last executing test programs: 3.473461083s ago: executing program 3 (id=3580): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x5f1}], 0x1, 0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff00000000001851000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) (async) r3 = socket(0x3, 0x3, 0x3) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000100), 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xfffffffd, 0xffffffffffffffff, 0x5b0f9f04, 0xffffffffffffffff}) (async) r9 = socket$kcm(0xa, 0x3, 0x73) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) 3.225957618s ago: executing program 3 (id=3583): r0 = socket(0x10, 0x3, 0x0) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)={0x88, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0xfffffffffffffd8d, 0x0, 0x0, 0x0, @uid=r4}, @generic="e560dede600f5be9a8cafe6f128081ce2fe830edfe01b306ded9fba4c53a0e8a43417fe13078299e5d29c72effce1c3d071a0d55a0a836e9b773fb1f03e3aa13d80d1d01f15840352e997691051ae934851a872e2f50", @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x88}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r1, r4, r5}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) 2.779259261s ago: executing program 3 (id=3588): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000400)={0x4}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0xab4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xfffffffffffffe73, [@enum={0x8, 0x5, 0x0, 0x6, 0x4, [{0x9, 0xff}, {0x2}, {0x3, 0x10000}, {0x13, 0xa}, {0xa, 0x9}]}, @volatile={0x800c}]}}, &(0x7f0000000080)=""/117, 0x5a, 0x75, 0x5, 0x2}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7f, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0xffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2.665421073s ago: executing program 3 (id=3589): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000002000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="cc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000025000100fdff00000202000000000000"], 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd, 0x4}, {0x1, 0xe}, {0xd, 0xe}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r12, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r12, &(0x7f0000000040)='l', 0x1, 0x14, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x0) 1.977529566s ago: executing program 3 (id=3599): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0xf000}}], 0x48}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000026c0)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'team_slave_1\x00', {0x6}, 0xffff}) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/15, &(0x7f00000000c0)=0xf) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1.976995202s ago: executing program 0 (id=3600): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) (async, rerun: 32) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (rerun: 32) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xd}, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4400d0c88fc71fb7537cee0000090a410400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000f21e0800f5eb433403400000000714000000020a0102000000000000000000000009140001001000010000000000000000000a00000a201b289751427598547f4a03bcf8c86c98f12fa6f8aef5b6f7e1531896e77da258dc803993ad44f421ce401c67ef8baf"], 0x80}}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.711317954s ago: executing program 0 (id=3602): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x80, 0x700, 0x6, 0x1, {{0x38, 0x4, 0x1, 0x9, 0xe0, 0x66, 0x0, 0xd, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x20, 0x3b, 0x0, 0x8, [0x6, 0x1, 0x2f, 0x8, 0x3, 0x0, 0xfffffffe]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0x2}, {0x0, 0x8, "6c3da075881d"}, {0x5, 0x8, "d3165ae944b3"}, {0x5, 0x4, "8f6c"}, {0x2, 0x7, "648493b0ee"}, {0x5, 0x11, "0022b6c0ce7f94195b2a7cab8d5ce3"}]}, @generic={0x44, 0xb, "0489f1a4beeeb11abc"}, @lsrr={0x83, 0x17, 0xf1, [@local, @remote, @remote, @loopback, @broadcast]}, @rr={0x7, 0x13, 0xe, [@local, @local, @remote, @remote]}, @lsrr={0x83, 0xb, 0xf7, [@dev={0xac, 0x14, 0x14, 0x3e}, @remote]}, @cipso={0x86, 0x18, 0x2, [{0x0, 0xf, "26bdd6740c0517826cfc38f33f"}, {0x7, 0x3, "03"}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x84, 0x1, 0x3, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1a000000}, {@empty, 0x4}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.625363026s ago: executing program 2 (id=3603): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000005b4b172f39545079d6be31e729e21bd4900000000bce59ed84d86628365be39415459c6276ed48733940c927a129380df3a839cfd523d7b8c4a914c4019ab70d3d446748a1375cfd2b1b49370", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0xc00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f8, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0xe}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x1b0, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x134, 0x9, 0x0, 0x1, [@m_ct={0x8c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b0ee}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xd}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket$can_raw(0x1d, 0x3, 0x1) epoll_create1(0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@ipv4_newnexthop={0x28, 0x68, 0x8, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x1, 0x0, 0x26}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000}, 0x40044) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r8, 0x0, 0x4, &(0x7f0000000140)='/&@\x00'}, 0x30) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24064810}, 0x40) read(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.624465629s ago: executing program 3 (id=3604): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) unshare(0x6a040000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="dc0000001e00010a00000000000000000002"], 0xdc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000440)="7710e1030ea7d100c0acf916c0f828c7ba1974255595545c133162579014a678ce6e5ff6f9f66b28430650fc5491c0f3776134d3d3b09c025702fe07351f23663f770694b3985c4649a24d17fe7fe8226ce515af2e421b6454cc9685cf201c8dedfde5ee95347b31582bbff88c41014aca4d1640e57ced52ab559a7da45c8281eab1efa1245eb17bf1244dad44452c7ff8cb4233af0cf840adc83a96a045db4ef937b0e3f8a370b275550e99f529ca328c0ed0045fa857ed58ac3c564d42a8fc6cc3889e46bda58241ddccff7c92eeb8b6dac6f1df", 0xd5, 0x20060815, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @private1, 0x7}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="302500fe930000000000ab30000000000000a900", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004200000008001b0000000000"], 0x30}}, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000640)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @bcast, @bpq0, 0xff, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r12}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r3}, 0x10) 1.50919916s ago: executing program 0 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "ac3381"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 1.401552278s ago: executing program 1 (id=3607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x80, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r2, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) 1.260201516s ago: executing program 0 (id=3608): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r4, @ANYBLOB="8304050000000000180012800b00010004703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendto$packet(r1, &(0x7f0000000400)="1e0d", 0x2, 0x0, &(0x7f0000000440)={0x11, 0x1c, r4, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e20, @local}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='host1x_syncpt_wait_check\x00', r6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0xbf, 0xf4, &(0x7f00000000c0)="8e9efea558a79342bd8939a88058fb49f86c37f9515f1e90a80ad7b607308c2bfa0789d5d2f7b8b277f746b7e5a3c88ca507b9e39464112bcc799ec1860f768c36bde22faa0400e5b8118929c75cb98b19c1faf806a94ccbee83bb7c0d8d57ec195b7ef1540a00e7b78407535172fac93d064bba05ebc1f99ded7f5f919c812292b3f898bf2ce37b2b12bb62991314e6b97c118be34735812a8a5a9978adb4dc135201df50ab8bf854123d267304e5c51014b0feb19d81c53424cb0f5ea009", &(0x7f0000000180)=""/244, 0x3, 0x0, 0x0, 0x1a, &(0x7f0000000280), &(0x7f00000002c0)="f1733650ca7ca15a2aaac58115a9f8550ae9eaf3bec131ad8f43", 0x5, 0x0, 0x9}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.232394202s ago: executing program 4 (id=3609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.178486718s ago: executing program 1 (id=3610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22202}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000080}, 0xc805) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) 1.129151101s ago: executing program 2 (id=3611): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x80000) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xea, "68522181984f63875197cf9d1ca95419a89d1f199b519ae86e10f066e673a12aaf398ec1890419b55fd745dc8fc296e88a78e59b06dc4ce68afe16cb54678dde976fe17dec0461834d583328df61bc86bec35e964513d9172cc6cecd7f3bbcbbf42d1c2c1125bbdc050e3ad57dfabc9f38b12a5669b27f844c8c7c74db20d67bf0997c4e9000166ea1adef6fb503ff2b58abe93e72aca7d8213786faa2e258a712abc9e2233d6455fd7c2af2933b95ad7f97cbfbce5f10e4b419ac158795024c159c4b4536afb56709155bdb0bd11e477893a84296a45f7953b67cc086975f2d8de0e01462922a3d2f82"}, &(0x7f0000000200)=0xf2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x94d0, 0xd2, "0de94e9966e2e9a2787ad95f3d12157589b54f9b8ecfba399cb6052d2191205a57ed8a48b423b9b928f5094c869a80edd5b112e46cd6f4ad65bd319de00f5d7103385fbced500403046c7219fe0b09c8c9389ce997968e0bb15c9140728b8cef7c3ed8456c415c1b8b261cd7eeb5a8df1efda25083d672a264c9e032821afc24b8efb88a021381a4bd65e75612f89af73c2198ca9a6f0691bc13bdbc13fe21a09e5689164d92b4ee4c713c32fb95b04a10540a5fcf071a517dd68a857b7fb61cf3f70a355f04406ad5926b4becef81937818"}, 0xda) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x80, 0x3, 0x9, 0x3, 0x5, 0xb, 0x8, 0x2, 0x4, 0x1, 0x82, 0xf, 0x4}, 0xe) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r1, 0x101}, 0x8) (async) sendto$rose(r0, &(0x7f00000003c0)="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", 0x1000, 0x90, 0x0, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000013c0)=""/31, &(0x7f0000001400)=0x1f) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001440)={0x9, 0x8000, 0x7, 0xfffffcf2, r1}, 0x10) (async) recvmsg$can_j1939(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001480)=""/89, 0x59}, {&(0x7f0000001500)=""/64, 0x40}, {&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000001600)=""/131, 0x83}, {&(0x7f00000016c0)=""/156, 0x9c}, {&(0x7f0000001780)=""/229, 0xe5}, {&(0x7f0000001880)=""/243, 0xf3}], 0x7, &(0x7f0000001a00)=""/89, 0x59}, 0x40) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000001ac0)=0x8) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001b00)={r1, 0x1294, 0x7, 0x61df}, &(0x7f0000001b40)=0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000001b80)={r1, 0x3d03}, 0x8) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r5) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001bc0)={r4, 0x4e, "d41bb1fbef9b9408c4606b1253f09fd3d964b02547c4bc408af20583c14fff584d2f5892bf9c1e3c40f94e367beb2d0be21ba8dbe2da409adbf3d6636368bc00f33c05fa2b50059cb9e58d5fe57c"}, &(0x7f0000001c40)=0x56) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000001c80)={r6, 0x4f7}, 0x8) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001cc0)={0x4, 0x0, 0x8, 0x0, 0x0, [{{}, 0x286}, {{r3}}, {{r5}, 0x5}, {{r0}, 0xe}, {{r0}, 0x8b4}, {{r2}, 0x9}, {{r0}, 0x81}, {{r3}, 0xb10}]}) sendmsg$alg(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e00)="85235646dfd318", 0x7}], 0x1, &(0x7f0000001e80)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1078, 0x4060}, 0x4000004) (async) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000002f40), &(0x7f0000002f80)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000032c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003280)={&(0x7f0000003000)=@deltaction={0x254, 0x31, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa215}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000a5) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000003300)={r4, 0x8000}, 0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003340), &(0x7f0000003380)=0x4) (rerun: 32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000033c0)={r1, 0x1}, &(0x7f0000003400)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000003440), &(0x7f0000003480)=0xc) (async) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000004500)={{&(0x7f00000034c0)=""/4096, 0x1000}, &(0x7f00000044c0), 0x28}, 0x20) 980.789174ms ago: executing program 4 (id=3612): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%-010d \x00'}, 0x20) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="22616c7e17a5be695a508446ebbaae5f5c86600ee0c41828ac95aaaa2bb625b1202c5f35433f08e2a98bb05cb83771829aba013036e8ca16a7d2f34e19391e28ccebf8251f7f0922dd398b2974a9c981674076f7321325f856f163a973ee46655fd110badf6a2fba45936271db22c645aa7c8c459b275e093f5345cce9fc4e67fed8ba87cfe4", 0x86}, {&(0x7f00000002c0)}], 0x2) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="22616c7e17a5be695a508446ebbaae5f5c86600ee0c41828ac95aaaa2bb625b1202c5f35433f08e2a98bb05cb83771829aba013036e8ca16a7d2f34e19391e28ccebf8251f7f0922dd398b2974a9c981674076f7321325f856f163a973ee46655fd110badf6a2fba45936271db22c645aa7c8c459b275e093f5345cce9fc4e67fed8ba87cfe4", 0x86}, {&(0x7f00000002c0)}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ffff639cc960e876d6b311f3743c5ce3de638daad3aa8d01d06af29cc2a334e2d348e69680fd8077fd6d32469c4222a6f0987480a498e70c18fbd2fadb93019cb63f1322e6541b508f357bb86704c83a44b0bc028c71b1f56acca0fc8d09edd3dec8d0f971b77a0e5e"], 0x64}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008810) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 942.019571ms ago: executing program 1 (id=3613): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) 940.206794ms ago: executing program 2 (id=3614): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @loopback}, &(0x7f00000000c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="f86ab650d182e8734f200ddb519193f9aced2678a5f7853404fa8a10a28085ba5c11ac45f0fc0b239954b8d05be45e41b051aa17f8c34aa68ab03e114516abbbdcef04ed334de6bc7573e87013293974c1addb65a229d9e46860cfa178360b261377169114fbfaf33b024309f4db79b0f625fb992dab485f2ebfa62805cdc9e518005b64fd5e283315b16e8bc666e1c3763a37d416de0545d649"], &(0x7f0000001c40)='GPL\x00', 0xdb4c, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000200)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x74, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7f, @rand_addr=' \x01\x00', 0xf3}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x4}]}, &(0x7f00000002c0)=0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x440d4}, 0x4004801) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}, @IFA_BROADCAST={0x8, 0xb, @loopback}]}, 0x28}}, 0x0) 745.564456ms ago: executing program 4 (id=3615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 702.578538ms ago: executing program 0 (id=3616): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (rerun: 32) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}}, 0x0) (rerun: 64) connect$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0xfffffffd}, 0x70bd25, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x158}}, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) (async) unshare(0x400) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x32, 0x0, @empty, @loopback}}}}}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) recvfrom$l2tp(r5, &(0x7f0000000000)=""/39, 0x27, 0x4082, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) syz_emit_ethernet(0xf3, &(0x7f00000003c0)={@random="52225491e276", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@mpls_uc={0x8847, {[{0x800}], @llc={@llc={0x45, 0x4, "bee2", "d008136a3efe9b3b6775a1b71405485194655f63eebc42049abbb9eda5202a3f0d90b012fde74a7fc0fbe34136989176289233bed30808b752e0f937a482f61f6fe1404571fa49c4c00a87e7d3db6749093f2d3f6cffc06607c5ff172b26c18640f5f31aa094aa5764e780a1607908c0da98ba61868eb032463254a966e576c8958ee2b38804506877903c2d426618808884b7567767ec498d4c91f5a22730752234861e048d3809df7eeeb0e5b4943ba2f615353c6fe1d593d2168aa6b9b683547a1722247383244f9d95ee80985edda13efe2486076c685617d83c55"}}}}}}, 0x0) 550.031974ms ago: executing program 2 (id=3617): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x20000004) close(0x3) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000040)=@ieee802154, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/231, 0xe7}], 0x8, &(0x7f00000003c0)=""/22, 0x16}, 0x1}, {{&(0x7f0000000800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/20, 0x14}, {&(0x7f0000000a40)=""/39, 0x27}, {&(0x7f0000000a80)=""/254, 0xfe}], 0x6, &(0x7f0000000c00)=""/160, 0xa0}, 0x1}], 0x2, 0x140, &(0x7f0000000d40)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) 493.422945ms ago: executing program 1 (id=3618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg$qrtr(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b543000000000000000005"], 0x14}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040051}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000001b0000000000000000950000000000ecffe21ad61faccd9f8b27da9aa6efc3dddec10c553e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, r2) (async) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 491.698954ms ago: executing program 4 (id=3619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000004400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x32) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x27}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="40000000cb0c272d1d3f2fc157730933966d7c5df021709998260afd1399c69aeb9c42db3e437f9c3a39a502a00952c3a11f2660d59e91074bd52540ef4a675ad48830efa9b7d80d4b944607797be91bcbe0d637afd2ab32b6963076a7b33983ce93e0ed244c4583d9f5891fb0accdc4f12019ecad7dd2b7b924988733ec7786291727f453ad8d19b49efbe63e892fda8e8f79b5ef99b1050c4d77090d9e74fc20c3a2245e406fab76e8df079fc08fece8926e4397c14f5751bfe041ed26ec9a944c89f4062c244785dfac600208baf4ac4cf5d0fd1d08bf8c788c24d40f86dd4da2e23dde05316ccd89e7ae7f98c6ef0e599453cfb7769a00", @ANYRES16=r9, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000040000000000000050037000000000008000200", @ANYRES32=r11, @ANYBLOB], 0x40}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000088}, 0x8004) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8}]}, 0x1c}}, 0x20044801) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x48}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r15, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r15) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) 397.341742ms ago: executing program 2 (id=3620): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0x27c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@tmpl={0x1c4, 0x5, [{{@in6=@remote}, 0x0, @in=@broadcast}, {{@in6=@mcast2}, 0x0, @in=@dev}, {{@in=@multicast2}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x12f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback}, {{}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in6=@dev}, 0x0, @in=@local}]}]}, 0x27c}}, 0x0) 287.957567ms ago: executing program 1 (id=3621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x84, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 237.580279ms ago: executing program 4 (id=3622): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r2, 0x1}, 0x20) close(r1) poll(&(0x7f0000000040), 0x55, 0x0) 235.263593ms ago: executing program 0 (id=3623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000060a0900000000000000010002000000090002e773797a19000000000900020073797a300000000018000480142e000000000100657874686472000004000280140000001100010000000000576bd20a5b1554028b8ae8668f000000000000000a00000000000000000044a930db6eb822b26879c01f4ffbe58fc78f1a86f54608ffe0071481d47f"], 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) write(r2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x20}}, 0x4000084) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4008080) 220.85757ms ago: executing program 2 (id=3624): socket(0x2, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2a1004000000000008001b000000000023911bbfb192e653920e1654d48ba5df73baedbd155f24868164c6663162df611e68426606bcb06cc2e6a784c4ddebcf672d1e47bcc0a1c0dcaeda37481522eed17f1f3d82bbc7417c78514509cee40075a3d80f3600ee1a3a5e56af2753dba346ff9185469a7de3"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 5.065979ms ago: executing program 4 (id=3625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0) (async) ioctl$SIOCNRDECOBS(r2, 0x89e2) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000300ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r1], 0x50}}, 0x4040040) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003300010326bddf250600000000000000"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) (async) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @bcast, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @bcast]}) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 1 (id=3626): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x6, 0x6, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xd, 0x80, [0xfffffffffffffff8, 0x4c, 0x7, 0xffff]}}, @enc_lim={0x4, 0x1, 0xe4}, @ra={0x5, 0x2, 0x2}]}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x3, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x6, 0x6, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xd, 0x80, [0xfffffffffffffff8, 0x4c, 0x7, 0xffff]}}, @enc_lim={0x4, 0x1, 0xe4}, @ra={0x5, 0x2, 0x2}]}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x3, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) kernel console output (not intermixed with test programs): n active interface with an up link [ 246.441014][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 246.441051][T12273] netlink: 'syz.4.1805': attribute type 1 has an invalid length. [ 246.456423][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.624774][T12273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.633042][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.657176][T12275] bond3: (slave geneve4): making interface the new active one [ 246.668989][T12275] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 246.795875][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.836950][ T7002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.904319][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 246.935518][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 247.081522][T12311] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1813'. [ 247.723774][T12341] tipc: Enabled bearer , priority 0 [ 247.746232][T12341] syzkaller0: entered promiscuous mode [ 247.764879][T12341] syzkaller0: entered allmulticast mode [ 247.907272][T12347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1822'. [ 247.917386][T12339] tipc: Resetting bearer [ 247.961824][T12339] tipc: Disabling bearer [ 248.010382][T12347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1822'. [ 248.058306][T12347] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1822'. [ 248.382059][ T5910] udevd[5910]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 248.407954][T12372] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 248.421981][T12372] netlink: 'syz.2.1828': attribute type 2 has an invalid length. [ 248.607278][T12381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1831'. [ 248.609212][T12386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.840215][T12396] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 248.974218][T12394] netlink: zone id is out of range [ 249.009738][T12396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.087145][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1835'. [ 249.541256][T12424] pimreg: entered allmulticast mode [ 249.571972][T12422] tipc: Enabling of bearer rejected, already enabled [ 249.745394][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 249.856035][T12436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.913808][T12437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.947623][T12437] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 249.969865][T12437] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 249.977385][T12448] IPVS: persistence engine module ip_vs_pe_À not found [ 250.069974][T12446] bond0: (slave batadv0): Releasing backup interface [ 250.133751][T12446] bridge_slave_0: left allmulticast mode [ 250.156979][T12446] bridge_slave_0: left promiscuous mode [ 250.173313][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.225338][T12446] bond0: (slave bridge_slave_1): Releasing backup interface [ 250.255210][T12446] bond0: (slave bond_slave_0): Releasing backup interface [ 250.279452][T12446] bond0: (slave bond_slave_1): Releasing backup interface [ 250.293082][T12446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.301267][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.324009][T12446] bond1: (slave geneve2): Releasing active interface [ 250.414791][T12450] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 250.446283][T12469] nbd: nbd0 already in use [ 250.613387][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 250.624541][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 250.663590][T12476] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1860'. [ 250.675099][T12476] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1860'. [ 250.715851][T12476] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1860'. [ 250.760787][T12475] 8021q: VLANs not supported on wg1 [ 250.915117][T12488] netlink: 'syz.3.1864': attribute type 4 has an invalid length. [ 251.217328][T12503] tipc: Can't bind to reserved service type 0 [ 251.403532][T12514] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 253.136813][T12583] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 253.332542][T12566] lo speed is unknown, defaulting to 1000 [ 253.529759][T12600] __nla_validate_parse: 5 callbacks suppressed [ 253.529782][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 253.559708][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 253.784448][T12608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1902'. [ 253.857563][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 253.867907][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 254.162767][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 254.174678][T12634] netlink: 'syz.2.1908': attribute type 83 has an invalid length. [ 254.365226][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 254.366804][T12641] netlink: 'syz.4.1911': attribute type 7 has an invalid length. [ 254.416799][T12643] netlink: 'syz.4.1911': attribute type 7 has an invalid length. [ 254.469454][T12651] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 254.659700][T12660] hsr0 speed is unknown, defaulting to 1000 [ 254.684254][T12660] hsr0 speed is unknown, defaulting to 1000 [ 254.753510][T12660] hsr0 speed is unknown, defaulting to 1000 [ 254.882705][T12660] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.007763][T12660] hsr0 speed is unknown, defaulting to 1000 [ 255.038023][T12660] hsr0 speed is unknown, defaulting to 1000 [ 255.130492][T12660] hsr0 speed is unknown, defaulting to 1000 [ 255.182089][T12660] hsr0 speed is unknown, defaulting to 1000 [ 255.216005][T12660] hsr0 speed is unknown, defaulting to 1000 [ 255.589422][T12702] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1924'. [ 255.592820][T12701] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 255.607653][T12702] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 255.615978][T12702] openvswitch: netlink: Duplicate key (type 0). [ 256.021119][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1929'. [ 256.031411][T12719] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 256.042576][T12719] netlink: 'syz.4.1929': attribute type 2 has an invalid length. [ 256.125138][T12728] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 256.134644][T12728] netlink: 'syz.3.1932': attribute type 13 has an invalid length. [ 256.272089][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 256.590158][T12728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.273814][T12784] IPv6: Can't replace route, no match found [ 257.576838][T12796] netlink: 'syz.4.1950': attribute type 29 has an invalid length. [ 257.612173][T12796] netlink: 'syz.4.1950': attribute type 29 has an invalid length. [ 257.765399][T12804] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 258.552151][T12850] __nla_validate_parse: 6 callbacks suppressed [ 258.552173][T12850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1965'. [ 258.875911][T12865] netlink: 'syz.2.1968': attribute type 8 has an invalid length. [ 259.283670][T12872] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1974'. [ 259.833303][T12894] netlink: 'syz.2.1980': attribute type 5 has an invalid length. [ 259.874793][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1978'. [ 260.162769][T12912] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1983'. [ 260.581913][T12930] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 260.615742][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 260.873297][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 260.938538][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 261.211449][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.274269][T12957] sctp: [Deprecated]: syz.0.1993 (pid 12957) Use of int in max_burst socket option. [ 261.274269][T12957] Use struct sctp_assoc_value instead [ 261.341426][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 261.401813][T12960] sctp: [Deprecated]: syz.0.1993 (pid 12960) Use of int in max_burst socket option. [ 261.401813][T12960] Use struct sctp_assoc_value instead [ 262.076123][T12989] netlink: 'syz.3.2002': attribute type 3 has an invalid length. [ 262.090773][T12989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.256916][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1999'. [ 262.423662][T12999] can: request_module (can-proto-0) failed. [ 262.674612][T13017] syzkaller0: entered promiscuous mode [ 262.695593][T13017] syzkaller0: entered allmulticast mode [ 262.721540][T13016] tipc: Enabled bearer , priority 0 [ 262.841778][T13016] tipc: Resetting bearer [ 262.904686][T13016] tipc: Disabling bearer [ 262.978411][T13038] bridge0: port 3(batadv0) entered disabled state [ 263.194902][T13054] netlink: zone id is out of range [ 263.205485][T13054] netlink: del zone limit has 4 unknown bytes [ 263.508057][T13068] netlink: 'syz.4.2020': attribute type 13 has an invalid length. [ 263.576996][T13068] netlink: 'syz.4.2020': attribute type 58 has an invalid length. [ 263.622899][T13068] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2020'. [ 263.871937][T13091] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 263.886005][T13091] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2026'. [ 263.922149][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 263.964446][T13088] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 264.031647][T13088] bond5: entered promiscuous mode [ 264.047477][T13088] bond5: entered allmulticast mode [ 264.061101][T13088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.070496][T13105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2029'. [ 264.709101][T13141] syzkaller1: entered promiscuous mode [ 264.714728][T13141] syzkaller1: entered allmulticast mode [ 265.080178][T13162] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.2045'. [ 265.161990][T13169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2045'. [ 266.517416][T13230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2063'. [ 266.619152][T13238] netlink: 'syz.1.2067': attribute type 1 has an invalid length. [ 266.644758][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 266.869963][T13246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2068'. [ 266.891808][T13250] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2070'. [ 266.911511][T13250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.084782][T13260] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 267.177293][T13262] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 267.608484][T13284] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 267.947411][T13298] netlink: 'syz.1.2083': attribute type 30 has an invalid length. [ 268.117855][T13315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.210196][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.921208][T13356] __nla_validate_parse: 5 callbacks suppressed [ 268.921233][T13356] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2100'. [ 269.052505][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 269.129930][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'. [ 269.131679][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 269.361292][T13378] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 269.392487][T13378] netlink: 'syz.2.2106': attribute type 2 has an invalid length. [ 269.520449][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 269.520836][T13390] netlink: 'syz.1.2109': attribute type 11 has an invalid length. [ 269.546618][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 269.557418][T13390] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2109'. [ 269.576189][T13391] netlink: 'syz.4.2110': attribute type 1 has an invalid length. [ 270.017751][T13417] netlink: 'syz.3.2115': attribute type 4 has an invalid length. [ 270.069080][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'. [ 270.200773][T13409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.281977][T13434] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2117'. [ 270.337036][T13434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2117'. [ 270.535363][T13445] netlink: 'syz.4.2120': attribute type 2 has an invalid length. [ 271.085983][T13464] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 271.113792][T13464] netlink: 'syz.4.2127': attribute type 11 has an invalid length. [ 271.436940][T13485] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 271.459670][T13485] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 271.481653][T13485] bond0: (slave wlan1): Opening slave failed [ 272.179639][T13513] netlink: 'syz.2.2146': attribute type 5 has an invalid length. [ 272.770090][T13542] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 273.351233][T13568] NCSI netlink: No device for ifindex 458760 [ 273.439983][T13579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.477503][T13579] batman_adv: batadv0: Interface activated: 0! [ 273.489000][T13579] batadv0: mtu less than device minimum [ 273.504557][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.517002][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.529030][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.541016][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.553009][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.565187][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.577281][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.589267][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.601250][T13579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 273.639324][T13577] erspan0: entered allmulticast mode [ 274.524400][T13638] validate_nla: 4 callbacks suppressed [ 274.524425][T13638] netlink: 'syz.0.2180': attribute type 4 has an invalid length. [ 274.623143][T13638] netlink: 'syz.0.2180': attribute type 4 has an invalid length. [ 275.521971][T13684] netlink: 'syz.4.2194': attribute type 13 has an invalid length. [ 275.615484][T13692] __nla_validate_parse: 9 callbacks suppressed [ 275.615507][T13692] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2196'. [ 275.823508][ T5863] lo speed is unknown, defaulting to 1000 [ 275.853125][ T5863] syz2: Port: 1 Link ACTIVE [ 276.010107][T13696] team0: Port device vcan1 removed [ 276.108987][T13713] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.294001][T13730] siw: device registration error -23 [ 276.307903][T13723] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 276.568920][T13739] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2207'. [ 276.838447][T13745] nbd1: detected capacity change from 0 to 127 [ 276.905445][ T5864] block nbd1: Receive control failed (result -104) [ 277.027637][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 277.060163][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'. [ 277.303581][T13778] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 277.339621][T13778] netlink: 'syz.1.2219': attribute type 2 has an invalid length. [ 277.374932][T13778] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2219'. [ 277.380348][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 277.410377][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 277.424952][T13781] chnl_net:caif_netlink_parms(): no params data found [ 277.718841][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2224'. [ 277.992930][T13802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.006117][T13802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.024984][T13802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 278.123185][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2229'. [ 278.261718][T13802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.290830][T13802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.310992][T13802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 278.492438][T13802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.507901][T13802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.547816][T13802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 278.690212][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2238'. [ 278.705800][T13802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.718351][T13802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.729511][T13802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 278.918861][ T63] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.935398][ T63] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 278.946196][ T63] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.973865][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.988342][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 278.999800][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.038812][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.059304][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 279.073777][ T37] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.113070][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.123905][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 279.144813][ T37] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.657372][T13876] net_ratelimit: 15 callbacks suppressed [ 279.657391][T13876] veth1_to_team: mtu less than device minimum [ 279.900039][T13895] tls_set_device_offload: netdev not found [ 280.653567][T13927] __nla_validate_parse: 4 callbacks suppressed [ 280.653592][T13927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2268'. [ 280.670031][T13927] IPVS: Error connecting to the multicast addr [ 280.685921][T13929] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2267'. [ 280.883892][T13934] ip6erspan0: entered promiscuous mode [ 281.006607][T13941] netlink: 'syz.0.2273': attribute type 16 has an invalid length. [ 281.025999][T13941] netlink: 'syz.0.2273': attribute type 17 has an invalid length. [ 281.044222][T13945] netlink: 'syz.1.2274': attribute type 10 has an invalid length. [ 281.073278][T13941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.101999][T13945] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 281.173010][T13945] netlink: 'syz.1.2274': attribute type 10 has an invalid length. [ 281.477504][T13970] tipc: Enabling of bearer rejected, failed to enable media [ 281.733643][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 281.746013][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 281.850725][T13991] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 281.903504][T13995] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 281.919579][T13995] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 281.952963][T13995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.986203][T13997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2290'. [ 282.107600][T14004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2291'. [ 282.518073][T14028] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 282.541927][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 282.722585][T14036] gretap1: entered promiscuous mode [ 282.773709][T14039] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 282.793301][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 282.809562][T14039] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2300'. [ 283.018486][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2303'. [ 283.136055][T14051] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.640155][T14066] lo speed is unknown, defaulting to 1000 [ 283.693510][T14066] hsr0 speed is unknown, defaulting to 1000 [ 284.100284][T14098] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 284.342945][T14098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 284.366191][T14099] vlan4: entered promiscuous mode [ 284.371529][T14099] bond8: entered promiscuous mode [ 284.377563][T14099] vlan4: entered allmulticast mode [ 284.382733][T14099] bond8: entered allmulticast mode [ 285.019988][T14136] netlink: 'syz.0.2330': attribute type 11 has an invalid length. [ 285.692042][T14167] bond0: (slave wlan1): Opening slave failed [ 285.734271][T14171] __nla_validate_parse: 12 callbacks suppressed [ 285.734295][T14171] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2339'. [ 286.022880][T14186] tunl0: left promiscuous mode [ 286.102265][T14186] sit0: left promiscuous mode [ 286.133132][T14186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.239972][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 286.301896][T14203] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 286.335878][T14203] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 286.347418][T14203] gretap1: entered promiscuous mode [ 286.352702][T14203] gretap1: entered allmulticast mode [ 286.392805][T14212] validate_nla: 3 callbacks suppressed [ 286.392827][T14212] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 286.503906][T14206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2348'. [ 286.515591][T14212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.558108][T14206] bond3: (slave gretap1): making interface the new active one [ 286.569422][T14206] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 286.748452][T14220] nbd2: detected capacity change from 0 to 127 [ 286.761424][T14225] sctp: [Deprecated]: syz.3.2352 (pid 14225) Use of int in max_burst socket option deprecated. [ 286.761424][T14225] Use struct sctp_assoc_value instead [ 286.788043][T14220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.845417][T14226] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2353'. [ 286.855511][T14226] xt_policy: neither incoming nor outgoing policy selected [ 286.874133][T14228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.899631][T14220] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 286.911764][T14220] team0: Port device batadv2 added [ 286.947757][ T5864] block nbd2: Receive control failed (result -104) [ 287.132247][T14236] team0: Device vti0 is of different type [ 287.291200][T14239] syzkaller1: entered promiscuous mode [ 287.339662][T14239] syzkaller1: entered allmulticast mode [ 287.350715][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'. [ 287.364661][T14249] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 287.385121][T14247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2361'. [ 287.389661][T14251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2359'. [ 287.622722][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 287.817795][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 287.842474][T14270] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 288.093157][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'. [ 288.212428][T14298] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 288.343158][T14305] bond9: (slave bridge8): making interface the new active one [ 288.352121][T14305] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 288.363806][T14307] netlink: 'syz.2.2374': attribute type 12 has an invalid length. [ 288.396110][T14307] netlink: 'syz.2.2374': attribute type 29 has an invalid length. [ 288.404885][T14308] netlink: 'syz.2.2374': attribute type 12 has an invalid length. [ 288.413911][T14308] netlink: 'syz.2.2374': attribute type 29 has an invalid length. [ 289.202544][T14344] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 290.491583][T14393] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 291.139126][T14437] __nla_validate_parse: 11 callbacks suppressed [ 291.139151][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2412'. [ 291.233933][T14442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2413'. [ 291.247449][T14437] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 291.406621][T14444] nbd3: detected capacity change from 0 to 549764202496 [ 291.445527][ T5864] block nbd3: Receive control failed (result -32) [ 291.455110][ T5993] block nbd3: Send control failed (result -32) [ 291.467806][T14447] pim6reg: entered allmulticast mode [ 291.506641][ T5993] block nbd3: Request send failed, requeueing [ 291.535217][T14449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2416'. [ 291.573216][ T95] block nbd3: Dead connection, failed to find a fallback [ 291.585435][ T95] block nbd3: shutting down sockets [ 291.591858][ T95] blk_print_req_error: 138 callbacks suppressed [ 291.591880][ T95] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.608604][ T95] buffer_io_error: 138 callbacks suppressed [ 291.608626][ T95] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.624006][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.634040][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.643288][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.654964][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.663032][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.672378][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.687281][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.706426][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.716270][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.725883][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.742911][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.768969][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.789526][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.816836][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.837940][ T5993] ldm_validate_partition_table(): Disk read failed. [ 291.844704][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.894892][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 291.944107][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 291.944507][ T5993] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.023746][ T5993] Buffer I/O error on dev nbd3, logical block 0, async page read [ 292.047886][ T5993] Dev nbd3: unable to read RDB block 0 [ 292.068815][ T5993] nbd3: unable to read partition table [ 292.114873][ T5993] ldm_validate_partition_table(): Disk read failed. [ 292.132563][T14456] syzkaller1: entered promiscuous mode [ 292.143666][ T5993] Dev nbd3: unable to read RDB block 0 [ 292.171280][T14473] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 292.181482][T14456] syzkaller1: entered allmulticast mode [ 292.199759][ T5993] nbd3: unable to read partition table [ 292.212570][T14474] netem: change failed [ 292.255210][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 292.465222][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 292.785642][T14510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2424'. [ 292.971634][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2427'. [ 293.078426][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 293.365659][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 293.429737][T14530] netlink: 'syz.3.2430': attribute type 1 has an invalid length. [ 293.655872][T14530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.720873][T14537] vlan2: entered allmulticast mode [ 293.742771][T14537] bond4: (slave vlan2): Opening slave failed [ 293.790836][T14530] netlink: 'syz.3.2430': attribute type 6 has an invalid length. [ 294.273611][T14569] netlink: 'syz.4.2440': attribute type 11 has an invalid length. [ 294.430636][T14577] netlink: 'syz.4.2440': attribute type 11 has an invalid length. [ 294.814726][T14597] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 295.038502][T14603] bond10: entered allmulticast mode [ 295.044260][T14603] 8021q: adding VLAN 0 to HW filter on device bond10 [ 295.056161][T14603] bridge0: port 1(bond10) entered blocking state [ 295.063225][T14603] bridge0: port 1(bond10) entered disabled state [ 295.073561][T14603] bond10: entered promiscuous mode [ 295.155663][T14616] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 295.263385][T14618] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 295.346949][T14618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.357570][T14620] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 295.385775][T14626] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.394190][T14626] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 295.406913][T14626] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 295.461269][T14618] veth7: entered promiscuous mode [ 295.472320][T14618] bond5: (slave veth7): Enslaving as an active interface with a down link [ 296.149883][T14632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.162138][T14618] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 296.510027][T14654] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 296.594602][T14654] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 296.628965][T14654] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 296.777594][T14664] __nla_validate_parse: 9 callbacks suppressed [ 296.777616][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 296.831088][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 296.875270][T14672] IPVS: length: 157 != 24 [ 296.910263][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 296.933231][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 296.955662][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 297.028131][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 297.078617][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 297.094883][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 297.111737][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 297.140332][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 297.318722][T14690] netlink: 'syz.0.2476': attribute type 9 has an invalid length. [ 297.484484][T14695] veth9: entered promiscuous mode [ 297.491741][T14695] veth9: entered allmulticast mode [ 297.859510][T14718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.695549][T14759] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 298.789820][T14762] syzkaller0: entered promiscuous mode [ 298.795371][T14762] syzkaller0: entered allmulticast mode [ 299.246043][T14788] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 299.678081][T14817] bond4: entered allmulticast mode [ 299.683948][T14817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.693497][T14817] bridge0: port 2(bond4) entered blocking state [ 299.701277][T14817] bridge0: port 2(bond4) entered disabled state [ 299.710751][T14817] bond4: entered promiscuous mode [ 299.718908][T14817] bridge0: port 2(bond4) entered blocking state [ 299.725563][T14817] bridge0: port 2(bond4) entered forwarding state [ 299.850747][ T6335] bridge0: port 2(bond4) entered disabled state [ 300.174837][T14847] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 300.219118][T14847] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.275192][T14847] bond5: (slave veth11): Enslaving as an active interface with a down link [ 300.317963][T14847] vlan2: entered allmulticast mode [ 300.323277][T14847] veth0_to_bond: entered allmulticast mode [ 300.331068][T14847] bond5: (slave vlan2): Opening slave failed [ 300.482003][T14861] netlink: 'syz.0.2524': attribute type 33 has an invalid length. [ 300.504136][T14862] netlink: 'syz.0.2524': attribute type 1 has an invalid length. [ 300.698224][T14875] netlink: 'syz.4.2525': attribute type 39 has an invalid length. [ 301.361942][T14904] tipc: Enabled bearer , priority 0 [ 301.371783][T14904] syzkaller0: entered promiscuous mode [ 301.380998][T14904] syzkaller0: entered allmulticast mode [ 301.409415][T14904] tipc: Resetting bearer [ 301.422990][T14903] tipc: Resetting bearer [ 301.458022][T14907] netlink: 'syz.0.2541': attribute type 2 has an invalid length. [ 301.458750][T14903] tipc: Disabling bearer [ 301.468871][T14907] netlink: 'syz.0.2541': attribute type 1 has an invalid length. [ 301.480587][T14907] netlink: 'syz.0.2541': attribute type 3 has an invalid length. [ 302.009854][T14927] __nla_validate_parse: 43 callbacks suppressed [ 302.009879][T14927] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2547'. [ 302.600509][T14960] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2554'. [ 302.644032][T14969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2555'. [ 302.644993][T14967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2555'. [ 303.546147][T15004] 8021q: VLANs not supported on lo [ 303.683531][T15007] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 303.764086][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2565'. [ 303.811707][T15007] dummy0: entered promiscuous mode [ 303.821130][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 303.821701][T15007] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.843185][T15011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2567'. [ 304.144208][T15023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.370935][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 304.457482][T15032] netlink: 'syz.4.2573': attribute type 10 has an invalid length. [ 304.553849][T15032] bond0: (slave ÿ): Opening slave failed [ 304.659774][T15032] batadv1: left allmulticast mode [ 304.664880][T15032] batadv1: left promiscuous mode [ 304.743706][T15032] bridge0: port 1(batadv1) entered disabled state [ 304.838639][T15032] bond1: (slave bridge1): Releasing active interface [ 304.912567][T15032] bond2: (slave bridge4): Releasing active interface [ 304.963461][T15032] bond3: (slave geneve4): Releasing active interface [ 305.002521][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 305.051897][T15032] bond4: left promiscuous mode [ 305.066774][T15032] bridge0: port 2(bond4) entered disabled state [ 305.105094][T10573] hsr0 speed is unknown, defaulting to 1000 [ 305.119764][T15055] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2578'. [ 305.485784][T15078] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 305.543987][T15080] tls_set_device_offload_rx: netdev not found [ 306.082100][T15108] syzkaller1: entered promiscuous mode [ 306.100503][T15108] syzkaller1: entered allmulticast mode [ 306.460441][T15122] netlink: 'syz.1.2596': attribute type 33 has an invalid length. [ 307.064835][T15145] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 307.086798][T15134] netlink: 'syz.0.2599': attribute type 8 has an invalid length. [ 307.290203][ T95] block nbd1: Possible stuck request ffff888024f75080: control (read@0,1024B). Runtime 30 seconds [ 307.302458][ T95] block nbd1: Possible stuck request ffff888024f75240: control (read@1024,1024B). Runtime 30 seconds [ 307.313544][ T95] block nbd1: Possible stuck request ffff888024f75400: control (read@2048,1024B). Runtime 30 seconds [ 307.326041][ T95] block nbd1: Possible stuck request ffff888024f755c0: control (read@3072,1024B). Runtime 30 seconds [ 307.410255][T15159] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 307.853316][T15180] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 307.885433][T15183] __nla_validate_parse: 3 callbacks suppressed [ 307.885455][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 307.908175][T15183] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 307.924579][T15183] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 308.157329][T15199] netlink: 'syz.2.2618': attribute type 4 has an invalid length. [ 308.207486][T15200] netlink: 'syz.2.2618': attribute type 4 has an invalid length. [ 308.624466][T15224] netlink: 'syz.4.2626': attribute type 1 has an invalid length. [ 308.755402][T15226] gretap1: entered promiscuous mode [ 308.781397][T15226] bond5: (slave gretap1): making interface the new active one [ 308.794539][T15226] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 308.805823][T15228] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2627'. [ 309.118153][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 309.167731][T15243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2631'. [ 309.461595][T15251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2634'. [ 309.566547][T15260] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2636'. [ 309.636928][T15260] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2636'. [ 309.693580][T15260] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2636'. [ 309.732104][T15260] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2636'. [ 309.759214][T15260] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2636'. [ 310.369979][T15288] bridge7: entered promiscuous mode [ 310.375456][T15288] bridge7: entered allmulticast mode [ 310.569767][T15295] lo speed is unknown, defaulting to 1000 [ 310.621851][T15309] openvswitch: netlink: Flow key attr not present in new flow. [ 310.621896][T15295] hsr0 speed is unknown, defaulting to 1000 [ 310.713274][T15315] openvswitch: netlink: Flow key attr not present in new flow. [ 310.769474][T15313] pim6reg1: entered promiscuous mode [ 310.791080][T15313] pim6reg1: entered allmulticast mode [ 311.129312][T15342] netlink: 'syz.4.2658': attribute type 7 has an invalid length. [ 311.464819][T15358] tipc: Enabling of bearer rejected, failed to enable media [ 311.545089][T15365] IPVS: Error joining to the multicast group [ 311.912363][T15379] IPv6: sit3: Disabled Multicast RS [ 311.922460][T15379] sit3: entered allmulticast mode [ 312.541516][T15413] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 313.101658][T15451] __nla_validate_parse: 40 callbacks suppressed [ 313.101685][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 313.681795][T15463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 313.814915][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 313.944308][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2691'. [ 313.955183][T15482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2691'. [ 314.246260][T15498] vlan2: entered promiscuous mode [ 314.269061][T15498] bridge0: entered promiscuous mode [ 314.285947][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2698'. [ 314.308451][T15494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2696'. [ 314.366683][T15502] vlan5: entered allmulticast mode [ 314.372124][T15502] bridge0: entered allmulticast mode [ 314.380173][T15502] bridge4: port 1(vlan5) entered blocking state [ 314.401491][T15502] bridge4: port 1(vlan5) entered disabled state [ 314.427901][T15502] vlan5: entered promiscuous mode [ 314.439666][T15502] bridge0: entered promiscuous mode [ 314.482856][T15507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2700'. [ 314.522248][T15507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2700'. [ 314.584855][T15504] netlink: 'syz.4.2699': attribute type 39 has an invalid length. [ 314.714221][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'. [ 314.746711][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 314.767376][T15520] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 314.969718][T15534] IPVS: Unknown mcast interface: nicvf0 [ 315.683001][T15563] team0: Device vti0 is of different type [ 316.374360][T15590] syzkaller1: entered promiscuous mode [ 316.389714][T15590] syzkaller1: entered allmulticast mode [ 316.401083][T15598] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 316.412212][T15597] netlink: 'syz.1.2722': attribute type 7 has an invalid length. [ 316.444192][T15597] : entered promiscuous mode [ 316.533938][T15597] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 316.645677][T15604] bond13: entered promiscuous mode [ 316.651950][T15604] bond13: entered allmulticast mode [ 316.658171][T15604] 8021q: adding VLAN 0 to HW filter on device bond13 [ 316.898417][ T56] block nbd2: Possible stuck request ffff888024fe5080: control (read@0,1024B). Runtime 30 seconds [ 316.909167][ T56] block nbd2: Possible stuck request ffff888024fe5240: control (read@1024,1024B). Runtime 30 seconds [ 316.927697][ T56] block nbd2: Possible stuck request ffff888024fe5400: control (read@2048,1024B). Runtime 30 seconds [ 316.939008][ T56] block nbd2: Possible stuck request ffff888024fe55c0: control (read@3072,1024B). Runtime 30 seconds [ 317.362568][T15651] netlink: 'syz.4.2738': attribute type 3 has an invalid length. [ 317.386272][T15648] syzkaller1: entered promiscuous mode [ 317.397803][T15648] syzkaller1: entered allmulticast mode [ 317.999286][T15669] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 318.174974][T15687] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 318.210461][T15690] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 318.218489][T15690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.391513][T15701] __nla_validate_parse: 42 callbacks suppressed [ 318.391539][T15701] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2755'. [ 318.426697][T15701] 0ªî{X¹¦: left allmulticast mode [ 318.497429][T15701] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2755'. [ 318.513723][T15701] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 318.540756][T15701] 1ªî{X¹¦: entered allmulticast mode [ 318.552210][T15701] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 318.608676][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2758'. [ 319.062325][T15736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2768'. [ 319.099829][T15721] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.2762'. [ 319.787548][T15775] policy can only be matched on NF_INET_PRE_ROUTING [ 319.787573][T15775] unable to load match [ 319.935919][T15785] netlink: 'syz.0.2782': attribute type 10 has an invalid length. [ 319.960749][T15785] veth0_vlan: entered allmulticast mode [ 320.001749][ T36] tipc: Resetting bearer [ 320.020276][T15789] IPVS: Unknown mcast interface: nicvf0 [ 320.118899][T15792] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 320.128047][T15792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2784'. [ 320.138469][T15792] batadv0: entered promiscuous mode [ 320.143725][T15792] batadv0: entered allmulticast mode [ 320.152323][T15792] bridge0: port 1(batadv0) entered blocking state [ 320.159390][T15792] bridge0: port 1(batadv0) entered disabled state [ 320.194653][T15794] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2786'. [ 320.242662][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 320.252341][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 320.426965][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'. [ 320.825531][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 320.872438][T15821] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 321.186084][T15835] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 321.750317][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2806'. [ 321.992105][T15876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.017728][T15876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 322.198376][T15876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.215786][T15876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 322.457384][T15876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.468985][T15876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 322.607230][T15876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.631237][T15876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 322.653975][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.918346][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 322.943584][ T37] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.030851][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 323.079569][ T37] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.127966][T15921] netlink: 'syz.2.2822': attribute type 6 has an invalid length. [ 323.142664][T15911] netlink: 'syz.0.2820': attribute type 5 has an invalid length. [ 323.142681][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 323.194851][ T37] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.300847][ T6335] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 323.322044][ T6335] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.484432][T15940] __nla_validate_parse: 4 callbacks suppressed [ 323.484454][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 323.692250][T15958] netlink: 'syz.3.2828': attribute type 49 has an invalid length. [ 323.826265][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2827'. [ 324.331867][T15985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2834'. [ 324.562661][T15997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2837'. [ 324.831266][T16008] tc_dump_action: action bad kind [ 324.936721][T16011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2842'. [ 325.199210][T16023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.342916][T16040] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.458698][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 325.485381][T16042] tipc: Enabled bearer , priority 0 [ 325.532231][T16043] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 325.555589][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 325.562595][T16043] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 325.762014][T16058] netlink: 'syz.2.2859': attribute type 11 has an invalid length. [ 325.772198][T16057] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 325.793475][T16059] netlink: 'syz.2.2859': attribute type 11 has an invalid length. [ 325.805373][T16057] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 325.821992][T16061] netlink: 169676 bytes leftover after parsing attributes in process `syz.0.2860'. [ 325.927203][T16069] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 325.994879][T16072] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 326.019860][T16072] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 326.171056][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2865'. [ 326.299742][T16090] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2868'. [ 326.338046][T16090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.386120][T16088] IPVS: persistence engine module ip_vs_pe_• not found [ 326.433191][T16090] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.443087][T16090] bridge0: entered allmulticast mode [ 326.597487][ T5948] tipc: Node number set to 2764485780 [ 326.734533][T16103] netlink: 'syz.3.2873': attribute type 6 has an invalid length. [ 327.481971][T16135] netlink: zone id is out of range [ 327.506553][T16135] netlink: get zone limit has 8 unknown bytes [ 327.675879][T16148] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 327.872294][T16155] openvswitch: netlink: Duplicate or invalid key (type 0). [ 327.885774][T16155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.972845][T16162] 8021q: VLANs not supported on ip_vti0 [ 328.203964][T16176] netlink: 'syz.0.2896': attribute type 3 has an invalid length. [ 328.431365][T16190] netlink: 'syz.3.2902': attribute type 6 has an invalid length. [ 328.529315][T16193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.998506][T16212] __nla_validate_parse: 7 callbacks suppressed [ 328.998527][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 329.089212][T16214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 329.333513][T16220] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 329.458230][T16230] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 329.473478][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 329.540505][T16232] nbd: must specify an index to disconnect [ 329.584044][T16230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2918'. [ 329.594379][T16240] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2917'. [ 329.647505][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2918'. [ 329.898046][T16255] team0: Device gtp0 is up. Set it down before adding it as a team port [ 330.090614][T16263] tipc: Enabling of bearer rejected, already enabled [ 330.101610][T16264] tipc: Enabling of bearer rejected, already enabled [ 330.131791][T16263] tipc: Resetting bearer [ 330.465246][T16280] syzkaller0: mtu less than device minimum [ 330.674536][T16291] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 330.767532][T16295] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 330.950680][T16305] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 331.609236][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 331.643946][T16320] netlink: zone id is out of range [ 331.935376][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.958032][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.975921][T16331] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 331.988223][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.003324][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.006940][T16331] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 332.022653][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.085215][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.094646][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.102654][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.114892][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.124387][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.280948][T16333] lo speed is unknown, defaulting to 1000 [ 332.300539][T16333] hsr0 speed is unknown, defaulting to 1000 [ 332.611593][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2958'. [ 332.713305][T16363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.848746][T16374] sctp: [Deprecated]: syz.0.2961 (pid 16374) Use of int in maxseg socket option. [ 332.848746][T16374] Use struct sctp_assoc_value instead [ 332.944915][T16378] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2963'. [ 332.980326][T16378] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2963'. [ 333.012942][T16333] chnl_net:caif_netlink_parms(): no params data found [ 333.385544][T16333] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.403743][T16333] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.412552][T16333] bridge_slave_0: entered allmulticast mode [ 333.420759][T16333] bridge_slave_0: entered promiscuous mode [ 333.431480][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.467658][T16333] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.475130][T16333] bridge_slave_1: entered allmulticast mode [ 333.533592][T16333] bridge_slave_1: entered promiscuous mode [ 333.654084][T16333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.689973][T16404] netlink: 'syz.0.2970': attribute type 1 has an invalid length. [ 333.714494][T16333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.755503][T16411] bond0: entered promiscuous mode [ 333.822944][T16333] team0: Port device team_slave_0 added [ 333.840963][T16333] team0: Port device team_slave_1 added [ 334.075742][T16333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.088113][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.121005][T16333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.176260][ T5183] Bluetooth: hci3: command tx timeout [ 334.193655][T16333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.203861][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.231160][T16333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.319551][T16333] hsr_slave_0: entered promiscuous mode [ 334.338168][T16333] hsr_slave_1: entered promiscuous mode [ 334.344689][T16333] debugfs: 'hsr0' already exists in 'hsr' [ 334.361635][T16333] Cannot create hsr debugfs directory [ 334.552746][T16451] hsr_slave_0: left promiscuous mode [ 334.567154][T16451] hsr_slave_1: left promiscuous mode [ 334.835725][T16468] pim6reg: entered allmulticast mode [ 334.879506][T16469] pim6reg: left allmulticast mode [ 335.287492][T16333] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.310300][T16333] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.321337][T16333] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 335.503290][T16333] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.576709][T16333] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.600490][T16333] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 335.622662][T16511] __nla_validate_parse: 6 callbacks suppressed [ 335.622686][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'. [ 335.729547][T16333] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.760822][T16333] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.786605][T16333] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 335.914164][T16333] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.952559][T16333] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.993858][T16333] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.257020][ T5183] Bluetooth: hci3: command tx timeout [ 336.340549][T16333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.381042][T16333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.381756][T16538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3008'. [ 336.414200][T16333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.478744][T16333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.561461][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.852833][T16333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.901617][T16333] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.993322][T16567] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3015'. [ 337.052182][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.059432][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.112270][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.119538][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.182499][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3020'. [ 337.242387][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3020'. [ 337.379000][ T95] block nbd1: Possible stuck request ffff888024f75080: control (read@0,1024B). Runtime 60 seconds [ 337.390613][ T95] block nbd1: Possible stuck request ffff888024f75240: control (read@1024,1024B). Runtime 60 seconds [ 337.402368][ T95] block nbd1: Possible stuck request ffff888024f75400: control (read@2048,1024B). Runtime 60 seconds [ 337.413643][ T95] block nbd1: Possible stuck request ffff888024f755c0: control (read@3072,1024B). Runtime 60 seconds [ 337.510684][T16586] C: renamed from lo (while UP) [ 337.929111][T16333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.108372][T16617] netlink: 'syz.3.3030': attribute type 11 has an invalid length. [ 338.116254][T16617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3030'. [ 338.175132][T16333] veth0_vlan: entered promiscuous mode [ 338.208678][T16333] veth1_vlan: entered promiscuous mode [ 338.284522][T16333] veth0_macvtap: entered promiscuous mode [ 338.327288][ T5183] Bluetooth: hci3: command tx timeout [ 338.327556][T16333] veth1_macvtap: entered promiscuous mode [ 338.377809][T16633] lo speed is unknown, defaulting to 1000 [ 338.378192][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 338.412744][T16633] lo speed is unknown, defaulting to 1000 [ 338.455625][T16333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.473526][T16633] lo speed is unknown, defaulting to 1000 [ 338.514267][T16333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.571833][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.595247][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.767911][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.804573][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.823995][T16633] infiniband syz0: set active [ 338.830637][T16633] infiniband syz0: added lo [ 338.837695][T10571] lo speed is unknown, defaulting to 1000 [ 338.978384][T16633] RDS/IB: syz0: added [ 338.984551][T16633] smc: adding ib device syz0 with port count 1 [ 338.991893][T16633] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 339.024967][T10579] lo speed is unknown, defaulting to 1000 [ 339.061536][T16633] lo speed is unknown, defaulting to 1000 [ 339.094340][T16642] netlink: 'syz.1.3036': attribute type 1 has an invalid length. [ 339.120552][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.138487][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.146025][T16645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3036'. [ 339.240989][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.269721][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.522903][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2942'. [ 339.620145][T16657] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 339.922629][T16669] IPv6: Can't replace route, no match found [ 339.929606][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 339.997281][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3046'. [ 340.219449][T16633] lo speed is unknown, defaulting to 1000 [ 340.277209][T16674] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 340.406550][ T5183] Bluetooth: hci3: command tx timeout [ 340.581723][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.601636][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.611048][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.633307][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.651650][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.866109][T16681] lo speed is unknown, defaulting to 1000 [ 340.920430][T16681] hsr0 speed is unknown, defaulting to 1000 [ 341.353190][T16633] lo speed is unknown, defaulting to 1000 [ 341.524360][T16718] __nla_validate_parse: 2 callbacks suppressed [ 341.524386][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3058'. [ 341.657043][T16734] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 341.675701][T16731] macvtap1: entered promiscuous mode [ 341.681237][T16731] vlan0: entered promiscuous mode [ 341.699631][T16734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3059'. [ 341.710400][T16731] macvtap1: entered allmulticast mode [ 341.737450][T16731] vlan0: entered allmulticast mode [ 341.915740][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 341.960707][T16745] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3064'. [ 342.010579][T16681] lo speed is unknown, defaulting to 1000 [ 342.524110][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3070'. [ 342.558525][T16769] netlink: 'syz.2.3071': attribute type 1 has an invalid length. [ 342.639699][T16769] bond1 (unregistering): Released all slaves [ 342.694001][T16779] netlink: 'syz.1.3073': attribute type 11 has an invalid length. [ 342.703088][T16779] netlink: 'syz.1.3073': attribute type 11 has an invalid length. [ 342.713976][T16779] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3073'. [ 342.725053][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3071'. [ 342.727490][ T5183] Bluetooth: hci0: command tx timeout [ 342.775262][T16633] lo speed is unknown, defaulting to 1000 [ 343.503251][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'. [ 343.882484][T16681] chnl_net:caif_netlink_parms(): no params data found [ 343.919747][T16817] tipc: Enabled bearer , priority 0 [ 343.958871][T16822] syzkaller0: entered promiscuous mode [ 343.976112][T16822] syzkaller0: entered allmulticast mode [ 344.008894][T16633] lo speed is unknown, defaulting to 1000 [ 344.298693][T16817] tipc: Resetting bearer [ 344.327869][T16816] tipc: Resetting bearer [ 344.397567][T16816] tipc: Disabling bearer [ 344.486257][T16850] netlink: 'syz.1.3083': attribute type 1 has an invalid length. [ 344.494389][T16850] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3083'. [ 344.807017][ T5183] Bluetooth: hci0: command tx timeout [ 344.825505][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.841349][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.849046][T16681] bridge_slave_0: entered allmulticast mode [ 344.860384][T16681] bridge_slave_0: entered promiscuous mode [ 344.874577][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.885148][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.895416][T16681] bridge_slave_1: entered allmulticast mode [ 344.904282][T16681] bridge_slave_1: entered promiscuous mode [ 344.926229][T16633] lo speed is unknown, defaulting to 1000 [ 345.071220][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 345.171329][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.225609][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.375317][T16681] team0: Port device team_slave_0 added [ 345.420760][T16681] team0: Port device team_slave_1 added [ 345.618466][T16889] netlink: 'syz.1.3093': attribute type 2 has an invalid length. [ 345.647520][T16889] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 345.774998][T16681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.789165][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.827737][T16681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.846150][T16681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.853816][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.883111][T16681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.921997][T16893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.197604][T16681] hsr_slave_0: entered promiscuous mode [ 346.208328][T16681] hsr_slave_1: entered promiscuous mode [ 346.598041][T16933] sctp: [Deprecated]: syz.4.3103 (pid 16933) Use of int in maxseg socket option. [ 346.598041][T16933] Use struct sctp_assoc_value instead [ 346.683267][T16933] __nla_validate_parse: 4 callbacks suppressed [ 346.683290][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 346.887496][ T5183] Bluetooth: hci0: command tx timeout [ 346.966763][ T56] block nbd2: Possible stuck request ffff888024fe5080: control (read@0,1024B). Runtime 60 seconds [ 346.979274][ T56] block nbd2: Possible stuck request ffff888024fe5240: control (read@1024,1024B). Runtime 60 seconds [ 346.991358][ T56] block nbd2: Possible stuck request ffff888024fe5400: control (read@2048,1024B). Runtime 60 seconds [ 347.003311][ T56] block nbd2: Possible stuck request ffff888024fe55c0: control (read@3072,1024B). Runtime 60 seconds [ 347.112685][T16681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 347.167302][T16681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 347.205983][T16960] netlink: 'syz.4.3110': attribute type 8 has an invalid length. [ 347.220549][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 347.422590][T16681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 347.465083][T16681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 347.545829][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 347.583135][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 347.613461][T16681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 347.627250][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 347.667483][T16681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 347.754494][T16973] bridge0: port 3(vlan2) entered blocking state [ 347.761400][T16973] bridge0: port 3(vlan2) entered disabled state [ 347.779400][T16973] vlan2: entered allmulticast mode [ 347.793825][T16973] bridge0: entered allmulticast mode [ 347.810770][T16973] vlan2: left allmulticast mode [ 347.823357][T16973] bridge0: left allmulticast mode [ 347.842185][T16980] netlink: 'syz.4.3115': attribute type 3 has an invalid length. [ 347.946145][T16681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 347.984601][T16681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.059147][T16984] netlink: 'syz.2.3119': attribute type 21 has an invalid length. [ 348.082401][T16984] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 348.111132][T16995] netlink: 'syz.0.3120': attribute type 10 has an invalid length. [ 348.141125][T16995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3120'. [ 348.402578][T17003] netlink: 'syz.1.3123': attribute type 1 has an invalid length. [ 348.403118][T16999] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 348.517863][T17009] bond14: (slave gretap1): making interface the new active one [ 348.527082][T17009] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 348.792501][T17022] IPVS: set_ctl: invalid protocol: 50 172.20.20.34:20004 [ 348.799927][T17022] netlink: 'syz.4.3126': attribute type 4 has an invalid length. [ 348.813728][T17022] IPVS: set_ctl: invalid protocol: 50 172.20.20.34:20004 [ 348.966853][ T5183] Bluetooth: hci0: command tx timeout [ 349.249103][T16681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.317432][T16681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.356670][T16681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.382054][T16681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.391974][T17031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3129'. [ 349.654314][T17051] validate_nla: 1 callbacks suppressed [ 349.654339][T17051] netlink: 'syz.1.3133': attribute type 1 has an invalid length. [ 349.785990][T17053] dvmrp1: entered allmulticast mode [ 349.877556][T17060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3136'. [ 349.902881][T16681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.009506][T16681] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.053407][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.060691][T16541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.160004][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.167218][T16725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.363040][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3139'. [ 351.185504][T16681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.278933][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 351.365127][T17112] tipc: Started in network mode [ 351.391902][T17112] tipc: Node identity 4271fffc9605, cluster identity 4711 [ 351.425396][T17112] tipc: Enabled bearer , priority 0 [ 351.528916][T17121] syzkaller0: entered promiscuous mode [ 351.541372][T17121] syzkaller0: entered allmulticast mode [ 351.551460][T17122] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 351.551561][T17128] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 351.573255][T17128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.604937][T17112] tipc: Resetting bearer [ 351.652528][T17129] netlink: 'syz.0.3155': attribute type 1 has an invalid length. [ 351.702762][T17111] tipc: Resetting bearer [ 351.743286][T17111] tipc: Disabling bearer [ 351.754152][T16681] veth0_vlan: entered promiscuous mode [ 351.819483][T17129] 8021q: adding VLAN 0 to HW filter on device bond9 [ 351.854455][T17129] __nla_validate_parse: 2 callbacks suppressed [ 351.854477][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'. [ 351.878235][T17132] vlan6: entered allmulticast mode [ 351.883520][T17132] veth1: entered allmulticast mode [ 351.903902][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'. [ 351.919054][T17132] bond9: (slave vlan6): making interface the new active one [ 351.929147][T17132] bond9: (slave vlan6): Enslaving as an active interface with an up link [ 351.945744][T16681] veth1_vlan: entered promiscuous mode [ 352.252096][T16681] veth0_macvtap: entered promiscuous mode [ 352.278304][T16681] veth1_macvtap: entered promiscuous mode [ 352.406118][T16681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.473358][T16681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.562962][T16725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.572246][T16725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.683364][T16725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.710256][T16725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.882955][T16721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.916651][T16721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.980734][T17173] veth0: entered promiscuous mode [ 352.990472][T17170] veth0: left promiscuous mode [ 353.287828][T16541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.328152][T16541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.410277][T17189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.578160][T17194] netlink: 'syz.2.3171': attribute type 5 has an invalid length. [ 353.623609][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3174'. [ 353.729120][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3171'. [ 353.803281][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3171'. [ 353.837757][T17208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3171'. [ 353.874052][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 353.946020][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3178'. [ 354.014037][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3178'. [ 354.067988][T17226] netlink: 'syz.1.3179': attribute type 18 has an invalid length. [ 354.128192][T17229] netlink: 'syz.1.3179': attribute type 18 has an invalid length. [ 354.958010][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.976194][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.989223][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.013587][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.021843][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.077172][ T6336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.123913][ T6336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.155648][ T6336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 355.312630][T17247] lo speed is unknown, defaulting to 1000 [ 355.320402][T17247] hsr0 speed is unknown, defaulting to 1000 [ 355.329688][T17247] lo speed is unknown, defaulting to 1000 [ 355.494660][ T6336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.556437][ T6336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.589178][ T6336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 355.746647][T17294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3192'. [ 355.922126][ T6336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.960301][ T6336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.973282][ T6336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.140231][ T6336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.162850][ T6336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.174737][ T6336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 357.048135][ T5183] Bluetooth: hci2: command tx timeout [ 357.060046][T17348] netlink: 'syz.0.3204': attribute type 11 has an invalid length. [ 357.068678][T17348] netlink: 'syz.0.3204': attribute type 11 has an invalid length. [ 357.077204][T17348] __nla_validate_parse: 2 callbacks suppressed [ 357.077223][T17348] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3204'. [ 357.110508][T17353] netlink: 'syz.1.3206': attribute type 6 has an invalid length. [ 357.922046][ T6336] bond5 (unregistering): (slave gretap1): Releasing active interface [ 358.482047][ T6336] bond0 (unregistering): Released all slaves [ 358.505687][ T6336] bond1 (unregistering): Released all slaves [ 358.522223][ T6336] bond2 (unregistering): Released all slaves [ 358.640552][ T6336] bond3 (unregistering): Released all slaves [ 358.759141][ T6336] bond4 (unregistering): Released all slaves [ 358.774909][ T6336] bond5 (unregistering): Released all slaves [ 358.978134][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 359.065078][ T6336] tipc: Disabling bearer [ 359.080084][T17376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3210'. [ 359.090471][T17376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3210'. [ 359.100938][T17377] netlink: 'syz.2.3208': attribute type 1 has an invalid length. [ 359.128972][ T5183] Bluetooth: hci2: command tx timeout [ 359.157363][ T6336] tipc: Left network mode [ 359.253360][T17377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.280758][ T6336] IPVS: stopping backup sync thread 12583 ... [ 359.450266][T17393] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3213'. [ 359.674739][T17247] chnl_net:caif_netlink_parms(): no params data found [ 359.772805][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'. [ 359.832221][T17405] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3217'. [ 359.862249][T17405] netlink: 'syz.0.3217': attribute type 5 has an invalid length. [ 359.899641][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 360.273668][T17419] netlink: 'syz.1.3219': attribute type 10 has an invalid length. [ 360.622162][T17441] IPVS: length: 8 != 1152 [ 360.652503][T17247] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.678934][T17247] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.686539][T17446] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 360.710995][T17247] bridge_slave_0: entered allmulticast mode [ 360.717709][T17446] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 360.736735][T17247] bridge_slave_0: entered promiscuous mode [ 360.758097][T17247] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.765327][T17247] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.789899][T17247] bridge_slave_1: entered allmulticast mode [ 360.823116][T17247] bridge_slave_1: entered promiscuous mode [ 361.185085][T17455] 8021q: VLANs not supported on ip_vti0 [ 361.199143][T17247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.212880][ T5183] Bluetooth: hci2: command tx timeout [ 361.261764][T17247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.402586][T17471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3230'. [ 361.422340][T17471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3230'. [ 361.472586][T17471] gretap3: entered promiscuous mode [ 361.483192][T17471] gretap3: entered allmulticast mode [ 361.753240][T17247] team0: Port device team_slave_0 added [ 361.801433][T17247] team0: Port device team_slave_1 added [ 361.883511][T17480] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 362.208469][T17247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.220327][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.270781][T17247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.313340][ T6336] hsr_slave_0: left promiscuous mode [ 362.324685][T17510] __nla_validate_parse: 2 callbacks suppressed [ 362.324709][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 362.354539][ T6336] hsr_slave_1: left promiscuous mode [ 362.403607][ T6336] veth1_macvtap: left promiscuous mode [ 362.414991][ T6336] veth0_macvtap: left promiscuous mode [ 363.288570][ T5183] Bluetooth: hci2: command tx timeout [ 363.662028][T16721] smc: removing ib device syz0 [ 363.684278][T17247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.703088][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.747841][T17247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.860004][T10579] hsr0 speed is unknown, defaulting to 1000 [ 363.866004][T10579] infiniband syz1: ib_query_port failed (-19) [ 363.872955][ T1213] lo speed is unknown, defaulting to 1000 [ 363.891923][ T1213] syz0: Port: 1 Link DOWN [ 364.367201][T17547] pim6reg1: entered promiscuous mode [ 364.372577][T17547] pim6reg1: entered allmulticast mode [ 364.448837][T17247] hsr_slave_0: entered promiscuous mode [ 364.463114][T17247] hsr_slave_1: entered promiscuous mode [ 364.483006][T17247] debugfs: 'hsr0' already exists in 'hsr' [ 364.522957][T17247] Cannot create hsr debugfs directory [ 365.047797][T17581] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 365.070452][T17579] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 365.113092][T17581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3255'. [ 365.141790][T17579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3255'. [ 365.261122][T17581] dummy0: entered promiscuous mode [ 365.268975][T17581] bridge0: port 2(dummy0) entered blocking state [ 365.289785][T17581] bridge0: port 2(dummy0) entered disabled state [ 365.332388][T17581] dummy0: entered allmulticast mode [ 365.389495][T17581] bridge0: port 2(dummy0) entered blocking state [ 365.396032][T17581] bridge0: port 2(dummy0) entered forwarding state [ 365.413757][T17589] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3257'. [ 365.561957][T17589] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 366.221864][T17623] netlink: 'syz.2.3264': attribute type 1 has an invalid length. [ 366.251198][T17623] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3264'. [ 366.265880][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3264'. [ 366.909516][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3268'. [ 366.956002][T17641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3270'. [ 367.140651][T17650] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 367.177384][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3270'. [ 367.449576][ T95] block nbd1: Possible stuck request ffff888024f75080: control (read@0,1024B). Runtime 90 seconds [ 367.461745][ T95] block nbd1: Possible stuck request ffff888024f75240: control (read@1024,1024B). Runtime 90 seconds [ 367.473141][ T95] block nbd1: Possible stuck request ffff888024f75400: control (read@2048,1024B). Runtime 90 seconds [ 367.485390][ T95] block nbd1: Possible stuck request ffff888024f755c0: control (read@3072,1024B). Runtime 90 seconds [ 367.878294][T17687] netlink: 'syz.3.3277': attribute type 13 has an invalid length. [ 368.013456][T17688] netlink: 'syz.0.3276': attribute type 13 has an invalid length. [ 368.060289][T17687] veth0_macvtap: left promiscuous mode [ 368.096953][T17687] macvtap0: entered allmulticast mode [ 368.107851][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'. [ 368.144186][T17687] macvtap0: refused to change device tx_queue_len [ 368.183693][T17688] netlink: 'syz.0.3276': attribute type 13 has an invalid length. [ 368.215894][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'. [ 368.481382][T17247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 368.526929][T17247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 368.554130][T17247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.590770][T17712] netlink: 'syz.1.3280': attribute type 6 has an invalid length. [ 368.614640][T17247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.712701][ T6336] IPVS: stop unused estimator thread 0... [ 369.038659][T17247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.098379][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 369.122430][T17247] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.155162][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 369.167631][T17738] syzkaller1: entered promiscuous mode [ 369.173164][T17738] syzkaller1: entered allmulticast mode [ 369.249717][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.256961][T16721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.304928][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.312207][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.650963][T17756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3293'. [ 369.684349][T17758] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3294'. [ 369.702649][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3293'. [ 370.261644][T17788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.368620][T17247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.614330][T17802] bridge8: entered promiscuous mode [ 370.666587][T17802] bridge8: entered allmulticast mode [ 371.145953][T17837] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3309'. [ 371.664799][T17247] veth0_vlan: entered promiscuous mode [ 371.802296][T17247] veth1_vlan: entered promiscuous mode [ 371.931502][T17247] veth0_macvtap: entered promiscuous mode [ 372.003894][T17247] veth1_macvtap: entered promiscuous mode [ 372.072511][T17247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.114648][T17247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.194723][ T6336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.217110][ T6336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.258274][ T6336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.298196][ T6336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.608121][T16720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.615999][T16720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.779042][T16726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.837206][T16726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.939637][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3328'. [ 373.264038][T17920] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 373.303415][T17924] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3331'. [ 373.522486][T17929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3333'. [ 373.525316][T17928] bond1: entered allmulticast mode [ 373.540674][T17928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.551473][T17928] bridge0: port 3(bond1) entered blocking state [ 373.558728][T17928] bridge0: port 3(bond1) entered disabled state [ 373.568527][T17928] bond1: entered promiscuous mode [ 373.574204][T17928] bridge0: port 3(bond1) entered blocking state [ 373.580664][T17928] bridge0: port 3(bond1) entered forwarding state [ 373.622629][T16726] bridge0: port 3(bond1) entered disabled state [ 374.110741][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3341'. [ 374.127434][T17949] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3339'. [ 374.141640][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3341'. [ 374.224165][T17953] gretap0: entered promiscuous mode [ 374.280466][T17953] gretap0: left promiscuous mode [ 375.029186][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.041327][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.051043][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3346'. [ 375.051865][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.069864][T17986] tipc: Started in network mode [ 375.079375][T17986] tipc: Node identity 0215e97be553, cluster identity 4711 [ 375.087974][T17986] tipc: Enabled bearer , priority 0 [ 375.097708][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.108149][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.119691][T17988] syzkaller0: entered promiscuous mode [ 375.125456][T17988] syzkaller0: entered allmulticast mode [ 375.570317][T17976] tipc: Resetting bearer [ 375.610784][T17976] tipc: Disabling bearer [ 375.864206][T17989] chnl_net:caif_netlink_parms(): no params data found [ 375.872068][T18018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3353'. [ 376.224677][T18038] netlink: 'syz.0.3357': attribute type 17 has an invalid length. [ 376.233208][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3357'. [ 376.242531][T18038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3357'. [ 376.327739][T18038] erspan0: entered promiscuous mode [ 376.366232][T18038] erspan0: left promiscuous mode [ 376.396578][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.403787][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.441741][T17989] bridge_slave_0: entered allmulticast mode [ 376.451405][T17989] bridge_slave_0: entered promiscuous mode [ 376.474296][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.496496][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.503863][T17989] bridge_slave_1: entered allmulticast mode [ 376.512176][T17989] bridge_slave_1: entered promiscuous mode [ 376.774483][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.842398][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.034441][T17989] team0: Port device team_slave_0 added [ 377.055374][ T56] block nbd2: Possible stuck request ffff888024fe5080: control (read@0,1024B). Runtime 90 seconds [ 377.067068][ T56] block nbd2: Possible stuck request ffff888024fe5240: control (read@1024,1024B). Runtime 90 seconds [ 377.078799][ T56] block nbd2: Possible stuck request ffff888024fe5400: control (read@2048,1024B). Runtime 90 seconds [ 377.083031][T17989] team0: Port device team_slave_1 added [ 377.091073][ T56] block nbd2: Possible stuck request ffff888024fe55c0: control (read@3072,1024B). Runtime 90 seconds [ 377.210561][ T5183] Bluetooth: hci4: command tx timeout [ 377.309852][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.372498][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.414152][T18089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3369'. [ 377.485700][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.537190][T18084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 377.571279][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.592323][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.726507][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.845400][T18103] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 377.871794][T18104] netlink: 'syz.3.3373': attribute type 7 has an invalid length. [ 377.907258][T18104] netlink: 'syz.3.3373': attribute type 8 has an invalid length. [ 378.178239][T17989] hsr_slave_0: entered promiscuous mode [ 378.198493][T17989] hsr_slave_1: entered promiscuous mode [ 378.230971][T17989] debugfs: 'hsr0' already exists in 'hsr' [ 378.258017][T17989] Cannot create hsr debugfs directory [ 378.299728][T18117] syzkaller1: entered promiscuous mode [ 378.305264][T18117] syzkaller1: entered allmulticast mode [ 378.370912][T18123] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 378.480778][T18134] delete_channel: no stack [ 378.688884][T18131] netlink: 'syz.0.3378': attribute type 26 has an invalid length. [ 378.701860][T18145] __nla_validate_parse: 8 callbacks suppressed [ 378.701882][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 378.880278][T18145] bridge2: port 1(veth0_to_bond) entered blocking state [ 378.888421][T18145] bridge2: port 1(veth0_to_bond) entered disabled state [ 378.895680][T18145] veth0_to_bond: entered allmulticast mode [ 378.918502][T18145] veth0_to_bond: entered promiscuous mode [ 379.287539][ T5183] Bluetooth: hci4: command tx timeout [ 379.303870][T18168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3384'. [ 379.455486][T17989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.472183][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'. [ 379.498452][T17989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.651263][T18182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3387'. [ 379.768891][T17989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.832824][T17989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.957742][T18186] netlink: 'syz.2.3388': attribute type 12 has an invalid length. [ 380.031351][T17989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.037571][T18188] netlink: 'syz.3.3389': attribute type 33 has an invalid length. [ 380.054842][T17989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.065910][T18188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3389'. [ 380.091577][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 380.276769][T17989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.304819][T17989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.333379][T18206] netlink: 'syz.0.3392': attribute type 8 has an invalid length. [ 380.819831][T17989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.900753][T17989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.945523][T17989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.045854][T17989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.129781][T18238] netlink: 'syz.2.3399': attribute type 16 has an invalid length. [ 381.170676][T18238] netlink: 'syz.2.3399': attribute type 17 has an invalid length. [ 381.193697][T18234] openvswitch: netlink: Flow key attr not present in new flow. [ 381.241620][T18227] IPVS: persistence engine module ip_vs_pe_À not found [ 381.312636][T18238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.366994][ T5183] Bluetooth: hci4: command tx timeout [ 381.409709][T18238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3399'. [ 381.845051][T17989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.939863][T17989] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.998887][T16726] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.006135][T16726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.078977][T16720] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.086451][T16720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.440802][ T30] audit: type=1800 audit(1755805924.672:4): pid=18281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3407" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=116 res=0 errno=0 [ 382.681166][T18286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3409'. [ 382.716488][T18286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3409'. [ 382.928622][T18293] xfrm1: entered allmulticast mode [ 382.979269][T18300] lo speed is unknown, defaulting to 1000 [ 383.002055][T18300] lo speed is unknown, defaulting to 1000 [ 383.038617][T18300] lo speed is unknown, defaulting to 1000 [ 383.149166][T18300] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 383.255870][T17989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.318921][T18300] lo speed is unknown, defaulting to 1000 [ 383.348305][T18300] lo speed is unknown, defaulting to 1000 [ 383.453031][ T5183] Bluetooth: hci4: command tx timeout [ 383.515630][T18300] lo speed is unknown, defaulting to 1000 [ 383.586777][T18300] lo speed is unknown, defaulting to 1000 [ 383.609422][T18315] netlink: 'syz.0.3416': attribute type 11 has an invalid length. [ 383.648599][T18300] lo speed is unknown, defaulting to 1000 [ 383.654801][T18315] netlink: 'syz.0.3416': attribute type 11 has an invalid length. [ 383.668557][T17989] veth0_vlan: entered promiscuous mode [ 383.695770][T18300] lo speed is unknown, defaulting to 1000 [ 383.698541][T18315] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3416'. [ 383.730023][T18300] lo speed is unknown, defaulting to 1000 [ 383.744077][T17989] veth1_vlan: entered promiscuous mode [ 383.773469][T18300] lo speed is unknown, defaulting to 1000 [ 383.845880][T18329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.940748][T17989] veth0_macvtap: entered promiscuous mode [ 383.982822][T17989] veth1_macvtap: entered promiscuous mode [ 384.076084][T17989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.143198][T17989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.294289][T18341] syzkaller0: refused to change device tx_queue_len [ 384.333627][T16725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.344003][T18336] netlink: 'syz.4.3419': attribute type 24 has an invalid length. [ 384.368398][T16725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.433622][T16725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.550125][T16720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.570031][T18349] netlink: 'syz.3.3422': attribute type 6 has an invalid length. [ 384.704089][T18349] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 384.704558][T18353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'. [ 385.006591][T16725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.029627][T16725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.255122][T16720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.299057][T16720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.819108][T18388] bridge_slave_0: left allmulticast mode [ 385.845394][T18388] bridge_slave_0: left promiscuous mode [ 385.867470][T18388] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.925111][T18388] bridge_slave_1: left allmulticast mode [ 385.952402][T18388] bridge_slave_1: left promiscuous mode [ 385.953921][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 385.983342][T18388] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.044552][T18388] bond0: (slave bond_slave_0): Releasing backup interface [ 386.074338][T18388] bond0: (slave bond_slave_1): Releasing backup interface [ 386.137526][T18388] team0: Port device team_slave_0 removed [ 386.163586][T18388] team0: Port device team_slave_1 removed [ 386.182374][T18388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.201234][T18388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.235749][T18388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.266477][T18388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.332291][T18388] bond1: left promiscuous mode [ 386.362206][T18388] bridge0: port 3(bond1) entered disabled state [ 386.385057][T18392] team0: Mode changed to "broadcast" [ 386.424158][ T55] lo speed is unknown, defaulting to 1000 [ 386.463854][T18398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3334'. [ 386.668610][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3439'. [ 386.819507][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.836686][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.845821][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.862805][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.872058][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.110371][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3444'. [ 387.193688][T18416] lo speed is unknown, defaulting to 1000 [ 387.203145][T16541] dummy0: left allmulticast mode [ 387.219225][T18427] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3444'. [ 387.240120][T16541] bridge0: port 2(dummy0) entered disabled state [ 387.251899][T18427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3444'. [ 387.285270][T16541] bridge0: port 1(batadv0) entered disabled state [ 387.355047][T16541] vlan5: left promiscuous mode [ 387.381100][T16541] bridge0: left promiscuous mode [ 387.401986][T16541] bridge4: port 1(vlan5) entered disabled state [ 387.565672][T18450] netlink: 'syz.2.3447': attribute type 64 has an invalid length. [ 387.585789][T18450] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3447'. [ 388.968644][ T5183] Bluetooth: hci5: command tx timeout [ 388.994082][T16541] bond0 (unregistering): Released all slaves [ 389.011600][T16541] bond1 (unregistering): Released all slaves [ 389.027392][T16541] bond2 (unregistering): Released all slaves [ 389.045087][T16541] bond3 (unregistering): Released all slaves [ 389.183009][T16541] bond4 (unregistering): Released all slaves [ 389.327545][T16541] bond5 (unregistering): Released all slaves [ 389.342864][T16541] bond6 (unregistering): Released all slaves [ 389.359770][T16541] bond7 (unregistering): Released all slaves [ 389.495673][T16541] bond8 (unregistering): Released all slaves [ 389.615867][T16541] bond9 (unregistering): (slave vlan6): Releasing active interface [ 389.629740][T16541] bond9 (unregistering): Released all slaves [ 389.645138][T16541] bond10 (unregistering): Released all slaves [ 389.677480][T18436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3444'. [ 389.694796][T18443] 8021q: VLANs not supported on wg1 [ 389.939055][T18477] x_tables: ip_tables: udp match: only valid for protocol 17 [ 389.979539][T16541] tipc: Disabling bearer [ 390.009466][T16541] tipc: Left network mode [ 390.010029][T18480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3450'. [ 390.131229][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'. [ 390.227113][ T5233] udevd[5233]: worker [5910] /devices/virtual/block/nbd1 is taking a long time [ 390.267080][ T5233] udevd[5233]: worker [6722] /devices/virtual/block/nbd2 is taking a long time [ 390.600018][T18501] tipc: Enabled bearer , priority 10 [ 390.871387][T18416] chnl_net:caif_netlink_parms(): no params data found [ 391.015237][T18533] sock: sock_timestamping_bind_phc: sock not bind to device [ 391.046708][ T5183] Bluetooth: hci5: command tx timeout [ 391.053899][T16541] hsr_slave_0: left promiscuous mode [ 391.064298][T16541] hsr_slave_1: left promiscuous mode [ 391.129277][T16541] vlan0: left allmulticast mode [ 391.133625][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3463'. [ 391.134312][T16541] vlan0: left promiscuous mode [ 391.153406][T16541] veth0_macvtap: left promiscuous mode [ 391.175716][T16541] veth1_vlan: left promiscuous mode [ 391.733524][ T5863] tipc: Node number set to 3880184187 [ 392.425327][T18542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3462'. [ 392.512701][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3467'. [ 392.712542][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 392.872096][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3473'. [ 392.929395][T18583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3470'. [ 392.974670][T18416] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.988806][T18416] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.999574][T18572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.008103][T18416] bridge_slave_0: entered allmulticast mode [ 393.036153][T18416] bridge_slave_0: entered promiscuous mode [ 393.064058][T18416] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.071582][T18590] sctp: [Deprecated]: syz.4.3474 (pid 18590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.071582][T18590] Use struct sctp_sack_info instead [ 393.103504][T18416] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.118585][T18416] bridge_slave_1: entered allmulticast mode [ 393.127058][ T5183] Bluetooth: hci5: command tx timeout [ 393.156817][T18416] bridge_slave_1: entered promiscuous mode [ 393.158668][T18590] netlink: 'syz.4.3474': attribute type 32 has an invalid length. [ 393.193219][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 393.327663][T18590] (unnamed net_device) (uninitialized): option coupled_control: invalid value (176) [ 393.364799][T18416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.389892][T18599] tipc: Enabled bearer , priority 0 [ 393.408407][T16541] IPVS: stop unused estimator thread 0... [ 393.432344][T18416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.474512][T18601] syzkaller0: entered promiscuous mode [ 393.484440][T18601] syzkaller0: entered allmulticast mode [ 393.727757][T18598] tipc: Resetting bearer [ 393.775927][T18598] tipc: Disabling bearer [ 393.820580][T18416] team0: Port device team_slave_0 added [ 393.865842][T18416] team0: Port device team_slave_1 added [ 394.087957][T18416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.122237][T18416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.170949][T18416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.210877][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3483'. [ 394.233325][T18416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.250478][T18416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.357074][T18416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.620515][T18416] hsr_slave_0: entered promiscuous mode [ 394.637838][T18416] hsr_slave_1: entered promiscuous mode [ 394.686672][T18416] debugfs: 'hsr0' already exists in 'hsr' [ 394.692471][T18416] Cannot create hsr debugfs directory [ 394.852479][T18655] dvmrp0: entered allmulticast mode [ 395.209506][ T5183] Bluetooth: hci5: command tx timeout [ 396.139607][T18416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.214187][T18416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.254489][T18700] __nla_validate_parse: 2 callbacks suppressed [ 396.254510][T18700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3500'. [ 396.278998][T18416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.323247][T18416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.787131][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3505'. [ 397.028891][T18728] syzkaller1: entered promiscuous mode [ 397.034808][T18728] syzkaller1: entered allmulticast mode [ 397.059581][T18737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.077441][T18740] netlink: 'syz.3.3509': attribute type 12 has an invalid length. [ 397.086091][T18740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3509'. [ 397.472357][T18756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3512'. [ 397.516076][T18761] netlink: 'syz.4.3511': attribute type 4 has an invalid length. [ 397.574673][ T95] block nbd1: Possible stuck request ffff888024f75080: control (read@0,1024B). Runtime 120 seconds [ 397.585873][ T95] block nbd1: Possible stuck request ffff888024f75240: control (read@1024,1024B). Runtime 120 seconds [ 397.597280][ T95] block nbd1: Possible stuck request ffff888024f75400: control (read@2048,1024B). Runtime 120 seconds [ 397.608870][ T95] block nbd1: Possible stuck request ffff888024f755c0: control (read@3072,1024B). Runtime 120 seconds [ 397.639568][T18416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.704468][T10572] lo speed is unknown, defaulting to 1000 [ 397.724586][T10572] syz2: Port: 1 Link DOWN [ 397.757303][T18767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3513'. [ 397.795878][T18416] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.865535][T16542] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.872847][T16542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.917201][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.924517][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.223410][T18778] lo speed is unknown, defaulting to 1000 [ 398.394510][T18786] lo: entered promiscuous mode [ 398.419921][T18786] tunl0: entered promiscuous mode [ 398.444030][T18786] gre0: entered promiscuous mode [ 398.482239][T18786] gretap0: entered promiscuous mode [ 398.501350][T18786] erspan0: entered promiscuous mode [ 398.523716][T18786] ip_vti0: entered promiscuous mode [ 398.567130][ T1213] lo speed is unknown, defaulting to 1000 [ 398.624156][T18788] pim6reg1: entered promiscuous mode [ 398.632138][T18788] pim6reg1: entered allmulticast mode [ 399.053362][T18818] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 399.301310][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3524'. [ 399.340772][T18830] nbd: nbd0 already in use [ 399.362131][T18416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.636657][T18416] veth0_vlan: entered promiscuous mode [ 399.691352][T18416] veth1_vlan: entered promiscuous mode [ 399.697842][T18849] netlink: 'syz.3.3530': attribute type 10 has an invalid length. [ 399.698394][T18848] netlink: 'syz.4.3528': attribute type 33 has an invalid length. [ 399.716171][T18845] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.756820][ T1213] IPVS: starting estimator thread 0... [ 399.803016][T18849] batman_adv: batadv0: Adding interface: team0 [ 399.852365][T18849] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.879290][T18852] IPVS: using max 24 ests per chain, 57600 per kthread [ 399.895462][T18849] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 400.009114][T18416] veth0_macvtap: entered promiscuous mode [ 400.060009][T18416] veth1_macvtap: entered promiscuous mode [ 400.175222][T18416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.247672][T18416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.319663][T18874] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3535'. [ 400.508714][T16720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.521069][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3536'. [ 400.596253][T16720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.625294][T16720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.723680][T16720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.147045][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3540'. [ 401.156834][T18898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3540'. [ 401.572956][ T6336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.611514][ T6336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.740567][T16541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.769105][T16541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.003753][T18931] tipc: Started in network mode [ 402.046485][T18931] tipc: Node identity 0aec6afb80a4, cluster identity 4711 [ 402.086022][T18931] tipc: Enabled bearer , priority 0 [ 402.287622][T18952] __nla_validate_parse: 2 callbacks suppressed [ 402.287645][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3548'. [ 402.350631][T18931] syzkaller0: entered promiscuous mode [ 402.385856][T18931] syzkaller0: entered allmulticast mode [ 402.407181][T18931] tipc: Resetting bearer [ 402.512372][T18930] tipc: Resetting bearer [ 402.641341][T18961] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3552'. [ 402.704713][T18961] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3552'. [ 403.106877][T10572] tipc: Node number set to 2320001787 [ 406.472553][T18930] tipc: Disabling bearer [ 406.486911][T18985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3555'. [ 406.671353][T19063] netlink: 'syz.2.3560': attribute type 2 has an invalid length. [ 406.745860][T19063] netlink: 'syz.2.3560': attribute type 1 has an invalid length. [ 406.784837][T19063] netlink: 'syz.2.3560': attribute type 10 has an invalid length. [ 406.854851][T19063] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 407.129319][ T56] block nbd2: Possible stuck request ffff888024fe5080: control (read@0,1024B). Runtime 120 seconds [ 407.140880][ T56] block nbd2: Possible stuck request ffff888024fe5240: control (read@1024,1024B). Runtime 120 seconds [ 407.152024][ T56] block nbd2: Possible stuck request ffff888024fe5400: control (read@2048,1024B). Runtime 120 seconds [ 407.163206][ T56] block nbd2: Possible stuck request ffff888024fe55c0: control (read@3072,1024B). Runtime 120 seconds [ 407.343049][T19087] lo speed is unknown, defaulting to 1000 [ 407.829627][T19114] tipc: Enabled bearer , priority 0 [ 407.848570][T19121] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3574'. [ 407.915213][T19114] syzkaller0: entered promiscuous mode [ 407.967247][T19114] syzkaller0: entered allmulticast mode [ 408.663255][T19136] tipc: Resetting bearer [ 408.741176][T19111] tipc: Resetting bearer [ 408.805301][T19111] tipc: Disabling bearer [ 408.869831][T19160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3580'. [ 408.912870][T19160] openvswitch: netlink: Flow key attr not present in new flow. [ 409.208287][T19170] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3583'. [ 409.267807][T19176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3581'. [ 409.337335][T19178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 409.726808][T19189] tipc: Started in network mode [ 409.742425][T19189] tipc: Node identity 964cfa506c21, cluster identity 4711 [ 409.776789][T19189] tipc: Enabled bearer , priority 0 [ 409.820707][T19189] syzkaller0: entered promiscuous mode [ 409.830806][T19189] syzkaller0: entered allmulticast mode [ 409.956562][T19196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3593'. [ 410.021712][T19215] netlink: 'syz.1.3595': attribute type 11 has an invalid length. [ 410.040587][T19189] tipc: Resetting bearer [ 410.050625][T19188] tipc: Resetting bearer [ 410.101188][T19188] tipc: Disabling bearer [ 410.140842][T19205] lo speed is unknown, defaulting to 1000 [ 410.434487][T19231] dvmrp0: entered allmulticast mode [ 410.458265][T19226] pim6reg1: entered promiscuous mode [ 410.502642][T19226] pim6reg1: entered allmulticast mode [ 410.872587][T19258] netlink: 'syz.3.3604': attribute type 21 has an invalid length. [ 410.881082][T19258] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3604'. [ 410.989417][T19258] netlink: 'syz.3.3604': attribute type 5 has an invalid length. [ 411.098400][T19258] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3604'. [ 411.124566][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 411.248415][T19251] lo speed is unknown, defaulting to 1000 [ 411.501166][T19288] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 411.513824][T19285] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 411.892710][T19316] netlink: 'syz.2.3620': attribute type 11 has an invalid length. [ 411.946640][ T5183] Bluetooth: hci5: command tx timeout [ 412.393517][T19336] [ 412.395924][T19336] ====================================================== [ 412.402966][T19336] WARNING: possible circular locking dependency detected [ 412.410029][T19336] syzkaller #0 Not tainted [ 412.414476][T19336] ------------------------------------------------------ [ 412.421521][T19336] syz.4.3625/19336 is trying to acquire lock: [ 412.427614][T19336] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 412.436895][T19336] [ 412.436895][T19336] but task is already holding lock: [ 412.439338][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3625'. [ 412.444367][T19336] ffff8880542a4070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 412.462564][T19336] [ 412.462564][T19336] which lock already depends on the new lock. [ 412.462564][T19336] [ 412.472981][T19336] [ 412.472981][T19336] the existing dependency chain (in reverse order) is: [ 412.482018][T19336] [ 412.482018][T19336] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 412.490088][T19336] lock_acquire+0x120/0x360 [ 412.495199][T19336] _raw_spin_lock_bh+0x36/0x50 [ 412.500507][T19336] nr_rt_device_down+0x12a/0x720 [ 412.505989][T19336] nr_device_event+0x137/0x150 [ 412.511327][T19336] notifier_call_chain+0x1b3/0x3e0 [ 412.516973][T19336] netif_close_many+0x29c/0x410 [ 412.522532][T19336] netif_close+0x158/0x210 [ 412.527494][T19336] dev_close+0x10a/0x220 [ 412.532365][T19336] bpq_device_event+0x377/0x6a0 [ 412.537837][T19336] notifier_call_chain+0x1b3/0x3e0 [ 412.543483][T19336] netif_close_many+0x29c/0x410 [ 412.548894][T19336] netif_close+0x158/0x210 [ 412.553862][T19336] dev_close+0x10a/0x220 [ 412.558642][T19336] bond_setup_by_slave+0x5f/0x3f0 [ 412.564226][T19336] bond_enslave+0x7a0/0x3a20 [ 412.569346][T19336] bond_do_ioctl+0x635/0x9b0 [ 412.574479][T19336] bond_siocdevprivate+0x17e/0x350 [ 412.580217][T19336] dev_ifsioc+0xb54/0xf00 [ 412.585081][T19336] dev_ioctl+0x84c/0x1150 [ 412.589949][T19336] sock_ioctl+0x719/0x790 [ 412.594828][T19336] __se_sys_ioctl+0xfc/0x170 [ 412.599950][T19336] do_syscall_64+0xfa/0x3b0 [ 412.605001][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.611432][T19336] [ 412.611432][T19336] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 412.619523][T19336] lock_acquire+0x120/0x360 [ 412.624570][T19336] _raw_spin_lock_bh+0x36/0x50 [ 412.629877][T19336] nr_rt_device_down+0xa9/0x720 [ 412.635275][T19336] nr_device_event+0x137/0x150 [ 412.640571][T19336] notifier_call_chain+0x1b3/0x3e0 [ 412.646214][T19336] netif_close_many+0x29c/0x410 [ 412.651605][T19336] netif_close+0x158/0x210 [ 412.656610][T19336] dev_close+0x10a/0x220 [ 412.661391][T19336] bpq_device_event+0x377/0x6a0 [ 412.666783][T19336] notifier_call_chain+0x1b3/0x3e0 [ 412.672447][T19336] netif_close_many+0x29c/0x410 [ 412.677834][T19336] netif_close+0x158/0x210 [ 412.682786][T19336] dev_close+0x10a/0x220 [ 412.687565][T19336] bond_setup_by_slave+0x5f/0x3f0 [ 412.693124][T19336] bond_enslave+0x7a0/0x3a20 [ 412.698278][T19336] bond_do_ioctl+0x635/0x9b0 [ 412.703412][T19336] bond_siocdevprivate+0x17e/0x350 [ 412.709067][T19336] dev_ifsioc+0xb54/0xf00 [ 412.713934][T19336] dev_ioctl+0x84c/0x1150 [ 412.718817][T19336] sock_ioctl+0x719/0x790 [ 412.723681][T19336] __se_sys_ioctl+0xfc/0x170 [ 412.728812][T19336] do_syscall_64+0xfa/0x3b0 [ 412.733947][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.740376][T19336] [ 412.740376][T19336] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 412.748299][T19336] validate_chain+0xb9b/0x2140 [ 412.753605][T19336] __lock_acquire+0xab9/0xd20 [ 412.758821][T19336] lock_acquire+0x120/0x360 [ 412.763861][T19336] _raw_spin_lock_bh+0x36/0x50 [ 412.769188][T19336] nr_rt_ioctl+0x390/0xd50 [ 412.774161][T19336] sock_do_ioctl+0xdc/0x300 [ 412.779200][T19336] sock_ioctl+0x576/0x790 [ 412.784064][T19336] __se_sys_ioctl+0xfc/0x170 [ 412.789191][T19336] do_syscall_64+0xfa/0x3b0 [ 412.794234][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.800768][T19336] [ 412.800768][T19336] other info that might help us debug this: [ 412.800768][T19336] [ 412.811005][T19336] Chain exists of: [ 412.811005][T19336] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 412.811005][T19336] [ 412.824849][T19336] Possible unsafe locking scenario: [ 412.824849][T19336] [ 412.832401][T19336] CPU0 CPU1 [ 412.837781][T19336] ---- ---- [ 412.843156][T19336] lock(&nr_node->node_lock); [ 412.847930][T19336] lock(nr_node_list_lock); [ 412.855058][T19336] lock(&nr_node->node_lock); [ 412.862353][T19336] lock(nr_neigh_list_lock); [ 412.867048][T19336] [ 412.867048][T19336] *** DEADLOCK *** [ 412.867048][T19336] [ 412.875194][T19336] 2 locks held by syz.4.3625/19336: [ 412.880401][T19336] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 412.889940][T19336] #1: ffff8880542a4070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 412.899634][T19336] [ 412.899634][T19336] stack backtrace: [ 412.905555][T19336] CPU: 1 UID: 0 PID: 19336 Comm: syz.4.3625 Not tainted syzkaller #0 PREEMPT(full) [ 412.905578][T19336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.905597][T19336] Call Trace: [ 412.905605][T19336] [ 412.905614][T19336] dump_stack_lvl+0x189/0x250 [ 412.905641][T19336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.905663][T19336] ? __pfx__printk+0x10/0x10 [ 412.905686][T19336] ? stack_trace_save+0x9c/0xe0 [ 412.905713][T19336] print_circular_bug+0x2ee/0x310 [ 412.905734][T19336] check_noncircular+0x134/0x160 [ 412.905756][T19336] validate_chain+0xb9b/0x2140 [ 412.905784][T19336] __lock_acquire+0xab9/0xd20 [ 412.905813][T19336] ? nr_rt_ioctl+0x390/0xd50 [ 412.905833][T19336] lock_acquire+0x120/0x360 [ 412.905857][T19336] ? nr_rt_ioctl+0x390/0xd50 [ 412.905879][T19336] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 412.905903][T19336] ? nr_rt_ioctl+0x390/0xd50 [ 412.905922][T19336] _raw_spin_lock_bh+0x36/0x50 [ 412.905943][T19336] ? nr_rt_ioctl+0x390/0xd50 [ 412.905962][T19336] nr_rt_ioctl+0x390/0xd50 [ 412.905988][T19336] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 412.906014][T19336] ? apparmor_capable+0x137/0x1b0 [ 412.906046][T19336] ? capable+0x89/0xe0 [ 412.906063][T19336] ? nr_ioctl+0x1b1/0x3b0 [ 412.906081][T19336] sock_do_ioctl+0xdc/0x300 [ 412.906104][T19336] ? __pfx_sock_do_ioctl+0x10/0x10 [ 412.906123][T19336] ? __lock_acquire+0xab9/0xd20 [ 412.906155][T19336] sock_ioctl+0x576/0x790 [ 412.906176][T19336] ? __pfx_sock_ioctl+0x10/0x10 [ 412.906196][T19336] ? __fget_files+0x2a/0x420 [ 412.906223][T19336] ? __fget_files+0x3a0/0x420 [ 412.906249][T19336] ? __fget_files+0x2a/0x420 [ 412.906278][T19336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 412.906304][T19336] ? __pfx_sock_ioctl+0x10/0x10 [ 412.906325][T19336] __se_sys_ioctl+0xfc/0x170 [ 412.906349][T19336] do_syscall_64+0xfa/0x3b0 [ 412.906376][T19336] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.906402][T19336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.906424][T19336] ? clear_bhb_loop+0x60/0xb0 [ 412.906447][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.906473][T19336] RIP: 0033:0x7fd109d8ebe9 [ 412.906494][T19336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.906513][T19336] RSP: 002b:00007fd10ac62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.906535][T19336] RAX: ffffffffffffffda RBX: 00007fd109fb5fa0 RCX: 00007fd109d8ebe9 [ 412.906551][T19336] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 412.906564][T19336] RBP: 00007fd109e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 412.906577][T19336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.906590][T19336] R13: 00007fd109fb6038 R14: 00007fd109fb5fa0 R15: 00007ffc4e58c158 [ 412.906615][T19336] [ 413.198780][T19325] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.206390][T19325] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.208530][T19322] caif:caif_disconnect_client(): nothing to disconnect [ 413.371522][T19325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.388346][T19325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.475108][T19325] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 413.540772][T19325] xfrm1: left allmulticast mode [ 413.571233][T19338] dummy0: entered promiscuous mode [ 413.590524][T19338] batadv_slave_1: entered promiscuous mode [ 413.601962][T16721] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.639537][T16721] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.669377][T16721] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.682968][T16721] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0