast mode [ 971.398346][T30914] bridge_slave_0: left promiscuous mode [ 971.414327][T30914] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.593072][ T5446] netlink: 'syz.0.9226': attribute type 1 has an invalid length. [ 971.984404][T30914] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 972.040867][T30914] bond2 (unregistering): (slave bridge2): Releasing active interface [ 972.100097][T30914] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 972.108720][T30914] bridge3 (unregistering): left promiscuous mode [ 972.186872][T30914] bond8 (unregistering): (slave bridge5): Removing an active aggregator [ 972.197089][T30914] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 972.205524][T30914] bond8 (unregistering): (slave bridge5): the permanent HWaddr of slave - 1e:d2:36:00:96:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 972.226083][T30914] bridge5 (unregistering): left promiscuous mode [ 972.233663][T30914] bridge5 (unregistering): left allmulticast mode [ 972.296735][T30914] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 972.306179][T30914] bridge6 (unregistering): left promiscuous mode [ 972.313231][T30914] bridge6 (unregistering): left allmulticast mode [ 972.369778][T30914] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.383625][T30914] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.395794][T30914] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 972.407372][T30914] .` (unregistering): Released all slaves [ 972.420037][T30914] bond1 (unregistering): Released all slaves [ 972.441296][T30914] bond2 (unregistering): Released all slaves [ 972.470745][T30914] bond3 (unregistering): Released all slaves [ 972.487200][T30914] bond4 (unregistering): Released all slaves [ 972.505027][T30914] bond5 (unregistering): Released all slaves [ 972.522893][T30914] bond6 (unregistering): Released all slaves [ 972.539543][T30914] bond0 (unregistering): Released all slaves [ 972.557415][T30914] bond7 (unregistering): (slave lo): Releasing backup interface [ 972.574555][T30914] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 972.586636][T30914] bond7 (unregistering): Released all slaves [ 972.602736][T30914] bond8 (unregistering): Released all slaves [ 972.622377][T30914] bond9 (unregistering): Released all slaves [ 972.636196][T30913] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.648363][T30913] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.657878][ T5314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.666709][ T5314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.695022][ T5314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.747262][ T5442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9224'. [ 972.777459][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 972.851885][ T5836] Bluetooth: hci0: command tx timeout [ 972.930536][T30914] 9: left promiscuous mode [ 973.044482][ T5483] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 973.145099][T30914] tipc: Disabling bearer [ 973.168762][T30914] tipc: Left network mode [ 973.217989][ T5495] netlink: 'syz.2.9236': attribute type 1 has an invalid length. [ 973.219079][ T5314] hsr_slave_0: entered promiscuous mode [ 973.233565][ T5314] hsr_slave_1: entered promiscuous mode [ 973.240084][ T5314] debugfs: 'hsr0' already exists in 'hsr' [ 973.247368][ T5314] Cannot create hsr debugfs directory [ 973.260070][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9236'. [ 973.271270][ T5478] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 973.294646][ T5498] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9236'. [ 973.311293][ T5478] bond8: (slave lo): Enslaving as an active interface with an up link [ 973.364392][ T5478] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 973.390233][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9237'. [ 973.488050][T30914] IPVS: stopping master sync thread 29416 ... [ 973.524258][ T5495] bond1: entered promiscuous mode [ 973.529860][ T5495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 974.408460][ T5314] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.442021][ T5314] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.578410][T30914] hsr_slave_0: left promiscuous mode [ 974.599580][T30914] hsr_slave_1: left promiscuous mode [ 974.606530][T30914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.633736][T30914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.933327][ T5836] Bluetooth: hci0: command tx timeout [ 975.106329][T30914] team0 (unregistering): Port device team_slave_1 removed [ 975.133121][T30914] team0 (unregistering): Port device team_slave_0 removed [ 975.189953][ T5585] openvswitch: netlink: Missing key (keys=40, expected=100) [ 975.342808][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 975.398018][ T5314] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.442815][ T5314] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.654214][ T5314] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.665269][ T5314] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.839767][ T5609] netlink: 'syz.3.9263': attribute type 25 has an invalid length. [ 975.856067][ T5314] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.873972][ T5314] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.307101][ T5314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 976.363704][ T5314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.392592][ T5314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 976.426843][ T5314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.518513][ T5314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 976.543603][ T5314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.569338][ T5314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 976.605668][ T5314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.977330][ T5314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.997789][ T5655] syzkaller0: entered promiscuous mode [ 977.012055][ T5836] Bluetooth: hci0: command tx timeout [ 977.016315][ T5655] syzkaller0: entered allmulticast mode [ 977.105438][ T5314] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.152562][T30910] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.159778][T30910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.216485][T15410] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.223748][T15410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.807002][ T5691] netlink: 'syz.0.9280': attribute type 2 has an invalid length. [ 977.830343][ T5693] netlink: 'syz.1.9281': attribute type 1 has an invalid length. [ 977.862320][ T5691] : entered promiscuous mode [ 977.867209][ T5693] __nla_validate_parse: 6 callbacks suppressed [ 977.867230][ T5693] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9281'. [ 977.948474][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9281'. [ 978.106967][ T5314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.436245][ T5724] netlink: 'syz.3.9287': attribute type 1 has an invalid length. [ 978.603408][ T5724] netlink: 'syz.3.9287': attribute type 2 has an invalid length. [ 978.887529][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9290'. [ 979.097447][ T5737] bond1: Invalid ad_actor_system MAC address. [ 979.111613][ T5737] bond1: option ad_actor_system: invalid value (1) [ 979.135343][ T5737] bond1 (unregistering): Released all slaves [ 979.392490][ T5314] veth0_vlan: entered promiscuous mode [ 979.453839][ T5314] veth1_vlan: entered promiscuous mode [ 979.595108][ T5314] veth0_macvtap: entered promiscuous mode [ 979.651206][ T5314] veth1_macvtap: entered promiscuous mode [ 979.782551][ T5742] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 979.803129][ T5742] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 979.839986][ T5314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.889080][ T5742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 979.901285][ T5314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.932050][ T5742] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 979.970446][T30910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.988842][T30910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.032486][T30910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.047573][T30910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.072159][ T5742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 980.078245][ T5742] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 980.150309][ T5783] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9303'. [ 980.172706][ T5742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 980.178692][ T5742] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 980.228508][ T5742] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 980.242091][ T5742] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 980.554398][T30910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.594533][T30910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.756461][T30911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.778017][T30911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.028472][ T5825] syzkaller0: entered promiscuous mode [ 981.039478][ T5825] syzkaller0: entered allmulticast mode [ 981.194428][ T5829] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9312'. [ 981.206959][ T5829] netlink: 320 bytes leftover after parsing attributes in process `syz.2.9312'. [ 981.531422][ T5850] ipt_ECN: cannot use operation on non-tcp rule [ 981.603033][ T5851] nbd: must specify at least one socket [ 981.726453][ T5857] netlink: 'syz.0.9322': attribute type 2 has an invalid length. [ 981.825509][ T5867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9322'. [ 981.846054][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 981.867949][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 981.878198][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 981.887737][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 981.898905][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 982.222546][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9330'. [ 982.265538][ T5885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9330'. [ 982.315831][ T30] audit: type=1107 audit(1776067139.294:9): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 982.315831][ T30] cK- w-:t?p7EGlßz;u6W2an{2_^O^tbwLKS6'q"MxuWBs"EoݝlaĶDc XJk|Gușz⁗$~$lqRsUwxbrP۹}@k?' [ 982.395291][ T5877] pim6reg527: entered allmulticast mode [ 982.445846][ T5892] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 982.547447][ T5901] netlink: 'syz.4.9336': attribute type 27 has an invalid length. [ 982.570540][T30922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 982.584341][T30922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 982.756957][T30922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 982.781230][T30922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 982.800637][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9337'. [ 982.894604][ T5932] netlink: 'syz.0.9340': attribute type 1 has an invalid length. [ 982.916436][T30922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 982.927270][T30922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 983.026611][ T5925] syzkaller1: entered promiscuous mode [ 983.032524][ T5925] syzkaller1: entered allmulticast mode [ 983.057965][ T5934] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 983.077428][ T5935] bond7: (slave bridge5): Enslaving as a backup interface with a down link [ 983.165205][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 983.182275][ T5940] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.9341'. [ 983.197796][ T5940] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 983.218912][T30922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 983.230282][T30922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 983.561743][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9348'. [ 983.714365][T30913] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.743668][ T5974] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9349'. [ 983.757496][T30913] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.835778][T30908] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.849136][T30908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.887105][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.915932][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.927498][ T5866] bridge_slave_0: entered allmulticast mode [ 983.944971][ T5866] bridge_slave_0: entered promiscuous mode [ 983.974346][ T5846] Bluetooth: hci2: command tx timeout [ 983.981228][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.994321][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.014807][ T5866] bridge_slave_1: entered allmulticast mode [ 984.026078][ T5866] bridge_slave_1: entered promiscuous mode [ 984.225392][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.258084][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.296359][T30911] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.312199][T30911] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.331959][T30911] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.340629][T30911] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.392069][T30922] bridge_slave_1: left allmulticast mode [ 984.398069][T30922] bridge_slave_1: left promiscuous mode [ 984.407241][T30922] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.420941][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9358'. [ 984.444771][T30922] bridge_slave_0: left allmulticast mode [ 984.450651][T30922] bridge_slave_0: left promiscuous mode [ 984.461956][T30922] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.491693][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9356'. [ 984.929499][T30922] bridge0 (unregistering): left allmulticast mode [ 985.178289][T30922] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 985.186603][T30922] bridge6 (unregistering): left promiscuous mode [ 985.239151][T30922] team0: Port device bridge7 removed [ 985.337412][T30922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.349816][T30922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.360143][T30922] bond0 (unregistering): Released all slaves [ 985.377813][T30922] bond1 (unregistering): Released all slaves [ 985.402609][T30922] bond2 (unregistering): Released all slaves [ 985.420675][T30922] bond3 (unregistering): (slave veth7): Releasing active interface [ 985.437718][T30922] bond3 (unregistering): Released all slaves [ 985.454379][T30922] bond4 (unregistering): Released all slaves [ 985.471083][T30922] bond5 (unregistering): Released all slaves [ 985.488004][T30922] bond6 (unregistering): Released all slaves [ 985.507410][T30922] bond7 (unregistering): Released all slaves [ 985.529593][T30922] bond8 (unregistering): (slave lo): Releasing backup interface [ 985.541359][T30922] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 985.556037][T30922] bond8 (unregistering): Released all slaves [ 985.603172][ T6004] macvlan4: entered allmulticast mode [ 985.737239][ T5866] team0: Port device team_slave_0 added [ 985.778144][ T5866] team0: Port device team_slave_1 added [ 985.808284][T30922] tipc: Left network mode [ 985.933605][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.940704][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.059127][ T5846] Bluetooth: hci2: command tx timeout [ 986.080267][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.104719][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.114909][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.148059][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.192028][ T6020] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9362'. [ 986.331285][ T5866] hsr_slave_0: entered promiscuous mode [ 986.378437][ T5866] hsr_slave_1: entered promiscuous mode [ 986.388027][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 986.411803][ T5866] Cannot create hsr debugfs directory [ 987.045152][ T6054] syzkaller1: entered promiscuous mode [ 987.063064][ T6054] syzkaller1: entered allmulticast mode [ 987.454191][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 987.562713][ T6086] pimreg: entered allmulticast mode [ 987.716807][T30922] hsr_slave_0: left promiscuous mode [ 987.752518][T30922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.768739][ T6106] netlink: 'syz.3.9381': attribute type 83 has an invalid length. [ 987.786757][T30922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.835433][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9379'. [ 987.923445][ T5846] block nbd3: Receive control failed (result -1) [ 987.937764][T30922] pimreg3 (unregistering): left allmulticast mode [ 987.953018][T30922] pim6reg (unregistering): left allmulticast mode [ 988.131854][ T5846] Bluetooth: hci2: command tx timeout [ 988.317927][T30922] team0 (unregistering): Port device team_slave_1 removed [ 988.362265][T30922] team0 (unregistering): Port device team_slave_0 removed [ 988.610899][ T6088] syzkaller1: entered promiscuous mode [ 988.616906][ T6088] syzkaller1: entered allmulticast mode [ 988.806808][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 988.850269][ T5866] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.880446][ T5866] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.896962][ T5866] [ 988.899357][ T5866] ====================================================== [ 988.906399][ T5866] WARNING: possible circular locking dependency detected [ 988.913484][ T5866] syzkaller #0 Not tainted [ 988.917933][ T5866] ------------------------------------------------------ [ 988.924973][ T5866] syz-executor/5866 is trying to acquire lock: [ 988.931135][ T5866] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 988.941697][ T5866] [ 988.941697][ T5866] but task is already holding lock: [ 988.949090][ T5866] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 988.959415][ T5866] [ 988.959415][ T5866] which lock already depends on the new lock. [ 988.959415][ T5866] [ 988.970096][ T5866] [ 988.970096][ T5866] the existing dependency chain (in reverse order) is: [ 988.979134][ T5866] [ 988.979134][ T5866] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 988.987242][ T5866] down_write+0x96/0x200 [ 988.992064][ T5866] kernfs_add_one+0x41/0x5c0 [ 988.997185][ T5866] kernfs_create_dir_ns+0xde/0x130 [ 989.002835][ T5866] internal_create_group+0x425/0x1180 [ 989.008755][ T5866] cpuhp_invoke_callback+0x445/0x860 [ 989.014587][ T5866] cpuhp_issue_call+0x430/0x7a0 [ 989.019987][ T5866] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 989.026644][ T5866] __cpuhp_setup_state+0x3f/0x60 [ 989.032136][ T5866] do_one_initcall+0x250/0x8d0 [ 989.037474][ T5866] do_initcall_level+0x104/0x190 [ 989.042952][ T5866] do_initcalls+0x59/0xa0 [ 989.047820][ T5866] kernel_init_freeable+0x2a6/0x3e0 [ 989.053557][ T5866] kernel_init+0x1d/0x1d0 [ 989.058462][ T5866] ret_from_fork+0x51e/0xb90 [ 989.063601][ T5866] ret_from_fork_asm+0x1a/0x30 [ 989.068914][ T5866] [ 989.068914][ T5866] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 989.076756][ T5866] [ 989.076756][ T5866] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 989.084513][ T5866] cpus_read_lock+0x42/0x160 [ 989.089644][ T5866] static_key_slow_inc+0x12/0x30 [ 989.095123][ T5866] tcp_md5_do_add+0x1d4/0x390 [ 989.100339][ T5866] tcp_v6_parse_md5_keys+0x562/0x680 [ 989.106164][ T5866] do_tcp_setsockopt+0x12ee/0x2060 [ 989.111818][ T5866] do_sock_setsockopt+0x17c/0x1b0 [ 989.117388][ T5866] __x64_sys_setsockopt+0x13d/0x1b0 [ 989.123132][ T5866] do_syscall_64+0x14d/0xf80 [ 989.128271][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.134702][ T5866] [ 989.134702][ T5866] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 989.142467][ T5866] lock_sock_nested+0x48/0x100 [ 989.147770][ T5866] inet_shutdown+0x6a/0x390 [ 989.152822][ T5866] nbd_mark_nsock_dead+0x2e9/0x560 [ 989.158481][ T5866] recv_work+0x1c7f/0x1d90 [ 989.163441][ T5866] process_scheduled_works+0xb6e/0x18c0 [ 989.169529][ T5866] worker_thread+0xa53/0xfc0 [ 989.174667][ T5866] kthread+0x388/0x470 [ 989.179277][ T5866] ret_from_fork+0x51e/0xb90 [ 989.184418][ T5866] ret_from_fork_asm+0x1a/0x30 [ 989.189727][ T5866] [ 989.189727][ T5866] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 989.197396][ T5866] __mutex_lock+0x19f/0x1300 [ 989.202551][ T5866] nbd_queue_rq+0x37b/0x1100 [ 989.207705][ T5866] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 989.213804][ T5866] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 989.220686][ T5866] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 989.227221][ T5866] blk_mq_run_hw_queue+0x348/0x4f0 [ 989.232892][ T5866] blk_mq_dispatch_list+0xd16/0xe10 [ 989.238643][ T5866] blk_mq_flush_plug_list+0x48d/0x570 [ 989.244557][ T5866] __blk_flush_plug+0x3ed/0x4d0 [ 989.249949][ T5866] __submit_bio+0x28d/0x580 [ 989.255033][ T5866] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 989.261229][ T5866] block_read_full_folio+0x599/0x830 [ 989.267078][ T5866] filemap_read_folio+0x137/0x3b0 [ 989.272658][ T5866] do_read_cache_folio+0x358/0x590 [ 989.278416][ T5866] read_part_sector+0xb6/0x2b0 [ 989.283736][ T5866] adfspart_check_ICS+0xa5/0xa40 [ 989.289216][ T5866] bdev_disk_changed+0x7ba/0x1550 [ 989.294778][ T5866] blkdev_get_whole+0x380/0x510 [ 989.300169][ T5866] bdev_open+0x31e/0xd30 [ 989.304952][ T5866] blkdev_open+0x470/0x610 [ 989.309919][ T5866] do_dentry_open+0x785/0x14e0 [ 989.315226][ T5866] vfs_open+0x3b/0x340 [ 989.319844][ T5866] path_openat+0x2e08/0x3860 [ 989.324977][ T5866] do_file_open+0x23e/0x4a0 [ 989.330031][ T5866] do_sys_openat2+0x113/0x200 [ 989.335252][ T5866] __x64_sys_openat+0x138/0x170 [ 989.340661][ T5866] do_syscall_64+0x14d/0xf80 [ 989.345804][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.352243][ T5866] [ 989.352243][ T5866] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 989.359492][ T5866] __mutex_lock+0x19f/0x1300 [ 989.364639][ T5866] nbd_queue_rq+0xc6/0x1100 [ 989.369684][ T5866] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 989.375858][ T5866] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 989.382815][ T5866] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 989.389341][ T5866] blk_mq_run_hw_queue+0x348/0x4f0 [ 989.395008][ T5866] blk_mq_dispatch_list+0xd16/0xe10 [ 989.400752][ T5866] blk_mq_flush_plug_list+0x48d/0x570 [ 989.406677][ T5866] __blk_flush_plug+0x3ed/0x4d0 [ 989.412066][ T5866] __submit_bio+0x28d/0x580 [ 989.417107][ T5866] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 989.423278][ T5866] block_read_full_folio+0x599/0x830 [ 989.429121][ T5866] filemap_read_folio+0x137/0x3b0 [ 989.434755][ T5866] do_read_cache_folio+0x358/0x590 [ 989.440437][ T5866] read_part_sector+0xb6/0x2b0 [ 989.445773][ T5866] adfspart_check_ICS+0xa5/0xa40 [ 989.451268][ T5866] bdev_disk_changed+0x7ba/0x1550 [ 989.456833][ T5866] blkdev_get_whole+0x380/0x510 [ 989.462240][ T5866] bdev_open+0x31e/0xd30 [ 989.467046][ T5866] blkdev_open+0x470/0x610 [ 989.472016][ T5866] do_dentry_open+0x785/0x14e0 [ 989.477329][ T5866] vfs_open+0x3b/0x340 [ 989.481952][ T5866] path_openat+0x2e08/0x3860 [ 989.487114][ T5866] do_file_open+0x23e/0x4a0 [ 989.492161][ T5866] do_sys_openat2+0x113/0x200 [ 989.497388][ T5866] __x64_sys_openat+0x138/0x170 [ 989.502797][ T5866] do_syscall_64+0x14d/0xf80 [ 989.507937][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.514455][ T5866] [ 989.514455][ T5866] -> #4 (set->srcu){.+.+}-{0:0}: [ 989.521693][ T5866] __synchronize_srcu+0xca/0x300 [ 989.527180][ T5866] elevator_switch+0x1e8/0x7a0 [ 989.532490][ T5866] elevator_change+0x2cc/0x450 [ 989.537798][ T5866] elevator_set_default+0x36c/0x430 [ 989.543540][ T5866] blk_register_queue+0x366/0x430 [ 989.549111][ T5866] __add_disk+0x677/0xd50 [ 989.553991][ T5866] add_disk_fwnode+0xfb/0x480 [ 989.559237][ T5866] nbd_dev_add+0x72c/0xb50 [ 989.564197][ T5866] nbd_init+0x168/0x1f0 [ 989.568903][ T5866] do_one_initcall+0x250/0x8d0 [ 989.574213][ T5866] do_initcall_level+0x104/0x190 [ 989.579706][ T5866] do_initcalls+0x59/0xa0 [ 989.584595][ T5866] kernel_init_freeable+0x2a6/0x3e0 [ 989.590359][ T5866] kernel_init+0x1d/0x1d0 [ 989.595245][ T5866] ret_from_fork+0x51e/0xb90 [ 989.600417][ T5866] ret_from_fork_asm+0x1a/0x30 [ 989.605752][ T5866] [ 989.605752][ T5866] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 989.613716][ T5866] __mutex_lock+0x19f/0x1300 [ 989.618869][ T5866] elevator_change+0x1b3/0x450 [ 989.624196][ T5866] elevator_set_none+0xb5/0x140 [ 989.629689][ T5866] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 989.636053][ T5866] nbd_start_device+0x17f/0xb10 [ 989.641460][ T5866] nbd_genl_connect+0x165b/0x1cf0 [ 989.647032][ T5866] genl_family_rcv_msg_doit+0x22a/0x330 [ 989.653324][ T5866] genl_rcv_msg+0x61c/0x7a0 [ 989.658564][ T5866] netlink_rcv_skb+0x232/0x4b0 [ 989.663866][ T5866] genl_rcv+0x28/0x40 [ 989.668397][ T5866] netlink_unicast+0x80f/0x9b0 [ 989.673727][ T5866] netlink_sendmsg+0x813/0xb40 [ 989.679036][ T5866] ____sys_sendmsg+0x972/0x9f0 [ 989.684342][ T5866] ___sys_sendmsg+0x2a5/0x360 [ 989.689574][ T5866] __x64_sys_sendmsg+0x1bd/0x2a0 [ 989.695058][ T5866] do_syscall_64+0x14d/0xf80 [ 989.700190][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.706621][ T5866] [ 989.706621][ T5866] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 989.715248][ T5866] blk_alloc_queue+0x546/0x680 [ 989.720550][ T5866] __blk_mq_alloc_disk+0x197/0x390 [ 989.726203][ T5866] nbd_dev_add+0x499/0xb50 [ 989.731325][ T5866] nbd_init+0x168/0x1f0 [ 989.736022][ T5866] do_one_initcall+0x250/0x8d0 [ 989.741334][ T5866] do_initcall_level+0x104/0x190 [ 989.746838][ T5866] do_initcalls+0x59/0xa0 [ 989.751721][ T5866] kernel_init_freeable+0x2a6/0x3e0 [ 989.757459][ T5866] kernel_init+0x1d/0x1d0 [ 989.762338][ T5866] ret_from_fork+0x51e/0xb90 [ 989.767487][ T5866] ret_from_fork_asm+0x1a/0x30 [ 989.772806][ T5866] [ 989.772806][ T5866] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 989.780051][ T5866] fs_reclaim_acquire+0x71/0x100 [ 989.785545][ T5866] kmem_cache_alloc_noprof+0x40/0x650 [ 989.791463][ T5866] __kernfs_iattrs+0xdf/0x340 [ 989.796693][ T5866] kernfs_iop_setattr+0xea/0x3f0 [ 989.802179][ T5866] notify_change+0xc1a/0xf40 [ 989.807315][ T5866] do_truncate+0x1c2/0x250 [ 989.812272][ T5866] path_openat+0x2f89/0x3860 [ 989.817400][ T5866] do_file_open+0x23e/0x4a0 [ 989.822436][ T5866] do_sys_openat2+0x113/0x200 [ 989.827662][ T5866] __x64_sys_openat+0x138/0x170 [ 989.833072][ T5866] do_syscall_64+0x14d/0xf80 [ 989.838213][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.844640][ T5866] [ 989.844640][ T5866] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 989.853181][ T5866] __lock_acquire+0x15a5/0x2cf0 [ 989.858584][ T5866] lock_acquire+0xf0/0x2e0 [ 989.863544][ T5866] down_write+0x96/0x200 [ 989.868332][ T5866] kernfs_unlink_sibling+0x71/0x180 [ 989.874179][ T5866] __kernfs_remove+0x3e7/0x660 [ 989.879577][ T5866] kernfs_remove_by_name_ns+0xaf/0x130 [ 989.885573][ T5866] sysfs_remove_group+0xfc/0x2e0 [ 989.891056][ T5866] sysfs_remove_groups+0x54/0xb0 [ 989.896547][ T5866] net_rx_queue_update_kobjects+0x68d/0x740 [ 989.902992][ T5866] netdev_unregister_kobject+0x113/0x450 [ 989.909180][ T5866] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 989.916139][ T5866] unregister_netdevice_queue+0x31f/0x360 [ 989.922416][ T5866] nsim_destroy+0x20b/0x780 [ 989.927465][ T5866] __nsim_dev_port_del+0x14d/0x1b0 [ 989.933123][ T5866] nsim_dev_reload_destroy+0x288/0x490 [ 989.939170][ T5866] nsim_drv_remove+0x58/0x170 [ 989.944396][ T5866] device_release_driver_internal+0x46f/0x870 [ 989.951009][ T5866] bus_remove_device+0x455/0x570 [ 989.956485][ T5866] device_del+0x527/0x8f0 [ 989.961401][ T5866] device_unregister+0x21/0xf0 [ 989.966712][ T5866] del_device_store+0x2b0/0x370 [ 989.972113][ T5866] kernfs_fop_write_iter+0x3af/0x540 [ 989.977950][ T5866] vfs_write+0x61d/0xb90 [ 989.982735][ T5866] ksys_write+0x150/0x270 [ 989.987606][ T5866] do_syscall_64+0x14d/0xf80 [ 989.992744][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.999354][ T5866] [ 989.999354][ T5866] other info that might help us debug this: [ 989.999354][ T5866] [ 990.009597][ T5866] Chain exists of: [ 990.009597][ T5866] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 990.009597][ T5866] [ 990.024052][ T5866] Possible unsafe locking scenario: [ 990.024052][ T5866] [ 990.031618][ T5866] CPU0 CPU1 [ 990.037010][ T5866] ---- ---- [ 990.042480][ T5866] lock(&root->kernfs_rwsem); [ 990.047270][ T5866] lock(cpuhp_state_mutex); [ 990.054399][ T5866] lock(&root->kernfs_rwsem); [ 990.061803][ T5866] lock(&root->kernfs_iattr_rwsem); [ 990.067110][ T5866] [ 990.067110][ T5866] *** DEADLOCK *** [ 990.067110][ T5866] [ 990.075284][ T5866] 8 locks held by syz-executor/5866: [ 990.080587][ T5866] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 990.089501][ T5866] #1: ffff88807a0bac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 990.099279][ T5866] #2: ffff888028a35968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 990.109325][ T5866] #3: ffffffff8f444d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 990.119639][ T5866] #4: ffff88802a162130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 990.130409][ T5866] #5: ffff888035265250 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 990.140546][ T5866] #6: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x113/0x780 [ 990.149543][ T5866] #7: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 990.160277][ T5866] [ 990.160277][ T5866] stack backtrace: [ 990.166191][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 990.166213][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 990.166226][ T5866] Call Trace: [ 990.166235][ T5866] [ 990.166244][ T5866] dump_stack_lvl+0xe8/0x150 [ 990.166272][ T5866] print_circular_bug+0x2e1/0x300 [ 990.166303][ T5866] check_noncircular+0x12e/0x150 [ 990.166334][ T5866] __lock_acquire+0x15a5/0x2cf0 [ 990.166362][ T5866] ? __lock_acquire+0x6b5/0x2cf0 [ 990.166391][ T5866] lock_acquire+0xf0/0x2e0 [ 990.166413][ T5866] ? kernfs_unlink_sibling+0x71/0x180 [ 990.166438][ T5866] down_write+0x96/0x200 [ 990.166455][ T5866] ? kernfs_unlink_sibling+0x71/0x180 [ 990.166474][ T5866] ? __pfx_down_write+0x10/0x10 [ 990.166489][ T5866] ? kernfs_root+0x1c/0x230 [ 990.166516][ T5866] ? kernfs_root+0x1c/0x230 [ 990.166541][ T5866] ? kernfs_root+0x1c/0x230 [ 990.166567][ T5866] ? kernfs_root+0x1ea/0x230 [ 990.166593][ T5866] kernfs_unlink_sibling+0x71/0x180 [ 990.166615][ T5866] __kernfs_remove+0x3e7/0x660 [ 990.166635][ T5866] kernfs_remove_by_name_ns+0xaf/0x130 [ 990.166656][ T5866] sysfs_remove_group+0xfc/0x2e0 [ 990.166685][ T5866] sysfs_remove_groups+0x54/0xb0 [ 990.166713][ T5866] net_rx_queue_update_kobjects+0x68d/0x740 [ 990.166747][ T5866] netdev_unregister_kobject+0x113/0x450 [ 990.166777][ T5866] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 990.166814][ T5866] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 990.166842][ T5866] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 990.166880][ T5866] unregister_netdevice_queue+0x31f/0x360 [ 990.166909][ T5866] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 990.166941][ T5866] nsim_destroy+0x20b/0x780 [ 990.166966][ T5866] __nsim_dev_port_del+0x14d/0x1b0 [ 990.166994][ T5866] nsim_dev_reload_destroy+0x288/0x490 [ 990.167023][ T5866] nsim_drv_remove+0x58/0x170 [ 990.167047][ T5866] ? __pfx_nsim_bus_remove+0x10/0x10 [ 990.167070][ T5866] device_release_driver_internal+0x46f/0x870 [ 990.167101][ T5866] bus_remove_device+0x455/0x570 [ 990.167132][ T5866] ? __pfx_bus_remove_device+0x10/0x10 [ 990.167157][ T5866] device_del+0x527/0x8f0 [ 990.167181][ T5866] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 990.167208][ T5866] ? __pfx_device_del+0x10/0x10 [ 990.167236][ T5866] device_unregister+0x21/0xf0 [ 990.167262][ T5866] del_device_store+0x2b0/0x370 [ 990.167286][ T5866] ? __pfx_del_device_store+0x10/0x10 [ 990.167309][ T5866] ? sysfs_file_kobj+0x1e4/0x230 [ 990.167332][ T5866] ? sysfs_kf_write+0x166/0x260 [ 990.167357][ T5866] ? __pfx_sysfs_kf_write+0x10/0x10 [ 990.167380][ T5866] kernfs_fop_write_iter+0x3af/0x540 [ 990.167420][ T5866] vfs_write+0x61d/0xb90 [ 990.167445][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 990.167466][ T5866] ? kmem_cache_free+0x187/0x630 [ 990.167486][ T5866] ? fd_install+0x94/0x3d0 [ 990.167524][ T5866] ? do_sys_openat2+0x14c/0x200 [ 990.167573][ T5866] ksys_write+0x150/0x270 [ 990.167594][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 990.167619][ T5866] do_syscall_64+0x14d/0xf80 [ 990.167646][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.167664][ T5866] ? clear_bhb_loop+0x40/0x90 [ 990.167685][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.167703][ T5866] RIP: 0033:0x7ffab175d04e [ 990.167721][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 990.167737][ T5866] RSP: 002b:00007ffcc011c5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.167756][ T5866] RAX: ffffffffffffffda RBX: 0000555585bc1500 RCX: 00007ffab175d04e [ 990.167770][ T5866] RDX: 0000000000000001 RSI: 00007ffcc011c670 RDI: 0000000000000005 [ 990.167782][ T5866] RBP: 00007ffab1833514 R08: 0000000000000000 R09: 0000000000000000 [ 990.167794][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.167805][ T5866] R13: 00007ffcc011c670 R14: 00007ffab2544620 R15: 0000000000000003 [ 990.167826][ T5866] [ 990.553887][ T5846] Bluetooth: hci2: command tx timeout [ 990.638107][ T5866] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.657981][ T5866] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.739793][ T5866] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.756938][ T5866] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.832713][ T5866] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.843310][ T5866] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.928679][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 990.938210][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 990.945995][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 990.965608][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 990.983499][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 991.003774][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 991.017051][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 991.029134][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 991.038921][T30922] IPVS: stop unused estimator thread 0... [ 991.129770][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.149817][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.164146][T30908] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.171295][T30908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.197755][T30908] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.204947][T30908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.228107][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 991.240515][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 991.425724][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.474670][ T5866] veth0_vlan: entered promiscuous mode [ 991.490367][ T5866] veth1_vlan: entered promiscuous mode [ 991.528516][ T5866] veth0_macvtap: entered promiscuous mode [ 991.538458][ T5866] veth1_macvtap: entered promiscuous mode [ 991.560557][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.580709][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.597085][T30908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.618841][T30908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.636182][T30908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.651231][T30908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.668755][ T5866] ieee80211 phy91: Selected rate control algorithm 'minstrel_ht' [ 991.704976][T15410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.714867][ T5866] ieee80211 phy92: Selected rate control algorithm 'minstrel_ht' [ 991.727636][T15410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.764529][T30922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.773090][T30922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.015226][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL