last executing test programs: 7.174981996s ago: executing program 3 (id=2867): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r2 = socket(0xa, 0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x5c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 64) close(r7) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000000040)="d9b604") (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001580)={{r4, &(0x7f0000000000)='syzkaller\x00', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x5]}, {0x4, 0x7, 0x7, 0x5}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x10001}, 0x4, &(0x7f0000001500)=[{0x1, 0x6, &(0x7f0000000140)='netdevsim0\x00', &(0x7f0000000180)="1d2adb7ae20188e71d80cf48bd6d5a943a9630845fedd318f8deadb553fb4360665fe44b8129488cc391d9a74cfaa41e", 0x30, 0x22}, {0x1, 0x6, &(0x7f0000000240)='-\x00', &(0x7f0000000440)="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", 0x1000, 0xa}, {0x2, 0x200, &(0x7f0000000280)='@\x00', &(0x7f00000002c0)="bef2259f0ab8f1d57a6d4d5cb657d8e1df9b92b8aba636fa218eba9eefdfc85aa3b2247ca07c6b14dceb8cfa7a31641045119ecd413dc67bfa812ce2224708e2dbeea949518fde669c8612b0500e5510bdd9f161ac447d01466980a0ab1992183c3b104af007d5148c", 0x69, 0x30}, {0x3, 0x6, &(0x7f0000000340)=']\x00', &(0x7f0000001440)="d8683a27998d04139707b423ac44c86cf838b8955d284b672b222eb7e18cb1038da95c501fa3cec3f6b7527a6f7e1832b2cc178522875b78d953bbb9b3f2ca018a9a44d567c8b8bdb2f1bf123f61fd0e4eb39711972d3f1c60f623e6143d54dd6ef6604f2fb79d1d8959336f3a1927da5802e47d9aa78b48708b4f5b5908d48a1e5e2ea6805b606889facc00f4b28b654846e0d5ff6b03efd9a4d32e6809106edee36f1e2c92d4bb171fc388ef1d4ac96d25", 0xb2, 0x20}]}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) (async) splice(r12, 0x0, r13, &(0x7f00000002c0), 0x6, 0x2) (async) bind$isdn_base(r13, &(0x7f0000001640)={0x22, 0x1, 0x81, 0x3, 0x5}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r11], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) 7.01955635s ago: executing program 3 (id=2871): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffff", 0x18}], 0x1}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x6) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x80800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a801400"], 0x78}}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 6.803722787s ago: executing program 0 (id=2877): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) r4 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 6.627364444s ago: executing program 0 (id=2881): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000ca06000000000000000000007cecf5b0d559e7616787176a", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000008000000a5976ac6acd41fd8"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0xac6, 0x2f, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1}, 0x36, 0x3, 0x0, 0x0, "4b4415ac4334dbf859d5644739d79ee3b292d9ee47e89fd3347d5b107f16e60e61ac1ff8452e6dc460078e733769e4e8d6b9d0c7c07faf610060ede43a2ab818"}}, 0x80}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="020000"], 0x48}, 0x1, 0x0, 0x0, 0x8081}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="180000002f0001002bbd7000ffdbdf2589ab47d7e9a250150800e900", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r11, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r13, 0x215eb000) (async) r14 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x61d0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r14, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r12], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r11, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xd}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc008) (async) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) 6.422863049s ago: executing program 0 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, r1, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ab4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x84000) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, r1, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ab4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x84000) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) 6.203239365s ago: executing program 0 (id=2888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x81}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="000000ff7f00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 5.964024164s ago: executing program 0 (id=2893): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) 5.936099784s ago: executing program 0 (id=2895): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) (async) socket$netlink(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) (async) r4 = accept$netrom(r0, &(0x7f0000000180)={{0x3, @null}, [@rose, @null, @default, @bcast, @remote, @default, @rose, @netrom]}, &(0x7f0000000200)=0x48) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000240)=0x4ce, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) 5.651947453s ago: executing program 3 (id=2900): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) 5.603171075s ago: executing program 3 (id=2902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 2.962259929s ago: executing program 4 (id=2913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 2.88725059s ago: executing program 2 (id=2914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x6, 0x9}, @timestamp, @timestamp, @mss, @sack_perm, @window={0x3, 0x2, 0x8}], 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ni\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$nfc_llcp(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x1, 0x1, "fe6bc66e6466777767d5e8178476288c53bab48fe9ddd9fe8ecdec22319f319978e1aa7eebe7975f1d635fbe09f234bcbeb4aea05fd1438667240e0a7103c8"}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000200)={0x88, 0x0, 0x7, "2b058d5ef9b05e37e0c7e794558c43d82203d88a767090beadc25ceb51f62b876445d41cae7e3cf5ad0d538411f49127e52f721e3036a5d05762d25bbee4594eb1bc9c2c2fbebd853934703ad1c6418afd280bdd4b5a42bfc92aae539a46069f507ba41c632c5f4e9be6ffefe69b560aa671"}, 0x88, 0x4004}, 0x40000) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f00000003c0)={&(0x7f0000000340)=[{0x10, 0x1, 0x1}, {0x400, 0x10001, 0x2}, {0x2, 0x4, 0x2}, {0x1, 0x5}, {0x9, 0x5}, {0x1ff, 0xffff901a, 0x1}], 0x6, 0x10, 0x6, 0x3}) r4 = openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x40400) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000540)={0x6, [0x1ff, 0x1ff, 0x6, 0xe, 0x5, 0xffff]}, &(0x7f0000000580)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xcb, 0xbe, &(0x7f00000005c0)="e9dc0c3251558cc0450e7647ec511ca290b2eee06e20484b197e9e2d200e3451f8b505f594a19fe3c2db0d52a2dbc829c753cbf65e82fe3953605257ab0b1b62942bcd687438de86d9acd02d679353192c48de53c05cc7da250196da012db80607c7e52fafc92af63724aad115fbc2fdef4f9f2e5b182b96a59acb730daba64d0c74aea4190b6c1385e168139a8fe3ec8db8e94e49b304f1d0e6e7fbedfd8948f831c9c7a0049be8a729aeaf71bc808ef33965d7daa339ad8dc1a0052679ba2aaa22028e166c1f5af5c62b", &(0x7f00000006c0)=""/190, 0x0, 0x0, 0x0, 0xc8, &(0x7f0000000780), &(0x7f00000007c0)="fadda1b73648947ed1f6f9e3fcdaf0d9709eb896dfb26ef8d495159976e4e9ee3e6013f43664f7d6daa12aa01ddaacf303948962ce4e17307a671801df5fa910d139a09e2c1cc43ad2c657be38d0f3a309fdd7ecdfddaa6180b6728b2fc812dab4891d974fcae6a57421968bc0883151d49a66f1a726b038c5c18b1c035b37ce6c7402dad4d9b25dd803ce8789e3dbde17f28dc6930cba045f2f6bc1b07932b096a6c0f50dbabb3f13b708e3519f5a21b8df76943dcbe96df8bc635f93cd1ed15d963c11171b1afa", 0x7, 0x0, 0xffff}, 0x50) write$bt_hci(r4, &(0x7f0000000940)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000a80)={&(0x7f0000000980)=[{0x4, 0x0, 0x0, {0x1, 0x2, 0xa7dd09ab23e17db3}}, {0x7, 0x2, 0x0, {0x8, 0x6, 0x2}}, {0x2, 0x2, 0x0, {0xd, 0x3, 0x1}}, {0x1, 0x1, 0x0, {0x5, 0x5}}, {0x40, 0x1, 0x0, {0xfee9, 0x6}}, {0x8001, 0x0, 0x0, {0xff, 0x9, 0x3}}, {0x8, 0x2, 0x0, {0x3, 0x0, 0x1}}, {0x3, 0x2, 0x0, {0x9}}], 0x8, 0x20, 0xe, 0x200}) sendto(r4, &(0x7f0000000ac0)="66654fd9ae810b3621a0592d7d98c524d7977253f77d2dc3a3a56b3447433d0a90f2db488770744f836294bfb24c2b7100f7957aff2d8c62df1fa7614a349271718cce440d2a46339d30106f7c2924c67b034f6a70300538119b2f2cd5634c012325bb34a58f328a402562f050e08cea0e76c71375b34df1a733092eacbf92e318c392ee56ee436117a64b275a7dd2069946201d1799ea5f437fc5b3c3ff8dd61a52d944541ecf23e337e3d1e35f", 0xae, 0x44080, &(0x7f0000000b80)=@in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00'}, 0x80) pselect6(0x40, &(0x7f0000000c00)={0x7e8d, 0xf8b4, 0x9, 0x0, 0xf, 0xe5, 0x5, 0xffffffffffff2d44}, &(0x7f0000000c40)={0x5acb, 0x8, 0x9, 0xf1, 0x1, 0xfffffffffffffff1, 0x4, 0x4}, &(0x7f0000000c80)={0x0, 0x4, 0x0, 0x2, 0x0, 0x4, 0x8000000000000001, 0x101}, &(0x7f0000000cc0), &(0x7f0000000d40)={&(0x7f0000000d00)={[0x2]}, 0x8}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000d80)={0x0, 0x5565, 0x30}, 0xc) unshare(0x4000000) unshare(0x10480) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000dc0)=@req={0xffff, 0xfffffff9, 0x0, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000e00)={0x0, 0x7}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000e80)={r7, 0x2e, "d2006b0165a3b9707a430e42bfb6bd7cde7a5cd4e11c27f3e45ccfbbad34d745352966515c4d5931993be9a5c532"}, &(0x7f0000000ec0)=0x36) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) 2.71541962s ago: executing program 4 (id=2916): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044800) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000140)=0xdcf) (async) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000140)=0xdcf) 2.60729019s ago: executing program 2 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x9690220f77f9bec3, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x89, 0x2, 0x8, 0x909}, {0x1, 0x7, 0x9, 0x6}]}) (async) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000140)="957ccfb32544a3eb54987ea7817165fa80079b8838c07b6a99c7642083029cc3e9aeffcf964c818eb02e627fd061b80a69d11dcb2039828fd2d147cd99d7485435486859f32ceac286a619f95be9b79947e937200b48d31c6a7884735741685709312de7ee05c00fb78781da0a5c") (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x0) 2.600479777s ago: executing program 4 (id=2918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c90200000000d0a20268fa095d42000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4}, 0x50) (async) recvmsg(r2, 0x0, 0x40000000) (async) close(r2) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@deltaction={0x204, 0x31, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async) close(0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async, rerun: 32) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r5) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r9, 0x400, 0x70bd24, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x0, 0x0) 1.526842426s ago: executing program 2 (id=2920): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x80, 0x5, 0x0, 0x50000, 0x1, 0x3, '\x00', r0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @value=r1}, 0x50) 1.480578264s ago: executing program 2 (id=2921): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r6, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="5021000ebe59e701c500c65d87bd42ecba1000398423bd7000652cba2facd2c8f2", @ANYRES32=r9, @ANYBLOB="81b8000000000000300012800b000100697036746e6c000020000280080008002700000014000300200100"/56], 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @local}, 0x14) 1.45795473s ago: executing program 4 (id=2922): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x0, 0x95d6, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400140, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'wg1\x00', 0x100}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10e) 1.319898347s ago: executing program 3 (id=2923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8a080, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x6, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220000e0}, 0x4890) epoll_create1(0xcd52dcdb6de9c7d3) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f0000000240)={0x0, r0, r2, 0x5, 0x2, '\x00', {0x10, 0x6, 0x8001, 0xd, 0xa2f, 0x6, 0x0, 0x9, {0xfffffffffffffc78, 0x5}, {0x0, 0xffffffff}, {0x0, 0xde9}, 0x8000, 0x6, 0x5, 0x0, 0x6, 0xf000, 0x2, 0x200, 0x0, 0x9, '\x00', 0x1, 0xf, 0xa3, 0x14}}) sendto$packet(r6, &(0x7f0000000180)="2be067a5e8f8e6", 0x7, 0x10, &(0x7f0000000200)={0x11, 0x15, r5, 0x1, 0x5, 0x6, @remote}, 0x14) close(0x4) 1.227190609s ago: executing program 1 (id=2924): recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(0xffffffffffffffff, 0x0) 1.127654711s ago: executing program 2 (id=2925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000380), 0x4) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffe0, 0x4}, {0xf, 0x1}, {0xf, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x19, 0x9, 0x80000000, 0x0, 0xb, 0x1, 0x1}}, {0x6, 0x2, [0x7f80]}}, {{0x1c, 0x1, {0x7, 0x43, 0x8000, 0x2, 0x1, 0x10001, 0x10001, 0x7}}, {0x12, 0x2, [0x92, 0x6, 0x8, 0xd, 0x3cca, 0xfffe, 0x1000]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x8080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r14, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r14], 0x7c}}, 0x20000000) 1.067899284s ago: executing program 1 (id=2926): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$can_j1939(r3, &(0x7f0000000300)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0x3}, 0x18) 967.630498ms ago: executing program 4 (id=2927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="b20069461f03000000", @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x64040c01}, 0x0) 841.094099ms ago: executing program 4 (id=2928): r0 = socket(0x1e, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x8000}, 0x1c) sendmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x20000081) sendmmsg$alg(r0, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040081}], 0x1, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x404c8d4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0xffe0}, {0xfff3, 0xffe0}, {0xfff3, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'macvlan1\x00'}) 759.586953ms ago: executing program 1 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) splice(r4, 0x0, r5, &(0x7f00000002c0), 0x6, 0x2) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x7fff}, 0x8) 639.352869ms ago: executing program 3 (id=2930): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x5}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8], 0x38}}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 412.645052ms ago: executing program 1 (id=2931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x40, 0x119, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1e}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 63.97562ms ago: executing program 1 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xd4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa8, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x1d, 0x1, "5d761e317228c201f9a208a4649ffca5c833c768623eaade04"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x164}}, 0x0) 62.570094ms ago: executing program 2 (id=2933): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'caif0\x00', {0x4}, 0x7ff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r5, &(0x7f0000000040), 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@remote, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x10c}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000001000001c6a000a28000000006c9a01000000005e1affd5020000000900010073797e300000000008000240000000032c000000030a01030000e6ff00002000020000000900010073797a30000000000900030073797a32409bbaba95cdb974110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a07040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000000c000280050002"], 0x84}}, 0x0) 0s ago: executing program 1 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x42}]}, 0x24}}, 0x24080804) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "110fe428886e17ba", "dfbdf45b7500c7c009ede929034fbbac", "a6fe09c7", "5a637812ba7ca10f"}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r6, 0xb, 0x7d1f}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="380400004800011d000000080000000afe80ff0088b8f24ef0c2bb2cbba64baea170706f08d1f87d82d11f890124292404c7cc64945fffc4566d6a0f67a3669d057c9276634f3d6bd1ce6aa5285a8d4140249cba926b3dc23b5a3bc44afce36bac80fd0670619696f3d66fe6ac0c33d85166f341014e30d425c81f7d0565f39b043a68a2", @ANYRES32=r3, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) kernel console output (not intermixed with test programs): meout: lec0 [ 153.735699][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 153.738640][ T9143] xt_connbytes: Forcing CT accounting to be enabled [ 153.748146][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.861'. [ 153.781300][ T7048] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.792463][ T7048] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.808547][ T9139] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.426451][ T9189] netlink: 232 bytes leftover after parsing attributes in process `syz.3.871'. [ 154.645846][ T9207] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 154.716063][ T9210] sctp: [Deprecated]: syz.4.877 (pid 9210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.716063][ T9210] Use struct sctp_sack_info instead [ 154.763067][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 154.839455][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.880'. [ 154.873738][ T9218] veth0_to_team: entered promiscuous mode [ 154.934461][ T9218] veth0_to_team: left promiscuous mode [ 155.128423][ T9238] net_ratelimit: 7 callbacks suppressed [ 155.128440][ T9238] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 155.146023][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.887'. [ 155.184215][ T9241] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 155.290593][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 155.370145][ T9241] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.439407][ T9249] bond3: (slave veth7): Enslaving as an active interface with a down link [ 155.510066][ T9253] bond3: (slave veth0_to_bond): making interface the new active one [ 155.546543][ T9253] veth0_to_bond: entered promiscuous mode [ 155.552917][ T9253] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.773241][ T9285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.897'. [ 155.908233][ T9294] netlink: 'syz.0.900': attribute type 18 has an invalid length. [ 156.005057][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 156.015567][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 156.108333][ T9306] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 156.144074][ T9295] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 156.159758][ T9295] bond4 (unregistering): Released all slaves [ 156.254667][ T9309] netlink: 'syz.2.903': attribute type 5 has an invalid length. [ 157.303981][ T9366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.818589][ T9399] bond3: entered promiscuous mode [ 158.050822][ T9422] nbd: socks must be embedded in a SOCK_ITEM attr [ 158.147115][ T9430] __nla_validate_parse: 9 callbacks suppressed [ 158.147133][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 158.234452][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 158.271792][ T9434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.372760][ T9434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.386623][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.936'. [ 158.417992][ T9444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 158.448444][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.936'. [ 158.474809][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.936'. [ 158.489263][ T9446] netlink: 44 bytes leftover after parsing attributes in process `syz.4.939'. [ 158.744295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 158.752360][ C1] lec:lec_tx_timeout: lec0 [ 158.757787][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 158.759695][ T9463] wg1 speed is unknown, defaulting to 1000 [ 158.801034][ T9468] tipc: Can't bind to reserved service type 1 [ 158.807863][ T9463] wg1 speed is unknown, defaulting to 1000 [ 158.856063][ T9463] wg1 speed is unknown, defaulting to 1000 [ 158.919989][ T9463] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.950699][ T9475] sctp: [Deprecated]: syz.1.949 (pid 9475) Use of int in max_burst socket option. [ 158.950699][ T9475] Use struct sctp_assoc_value instead [ 159.027477][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 159.027929][ T9463] wg1 speed is unknown, defaulting to 1000 [ 159.091429][ T9463] wg1 speed is unknown, defaulting to 1000 [ 159.106461][ T9463] wg1 speed is unknown, defaulting to 1000 [ 159.114047][ T9463] wg1 speed is unknown, defaulting to 1000 [ 159.128432][ T9463] wg1 speed is unknown, defaulting to 1000 [ 159.155167][ T9483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 159.443194][ T9509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.961'. [ 159.665722][ T9524] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 159.811456][ T9531] netlink: 'syz.0.970': attribute type 10 has an invalid length. [ 159.852541][ T9531] team0 (unregistering): Port device team_slave_0 removed [ 159.910511][ T9531] team0 (unregistering): Port device team_slave_1 removed [ 159.960711][ T9538] xt_CT: No such helper "pptp" [ 160.454947][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.462393][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.651121][ T9550] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 161.074123][ T9593] syzkaller1: entered promiscuous mode [ 161.090800][ T9593] syzkaller1: entered allmulticast mode [ 161.502329][ T9623] openvswitch: netlink: Message has 6 unknown bytes. [ 161.935883][ T9647] syzkaller1: entered promiscuous mode [ 161.941390][ T9647] syzkaller1: entered allmulticast mode [ 162.040493][ T9661] wlan0 speed is unknown, defaulting to 1000 [ 162.380256][ T9698] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 162.849464][ T9719] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 163.108146][ T9723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.336361][ T9744] __nla_validate_parse: 7 callbacks suppressed [ 163.336379][ T9744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1025'. [ 163.370634][ T9744] IPVS: length: 50 != 8 [ 163.376900][ T9744] netlink: 'syz.1.1025': attribute type 24 has an invalid length. [ 163.626389][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 163.759885][ T29] audit: type=1800 audit(1774074635.173:2): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1027" name="memory.events" dev="tmpfs" ino=933 res=0 errno=0 [ 163.781207][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 163.781273][ C1] lec:lec_tx_timeout: lec0 [ 163.789534][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 163.810041][ T9765] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 163.822522][ T29] audit: type=1804 audit(1774074635.223:3): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1027" name="/newroot/181/memory.events" dev="tmpfs" ino=933 res=1 errno=0 [ 163.857023][ T9765] bond6 (unregistering): Released all slaves [ 163.916799][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 163.969580][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 163.988829][ T35] bond0: (slave bond_slave_0): interface is now down [ 164.003834][ T9779] geneve3: entered promiscuous mode [ 164.013520][ T35] bond0: (slave bond_slave_1): interface is now down [ 164.034530][ T9779] geneve3: entered allmulticast mode [ 164.041944][ T9768] syzkaller0: entered promiscuous mode [ 164.084578][ T9768] syzkaller0: entered allmulticast mode [ 164.109973][ T9786] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1037'. [ 164.130451][ T9787] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1037'. [ 164.205481][ T9794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.223222][ T9796] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 164.231527][ T9796] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1041'. [ 164.265559][ T9796] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 164.286853][ T9789] bond5: option packets_per_slave: invalid value (18446744073709551612) [ 164.313640][ T9789] bond5: option packets_per_slave: allowed values 0 - 65535 [ 164.324752][ T9803] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 164.334402][ T9789] bond5 (unregistering): Released all slaves [ 164.379070][ T9807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1044'. [ 164.389168][ T9796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1041'. [ 164.409345][ T9802] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 164.437966][ T9803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.475795][ T9804] bond6: (slave geneve3): making interface the new active one [ 164.497790][ T9804] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 164.526163][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 164.551639][ T9796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.564311][ T3568] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.579380][ T7354] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 164.599562][ T7354] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 164.694599][ T3568] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.732431][ T7354] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 164.743652][ T7354] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 164.864051][ T9827] ip6t_srh: unknown srh invflags 4000 [ 164.876775][ T9824] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 164.889942][ T9824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.263872][ T9852] bond6: entered promiscuous mode [ 165.305548][ T9852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.683574][ T9880] netlink: 'syz.4.1061': attribute type 1 has an invalid length. [ 165.688068][ T7048] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.085305][ T9905] geneve1: mtu less than device minimum [ 166.430961][ T9925] bond5: entered promiscuous mode [ 166.436963][ T9925] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.568142][ T9931] vlan2: entered allmulticast mode [ 166.601395][ T9931] syz_tun: entered allmulticast mode [ 166.601838][ T66] bond0: (slave bond_slave_0): interface is now down [ 166.629502][ T66] bond0: (slave bond_slave_1): interface is now down [ 166.719272][ T9947] macvtap1: entered promiscuous mode [ 166.728034][ T9947] vlan0: entered promiscuous mode [ 166.733650][ T9947] macvtap1: entered allmulticast mode [ 166.741005][ T9947] vlan0: entered allmulticast mode [ 166.749244][ T9947] veth0_vlan: entered allmulticast mode [ 166.797779][ T66] veth0_to_bond: left promiscuous mode [ 166.917676][ T9958] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 167.034106][ T9958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.224884][ T9988] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 167.272998][ T9988] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.317921][ T9988] bond7: (slave veth3): Enslaving as an active interface with a down link [ 167.329078][ T29] audit: type=1800 audit(1774074638.753:4): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1092" name="memory.events" dev="tmpfs" ino=1064 res=0 errno=0 [ 167.368388][ T29] audit: type=1804 audit(1774074638.753:5): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1092" name="/newroot/205/memory.events" dev="tmpfs" ino=1064 res=1 errno=0 [ 167.397941][ T9999] bond7: (slave veth0_to_bond): making interface the new active one [ 167.418130][ T9999] veth0_to_bond: entered promiscuous mode [ 167.433810][ T9999] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 167.562297][ T9999] bond7: (slave veth5): Enslaving as an active interface with a down link [ 167.618441][ T9999] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 167.652942][ T9999] netlink: 'syz.2.1093': attribute type 2 has an invalid length. [ 167.703274][T10015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.753285][T10015] macvtap2: entered promiscuous mode [ 167.778117][T10015] macvtap2: entered allmulticast mode [ 167.783752][T10015] veth1_vlan: entered allmulticast mode [ 167.850819][T10025] macvtap3: entered promiscuous mode [ 167.857040][T10025] macvtap3: entered allmulticast mode [ 167.962794][T10038] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 168.321920][T10052] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 168.330208][T10052] netlink: 'syz.2.1111': attribute type 2 has an invalid length. [ 168.339540][T10052] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 168.348548][T10052] __nla_validate_parse: 16 callbacks suppressed [ 168.348562][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1111'. [ 168.441252][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 168.648027][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 168.704007][T10059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.747067][T10059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.794293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 168.802367][ C1] lec:lec_tx_timeout: lec0 [ 168.807036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 168.983500][T10087] syzkaller1: entered promiscuous mode [ 168.991980][T10087] syzkaller1: entered allmulticast mode [ 169.083342][T10100] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 169.151306][T10100] bond7: entered promiscuous mode [ 169.166433][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 169.168156][ T7354] bond0: (slave bond_slave_0): interface is now down [ 169.185737][ T7354] bond0: (slave bond_slave_1): interface is now down [ 169.196073][T10100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.226444][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 169.300007][T10117] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 169.387950][T10114] bond7: (slave bridge3): making interface the new active one [ 169.397681][T10114] bridge3: entered promiscuous mode [ 169.405956][T10114] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 169.424203][ T5842] block nbd0: Receive control failed (result -107) [ 169.434037][T10125] block nbd0: reconnected socket [ 169.441448][T10125] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1133'. [ 169.475249][T10128] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 169.504350][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 169.743573][T10144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1140'. [ 169.875339][T10146] IPVS: length: 163 != 8 [ 169.887593][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 169.903647][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1142'. [ 169.922426][T10159] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002 [ 170.005460][T10146] erspan0: entered allmulticast mode [ 170.172072][T10169] syzkaller0: entered promiscuous mode [ 170.193542][T10169] syzkaller0: entered allmulticast mode [ 170.800839][T10218] 8021q: VLANs not supported on ip_vti0 [ 170.813891][T10218] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 170.830621][T10218] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 171.297665][T10248] geneve4: entered promiscuous mode [ 171.308136][ T7048] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 51235 - 0 [ 171.326057][ T7048] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 51235 - 0 [ 171.342416][ T7048] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 51235 - 0 [ 171.366636][T10250] netlink: 'syz.3.1173': attribute type 2 has an invalid length. [ 171.390109][ T7048] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 51235 - 0 [ 171.714745][ T3568] bond0: (slave bond_slave_0): interface is now down [ 171.723003][ T3568] bond0: (slave bond_slave_1): interface is now down [ 171.772032][T10276] bridge_slave_0: left allmulticast mode [ 171.807563][T10276] bridge_slave_0: left promiscuous mode [ 171.813369][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.833640][T10276] bridge_slave_1: left allmulticast mode [ 171.839610][T10276] bridge_slave_1: left promiscuous mode [ 171.847775][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.875556][T10276] bond7: (slave veth0_to_bond): Releasing active interface [ 171.882890][T10276] veth0_to_bond: left promiscuous mode [ 171.908412][T10276] bond0: (slave bond_slave_0): Releasing backup interface [ 171.950383][T10276] bond0: (slave bond_slave_1): Releasing backup interface [ 171.988223][T10276] team0: Port device team_slave_0 removed [ 172.013626][T10276] team0: Port device team_slave_1 removed [ 172.028999][T10276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.043515][T10276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.053746][T10276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.203005][T10303] netlink: 'syz.4.1190': attribute type 3 has an invalid length. [ 172.359144][T10315] tun0: tun_chr_ioctl cmd 1074025675 [ 172.365221][T10315] tun0: persist disabled [ 173.193804][T10354] syzkaller1: entered promiscuous mode [ 173.215236][T10354] syzkaller1: entered allmulticast mode [ 173.409627][T10339] lec:lec_atm_close: lec0: Shut down! [ 173.431252][T10337] Cannot find del_set index 0 as target [ 173.983666][T10402] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 174.108033][T10409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 174.169190][T10409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 174.276305][ T7048] bond0: (slave bond_slave_0): interface is now down [ 174.285464][ T7048] bond0: (slave bond_slave_1): interface is now down [ 174.301129][T10410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.328771][T10423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.598878][T10446] IPv6: addrconf: prefix option has invalid lifetime [ 174.605637][T10446] IPv6: addrconf: prefix option has invalid lifetime [ 174.661446][T10451] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 174.829168][T10470] __nla_validate_parse: 14 callbacks suppressed [ 174.829186][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1234'. [ 175.138264][T10491] netlink: set zone limit has 4 unknown bytes [ 175.159419][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 175.312770][T10509] netlink: 'syz.2.1243': attribute type 4 has an invalid length. [ 175.332816][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1242'. [ 175.376866][T10513] syzkaller0: entered promiscuous mode [ 175.382630][T10507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1242'. [ 175.391882][T10513] syzkaller0: entered allmulticast mode [ 175.861581][T10523] xt_nfacct: accounting object `syz1' does not exist [ 176.101611][T10550] netlink: 'syz.4.1255': attribute type 21 has an invalid length. [ 176.112986][T10550] team0: left allmulticast mode [ 176.119192][T10550] team_slave_0: left allmulticast mode [ 176.126929][T10550] team_slave_1: left allmulticast mode [ 176.132460][T10550] team0: left promiscuous mode [ 176.159139][T10550] team_slave_0: left promiscuous mode [ 176.169552][T10550] team_slave_1: left promiscuous mode [ 176.183011][T10550] bridge0: port 2(team0) entered disabled state [ 176.205954][T10550] gretap0: left allmulticast mode [ 176.213684][T10550] gretap0: left promiscuous mode [ 176.221129][T10550] bridge0: port 1(gretap0) entered disabled state [ 176.323322][T10564] netlink: 'syz.3.1258': attribute type 4 has an invalid length. [ 176.360777][T10565] netlink: 'syz.3.1258': attribute type 4 has an invalid length. [ 176.374414][T10564] netlink: 'syz.3.1258': attribute type 4 has an invalid length. [ 176.503826][T10570] syzkaller0: entered promiscuous mode [ 176.571300][T10590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1257'. [ 176.580356][T10570] syzkaller0: entered allmulticast mode [ 176.837865][ T7048] bond0: (slave bond_slave_0): interface is now down [ 176.845508][ T7048] bond0: (slave bond_slave_1): interface is now down [ 178.031876][T10621] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1270'. [ 178.106783][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'. [ 178.231225][T10640] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1277'. [ 178.295663][T10635] netlink: 'syz.4.1270': attribute type 64 has an invalid length. [ 178.313243][T10635] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1270'. [ 178.401979][T10639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.592114][T10665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.684431][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 178.692500][ C1] lec:lec_tx_timeout: lec0 [ 178.697805][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 178.818417][T10679] tipc: Started in network mode [ 178.823696][T10679] tipc: Node identity da2b54bf76ae, cluster identity 4711 [ 178.832279][T10679] tipc: Enabled bearer , priority 0 [ 178.841227][T10681] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 178.854396][T10681] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1287'. [ 178.941687][T10679] syzkaller0: entered promiscuous mode [ 178.956662][T10679] syzkaller0: entered allmulticast mode [ 178.975554][T10679] tipc: Resetting bearer [ 178.990118][T10681] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 179.041430][T10691] nbd: must specify an index to disconnect [ 179.101955][ T7356] tipc: Resetting bearer [ 179.170107][T10678] tipc: Resetting bearer [ 179.308203][T10714] xt_l2tp: unknown flags: 10 [ 179.394996][ T7048] bond0: (slave bond_slave_0): interface is now down [ 179.401724][ T7048] bond0: (slave bond_slave_1): interface is now down [ 179.436613][T10721] netlink: 'syz.4.1299': attribute type 4 has an invalid length. [ 180.276292][T10678] tipc: Disabling bearer [ 180.296575][ T24] tipc: Node number set to 2894419135 [ 180.483936][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 180.520493][T10732] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1306'. [ 180.641268][T10742] vlan2: entered promiscuous mode [ 180.649307][T10742] bridge0: entered promiscuous mode [ 180.666607][T10739] syzkaller0: entered promiscuous mode [ 180.672104][T10739] syzkaller0: entered allmulticast mode [ 181.244011][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 181.317224][T10771] syzkaller1: entered promiscuous mode [ 181.335965][T10771] syzkaller1: entered allmulticast mode [ 181.368659][T10787] bridge5: entered promiscuous mode [ 181.374102][T10787] bridge5: entered allmulticast mode [ 181.399916][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 181.470934][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 181.754169][T10809] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 181.818463][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 181.864447][T10813] SET target dimension over the limit! [ 181.958497][ T7354] bond0: (slave bond_slave_0): interface is now down [ 181.969497][ T7354] bond0: (slave bond_slave_1): interface is now down [ 181.981060][ T7354] bond0: now running without any active interface! [ 182.238395][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 182.399989][T10845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1337'. [ 182.410926][T10845] netlink: 'syz.1.1337': attribute type 83 has an invalid length. [ 182.429046][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 182.506467][T10852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 182.535637][T10852] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.687438][ T5951] IPVS: starting estimator thread 0... [ 182.786112][T10866] IPVS: using max 34 ests per chain, 81600 per kthread [ 182.943664][T10876] netlink: 'syz.2.1345': attribute type 4 has an invalid length. [ 183.036647][T10886] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 183.147191][T10893] pim6reg: left allmulticast mode [ 183.539734][T10914] openvswitch: netlink: IP tunnel dst address not specified [ 183.608411][T10917] veth0: entered promiscuous mode [ 183.650281][T10921] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 183.696715][T10913] veth0: left promiscuous mode [ 183.714394][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 183.722457][ C1] lec:lec_tx_timeout: lec0 [ 183.728065][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 183.861477][T10930] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 184.244796][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.252493][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.281941][T10949] siw: device registration error -23 [ 184.539903][T10972] netlink: 'syz.1.1376': attribute type 3 has an invalid length. [ 184.574831][T10972] netlink: 'syz.1.1376': attribute type 3 has an invalid length. [ 184.672045][T10980] netlink: 'syz.2.1379': attribute type 11 has an invalid length. [ 184.783676][T10984] netlink: 'syz.1.1380': attribute type 21 has an invalid length. [ 184.791816][T10984] netlink: 'syz.1.1380': attribute type 4 has an invalid length. [ 184.804347][T10984] netlink: 'syz.1.1380': attribute type 5 has an invalid length. [ 185.039479][T11002] sit0: Caught tx_queue_len zero misconfig [ 185.063641][T11003] bridge0: Caught tx_queue_len zero misconfig [ 185.373104][T11037] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 185.380448][T11037] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 185.548634][T11046] batman_adv: batadv0: Adding interface: dummy0 [ 185.558397][T11046] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.585250][T11046] batman_adv: batadv0: Interface activated: dummy0 [ 185.606732][T11046] batadv0: mtu less than device minimum [ 185.613273][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.624973][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.636286][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.648208][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.659437][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.670749][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.681874][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.693163][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.704391][T11046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.844708][T11057] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 185.865896][T11057] bond4: entered promiscuous mode [ 185.871300][T11057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.890247][T11057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.897666][T11057] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 185.908061][T11057] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 185.920115][T11057] bond4: (slave vcan1): making interface the new active one [ 185.928696][T11057] vcan1: entered promiscuous mode [ 185.935572][T11057] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 187.959606][T10997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.277475][T11085] bond8: option fail_over_mac: invalid value (16) [ 188.299264][T11085] bond8 (unregistering): Released all slaves [ 188.352746][T11106] __nla_validate_parse: 19 callbacks suppressed [ 188.352763][T11106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1412'. [ 188.401152][T11104] netlink: 'syz.3.1411': attribute type 21 has an invalid length. [ 188.426505][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 188.463055][T11110] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 188.487070][ T7354] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.487281][T11104] netlink: 'syz.3.1411': attribute type 21 has an invalid length. [ 188.503867][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 188.505913][ T7354] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.573970][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.581458][T11110] bridge0: port 1(1¾x9ÿ) entered disabled state [ 188.632295][T11110] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.639540][T11110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.647109][T11110] bridge0: port 1(1¾x9ÿ) entered blocking state [ 188.653559][T11110] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 188.686698][T11110] : (slave bridge0): Enslaving as an active interface with an up link [ 188.713202][ T7354] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.723486][ T7354] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.734742][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 188.742755][ C1] lec:lec_tx_timeout: lec0 [ 188.747557][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 188.850397][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 188.899146][T11130] ip6tnl0: Caught tx_queue_len zero misconfig [ 189.005557][T11138] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1423'. [ 189.092179][T11140] netlink: 'syz.1.1424': attribute type 4 has an invalid length. [ 189.106120][T11144] netlink: 'syz.0.1425': attribute type 2 has an invalid length. [ 189.144199][T11140] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1424'. [ 189.229684][T11149] wlan0 speed is unknown, defaulting to 1000 [ 189.298380][T11149] lo speed is unknown, defaulting to 1000 [ 189.390887][T11162] vlan4: entered allmulticast mode [ 189.407847][T11162] bridge_slave_0: entered allmulticast mode [ 190.192177][T11149] wg1 speed is unknown, defaulting to 1000 [ 190.370246][T11184] x_tables: duplicate underflow at hook 1 [ 190.521979][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1438'. [ 190.557214][T11190] dvmrp0: entered allmulticast mode [ 190.605598][T11188] geneve3: entered promiscuous mode [ 190.929796][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 191.056280][T11231] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 191.078246][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1451'. [ 191.100762][T11231] tipc: Enabling of bearer rejected, media not registered [ 191.109898][T11234] netlink: 'syz.0.1452': attribute type 10 has an invalid length. [ 191.135595][T11232] geneve2: entered promiscuous mode [ 191.193905][T11234] batman_adv: batadv0: Interface deactivated: dummy0 [ 191.204103][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1453'. [ 191.216258][T11234] batman_adv: batadv0: Removing interface: dummy0 [ 191.365165][T11247] netlink: 'syz.2.1457': attribute type 30 has an invalid length. [ 191.384040][T11245] geneve4: entered promiscuous mode [ 191.387283][T11251] netlink: 'syz.2.1457': attribute type 30 has an invalid length. [ 191.461083][T11249] syzkaller1: entered promiscuous mode [ 191.467773][T11249] syzkaller1: entered allmulticast mode [ 191.841448][T11281] vlan4: entered allmulticast mode [ 191.863550][T11281] bridge5: entered allmulticast mode [ 191.893534][T11280] syzkaller0: entered promiscuous mode [ 191.902109][T11285] x_tables: duplicate underflow at hook 2 [ 191.909491][T11280] syzkaller0: entered allmulticast mode [ 191.918480][T11278] erspan0: left allmulticast mode [ 191.923743][T11278] bridge5: port 1(erspan0) entered blocking state [ 191.931091][T11278] bridge5: port 1(erspan0) entered disabled state [ 191.938155][T11278] erspan0: entered allmulticast mode [ 191.946025][T11278] erspan0: entered promiscuous mode [ 192.208983][T11288] 8021q: VLANs not supported on ip_vti0 [ 192.239993][T11309] netlink: 'syz.4.1473': attribute type 2 has an invalid length. [ 192.769617][T11339] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 192.830023][T11339] 8021q: adding VLAN 0 to HW filter on device bond7 [ 193.088721][T11359] geneve5: entered promiscuous mode [ 193.177576][T11369] bond4: Removing last arp target with arp_interval on [ 193.199935][T11376] xt_hashlimit: size too large, truncated to 1048576 [ 193.210752][T11357] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 193.218902][T11372] syzkaller1: entered promiscuous mode [ 193.231902][T11372] syzkaller1: entered allmulticast mode [ 193.336957][T11383] ipt_REJECT: TCP_RESET invalid for non-tcp [ 193.576191][T11396] syzkaller1: entered promiscuous mode [ 193.581739][T11396] syzkaller1: entered allmulticast mode [ 193.754296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 193.762379][ C1] lec:lec_tx_timeout: lec0 [ 193.766996][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 193.894823][T11404] __nla_validate_parse: 17 callbacks suppressed [ 193.894841][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1506'. [ 193.919765][T11404] geneve2: entered promiscuous mode [ 194.071841][T11414] netlink: 'syz.0.1510': attribute type 21 has an invalid length. [ 194.081071][T11414] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.081369][T11416] blkio.reset_stats is deprecated [ 194.090161][T11414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.101880][T11414] IPv6: NLM_F_CREATE should be set when creating new route [ 194.109192][T11414] IPv6: NLM_F_CREATE should be set when creating new route [ 194.116443][T11414] IPv6: NLM_F_CREATE should be set when creating new route [ 194.129107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.137881][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.407085][T11438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1517'. [ 194.488429][T11442] xt_policy: output policy not valid in PREROUTING and INPUT [ 194.504912][T11440] dvmrp0: entered allmulticast mode [ 194.545588][T11447] netlink: 'syz.4.1520': attribute type 8 has an invalid length. [ 194.627354][T11451] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 194.658929][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1521'. [ 194.731822][T11458] netlink: 'syz.2.1523': attribute type 83 has an invalid length. [ 194.743731][T11458] netlink: 'syz.2.1523': attribute type 9 has an invalid length. [ 194.760522][T11451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.771693][T11451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.782700][T11451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 51235 - 0 [ 194.895334][T11451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.908221][T11451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.922259][T11451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51235 - 0 [ 195.026183][T11451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.039066][T11451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.050734][T11451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51235 - 0 [ 195.080925][T11465] wlan0 speed is unknown, defaulting to 1000 [ 195.088088][T11465] lo speed is unknown, defaulting to 1000 [ 195.116938][T11451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.141087][T11451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.182979][T11451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51235 - 0 [ 195.381050][ T7355] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.390465][ T7355] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51235 - 0 [ 195.400538][ T7355] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.409359][T11465] wg1 speed is unknown, defaulting to 1000 [ 195.462652][ T7355] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.471098][ T7355] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51235 - 0 [ 195.480143][ T7355] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.526208][ T3568] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.534855][ T3568] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51235 - 0 [ 195.543281][ T3568] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.560317][ T3568] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.571782][ T3568] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51235 - 0 [ 195.580588][ T3568] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.588990][T11486] netlink: 'syz.3.1528': attribute type 29 has an invalid length. [ 195.597042][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 195.617399][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 195.618321][T11486] netlink: 'syz.3.1528': attribute type 6 has an invalid length. [ 195.652419][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 195.801267][T11497] netlink: 'syz.2.1531': attribute type 9 has an invalid length. [ 196.033487][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'. [ 196.217739][T11523] nbd: nbd0 already in use [ 196.244118][T11523] block nbd0: NBD_DISCONNECT [ 196.271956][T11523] block nbd0: Send disconnect failed -32 [ 196.329197][T11523] block nbd0: shutting down sockets [ 196.368666][T11517] netlink: 'syz.0.1537': attribute type 51 has an invalid length. [ 196.401757][T11532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1540'. [ 196.550695][T11539] lo: MTU too low for tipc bearer [ 196.588280][T11539] tipc: Enabling of bearer rejected, failed to enable media [ 196.702774][T11547] wireguard0: entered promiscuous mode [ 196.708492][T11547] wireguard0: entered allmulticast mode [ 196.719531][T11547] team0: Device wireguard0 is of different type [ 196.801490][ T29] audit: type=1800 audit(1774074668.223:6): pid=11557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1549" name="memory.events" dev="tmpfs" ino=1555 res=0 errno=0 [ 196.865948][T11557] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 196.882348][T11557] bond8 (unregistering): Released all slaves [ 196.969802][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 197.060139][T11567] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1551'. [ 197.074713][T11568] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 197.082678][T11568] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 197.142778][T11570] nbd: must specify a device to reconfigure [ 197.166295][T11572] xt_HMARK: proto mask must be zero with L3 mode [ 197.173519][T11570] pim6reg1: entered promiscuous mode [ 197.179060][T11570] pim6reg1: entered allmulticast mode [ 197.511853][T11589] xfrm1: entered promiscuous mode [ 197.517215][T11589] xfrm1: entered allmulticast mode [ 197.630191][T11596] block nbd0: Unsupported socket: should be TCP or UNIX. [ 198.774303][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 198.782354][ C1] lec:lec_tx_timeout: lec0 [ 198.786945][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 198.910434][T11687] __nla_validate_parse: 4 callbacks suppressed [ 198.910452][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 199.495935][T11739] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1595'. [ 199.577697][T11741] netlink: 'syz.0.1597': attribute type 7 has an invalid length. [ 199.606638][T11741] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1597'. [ 199.749158][T11750] netlink: 'syz.1.1601': attribute type 1 has an invalid length. [ 199.786848][T11750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.874424][T11774] netlink: 'syz.1.1607': attribute type 21 has an invalid length. [ 200.882582][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 200.892112][T11774] netlink: 'syz.1.1607': attribute type 21 has an invalid length. [ 200.900295][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 201.319110][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 201.319131][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 201.319161][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 201.325321][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 201.761751][T11779] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 201.769806][T11779] netlink: 'syz.1.1609': attribute type 11 has an invalid length. [ 201.777765][T11779] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1609'. [ 201.885237][T11782] vlan0: entered allmulticast mode [ 201.890402][T11782] veth0_to_bond: entered allmulticast mode [ 202.162562][T11708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.512085][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 202.515296][T11791] syzkaller0: entered promiscuous mode [ 202.554404][T11791] syzkaller0: entered allmulticast mode [ 202.575505][T11796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1617'. [ 202.604650][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1617'. [ 202.624729][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 203.794599][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 203.802739][ C1] lec:lec_tx_timeout: lec0 [ 203.808183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 203.978406][T11853] syzkaller0: entered promiscuous mode [ 203.983912][T11853] syzkaller0: entered allmulticast mode [ 204.117789][T11860] tipc: Enabling of bearer rejected, failed to enable media [ 204.293988][T11868] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1640'. [ 204.313626][T11868] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1640'. [ 204.338273][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1640'. [ 204.776908][T11882] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1645'. [ 205.037991][T11898] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 205.066617][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 205.288968][T11921] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 205.338175][T11922] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 205.345511][T11922] PKCS7: Unknown OID: [4] (bad) [ 205.350378][T11922] PKCS7: Only support pkcs7_signedData type [ 205.542388][T11928] tipc: Enabled bearer , priority 0 [ 205.549287][T11930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1655'. [ 205.614518][T11936] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 205.643371][T11936] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1658'. [ 205.704830][T11936] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 205.719952][T11944] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 205.725276][T11928] tipc: Disabling bearer [ 205.788485][T11946] netlink: 'syz.1.1659': attribute type 3 has an invalid length. [ 205.933664][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 205.976365][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1662'. [ 206.027160][T11957] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1665'. [ 206.499181][T11977] hsr0: entered promiscuous mode [ 206.530590][T11977] macvlan0: entered allmulticast mode [ 206.540566][T11977] hsr0: entered allmulticast mode [ 206.554369][T11977] hsr_slave_0: entered allmulticast mode [ 206.560116][T11977] hsr_slave_1: entered allmulticast mode [ 206.577152][T11980] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 206.621441][T11980] bond5: entered promiscuous mode [ 206.652496][T11980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.662864][T11982] syzkaller0: entered promiscuous mode [ 206.668606][T11982] syzkaller0: entered allmulticast mode [ 206.707645][T11986] bond5: (slave bond_slave_1): Device is not our slave [ 206.714722][T11986] bond5: option active_slave: invalid value (bond_slave_1) [ 206.729872][T11986] bond5 (unregistering): Released all slaves [ 206.848439][T11985] bond5: (slave bridge5): making interface the new active one [ 206.857534][T11985] bridge5: entered promiscuous mode [ 206.863937][T11985] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 207.300957][T12018] netlink: 'syz.1.1688': attribute type 4 has an invalid length. [ 207.317984][T12019] net_ratelimit: 13 callbacks suppressed [ 207.318000][T12019] openvswitch: netlink: Unknown nsh attribute 0 [ 207.493600][T12029] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 207.551225][T12029] 8021q: adding VLAN 0 to HW filter on device bond8 [ 207.576433][T12036] bond8: (slave geneve3): making interface the new active one [ 207.586744][T12036] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 207.731317][T12044] netlink: 'syz.3.1694': attribute type 3 has an invalid length. [ 208.430172][T12093] bridge_slave_1: default FDB implementation only supports local addresses [ 208.515984][T12099] smc: net device wlan0 applied user defined pnetid SYZ0 [ 208.586937][T12104] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 208.814317][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 208.822389][ C1] lec:lec_tx_timeout: lec0 [ 208.827890][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 208.941941][T12117] syzkaller0: entered promiscuous mode [ 208.948845][T12117] syzkaller0: entered allmulticast mode [ 209.127788][T12132] netlink: 'syz.0.1724': attribute type 4 has an invalid length. [ 209.217061][T12137] nbd: socks must be embedded in a SOCK_ITEM attr [ 209.231334][T12139] veth0: entered promiscuous mode [ 209.258181][ T7356] tipc: Subscription rejected, illegal request [ 209.274734][T12138] veth0: left promiscuous mode [ 209.388574][T12149] __nla_validate_parse: 13 callbacks suppressed [ 209.388586][T12149] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1731'. [ 209.746017][T12165] netlink: 'syz.0.1737': attribute type 8 has an invalid length. [ 209.772390][T12164] netlink: 'syz.0.1737': attribute type 8 has an invalid length. [ 209.803297][T12164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'. [ 210.044135][T12180] netlink: 'syz.0.1742': attribute type 12 has an invalid length. [ 210.063508][T12182] x_tables: duplicate underflow at hook 1 [ 210.096240][T12186] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1743'. [ 210.164377][T12180] bond6: option primary_reselect: invalid value (255) [ 210.186270][T12180] bond6 (unregistering): Released all slaves [ 210.266877][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 210.457249][T12204] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1747'. [ 210.486923][T12208] SET target dimension over the limit! [ 210.503442][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 210.519252][T12209] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1750'. [ 210.642221][T12212] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1749'. [ 210.719548][T12225] validate_nla: 1 callbacks suppressed [ 210.719565][T12225] netlink: 'syz.0.1753': attribute type 51 has an invalid length. [ 210.991387][T12242] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 211.051201][T12246] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1760'. [ 211.079620][T12246] openvswitch: netlink: Flow key attr not present in new flow. [ 211.096324][T12251] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1761'. [ 211.142992][T12251] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 211.242834][T12262] netlink: 'syz.2.1765': attribute type 7 has an invalid length. [ 211.612095][ T66] tipc: Subscription rejected, illegal request [ 211.623629][T12285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.751353][T12295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.948535][T12291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.982916][T12291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.024127][T12301] ip6_vti0: entered promiscuous mode [ 212.590912][T12342] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 212.599754][T12342] macvtap0: left allmulticast mode [ 212.744331][T12348] netlink: 'syz.2.1790': attribute type 10 has an invalid length. [ 212.778650][T12348] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 212.847499][T12349] team0: Port device team_slave_0 removed [ 213.042285][T12356] bond0: (slave bridge_slave_1): Releasing backup interface [ 213.082856][T12356] tipc: Resetting bearer [ 213.127171][T12356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.343240][T12383] netlink: 'syz.1.1799': attribute type 3 has an invalid length. [ 213.363043][T12385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.424998][T12389] netlink: 'syz.0.1802': attribute type 3 has an invalid length. [ 213.451299][T12389] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 213.834290][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 213.842374][ C1] lec:lec_tx_timeout: lec0 [ 213.849644][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.030088][T12442] block nbd0: not configured, cannot reconfigure [ 214.347520][T12463] bond11: option lp_interval: invalid value (18446744071853572096) [ 214.355897][T12463] bond11: option lp_interval: allowed values 1 - 2147483647 [ 214.385676][T12463] bond11 (unregistering): Released all slaves [ 214.450129][T12465] bond11: option lp_interval: invalid value (18446744071853572096) [ 214.460637][T12465] bond11: option lp_interval: allowed values 1 - 2147483647 [ 214.470452][T12465] bond11 (unregistering): Released all slaves [ 214.588308][T12485] __nla_validate_parse: 20 callbacks suppressed [ 214.588328][T12485] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1826'. [ 214.770899][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 214.888697][T12505] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.981337][T12511] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 214.999495][T12511] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1832'. [ 215.561735][T12495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.601546][T12495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.742952][T12495] bridge1: left promiscuous mode [ 215.748137][T12495] bridge1: left allmulticast mode [ 215.784477][T12495] bridge3: left promiscuous mode [ 215.789596][T12495] bridge3: left allmulticast mode [ 215.802014][T12495] geneve2: left promiscuous mode [ 215.905902][T12497] wlan0 speed is unknown, defaulting to 1000 [ 215.972306][ T797] wg1 speed is unknown, defaulting to 1000 [ 215.980228][ T3568] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.989192][ T797] syz2: Port: 1 Link DOWN [ 216.010453][ T3568] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.032270][T12497] lo speed is unknown, defaulting to 1000 [ 216.038375][ T3568] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.160632][T12539] syzkaller1: entered promiscuous mode [ 216.166364][T12539] syzkaller1: entered allmulticast mode [ 216.224803][ T9567] syzkaller1: tun_net_xmit 90 [ 216.317915][T12539] pimreg: entered allmulticast mode [ 216.525358][T12497] wg1 speed is unknown, defaulting to 1000 [ 216.716694][T12582] delete_channel: no stack [ 216.846863][T12582] netlink: 'syz.2.1845': attribute type 4 has an invalid length. [ 216.910531][T12589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.919685][T12590] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 217.090556][T12603] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1851'. [ 217.132726][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 217.170497][T12603] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1851'. [ 217.183059][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'. [ 217.193921][T12603] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 217.204452][T12603] netlink: 'syz.1.1851': attribute type 2 has an invalid length. [ 217.212385][T12603] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1851'. [ 217.499515][T12622] xt_hashlimit: size too large, truncated to 1048576 [ 217.557465][T12616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.611340][T12630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1860'. [ 217.626840][T12629] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1860'. [ 217.642310][T12640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.867613][T12646] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 217.883684][T12648] block nbd0: not configured, cannot reconfigure [ 217.883722][T12646] syzkaller1: Refused to change device type [ 217.917466][T12646] syzkaller1: entered promiscuous mode [ 217.924891][T12646] syzkaller1: entered allmulticast mode [ 217.947187][ T3568] syzkaller1: tun_net_xmit 70 [ 217.954590][T12646] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 218.198614][T12661] syzkaller1: entered promiscuous mode [ 218.214498][T12661] syzkaller1: entered allmulticast mode [ 218.864542][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 218.872619][ C1] lec:lec_tx_timeout: lec0 [ 218.877504][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 219.291024][T12721] netlink: 'syz.0.1882': attribute type 7 has an invalid length. [ 219.299439][T12721] netlink: 'syz.0.1882': attribute type 8 has an invalid length. [ 219.318294][T12721] ip6gretap0: entered promiscuous mode [ 219.439329][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.612335][T12747] __nla_validate_parse: 11 callbacks suppressed [ 219.612410][T12747] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1890'. [ 219.673687][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'. [ 219.698283][T12749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'. [ 219.724384][T12750] netlink: 'syz.2.1889': attribute type 7 has an invalid length. [ 219.738801][T12749] netlink: 'syz.2.1889': attribute type 7 has an invalid length. [ 219.743250][T12750] netlink: 'syz.2.1889': attribute type 8 has an invalid length. [ 219.757964][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 219.779508][T12750] bridge0: entered promiscuous mode [ 219.786179][T12750] gretap0: entered promiscuous mode [ 219.792368][T12750] erspan0: entered promiscuous mode [ 219.798841][T12750] debugfs: 'hsr1' already exists in 'hsr' [ 219.804881][T12750] Cannot create hsr debugfs directory [ 219.811350][T12750] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 219.830700][T12749] netlink: 'syz.2.1889': attribute type 8 has an invalid length. [ 219.838755][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 219.849134][T12750] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 219.859651][T12750] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 220.076378][T12765] openvswitch: netlink: IP tunnel dst address not specified [ 220.217756][T12784] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1900'. [ 220.232377][T12784] xt_hashlimit: max too large, truncated to 1048576 [ 220.337179][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 220.353610][T12793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.666920][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 220.696228][T12815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1907'. [ 220.786515][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 220.816915][T12821] bond9: option xmit_hash_policy: invalid value (64) [ 220.827328][T12821] bond9 (unregistering): Released all slaves [ 221.176371][T12841] veth0_macvtap: entered promiscuous mode [ 221.202966][T12841] macvtap1: entered allmulticast mode [ 221.214315][T12841] veth0_macvtap: entered allmulticast mode [ 221.421614][T12857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.548043][T12869] netlink: 'syz.1.1924': attribute type 1 has an invalid length. [ 221.570137][T12868] syzkaller1: entered promiscuous mode [ 221.575791][T12868] syzkaller1: entered allmulticast mode [ 221.597364][T12869] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.683831][T12871] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.693203][T12871] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 221.705764][T12871] bond9: (slave vcan0): Error -95 calling set_mac_address [ 221.850156][T12871] bond9: (slave gretap1): making interface the new active one [ 221.887372][T12871] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 221.931877][T12869] macvlan1: entered promiscuous mode [ 221.944376][T12869] macvlan1: entered allmulticast mode [ 221.967665][T12869] bond9: entered promiscuous mode [ 221.974661][T12869] gretap1: entered promiscuous mode [ 221.992071][T12869] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 222.021478][T12869] bond9: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 222.039736][T12869] bond9: left promiscuous mode [ 222.046575][T12869] gretap1: left promiscuous mode [ 222.072752][T12880] netlink: 'syz.3.1926': attribute type 3 has an invalid length. [ 222.140463][T12869] syz.1.1924 (12869) used greatest stack depth: 17768 bytes left [ 222.216734][T12889] block nbd0: Unsupported socket: should be TCP or UNIX. [ 222.513130][T12904] 8021q: VLANs not supported on caif0 [ 222.859861][T12928] netlink: 'syz.0.1938': attribute type 10 has an invalid length. [ 223.413824][T12960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.547813][ T29] audit: type=1804 audit(1774074694.963:7): pid=12966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1945" name="/newroot/386/memory.events" dev="tmpfs" ino=1974 res=1 errno=0 [ 223.594720][ T29] audit: type=1800 audit(1774074694.963:8): pid=12966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1945" name="memory.events" dev="tmpfs" ino=1974 res=0 errno=0 [ 223.766409][T12973] tipc: Started in network mode [ 223.771356][T12973] tipc: Node identity 9ac20f62a319, cluster identity 4711 [ 223.778771][T12973] tipc: Enabled bearer , priority 0 [ 223.807489][T12972] tipc: Disabling bearer [ 223.839684][T12985] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 223.884307][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 223.892380][ C1] lec:lec_tx_timeout: lec0 [ 223.896994][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 224.191712][T13018] pim6reg527: entered allmulticast mode [ 224.397621][T13025] erspan0: left allmulticast mode [ 224.402818][T13025] erspan0: left promiscuous mode [ 224.409576][T13025] bridge5: port 1(erspan0) entered disabled state [ 224.686987][T13025] bond3: (slave veth0_to_bond): Releasing active interface [ 224.704023][T13025] bond0: (slave bond_slave_0): Releasing backup interface [ 224.729556][T13025] bond0: (slave bond_slave_1): Releasing backup interface [ 224.757155][T13025] team0: Port device team_slave_0 removed [ 224.790723][T13025] team0: Port device team_slave_1 removed [ 224.829415][T13025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.221769][T13054] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 225.480598][T13077] ip6tnl0: entered promiscuous mode [ 225.486328][T13077] __nla_validate_parse: 8 callbacks suppressed [ 225.486344][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 225.575192][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 225.659823][T13082] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 225.834367][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 225.841404][T13100] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1985'. [ 225.850901][T13101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.135238][T13115] ip6tnl3: entered promiscuous mode [ 226.253644][T13121] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 226.279437][T13121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1990'. [ 226.291360][T13121] NCSI netlink: No device for ifindex 0 [ 226.302503][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 226.303029][ T12] tipc: Subscription rejected, illegal request [ 226.393375][T13123] syzkaller0: entered promiscuous mode [ 226.416100][T13123] syzkaller0: entered allmulticast mode [ 226.594949][T13127] syzkaller0: entered promiscuous mode [ 226.600454][T13127] syzkaller0: entered allmulticast mode [ 226.770277][T13151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1998'. [ 226.893452][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2000'. [ 227.056749][T13166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.060138][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 227.255160][T13172] openvswitch: netlink: Message has -2 unknown bytes. [ 227.342053][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 227.488053][T13193] netlink: 'syz.4.2013': attribute type 32 has an invalid length. [ 227.500816][T13193] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 227.762564][T13207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.769870][T13207] IPv6: NLM_F_CREATE should be set when creating new route [ 227.777143][T13207] IPv6: NLM_F_CREATE should be set when creating new route [ 227.927444][T13224] netlink: 'syz.4.2025': attribute type 7 has an invalid length. [ 228.178694][T13239] netlink: 'syz.2.2030': attribute type 1 has an invalid length. [ 228.184900][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.236195][T13239] 8021q: adding VLAN 0 to HW filter on device bond11 [ 228.846790][T13293] lo: Caught tx_queue_len zero misconfig [ 229.103746][T13321] pim6reg: entered allmulticast mode [ 229.112002][T13312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.275636][T13332] bond7 (unregistering): Released all slaves [ 229.418265][T13344] ip6gre1: entered allmulticast mode [ 229.456917][T13347] xt_recent: Unsupported userspace flags (000000b1) [ 229.601780][T13353] syzkaller0: entered promiscuous mode [ 229.615432][T13353] syzkaller0: entered allmulticast mode [ 229.714283][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 229.722347][ C1] lec:lec_tx_timeout: lec0 [ 229.727156][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.972445][T13368] x_tables: duplicate underflow at hook 3 [ 231.925427][ T5844] Bluetooth: hci4: link tx timeout [ 231.930941][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 231.943032][ T5838] Bluetooth: hci4: link tx timeout [ 231.949018][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.144476][ T5838] Bluetooth: hci4: link tx timeout [ 232.149955][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.178970][ T5838] Bluetooth: hci4: link tx timeout [ 232.184122][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.378465][T13451] __nla_validate_parse: 17 callbacks suppressed [ 232.378485][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 232.478189][T13451] netlink: 'syz.3.2075': attribute type 1 has an invalid length. [ 232.515495][T13451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2075'. [ 232.834648][ T5838] Bluetooth: hci4: link tx timeout [ 232.839930][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.969048][T13489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2083'. [ 232.996353][ T5838] Bluetooth: hci4: link tx timeout [ 233.001599][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.021678][T13489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2083'. [ 233.332312][T13510] netlink: 'syz.0.2090': attribute type 1 has an invalid length. [ 233.353879][T13510] netlink: 'syz.0.2090': attribute type 2 has an invalid length. [ 233.373214][T13504] syzkaller0: entered promiscuous mode [ 233.379531][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2090'. [ 233.381798][T13518] netlink: 'syz.1.2092': attribute type 10 has an invalid length. [ 233.390615][T13508] netlink: 'syz.4.2088': attribute type 3 has an invalid length. [ 233.405519][T13504] syzkaller0: entered allmulticast mode [ 233.411846][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2092'. [ 233.412623][T13520] netlink: 'syz.1.2092': attribute type 10 has an invalid length. [ 233.422434][T13508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2088'. [ 233.445446][T13518] dummy0: entered promiscuous mode [ 233.456847][T13518] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.505840][T13520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2092'. [ 233.545051][T13524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2093'. [ 233.602516][T13520] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.789862][T13533] ip6tnl0: Caught tx_queue_len zero misconfig [ 233.807126][T13533] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2095'. [ 233.834087][T13532] syzkaller0: entered promiscuous mode [ 233.850372][T13532] syzkaller0: entered allmulticast mode [ 233.910031][ T5838] Bluetooth: hci4: link tx timeout [ 233.917228][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 234.035139][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 234.125754][T13555] sctp: [Deprecated]: syz.3.2104 (pid 13555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.125754][T13555] Use struct sctp_sack_info instead [ 234.210471][T13559] netlink: 'syz.0.2106': attribute type 10 has an invalid length. [ 234.301830][T13568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 234.458397][T13585] tipc: Enabled bearer , priority 0 [ 234.493490][T13589] SET target dimension over the limit! [ 234.538364][T13583] tipc: Disabling bearer [ 234.734282][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 234.742348][ C1] lec:lec_tx_timeout: lec0 [ 234.747676][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 234.806181][T13610] netlink: 'syz.0.2120': attribute type 11 has an invalid length. [ 235.062381][T13628] tipc: Enabling of bearer rejected, failed to enable media [ 235.449378][T13660] sctp: [Deprecated]: syz.3.2136 (pid 13660) Use of int in max_burst socket option. [ 235.449378][T13660] Use struct sctp_assoc_value instead [ 235.702191][T13684] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 235.750242][T13686] syzkaller1: entered promiscuous mode [ 235.760042][T13686] syzkaller1: entered allmulticast mode [ 235.838620][T13692] kthread_run failed with err -4 [ 236.166685][T13715] syzkaller1: entered promiscuous mode [ 236.193271][T13715] syzkaller1: entered allmulticast mode [ 236.294997][T13719] netlink: 'syz.1.2153': attribute type 23 has an invalid length. [ 236.402137][T13740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.010803][T13777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.184664][T13787] netlink: 'syz.4.2168': attribute type 2 has an invalid length. [ 237.213102][T13787] netlink: 'syz.4.2168': attribute type 2 has an invalid length. [ 237.705276][T13797] syzkaller1: entered promiscuous mode [ 237.710820][T13797] syzkaller1: entered allmulticast mode [ 237.761286][T13804] __nla_validate_parse: 22 callbacks suppressed [ 237.761302][T13804] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2175'. [ 237.937238][T13808] sctp: [Deprecated]: syz.0.2177 (pid 13808) Use of int in maxseg socket option. [ 237.937238][T13808] Use struct sctp_assoc_value instead [ 238.072846][T13812] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2179'. [ 238.083457][T13818] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2180'. [ 238.293217][T13834] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.350826][T13836] openvswitch: netlink: Invalid VLAN frame [ 238.566981][T13845] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.2188:13845 [ 238.602322][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 238.629370][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'. [ 238.785598][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 238.809485][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'. [ 238.847899][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2193'. [ 238.918294][T13865] netlink: 'syz.0.2194': attribute type 83 has an invalid length. [ 238.963641][T13868] netlink: 'syz.1.2195': attribute type 1 has an invalid length. [ 239.238054][T13882] tipc: Enabled bearer , priority 0 [ 239.263936][T13881] syzkaller0: entered promiscuous mode [ 239.279125][T13881] syzkaller0: entered allmulticast mode [ 239.396413][T13881] tipc: Resetting bearer [ 239.457348][T13877] tipc: Resetting bearer [ 239.520719][T13900] netlink: 'syz.3.2202': attribute type 4 has an invalid length. [ 239.538814][T13877] tipc: Disabling bearer [ 239.579131][T13900] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2202'. [ 239.643197][T13906] rdma_rxe: rxe_newlink: failed to add lo [ 239.673773][T13910] rdma_rxe: rxe_newlink: failed to add lo [ 239.689765][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 239.709026][T13913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.744682][T13914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.754523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 239.762567][ C1] lec:lec_tx_timeout: lec0 [ 239.767193][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 240.215992][T13938] bond1: option mode: unable to set because the bond device has slaves [ 240.289264][T13932] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 240.648961][T13967] netlink: 'syz.3.2217': attribute type 1 has an invalid length. [ 240.717314][T13967] bond9: entered promiscuous mode [ 240.722756][T13967] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.735560][T13970] ip6tnl0: Caught tx_queue_len zero misconfig [ 240.906094][T13991] netlink: 'syz.4.2221': attribute type 12 has an invalid length. [ 240.954128][T13993] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 241.281968][T14017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.348021][T14017] tunl0: Caught tx_queue_len zero misconfig [ 241.649118][T14047] lo: Caught tx_queue_len zero misconfig [ 241.677613][T14047] netem: incorrect gi model size [ 241.683950][T14047] netem: change failed [ 241.895681][T14064] netlink: 'syz.0.2239': attribute type 1 has an invalid length. [ 241.968083][T14056] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 242.092370][T14076] netlink: 'syz.3.2240': attribute type 9 has an invalid length. [ 242.109164][T14076] netlink: 'syz.3.2240': attribute type 9 has an invalid length. [ 242.180918][T14076] hsr_slave_0: left promiscuous mode [ 242.195533][T14076] hsr_slave_1: left promiscuous mode [ 242.534107][T14096] netlink: 'syz.0.2246': attribute type 1 has an invalid length. [ 242.551180][T14096] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 242.781295][T14118] __nla_validate_parse: 13 callbacks suppressed [ 242.781314][T14118] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2252'. [ 243.015588][T14139] Cannot find del_set index 4 as target [ 243.308567][T14124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.318556][T14135] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2259'. [ 243.620295][T14162] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2265'. [ 244.247142][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'. [ 244.271576][T14218] syz.0.2283 uses old SIOCAX25GETINFO [ 244.399501][T14227] syzkaller0: entered allmulticast mode [ 244.469579][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2291'. [ 244.502159][T14238] bond12: entered promiscuous mode [ 244.508189][T14238] 8021q: adding VLAN 0 to HW filter on device bond12 [ 244.552803][T14238] 8021q: adding VLAN 0 to HW filter on device bond12 [ 244.573033][T14238] bond12: (slave sit2): The slave device specified does not support setting the MAC address [ 244.583804][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2292'. [ 244.593651][T14238] bond12: (slave sit2): Error -95 calling set_mac_address [ 244.748780][T14257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2295'. [ 244.774583][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 244.782653][ C1] lec:lec_tx_timeout: lec0 [ 244.787292][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 244.849694][T14260] pim6reg1: entered promiscuous mode [ 244.864028][T14260] pim6reg1: entered allmulticast mode [ 244.879685][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'. [ 245.433791][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2302'. [ 245.619906][T14305] : entered promiscuous mode [ 245.625442][T14307] tipc: New replicast peer: 255.255.255.255 [ 245.636931][T14307] tipc: Enabled bearer , priority 10 [ 245.668162][T14312] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 245.757017][T14317] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2305'. [ 246.400967][T14363] validate_nla: 3 callbacks suppressed [ 246.400985][T14363] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 246.436059][T14363] netlink: 'syz.1.2320': attribute type 2 has an invalid length. [ 246.445089][T14363] netlink: 'syz.1.2320': attribute type 2 has an invalid length. [ 246.454861][T14363] netlink: 'syz.1.2320': attribute type 2 has an invalid length. [ 246.471641][T14366] netlink: 'syz.0.2321': attribute type 1 has an invalid length. [ 246.500888][T14366] netlink: 'syz.0.2321': attribute type 1 has an invalid length. [ 246.528963][T14366] netlink: 'syz.0.2321': attribute type 8 has an invalid length. [ 246.713395][T14385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.724946][T14385] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 246.755280][T14385] team0: Device vxcan1 is of different type [ 246.853916][T14394] netlink: 'syz.1.2330': attribute type 83 has an invalid length. [ 247.025327][T14403] xt_nat: multiple ranges no longer supported [ 247.462179][T14429] xt_hashlimit: size too large, truncated to 1048576 [ 247.936076][T14466] __nla_validate_parse: 13 callbacks suppressed [ 247.936094][T14466] netlink: 776 bytes leftover after parsing attributes in process `syz.0.2350'. [ 248.376724][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 248.379410][T14500] SET target dimension over the limit! [ 248.495062][T14507] bond11: entered promiscuous mode [ 248.500901][T14507] bond11: entered allmulticast mode [ 248.506979][T14507] 8021q: adding VLAN 0 to HW filter on device bond11 [ 249.794609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 249.802851][ C1] lec:lec_tx_timeout: lec0 [ 249.807526][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.477714][T14511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.630427][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2372'. [ 251.660262][T14541] netlink: 'syz.1.2371': attribute type 83 has an invalid length. [ 251.798764][T14556] IPv6: Can't replace route, no match found [ 251.880644][T14558] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 251.904376][T14558] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 252.110375][T14578] netlink: 'syz.2.2381': attribute type 33 has an invalid length. [ 252.322113][T14597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.410748][T14600] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2387'. [ 252.441677][T14600] netlink: 'syz.1.2387': attribute type 2 has an invalid length. [ 252.709287][T14620] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 252.719627][T14619] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 252.773861][T14619] bond12: (slave geneve5): making interface the new active one [ 252.795121][T14619] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 252.813129][ T7354] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.827979][ T7354] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.900806][ T7354] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.916694][ T7354] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.992667][T14635] syzkaller0: entered promiscuous mode [ 252.999018][T14635] syzkaller0: entered allmulticast mode [ 253.006597][T14635] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 253.014494][T14635] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2394'. [ 253.131522][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 253.135203][T14646] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.195080][T14632] netlink: 'syz.1.2393': attribute type 4 has an invalid length. [ 253.485198][T14668] netlink: 'syz.2.2399': attribute type 3 has an invalid length. [ 253.631523][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2403'. [ 253.698240][T14675] vlan1: entered allmulticast mode [ 253.723754][T14675] bridge8: entered allmulticast mode [ 253.738415][T14674] bridge8: port 1(erspan0) entered blocking state [ 253.745450][T14674] bridge8: port 1(erspan0) entered disabled state [ 253.752077][T14674] erspan0: entered allmulticast mode [ 253.759571][T14674] erspan0: entered promiscuous mode [ 253.970675][T14686] netlink: 'syz.1.2405': attribute type 4 has an invalid length. [ 254.049574][T14693] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2407'. [ 254.131923][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 254.164484][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'. [ 254.221055][T14705] bond8: option fail_over_mac: invalid value (3) [ 254.248984][T14705] bond8 (unregistering): Released all slaves [ 254.331183][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 254.405599][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 254.440220][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 254.472305][T14723] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 254.602803][T14726] wlan0 speed is unknown, defaulting to 1000 [ 254.606156][T14729] tunl0: entered promiscuous mode [ 254.616449][T14729] netlink: 'syz.1.2416': attribute type 3 has an invalid length. [ 254.627008][T14729] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2416'. [ 254.635223][T14740] delete_channel: no stack [ 254.682646][T14726] lo speed is unknown, defaulting to 1000 [ 254.814327][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.822379][ C1] lec:lec_tx_timeout: lec0 [ 254.825813][T14755] openvswitch: netlink: IP tunnel dst address not specified [ 254.827475][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.012705][T14764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.191049][T14726] wg1 speed is unknown, defaulting to 1000 [ 255.568827][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.580527][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.587004][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.672754][T14804] bond10: entered promiscuous mode [ 255.687445][T14804] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.752568][T14809] bond10: (slave bridge8): making interface the new active one [ 255.791687][T14809] bridge8: entered promiscuous mode [ 255.813308][T14809] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 255.831375][T14812] bond0: Error: Cannot enslave bond to itself. [ 256.027433][T14826] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 256.221365][T14829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.321707][T14843] xt_TCPMSS: Only works on TCP SYN packets [ 256.632664][T14865] gre1: entered promiscuous mode [ 256.638184][T14865] gre1: entered allmulticast mode [ 257.211233][T14908] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 257.619701][T14936] syzkaller0: entered promiscuous mode [ 257.632126][T14936] syzkaller0: entered allmulticast mode [ 257.664230][T14943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.976664][T14956] syzkaller1: entered allmulticast mode [ 258.106726][T14966] sctp: [Deprecated]: syz.3.2474 (pid 14966) Use of int in max_burst socket option. [ 258.106726][T14966] Use struct sctp_assoc_value instead [ 258.189259][T14970] validate_nla: 5 callbacks suppressed [ 258.189276][T14970] netlink: 'syz.0.2475': attribute type 3 has an invalid length. [ 258.339617][T14982] SET target dimension over the limit! [ 258.369193][T14985] SET target dimension over the limit! [ 258.410884][T14994] __nla_validate_parse: 14 callbacks suppressed [ 258.410904][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 258.569551][T15001] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2486'. [ 258.578914][T15005] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 258.600695][T15003] netlink: 'syz.0.2487': attribute type 11 has an invalid length. [ 258.886184][T15009] wlan0 speed is unknown, defaulting to 1000 [ 258.922866][T15009] lo speed is unknown, defaulting to 1000 [ 258.953933][T15036] openvswitch: netlink: IP tunnel dst address not specified [ 259.280461][T15009] wg1 speed is unknown, defaulting to 1000 [ 259.295663][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 259.323274][T15066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.338144][T15067] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2501'. [ 259.533745][T15073] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 259.811400][T15083] sit1: entered promiscuous mode [ 259.811620][T15087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2509'. [ 259.831191][T15083] sit1: entered allmulticast mode [ 259.844750][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 259.852761][ C1] lec:lec_tx_timeout: lec0 [ 259.857711][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 259.942051][T15090] erspan0: entered allmulticast mode [ 259.975236][T15092] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2510'. [ 260.023629][T15101] nbd: couldn't find device at index 242 [ 260.259753][T15120] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2519'. [ 260.626078][T15147] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 260.629762][T15154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2528'. [ 260.649758][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 260.705968][T15157] lo: left promiscuous mode [ 260.717217][T15157] lo: entered allmulticast mode [ 260.752862][T15157] tunl0: left promiscuous mode [ 260.786653][T15157] tunl0: entered allmulticast mode [ 260.795291][T15157] gre0: left promiscuous mode [ 260.799999][T15157] gre0: entered allmulticast mode [ 260.888611][T15175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2534'. [ 260.904824][T15157] gretap0: entered allmulticast mode [ 260.912716][T15173] netlink: 'syz.3.2533': attribute type 4 has an invalid length. [ 261.075818][T15157] erspan0: entered allmulticast mode [ 261.091591][T15185] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 261.105504][T15157] ip_vti0: left promiscuous mode [ 261.110480][T15157] ip_vti0: entered allmulticast mode [ 261.137398][T15157] ip6_vti0: entered allmulticast mode [ 261.153394][T15157] sit0: entered allmulticast mode [ 261.186481][T15157] ip6tnl0: entered allmulticast mode [ 261.221835][T15157] ip6gre0: entered allmulticast mode [ 261.255655][T15157] ip6gretap0: entered allmulticast mode [ 261.284934][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.292399][T15157] bridge0: port 1(1¾x9ÿ) entered disabled state [ 261.313241][T15157] bridge0: entered allmulticast mode [ 261.327932][T15157] : entered allmulticast mode [ 261.333028][T15157] bond_slave_0: entered allmulticast mode [ 261.339349][T15157] bond_slave_1: entered allmulticast mode [ 261.354810][T15157] dummy0: entered allmulticast mode [ 261.361214][T15157] nlmon0: entered allmulticast mode [ 261.370643][T15157] caif0: entered allmulticast mode [ 261.376561][T15157] batadv0: entered allmulticast mode [ 261.388562][T15157] veth0: entered allmulticast mode [ 261.410437][T15157] veth1: entered allmulticast mode [ 261.426762][T15157] wg1: entered allmulticast mode [ 261.449866][T15157] wg2: entered allmulticast mode [ 261.459518][T15157] veth0_to_bridge: entered allmulticast mode [ 261.473964][T15157] veth1_to_bridge: entered allmulticast mode [ 261.495540][T15157] veth1_to_bond: entered allmulticast mode [ 261.517138][T15157] veth0_to_team: entered allmulticast mode [ 261.532095][T15157] team_slave_0: entered allmulticast mode [ 261.540620][T15157] veth1_to_team: entered allmulticast mode [ 261.552207][T15157] team_slave_1: entered allmulticast mode [ 261.559502][T15157] veth0_to_batadv: entered allmulticast mode [ 261.569071][T15157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.578163][T15157] batadv_slave_0: entered allmulticast mode [ 261.590751][T15157] veth1_to_batadv: entered allmulticast mode [ 261.602202][T15157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.615894][T15157] batadv_slave_1: entered allmulticast mode [ 261.630678][T15157] xfrm0: entered allmulticast mode [ 261.639857][T15157] veth0_to_hsr: entered allmulticast mode [ 261.649351][T15157] hsr_slave_0: entered allmulticast mode [ 261.658716][T15157] veth1_to_hsr: entered allmulticast mode [ 261.668329][T15157] hsr_slave_1: entered allmulticast mode [ 261.677390][T15157] hsr0: entered allmulticast mode [ 261.685253][T15157] veth1_virt_wifi: entered allmulticast mode [ 261.694818][T15157] veth0_virt_wifi: entered allmulticast mode [ 261.704447][T15157] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 261.726787][T15157] vlan1: entered allmulticast mode [ 261.732117][T15157] macvlan0: entered allmulticast mode [ 261.739361][T15157] tipc: Resetting bearer [ 261.745198][T15157] macvlan1: entered allmulticast mode [ 261.763357][T15157] ipvlan0: entered allmulticast mode [ 261.769227][T15157] ipvlan1: entered allmulticast mode [ 261.775657][T15157] veth1_macvtap: entered allmulticast mode [ 261.784519][T15157] veth0_macvtap: entered allmulticast mode [ 261.801046][T15157] macvtap0: entered allmulticast mode [ 261.817975][T15157] macsec0: entered allmulticast mode [ 261.825289][T15157] geneve0: entered allmulticast mode [ 261.837440][T15157] geneve1: entered allmulticast mode [ 261.852344][T15157] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 261.859928][T15157] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 261.869379][T15157] bond0: entered allmulticast mode [ 261.879072][T15157] geneve2: entered allmulticast mode [ 261.889498][T15157] bond_slave_1.0: entered allmulticast mode [ 261.896973][T15157] : entered allmulticast mode [ 261.906365][T15157] bridge1: entered allmulticast mode [ 261.918909][T15157] bond1: left promiscuous mode [ 261.923759][T15157] bridge2: left promiscuous mode [ 261.952062][T15157] erspan1: entered allmulticast mode [ 261.959187][T15157] mac80211_hwsim hwsim3 pimreg: entered allmulticast mode [ 261.967539][T15157] vxlan0: entered allmulticast mode [ 261.975921][T15157] bond3: left promiscuous mode [ 261.983009][T15157] bond3: entered allmulticast mode [ 261.989618][T15157] geneve3: left promiscuous mode [ 261.998065][T15157] veth2: entered allmulticast mode [ 262.003324][T15157] veth3: entered allmulticast mode [ 262.017759][T15157] veth4: entered allmulticast mode [ 262.023045][T15157] veth5: entered allmulticast mode [ 262.041886][T15157] vlan0: left promiscuous mode [ 262.048712][T15157] macvtap1: left promiscuous mode [ 262.059078][T15157] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 262.070742][T15157] macvtap2: left promiscuous mode [ 262.080087][T15157] bridge3: entered allmulticast mode [ 262.095015][T15157] geneve4: left promiscuous mode [ 262.100044][T15157] geneve4: entered allmulticast mode [ 262.110408][T15157] vlan2: left promiscuous mode [ 262.115427][T15157] bridge0: left promiscuous mode [ 262.120701][T15157] vlan2: entered allmulticast mode [ 262.126806][T15157] bridge4: entered allmulticast mode [ 262.135351][T15157] erspan2: entered allmulticast mode [ 262.141013][T15157] bond4: left promiscuous mode [ 262.146854][T15157] vcan1: left promiscuous mode [ 262.151775][T15157] bond4: entered allmulticast mode [ 262.157302][T15157] vcan1: entered allmulticast mode [ 262.167663][T15157] ip6tnl1: entered allmulticast mode [ 262.177981][T15157] netdevsim netdevsim0 eth0: entered allmulticast mode [ 262.185490][T15157] netdevsim netdevsim0 eth1: entered allmulticast mode [ 262.192623][T15157] netdevsim netdevsim0 eth2: entered allmulticast mode [ 262.200201][T15157] netdevsim netdevsim0 eth3: entered allmulticast mode [ 262.207336][T15157] xfrm1: left promiscuous mode [ 262.212326][T15157] gre1: entered allmulticast mode [ 262.221703][T15157] bond5: left promiscuous mode [ 262.226725][T15157] bridge5: left promiscuous mode [ 262.231850][T15157] bond5: entered allmulticast mode [ 262.237228][T15157] bridge5: entered allmulticast mode [ 262.260052][T15157] gretap1: entered allmulticast mode [ 262.273290][T15157] geneve5: entered allmulticast mode [ 262.279307][T15157] ip6tnl2: entered allmulticast mode [ 262.286398][T15157] nicvf0: entered allmulticast mode [ 262.292020][T15157] bond6: entered allmulticast mode [ 262.301285][T15157] ip6erspan0: entered allmulticast mode [ 262.307304][T15157] hsr1: entered allmulticast mode [ 262.315126][T15157] bridge6: entered allmulticast mode [ 262.327143][T15157] virt_wifi0.0: entered allmulticast mode [ 262.332952][T15157] L: entered allmulticast mode [ 262.339359][T15157] bridge7: entered allmulticast mode [ 262.347783][T15157] gtp0: entered allmulticast mode [ 262.352940][T15157] gtp1: entered allmulticast mode [ 262.363581][T15157] bond7: entered allmulticast mode [ 262.373731][T15157] sit1: left promiscuous mode [ 262.413647][ T7046] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.442555][ T7046] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 51235 - 0 [ 262.464793][ T7046] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 262.473648][ T7046] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.494703][ T7046] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 51235 - 0 [ 262.503178][ T7046] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 262.561088][T15194] bond8: (slave gre0): Device is not bonding slave [ 262.568211][T15194] bond8: option active_slave: invalid value (gre0) [ 262.587103][T15194] bond8 (unregistering): Released all slaves [ 262.637895][ T7046] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.661068][ T7046] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 51235 - 0 [ 262.694563][ T7046] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 262.744839][ T7046] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.757302][ T7046] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 51235 - 0 [ 262.767683][ T7046] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 262.787243][T15209] tipc: Enabling of bearer rejected, failed to enable media [ 263.157907][T15236] syzkaller0: entered promiscuous mode [ 263.163425][T15236] syzkaller0: entered allmulticast mode [ 263.446923][T15260] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 264.631736][T15285] __nla_validate_parse: 11 callbacks suppressed [ 264.631757][T15285] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2560'. [ 264.655337][T15285] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2560'. [ 264.665995][T15285] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 264.723011][T15293] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2562'. [ 264.864293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 264.872380][ C1] lec:lec_tx_timeout: lec0 [ 264.877289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.886883][T15293] bond0 (unregistering): Released all slaves [ 264.903485][T15309] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2564'. [ 264.983870][T15309] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2564'. [ 265.022104][T15321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2569'. [ 265.192770][T15332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2573'. [ 265.534097][T15361] netlink: 'syz.4.2579': attribute type 24 has an invalid length. [ 265.863056][T15383] erspan0: left allmulticast mode [ 265.976102][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'. [ 265.998271][T15395] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 266.146523][T15395] bond8: entered promiscuous mode [ 266.152063][T15395] 8021q: adding VLAN 0 to HW filter on device bond8 [ 266.177241][T15402] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 266.179313][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 266.197933][T15409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.473282][T15433] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2599'. [ 266.566140][T15437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.617264][T15444] IPVS: Error connecting to the multicast addr [ 266.809200][T15397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.836531][T15397] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 266.853317][T15456] netlink: 'syz.3.2607': attribute type 39 has an invalid length. [ 266.871836][T15397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.909342][T15397] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 266.939042][T15397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.956475][T15397] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 267.004047][T15397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.019400][T15397] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 267.036463][T15397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.042610][T15397] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 267.195652][T15468] syzkaller0: entered promiscuous mode [ 267.217943][T15468] syzkaller0: entered allmulticast mode [ 267.398701][T15481] netlink: 'syz.1.2611': attribute type 3 has an invalid length. [ 267.416414][T15476] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 267.435641][T15476] NCSI netlink: No device for ifindex 0 [ 267.460145][ T9] IPVS: starting estimator thread 0... [ 267.593893][T15483] IPVS: using max 30 ests per chain, 72000 per kthread [ 267.681577][T15490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.745690][T15488] openvswitch: netlink: Invalid VLAN frame [ 267.803128][T15493] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 267.946893][T15501] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16 [ 268.486916][T15530] syzkaller0: entered promiscuous mode [ 268.504438][T15530] syzkaller0: entered allmulticast mode [ 269.057477][T15568] IPVS: Error connecting to the multicast addr [ 269.540472][T15597] netlink: 'syz.0.2639': attribute type 1 has an invalid length. [ 269.580511][T15602] netlink: 'syz.1.2641': attribute type 3 has an invalid length. [ 269.588724][T15597] netlink: 'syz.0.2639': attribute type 2 has an invalid length. [ 269.662651][T15597] netlink: 'syz.0.2639': attribute type 1 has an invalid length. [ 269.744611][T15610] vlan2: entered promiscuous mode [ 269.764810][T15610] bridge0: entered promiscuous mode [ 269.884290][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 269.892393][ C1] lec:lec_tx_timeout: lec0 [ 269.897669][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.907952][T15610] vlan2: entered promiscuous mode [ 269.987741][T15621] can: request_module (can-proto-4) failed. [ 270.035658][T15610] vlan2: entered promiscuous mode [ 270.129315][T15610] vlan2: entered promiscuous mode [ 270.172633][T15635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.232766][T15610] vlan2: entered promiscuous mode [ 270.343058][T15610] vlan2: entered promiscuous mode [ 270.379487][T15642] __nla_validate_parse: 19 callbacks suppressed [ 270.379505][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 270.393132][T15610] vlan2: entered promiscuous mode [ 270.562250][T15610] vlan2: entered promiscuous mode [ 270.861235][T15667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2655'. [ 271.508958][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 271.908411][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2670'. [ 272.226787][T15763] pimreg: left allmulticast mode [ 272.278626][T15770] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2674'. [ 272.371834][T15777] IPv6: sit2: Disabled Multicast RS [ 272.530033][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 272.735582][T15789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2681'. [ 273.263787][T15815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2686'. [ 273.282410][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2687'. [ 273.416385][T15829] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 273.443785][T15830] sctp: [Deprecated]: syz.3.2689 (pid 15830) Use of int in maxseg socket option. [ 273.443785][T15830] Use struct sctp_assoc_value instead [ 274.016336][T15863] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 274.027464][T15864] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 274.222101][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 274.248558][T15879] netlink: 'syz.2.2702': attribute type 10 has an invalid length. [ 274.338488][T15885] xt_bpf: check failed: parse error [ 274.348092][T15878] team0: Port device team_slave_0 removed [ 274.847591][T15914] netlink: 'syz.2.2712': attribute type 3 has an invalid length. [ 274.964550][T15919] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 275.155354][T15925] netlink: 'syz.4.2715': attribute type 4 has an invalid length. [ 275.543899][T15958] __nla_validate_parse: 8 callbacks suppressed [ 275.543918][T15958] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.2723'. [ 275.587524][T15958] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 275.714343][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 275.722415][ C1] lec:lec_tx_timeout: lec0 [ 275.728721][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.777025][T15970] netlink: 'syz.4.2726': attribute type 4 has an invalid length. [ 275.777025][T15969] netlink: 'syz.4.2726': attribute type 4 has an invalid length. [ 275.861447][T12529] lo speed is unknown, defaulting to 1000 [ 275.868293][T12529] syz0: Port: 1 Link ACTIVE [ 275.872882][T12529] lo speed is unknown, defaulting to 1000 [ 276.063178][T15985] syzkaller0: entered promiscuous mode [ 276.092901][T15985] syzkaller0: entered allmulticast mode [ 276.140044][T15992] sctp: [Deprecated]: syz.2.2732 (pid 15992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.140044][T15992] Use struct sctp_sack_info instead [ 276.185330][T15992] sctp: [Deprecated]: syz.2.2732 (pid 15992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.185330][T15992] Use struct sctp_sack_info instead [ 276.221435][T16002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2733'. [ 276.404193][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 276.446056][T16015] netlink: 'syz.2.2738': attribute type 11 has an invalid length. [ 276.467248][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 276.680784][T16015] netlink: 'syz.2.2738': attribute type 11 has an invalid length. [ 276.693160][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 276.715602][T16022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2740'. [ 276.725235][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2740'. [ 276.734202][T16022] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2740'. [ 276.755930][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2741'. [ 276.807557][T16022] netlink: 'syz.1.2740': attribute type 2 has an invalid length. [ 276.815912][T16022] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2740'. [ 277.943053][T16085] sctp: [Deprecated]: syz.2.2756 (pid 16085) Use of int in maxseg socket option. [ 277.943053][T16085] Use struct sctp_assoc_value instead [ 277.961199][T16084] ipvlan3: entered allmulticast mode [ 277.994866][T16084] batman_adv: batadv0: Adding interface: ipvlan3 [ 278.001231][T16084] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.036132][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.059865][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.081013][T16084] batman_adv: batadv0: Interface activated: ipvlan3 [ 279.049279][T16162] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 279.129277][T16168] validate_nla: 1 callbacks suppressed [ 279.129295][T16168] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 279.192734][T16168] bond11: entered promiscuous mode [ 279.198513][T16168] 8021q: adding VLAN 0 to HW filter on device bond11 [ 279.278111][T16168] bond11: (slave bridge10): making interface the new active one [ 279.286914][T16168] bridge10: entered promiscuous mode [ 279.293515][T16168] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 279.574193][T16184] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 279.582183][T16184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.644164][T16189] netlink: 'syz.0.2783': attribute type 8 has an invalid length. [ 279.848311][T16202] netlink: 'syz.4.2788': attribute type 1 has an invalid length. [ 279.910439][T16202] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.927097][T16212] netlink: 'syz.2.2792': attribute type 10 has an invalid length. [ 279.980620][T16220] netlink: 'syz.2.2792': attribute type 11 has an invalid length. [ 279.994896][T16210] bond6: (slave veth7): Enslaving as an active interface with a down link [ 280.011218][T16213] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 280.097782][T16202] bond6: (slave veth9): Enslaving as an active interface with a down link [ 280.112511][T16202] netlink: 'syz.4.2788': attribute type 1 has an invalid length. [ 280.117097][T16223] netlink: 'syz.0.2795': attribute type 29 has an invalid length. [ 280.121033][T16202] netlink: 'syz.4.2788': attribute type 2 has an invalid length. [ 280.130148][T16223] netlink: 'syz.0.2795': attribute type 29 has an invalid length. [ 280.151958][T16226] syzkaller1: entered promiscuous mode [ 280.163307][T16226] syzkaller1: entered allmulticast mode [ 280.195190][T16225] openvswitch: netlink: IP tunnel dst address not specified [ 280.566392][T16257] __nla_validate_parse: 18 callbacks suppressed [ 280.566410][T16257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2807'. [ 280.667513][T16264] bond7: entered promiscuous mode [ 280.672750][T16264] bond7: entered allmulticast mode [ 280.678722][T16264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.743556][T16270] netlink: zone id is out of range [ 280.744320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 280.751752][T16270] netlink: zone id is out of range [ 280.756726][ C1] lec:lec_tx_timeout: lec0 [ 280.758012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.762847][T16270] netlink: zone id is out of range [ 280.777899][T16270] netlink: zone id is out of range [ 280.783094][T16270] netlink: zone id is out of range [ 280.788739][T16270] netlink: zone id is out of range [ 280.793926][T16270] netlink: zone id is out of range [ 280.800246][T16270] netlink: zone id is out of range [ 280.806340][T16270] netlink: zone id is out of range [ 280.811625][T16270] netlink: zone id is out of range [ 281.028231][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'. [ 281.088155][T16291] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2817'. [ 281.449325][T16320] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2824'. [ 281.481129][T16320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2824'. [ 281.690877][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2830'. [ 281.958612][T16364] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2835'. [ 282.112740][T16377] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 282.165123][T16382] netlink: 'syz.2.2842': attribute type 7 has an invalid length. [ 282.233889][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 282.354791][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 282.388805][T16397] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.399163][T16397] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 282.428185][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 282.428342][T16397] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.446718][T16397] bond8: entered allmulticast mode [ 283.871274][T16509] netlink: 'syz.4.2878': attribute type 11 has an invalid length. [ 283.935179][T16509] netlink: 'syz.4.2878': attribute type 11 has an invalid length. [ 284.371605][T16549] validate_nla: 13 callbacks suppressed [ 284.371625][T16549] netlink: 'syz.0.2888': attribute type 1 has an invalid length. [ 284.402219][T16548] syzkaller0: entered promiscuous mode [ 284.444636][T16548] syzkaller0: entered allmulticast mode [ 284.541492][T16562] netlink: 'syz.1.2894': attribute type 2 has an invalid length. [ 284.927581][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.937604][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.945712][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.964795][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.972521][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.999040][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.013898][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.025738][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.035323][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.042979][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.183359][T16593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.195885][T16593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.208793][T16593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.245994][T16586] wlan0 speed is unknown, defaulting to 1000 [ 285.255190][T16588] wlan0 speed is unknown, defaulting to 1000 [ 285.262433][T16586] lo speed is unknown, defaulting to 1000 [ 285.308313][T16593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.321558][T16593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.332094][T16593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.461429][T16593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.472783][T16593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.483942][T16593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.506132][T16586] wg1 speed is unknown, defaulting to 1000 [ 285.506153][T16588] lo speed is unknown, defaulting to 1000 [ 285.560444][T16593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.571205][T16593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.581667][T16593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.740740][ T66] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.760124][ T66] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.774320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 285.782370][ C1] lec:lec_tx_timeout: lec0 [ 285.787077][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.808486][ T66] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 285.853113][T16602] __nla_validate_parse: 20 callbacks suppressed [ 285.853131][T16602] netlink: 161788 bytes leftover after parsing attributes in process `syz.2.2905'. [ 285.891718][ T66] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.907595][ T66] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.917199][ T66] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 285.934117][T16609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2906'. [ 285.952353][T16588] wg1 speed is unknown, defaulting to 1000 [ 286.030911][ T66] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.042788][ T66] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 286.043581][T16612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2907'. [ 286.054456][ T66] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.115558][ T66] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.122808][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2906'. [ 286.123755][ T66] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 286.142079][ T66] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.077304][ T5838] Bluetooth: hci5: command tx timeout [ 287.286338][T16586] chnl_net:caif_netlink_parms(): no params data found [ 287.308674][ T66] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.452059][T16627] netlink: 'syz.2.2911': attribute type 5 has an invalid length. [ 287.543253][T16629] x_tables: duplicate entry at hook 3 [ 287.551967][ T66] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.627727][ T66] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.636376][ T66] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.702433][ T3568] bridge_slave_1: left promiscuous mode [ 287.711192][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.723931][T16641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2915'. [ 287.778013][ T3568] ¾x9ÿ: left promiscuous mode [ 287.782927][ T3568] bridge0: port 1(1¾x9ÿ) entered disabled state [ 287.917035][T16653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2918'. [ 287.938130][ T3568] ip6gretap0 (unregistering): left promiscuous mode [ 287.985064][T16655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2918'. [ 288.015643][ T3568] erspan0 (unregistering): left promiscuous mode [ 288.038032][ T3568] gretap0 (unregistering): left promiscuous mode [ 288.110803][ T3568]  (unregistering): (slave bridge0): Releasing backup interface [ 288.227581][ T3568] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 288.359351][ T3568] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 288.510743][ T3568]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.520460][ T3568]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.532543][ T3568]  (unregistering): Released all slaves [ 288.542027][ T3568] bond0 (unregistering): Released all slaves [ 288.558926][ T3568] bond1 (unregistering): Released all slaves [ 288.571004][ T3568] bond2 (unregistering): Released all slaves [ 288.583422][ T3568] bond3 (unregistering): Released all slaves [ 288.603662][ T3568] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 288.612303][ T3568] bond4 (unregistering): Released all slaves [ 288.627840][ T3568] bond5 (unregistering): Released all slaves [ 288.640905][ T3568] bond6 (unregistering): Released all slaves [ 288.653254][ T3568] bond7 (unregistering): Released all slaves [ 288.667605][ T3568] bond8 (unregistering): Released all slaves [ 288.807711][T16586] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.818388][T16586] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.826231][T16586] bridge_slave_0: entered allmulticast mode [ 288.857613][T16586] bridge_slave_0: entered promiscuous mode [ 288.886721][T16586] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.917498][T16586] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.931365][T16586] bridge_slave_1: entered allmulticast mode [ 288.949569][T16586] bridge_slave_1: entered promiscuous mode [ 289.024362][T16665] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.051018][T16665] bond14: (slave lo): Enslaving as an active interface with an up link [ 289.060533][T16665] net_ratelimit: 190 callbacks suppressed [ 289.060550][T16665] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 289.104460][ T3568] tipc: Disabling bearer [ 289.146572][ T3568] tipc: Left network mode [ 289.155482][ T5838] Bluetooth: hci5: command tx timeout [ 289.186689][T16679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2921'. [ 289.230855][T16586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.249431][T16586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.456985][T16680] syzkaller0: entered promiscuous mode [ 289.462528][T16680] syzkaller0: entered allmulticast mode [ 289.552028][T16586] team0: Port device team_slave_0 added [ 289.597186][T16693] syzkaller0: entered promiscuous mode [ 289.613277][T16693] syzkaller0: entered allmulticast mode [ 289.629868][T16586] team0: Port device team_slave_1 added [ 289.773052][T16586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.783790][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.848550][T16586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.935278][T16693] nbd0: detected capacity change from 0 to 63 [ 289.961325][ T5838] block nbd0: Receive control failed (result -32) [ 289.963124][ T5844] block nbd0: Receive control failed (result -32) [ 289.990556][T16511] block nbd0: Dead connection, failed to find a fallback [ 290.029274][T16511] block nbd0: shutting down sockets [ 290.038698][T16511] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.058387][T16511] Buffer I/O error on dev nbd0, logical block 0, async page read [ 290.070425][T16511] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.080790][T16511] Buffer I/O error on dev nbd0, logical block 1, async page read [ 290.089282][T16511] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.103830][T16511] Buffer I/O error on dev nbd0, logical block 2, async page read [ 290.136180][T16511] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.148894][T16511] Buffer I/O error on dev nbd0, logical block 3, async page read [ 290.157415][T16511] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.174409][T16511] Buffer I/O error on dev nbd0, logical block 0, async page read [ 290.184152][T16511] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.198246][T16511] Buffer I/O error on dev nbd0, logical block 1, async page read [ 290.212155][T16723] openvswitch: netlink: Key type 30 is not supported [ 290.219388][T16511] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.229629][T16511] Buffer I/O error on dev nbd0, logical block 2, async page read [ 290.237807][T16511] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.249168][T16511] Buffer I/O error on dev nbd0, logical block 3, async page read [ 290.258092][T16511] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.268033][T16511] Buffer I/O error on dev nbd0, logical block 0, async page read [ 290.277814][T16511] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.288022][T16511] Buffer I/O error on dev nbd0, logical block 1, async page read [ 290.296779][T16511] ldm_validate_partition_table(): Disk read failed. [ 290.311933][T16586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.321173][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.348246][T16511] Dev nbd0: unable to read RDB block 0 [ 290.357888][T16511] nbd0: unable to read partition table [ 290.367738][T16586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.380194][T16511] ldm_validate_partition_table(): Disk read failed. [ 290.387644][T16511] Dev nbd0: unable to read RDB block 0 [ 290.407515][T16511] nbd0: unable to read partition table [ 290.447512][ T3568] hsr_slave_0: left promiscuous mode [ 290.458438][ T3568] hsr_slave_1: left promiscuous mode [ 290.468512][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.476897][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.485973][ T3568] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 290.492831][ T3568] batman_adv: batadv0: Removing interface: ipvlan3 [ 290.529504][ T3568] [ 290.531838][ T3568] ====================================================== [ 290.538838][ T3568] WARNING: possible circular locking dependency detected [ 290.545846][ T3568] syzkaller #0 Not tainted [ 290.550241][ T3568] ------------------------------------------------------ [ 290.557250][ T3568] kworker/u8:10/3568 is trying to acquire lock: [ 290.563471][ T3568] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60 [ 290.572682][ T3568] [ 290.572682][ T3568] but task is already holding lock: [ 290.580029][ T3568] ffffffff8f17b1a8 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 290.588730][ T3568] [ 290.588730][ T3568] which lock already depends on the new lock. [ 290.588730][ T3568] [ 290.599166][ T3568] [ 290.599166][ T3568] the existing dependency chain (in reverse order) is: [ 290.608164][ T3568] [ 290.608164][ T3568] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 290.615275][ T3568] __mutex_lock+0x19f/0x1300 [ 290.620386][ T3568] get_device_parent+0x16f/0x3a0 [ 290.625829][ T3568] device_add+0x2e1/0xb70 [ 290.630664][ T3568] device_create+0x269/0x300 [ 290.635768][ T3568] msr_device_create+0x33/0x50 [ 290.641051][ T3568] cpuhp_invoke_callback+0x445/0x860 [ 290.646841][ T3568] cpuhp_thread_fun+0x36b/0x780 [ 290.652200][ T3568] smpboot_thread_fn+0x541/0xa50 [ 290.657677][ T3568] kthread+0x388/0x470 [ 290.662253][ T3568] ret_from_fork+0x51e/0xb90 [ 290.667366][ T3568] ret_from_fork_asm+0x1a/0x30 [ 290.672632][ T3568] [ 290.672632][ T3568] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 290.680190][ T3568] cpuhp_thread_fun+0x127/0x780 [ 290.685560][ T3568] smpboot_thread_fn+0x541/0xa50 [ 290.691002][ T3568] kthread+0x388/0x470 [ 290.695575][ T3568] ret_from_fork+0x51e/0xb90 [ 290.700685][ T3568] ret_from_fork_asm+0x1a/0x30 [ 290.705957][ T3568] [ 290.705957][ T3568] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 290.713661][ T3568] cpus_read_lock+0x42/0x160 [ 290.718751][ T3568] static_key_slow_inc+0x12/0x30 [ 290.724209][ T3568] nbd_genl_reconfigure+0x132f/0x1ea0 [ 290.730104][ T3568] genl_family_rcv_msg_doit+0x22a/0x330 [ 290.736168][ T3568] genl_rcv_msg+0x61c/0x7a0 [ 290.741172][ T3568] netlink_rcv_skb+0x232/0x4b0 [ 290.746441][ T3568] genl_rcv+0x28/0x40 [ 290.750921][ T3568] netlink_unicast+0x80f/0x9b0 [ 290.756185][ T3568] netlink_sendmsg+0x813/0xb40 [ 290.761451][ T3568] ____sys_sendmsg+0x972/0x9f0 [ 290.766714][ T3568] ___sys_sendmsg+0x2a5/0x360 [ 290.771891][ T3568] __x64_sys_sendmsg+0x1bd/0x2a0 [ 290.777335][ T3568] do_syscall_64+0x14d/0xf80 [ 290.782422][ T3568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.788816][ T3568] [ 290.788816][ T3568] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 290.796441][ T3568] __mutex_lock+0x19f/0x1300 [ 290.801553][ T3568] nbd_queue_rq+0x37b/0x1100 [ 290.806644][ T3568] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 290.812706][ T3568] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 290.819535][ T3568] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 290.826015][ T3568] blk_mq_run_hw_queue+0x348/0x4f0 [ 290.831630][ T3568] blk_mq_dispatch_list+0xd16/0xe10 [ 290.837373][ T3568] blk_mq_flush_plug_list+0x48d/0x570 [ 290.843248][ T3568] __blk_flush_plug+0x3ed/0x4d0 [ 290.848600][ T3568] __submit_bio+0x28d/0x580 [ 290.853605][ T3568] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 290.859741][ T3568] block_read_full_folio+0x599/0x830 [ 290.865530][ T3568] filemap_read_folio+0x137/0x3b0 [ 290.871056][ T3568] do_read_cache_folio+0x358/0x590 [ 290.876722][ T3568] read_part_sector+0xb6/0x2b0 [ 290.881989][ T3568] adfspart_check_ICS+0xa5/0xa40 [ 290.887439][ T3568] bdev_disk_changed+0x7ba/0x1550 [ 290.892964][ T3568] blkdev_get_whole+0x380/0x510 [ 290.898373][ T3568] bdev_open+0x31e/0xd30 [ 290.903120][ T3568] blkdev_open+0x470/0x610 [ 290.908038][ T3568] do_dentry_open+0x785/0x14e0 [ 290.913303][ T3568] vfs_open+0x3b/0x340 [ 290.917878][ T3568] path_openat+0x2e08/0x3860 [ 290.922967][ T3568] do_file_open+0x23e/0x4a0 [ 290.927969][ T3568] do_sys_openat2+0x113/0x200 [ 290.933153][ T3568] __x64_sys_openat+0x138/0x170 [ 290.938524][ T3568] do_syscall_64+0x14d/0xf80 [ 290.943638][ T3568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.950032][ T3568] [ 290.950032][ T3568] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 290.957226][ T3568] __mutex_lock+0x19f/0x1300 [ 290.962320][ T3568] nbd_queue_rq+0xc6/0x1100 [ 290.967349][ T3568] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 290.973394][ T3568] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 290.980223][ T3568] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 290.986705][ T3568] blk_mq_run_hw_queue+0x348/0x4f0 [ 290.992323][ T3568] blk_mq_dispatch_list+0xd16/0xe10 [ 290.998030][ T3568] blk_mq_flush_plug_list+0x48d/0x570 [ 291.003900][ T3568] __blk_flush_plug+0x3ed/0x4d0 [ 291.009252][ T3568] __submit_bio+0x28d/0x580 [ 291.014261][ T3568] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 291.020412][ T3568] block_read_full_folio+0x599/0x830 [ 291.026209][ T3568] filemap_read_folio+0x137/0x3b0 [ 291.031747][ T3568] do_read_cache_folio+0x358/0x590 [ 291.037363][ T3568] read_part_sector+0xb6/0x2b0 [ 291.042634][ T3568] adfspart_check_ICS+0xa5/0xa40 [ 291.048074][ T3568] bdev_disk_changed+0x7ba/0x1550 [ 291.053596][ T3568] blkdev_get_whole+0x380/0x510 [ 291.058946][ T3568] bdev_open+0x31e/0xd30 [ 291.063687][ T3568] blkdev_open+0x470/0x610 [ 291.068606][ T3568] do_dentry_open+0x785/0x14e0 [ 291.073871][ T3568] vfs_open+0x3b/0x340 [ 291.078460][ T3568] path_openat+0x2e08/0x3860 [ 291.083550][ T3568] do_file_open+0x23e/0x4a0 [ 291.088553][ T3568] do_sys_openat2+0x113/0x200 [ 291.093735][ T3568] __x64_sys_openat+0x138/0x170 [ 291.099086][ T3568] do_syscall_64+0x14d/0xf80 [ 291.104174][ T3568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.110562][ T3568] [ 291.110562][ T3568] -> #4 (set->srcu){.+.+}-{0:0}: [ 291.117660][ T3568] __synchronize_srcu+0xca/0x3e0 [ 291.123098][ T3568] elevator_switch+0x1e8/0x7a0 [ 291.128362][ T3568] elevator_change+0x2cc/0x450 [ 291.133623][ T3568] elevator_set_default+0x36c/0x430 [ 291.139321][ T3568] blk_register_queue+0x366/0x430 [ 291.144848][ T3568] __add_disk+0x677/0xd50 [ 291.149679][ T3568] add_disk_fwnode+0xfb/0x480 [ 291.154858][ T3568] nbd_dev_add+0x72c/0xb50 [ 291.159779][ T3568] nbd_init+0x168/0x1f0 [ 291.164435][ T3568] do_one_initcall+0x250/0x8d0 [ 291.169714][ T3568] do_initcall_level+0x104/0x190 [ 291.175175][ T3568] do_initcalls+0x59/0xa0 [ 291.180011][ T3568] kernel_init_freeable+0x2a6/0x3e0 [ 291.185713][ T3568] kernel_init+0x1d/0x1d0 [ 291.190553][ T3568] ret_from_fork+0x51e/0xb90 [ 291.195647][ T3568] ret_from_fork_asm+0x1a/0x30 [ 291.200917][ T3568] [ 291.200917][ T3568] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 291.208710][ T3568] __mutex_lock+0x19f/0x1300 [ 291.213870][ T3568] elevator_change+0x1b3/0x450 [ 291.219158][ T3568] elevator_set_none+0xb5/0x140 [ 291.224515][ T3568] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 291.230827][ T3568] nbd_start_device+0x17f/0xb10 [ 291.236184][ T3568] nbd_genl_connect+0x165b/0x1cf0 [ 291.236545][ T5844] Bluetooth: hci5: command tx timeout [ 291.241708][ T3568] genl_family_rcv_msg_doit+0x22a/0x330 [ 291.241731][ T3568] genl_rcv_msg+0x61c/0x7a0 [ 291.241748][ T3568] netlink_rcv_skb+0x232/0x4b0 [ 291.263401][ T3568] genl_rcv+0x28/0x40 [ 291.267907][ T3568] netlink_unicast+0x80f/0x9b0 [ 291.273187][ T3568] netlink_sendmsg+0x813/0xb40 [ 291.278474][ T3568] ____sys_sendmsg+0x972/0x9f0 [ 291.283739][ T3568] ___sys_sendmsg+0x2a5/0x360 [ 291.288920][ T3568] __x64_sys_sendmsg+0x1bd/0x2a0 [ 291.294358][ T3568] do_syscall_64+0x14d/0xf80 [ 291.299463][ T3568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.305858][ T3568] [ 291.305858][ T3568] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 291.314442][ T3568] blk_alloc_queue+0x546/0x680 [ 291.319711][ T3568] __blk_mq_alloc_disk+0x197/0x390 [ 291.325324][ T3568] nbd_dev_add+0x499/0xb50 [ 291.330244][ T3568] nbd_init+0x168/0x1f0 [ 291.334909][ T3568] do_one_initcall+0x250/0x8d0 [ 291.340191][ T3568] do_initcall_level+0x104/0x190 [ 291.345629][ T3568] do_initcalls+0x59/0xa0 [ 291.350455][ T3568] kernel_init_freeable+0x2a6/0x3e0 [ 291.356157][ T3568] kernel_init+0x1d/0x1d0 [ 291.360989][ T3568] ret_from_fork+0x51e/0xb90 [ 291.366104][ T3568] ret_from_fork_asm+0x1a/0x30 [ 291.371372][ T3568] [ 291.371372][ T3568] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 291.378557][ T3568] fs_reclaim_acquire+0x71/0x100 [ 291.383995][ T3568] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 291.390215][ T3568] alloc_inode+0xb8/0x1b0 [ 291.395045][ T3568] iget_locked+0x131/0x6a0 [ 291.399957][ T3568] kernfs_get_inode+0x4f/0x780 [ 291.405223][ T3568] kernfs_get_tree+0x5cd/0x980 [ 291.410510][ T3568] sysfs_get_tree+0x46/0x110 [ 291.415604][ T3568] vfs_get_tree+0x92/0x2a0 [ 291.420521][ T3568] do_new_mount+0x341/0xd30 [ 291.425537][ T3568] __se_sys_mount+0x31d/0x420 [ 291.430731][ T3568] do_syscall_64+0x14d/0xf80 [ 291.435829][ T3568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.442242][ T3568] [ 291.442242][ T3568] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 291.450224][ T3568] __lock_acquire+0x15a5/0x2cf0 [ 291.455584][ T3568] lock_acquire+0xf0/0x2e0 [ 291.460500][ T3568] down_write+0x96/0x200 [ 291.465246][ T3568] kernfs_remove+0x30/0x60 [ 291.470166][ T3568] __kobject_del+0xe1/0x330 [ 291.475195][ T3568] kobject_del+0x45/0x60 [ 291.479938][ T3568] cleanup_glue_dir+0x1a3/0x220 [ 291.485305][ T3568] device_del+0x780/0x8f0 [ 291.490142][ T3568] device_destroy+0xb2/0x1a0 [ 291.495238][ T3568] macvtap_device_event+0x226/0x400 [ 291.500943][ T3568] notifier_call_chain+0x1be/0x400 [ 291.506555][ T3568] unregister_netdevice_many_notify+0x186a/0x2370 [ 291.513475][ T3568] default_device_exit_batch+0x981/0xa00 [ 291.519617][ T3568] ops_undo_list+0x52b/0x940 [ 291.524712][ T3568] cleanup_net+0x56b/0x800 [ 291.529650][ T3568] process_scheduled_works+0xb6e/0x18c0 [ 291.535697][ T3568] worker_thread+0xa53/0xfc0 [ 291.540799][ T3568] kthread+0x388/0x470 [ 291.545380][ T3568] ret_from_fork+0x51e/0xb90 [ 291.550472][ T3568] ret_from_fork_asm+0x1a/0x30 [ 291.555737][ T3568] [ 291.555737][ T3568] other info that might help us debug this: [ 291.555737][ T3568] [ 291.565942][ T3568] Chain exists of: [ 291.565942][ T3568] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 291.565942][ T3568] [ 291.578689][ T3568] Possible unsafe locking scenario: [ 291.578689][ T3568] [ 291.586120][ T3568] CPU0 CPU1 [ 291.591465][ T3568] ---- ---- [ 291.596818][ T3568] lock(gdp_mutex); [ 291.600694][ T3568] lock(cpuhp_state-up); [ 291.607520][ T3568] lock(gdp_mutex); [ 291.613910][ T3568] lock(&root->kernfs_rwsem); [ 291.618652][ T3568] [ 291.618652][ T3568] *** DEADLOCK *** [ 291.618652][ T3568] [ 291.626772][ T3568] 5 locks held by kworker/u8:10/3568: [ 291.632115][ T3568] #0: ffff88801b6de948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 291.642964][ T3568] #1: ffffc9000c83fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 291.653467][ T3568] #2: ffffffff8fbbf430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 291.662746][ T3568] #3: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 291.672722][ T3568] #4: ffffffff8f17b1a8 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 291.681847][ T3568] [ 291.681847][ T3568] stack backtrace: [ 291.687740][ T3568] CPU: 1 UID: 0 PID: 3568 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 291.687754][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.687762][ T3568] Workqueue: netns cleanup_net [ 291.687781][ T3568] Call Trace: [ 291.687785][ T3568] [ 291.687790][ T3568] dump_stack_lvl+0xe8/0x150 [ 291.687805][ T3568] print_circular_bug+0x2e1/0x300 [ 291.687822][ T3568] check_noncircular+0x12e/0x150 [ 291.687839][ T3568] __lock_acquire+0x15a5/0x2cf0 [ 291.687853][ T3568] ? __lock_acquire+0x6b5/0x2cf0 [ 291.687866][ T3568] ? rcu_is_watching+0x15/0xb0 [ 291.687881][ T3568] lock_acquire+0xf0/0x2e0 [ 291.687893][ T3568] ? kernfs_remove+0x30/0x60 [ 291.687904][ T3568] down_write+0x96/0x200 [ 291.687916][ T3568] ? kernfs_remove+0x30/0x60 [ 291.687924][ T3568] ? __pfx_down_write+0x10/0x10 [ 291.687936][ T3568] ? kernfs_root+0x1c/0x230 [ 291.687950][ T3568] ? kernfs_root+0x1c/0x230 [ 291.687962][ T3568] ? kernfs_root+0x1c/0x230 [ 291.687975][ T3568] ? kernfs_root+0x1ea/0x230 [ 291.687988][ T3568] kernfs_remove+0x30/0x60 [ 291.687997][ T3568] __kobject_del+0xe1/0x330 [ 291.688010][ T3568] kobject_del+0x45/0x60 [ 291.688022][ T3568] cleanup_glue_dir+0x1a3/0x220 [ 291.688035][ T3568] device_del+0x780/0x8f0 [ 291.688048][ T3568] ? __pfx_device_del+0x10/0x10 [ 291.688062][ T3568] device_destroy+0xb2/0x1a0 [ 291.688074][ T3568] ? __pfx_device_destroy+0x10/0x10 [ 291.688088][ T3568] macvtap_device_event+0x226/0x400 [ 291.688102][ T3568] ? __pfx_macvtap_device_event+0x10/0x10 [ 291.688114][ T3568] ? igmp_netdev_event+0x7c/0x750 [ 291.688127][ T3568] notifier_call_chain+0x1be/0x400 [ 291.688145][ T3568] unregister_netdevice_many_notify+0x186a/0x2370 [ 291.688162][ T3568] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 291.688176][ T3568] ? unregister_netdevice_queue+0x19b/0x360 [ 291.688188][ T3568] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 291.688201][ T3568] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 291.688215][ T3568] default_device_exit_batch+0x981/0xa00 [ 291.688231][ T3568] ? __pfx_netdev_run_todo+0x10/0x10 [ 291.688243][ T3568] ? __pfx_default_device_exit_batch+0x10/0x10 [ 291.688255][ T3568] ? __pfx_default_device_exit_batch+0x10/0x10 [ 291.688265][ T3568] ops_undo_list+0x52b/0x940 [ 291.688275][ T3568] ? __pfx_ops_undo_list+0x10/0x10 [ 291.688285][ T3568] ? idr_destroy+0x227/0x290 [ 291.688295][ T3568] cleanup_net+0x56b/0x800 [ 291.688304][ T3568] ? __pfx_cleanup_net+0x10/0x10 [ 291.688315][ T3568] ? process_scheduled_works+0xa8d/0x18c0 [ 291.688328][ T3568] ? process_scheduled_works+0xa8d/0x18c0 [ 291.688340][ T3568] process_scheduled_works+0xb6e/0x18c0 [ 291.688359][ T3568] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.688372][ T3568] ? assign_work+0x3d5/0x5e0 [ 291.688385][ T3568] worker_thread+0xa53/0xfc0 [ 291.688403][ T3568] kthread+0x388/0x470 [ 291.688412][ T3568] ? __pfx_worker_thread+0x10/0x10 [ 291.688428][ T3568] ? __pfx_kthread+0x10/0x10 [ 291.688437][ T3568] ret_from_fork+0x51e/0xb90 [ 291.688451][ T3568] ? __pfx_ret_from_fork+0x10/0x10 [ 291.688462][ T3568] ? __switch_to+0xc7d/0x1450 [ 291.688474][ T3568] ? __pfx_kthread+0x10/0x10 [ 291.688483][ T3568] ret_from_fork_asm+0x1a/0x30 [ 291.688500][ T3568] [ 291.997293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 292.005315][ C1] lec:lec_tx_timeout: lec0 [ 292.011250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.375823][T16728] 8021q: VLANs not supported on caif0 [ 292.401464][T16586] hsr_slave_0: entered promiscuous mode [ 292.415038][T16586] hsr_slave_1: entered promiscuous mode [ 292.561210][T16586] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.617266][T16586] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.649325][ T3568] IPVS: stop unused estimator thread 0... [ 292.690318][T16586] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.759211][T16586] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.863125][T16586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.884189][T16586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.893618][T16586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.903448][T16586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.988246][T16586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.005584][T16586] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.017180][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.024321][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.043493][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.050627][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.215681][T16586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.253951][T16586] veth0_vlan: entered promiscuous mode [ 293.265323][T16586] veth1_vlan: entered promiscuous mode [ 293.291068][T16586] veth0_macvtap: entered promiscuous mode [ 293.300495][T16586] veth1_macvtap: entered promiscuous mode [ 293.315165][ T5844] Bluetooth: hci5: command tx timeout [ 293.325213][T16586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.338418][T16586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.352200][ T7046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.362815][ T7046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.373698][ T7046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.398140][ T7046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.413465][T16586] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 293.436138][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.437560][T16586] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 293.448311][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.467744][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.475793][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.794359][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 297.802381][ C1] lec:lec_tx_timeout: lec0 [ 297.807272][ C1] lec:lec_start_xmit: lec0:No lecd attached