last executing test programs: 3.189745928s ago: executing program 1 (id=3888): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x1, 0x8, 0x25010, 0x1, 0xe8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xd}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.110313213s ago: executing program 0 (id=3890): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff85, 0x0}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2521000000050020000000000009001f00706879320000000009001f007068793100000000c5c72a2cc4e0fa7a1d9c8847a300ccf82189e14e9e29d8c20af934d3fa7e9a548172eab823bd"], 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x2400c050) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=@newtfilter={0x440, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x6, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x414, 0x2, [@TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x759, 0x7, 0x188622e6, 0x401, 0x0, 0x6, 0x7, 0x2, 0x1, 0x5, 0xc285, 0x0, 0x3, 0xa, 0xfffffd0d, 0x3, 0x3, 0xca, 0x0, 0x1ff, 0xfec7, 0x4, 0x8, 0x9, 0xdb0, 0xe, 0xc, 0x7f, 0xffff, 0x9, 0x200, 0x6, 0x7fff, 0x1, 0xfffffff4, 0x401, 0x0, 0x8000, 0xffff4958, 0x6, 0x16fd, 0x2, 0x1, 0x5, 0xfffffffb, 0x9, 0x6, 0x9, 0x6, 0x1, 0xfffffff2, 0x6, 0x4, 0x1, 0x83, 0x7, 0x0, 0x7, 0x6, 0x9, 0x1, 0x80000001, 0x2b, 0x6, 0xb54, 0x7, 0xfffffff9, 0xf, 0xca9c, 0xffffffb2, 0xb980, 0x8001, 0x6, 0xfffffff8, 0x7, 0x4, 0x10001, 0xef, 0x4, 0x0, 0x8000, 0x7fff, 0x8, 0x1, 0x3ff, 0x4, 0x9, 0x6, 0x9463, 0x3090, 0x40, 0x5, 0x7, 0x8, 0x9, 0x8, 0x8, 0x9, 0x1, 0x9, 0x7f, 0xfffff32a, 0x0, 0x800, 0x18000000, 0x7, 0x56, 0x1, 0x5eb197e8, 0x9, 0x4, 0xa, 0xff, 0x7, 0x1, 0x80000000, 0x402, 0x4, 0xb, 0x4, 0xa, 0xfffffffa, 0x4005, 0xfffff73b, 0x7, 0x8, 0x6, 0xf484, 0x2, 0x9, 0x10000001, 0x98, 0xfffffff8, 0xfffffc00, 0x6, 0x5, 0x3, 0x3, 0x5, 0x1, 0xe44d, 0xc0000000, 0x1, 0x2, 0x1002, 0x800, 0xff, 0x10000, 0xad, 0x8, 0x2, 0x2, 0x1, 0x124, 0x7bfa, 0x7, 0x7, 0x8a, 0x6f59, 0x4, 0x2, 0x5, 0x0, 0x6, 0x73f50fea, 0x9, 0xc, 0x5, 0x8000, 0x2, 0x0, 0x10000, 0x2, 0xd94, 0x2, 0x5, 0xffffffff, 0x2693, 0x3, 0x7fffffff, 0x0, 0x8, 0x7, 0x10001, 0xfffff801, 0x7f, 0x5b67572c, 0x8e8, 0x7f, 0x10001, 0x6, 0x7, 0xf3, 0x5, 0xfffffff9, 0x6, 0x7f, 0xffffffde, 0x0, 0x4, 0x4b, 0x2, 0xf, 0x8, 0x2, 0x1000, 0x7, 0xc9, 0x7ff, 0x80, 0x9, 0x56, 0x8, 0x7, 0x0, 0x1, 0x6, 0x9, 0x3, 0xcf1e, 0x5, 0x6, 0x2c9b, 0x5, 0x77, 0x3, 0xf, 0x3, 0x38, 0x6, 0x0, 0x3, 0x0, 0x4, 0xb4, 0x80a, 0x5, 0x10001, 0xfc, 0x6, 0x401, 0x8, 0x3, 0xf, 0x100, 0x9, 0x2, 0x0, 0x4, 0x7, 0x6, 0x80, 0x0, 0xfffffc00, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1362}]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40015}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0x5, &(0x7f00000006c0)=0x7, 0x4) sendmmsg$inet(r13, &(0x7f0000000700)=[{{&(0x7f0000000740)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2}}}], 0x20}}], 0x1, 0x0) r14 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="89000000120081ae08061cdc030ec080000000060000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2.96621434s ago: executing program 1 (id=3891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x2, 0x3f, "ce454997e6d4a21d82c6f2252797724e0d3488990735c019ab64f5e2c6ac1d33f426cc94f805218bd2674d4ef516ab1f8434821af041e2690af522402abeb4"}, &(0x7f0000000100)=0x47) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r2, 0x84, 0x82, &(0x7f0000000140)={r3, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ip={@remote, @broadcast, 0xff, 0x0, 'syzkaller0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x8c, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0xe00, 0x121}}, @common=@ah={{0x30}, {[0x10, 0x10001], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "e2b0", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffffff, 'batadv_slave_0\x00', 'ip_vti0\x00', {}, {}, 0x8, 0x0, 0x40}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x2, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000006c0)={r4, @in6={{0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, &(0x7f0000000780)=0x84) getsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x7f, &(0x7f00000007c0)={r6, 0x800d, 0x1}, &(0x7f0000000800)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r1) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r9, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x3fb, 0x200, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4950}, 0x200080c1) r10 = socket$inet6(0xa, 0x4, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000b00)={r3, 0xffffffffffffffff, 0x800}, &(0x7f0000000b40)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r11, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000d00)=0x5, 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f0000000d40)={0x3, 'veth1\x00', {0x8a0}, 0xff}) r13 = socket$netlink(0x10, 0x3, 0xf) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000d80), 0x3) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000dc0)={r7, 0x1}, &(0x7f0000000e00)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r14, &(0x7f0000000e80), 0x8) 2.882502837s ago: executing program 2 (id=3892): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x21, 0x0, &(0x7f0000000500)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000700)="43210098") r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000840)={0x2c, 0x2, 0x0, 0x1}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000a00)) sendmsg$NFT_BATCH(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r8) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) listen(r10, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.730805457s ago: executing program 4 (id=3893): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x684, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x658, 0x2, [@TCA_BPF_ACT={0x654, 0x1, [@m_mirred={0x620, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x591, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) listen(r2, 0x0) (rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000540)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r2, 0x802) (async, rerun: 64) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000040)={0x1d, r5}, 0x10) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18) 2.609147087s ago: executing program 0 (id=3896): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) unshare(0x400) listen(r0, 0xf5f) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.53428924s ago: executing program 1 (id=3897): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x1, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x5, 0x4, 0xc4, 0x50f8}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000180)={r1, 0xffffff01}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000200)={r2, 0xfffff4a6}, 0x8) (async) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r2, 0x6}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0x6fb}, 0x8) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'vlan1\x00', {0x2, 0x4e22, @private=0xa010100}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x1, 0x4, 0x4, {0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0x32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', r6, 0x7, 0x1, 0x0, 0x10000, {{0x50, 0x4, 0x2, 0x7, 0x140, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0xc, 0x8, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}]}, @noop, @timestamp_addr={0x44, 0x4c, 0xb7, 0x1, 0x1, [{@broadcast, 0x1}, {@multicast1, 0x1}, {@multicast1, 0x6}, {@rand_addr=0x64010100}, {@empty, 0x4}, {@private=0xa010102, 0x8001}, {@empty, 0x81}, {@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp={0x44, 0x14, 0xab, 0x0, 0x4, [0x6, 0xc4, 0x4, 0x4]}, @lsrr={0x83, 0x23, 0xbd, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast1, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x4c, 0x8, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}, {@remote, 0x3}, {@loopback, 0x8}]}, @rr={0x7, 0x1f, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @remote]}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x1, [0xc27, 0x5]}, @timestamp={0x44, 0x8, 0x9a, 0x0, 0x7, [0x2]}, @timestamp_addr={0x44, 0x1c, 0x39, 0x1, 0x7, [{@local, 0x2}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}]}]}}}}}) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000680)='memory.events.local\x00', 0x0, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000006c0)={0x0, @initdev, @multicast1}, &(0x7f0000000700)=0xc) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000740)={@empty, r7}, 0x14) (async) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000780), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@arena={0x21, 0x0, 0x0, 0x14, 0x60400, r9, 0x6f, '\x00', 0x0, r9, 0x4, 0x2, 0x3}, 0x50) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r11, 0xc038943b, &(0x7f0000000880)={0xb0, 0x40, '\x00', 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) listen(r4, 0x10000) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x6, 0x10001, 0xffffffc0, 0x2000, r10, 0x8, '\x00', r6, r3, 0x2, 0x3, 0x5, 0x3}, 0x50) ioctl$EXT4_IOC_CHECKPOINT(r12, 0x4004662b, &(0x7f0000000980)=0x7) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r13, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c4}, 0x40800) 2.440650066s ago: executing program 4 (id=3899): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000095000000000000a70000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x88004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x1e, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x6d, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xb, @private1, 0x1}]}, &(0x7f0000000640)=0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1001}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000e80)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x907, 0x1, 0x1, 0xffff}]}}]}}]}, 0x44}}, 0x0) listen(r3, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r9) sendmsg$802154_dgram(r8, &(0x7f0000000200)={&(0x7f0000000480)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000004c0)={&(0x7f0000000d00)="bfcd651212059a34b50aba3b89124b675f37d896f38d4130ee4dddeabb61e36ae60089bf5f9f3042201133c3eae7fa628479916ecc0b49fb2ab133b9c7bd66689119af8501d463241f8648ac88f39db29def2a3c8e2a374a83f51a75e61da3b06a9c4676844f79d96dd2a500840c55fc12b8f4354872ff347746a548d7676328b38fa220cc258eb89bc6d43f", 0x8c}, 0x1, 0x0, 0x0, 0x4000844}, 0x40000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000900)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'pim6reg1\x00', 0x0}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="07001500000000000a004e2100005000000000000000000000000000000000010b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2104000b8afe8800000000000000000000000000010400"/272], 0x110) sendmsg$nl_route_sched(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@TCA_RATE={0x0, 0x5, {0x81, 0x3e}}]}, 0xec}}, 0x0) 2.435773315s ago: executing program 2 (id=3900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) (fail_nth: 63) 2.306442371s ago: executing program 1 (id=3901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002020782500000000002020207b1bf0ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5bad}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}}, 0x4000000) 2.242354821s ago: executing program 2 (id=3903): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x4e20, 0x0, 'lblc\x00', 0x1, 0x12c, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x6, @local, 0x4e20, 0x0, 'rr\x00', 0x1, 0x12c, 0x51}, {@remote, 0x4e20, 0x4, 0x1}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100003050000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000005c0), 0x4) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/58, 0x3a}], 0x1, &(0x7f00000007c0)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r5, &(0x7f0000000800)={&(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000008c0)="e8", 0x1}], 0x1}, 0x4800) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000900)={'bridge0\x00', &(0x7f0000000940)=@ethtool_rxfh={0x1}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r7, 0x0, 0xf, 0x0, &(0x7f0000000b40)="1205678919379a35cb526f2d770903", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x1e, 0x4, &(0x7f0000000c40)=ANY=[@ANYRES64], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x24}, 0x94) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 2.125882158s ago: executing program 3 (id=3904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0300000000000000fc010000000000000000060000000001fc010000000000000000000000000000000000003c2200020a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0100000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) 2.072262325s ago: executing program 4 (id=3905): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x103}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.010293456s ago: executing program 3 (id=3906): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = gettid() sendmsg$AUDIT_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x3e9, 0x8, 0x70bd27, 0x25dfdbfc, {0xa, 0x1, 0x2, r9, 0x10000, 0x4, 0x2, 0x7, 0x0, 0x3, 0x7}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x10}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x10}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) gettid() (async) r12 = gettid() ioctl$sock_FIOSETOWN(r11, 0x8901, &(0x7f0000000000)=r12) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000040)) (async) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003f0007012abd700000000000047c00000400fc800c0008"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$nl_generic(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003f0007012abd700000000000047c00000400fc800c0008"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc1100001900010000000000000000001d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000681106"], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc1100001900010000000000000000001d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000681106"], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r17, @ANYRES16=r16, @ANYBLOB="010426bd7000b8dbdf250200000008000100", @ANYRES32=r17], 0x1c}}, 0x4008054) connect$nfc_llcp(r13, &(0x7f0000000340)={0x27, r17, 0x1, 0x7, 0x3, 0x6, "431f8fa6d3673a0a8caa5d76c392dee14dc9f02eabf710884bd36069c9705a47492a0162aa8193f313bd31096803115c89ba71ba487056ed9ba62ff3f3227a", 0x24}, 0x60) 1.887893891s ago: executing program 4 (id=3907): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="18080000000000000000000010000300851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000880)='GPL\x00', 0x2, 0xff5c, &(0x7f00000008c0)=""/222}, 0x78) 1.543880922s ago: executing program 0 (id=3908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000941000000060018000007327564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@delchain={0x2c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x4804) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, &(0x7f0000000240)=""/220, 0x26, 0xdc, 0xa, 0xca8}, 0x28) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000005c0)=ANY=[@ANYBLOB="bff338f5a78569456511116b928405000000448dd7eed95fd83a000076da99150508000110194caf89fbf0a4f735e3cfc2a6cedfc19ce836c3d65321d27dce74e10e62641f3d3ad7c19677ae02042f512b8b2da467ac16516399ea77a6894fa690322fcd06f7b79d39c58dbdecd79444d88b922804e323666bf631e2767c9fc10bb3"], 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYRESHEX=r7, @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x20044051}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8000002, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(0x3) 1.378409376s ago: executing program 3 (id=3909): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0xc082a000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000020000000852018000500000095"], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x1007, &(0x7f0000000500)=""/4103, 0x41100, 0x68}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x24000840) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x62}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 1.229596603s ago: executing program 1 (id=3910): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x3c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x3c}}, 0x4000) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getneigh={0x14, 0x1e, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x4004001) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x80, 0x14, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48055}, 0x4000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20004001) 1.214099192s ago: executing program 2 (id=3911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x1a, 0xa, 0x1fc) sendmsg$inet_sctp(r1, &(0x7f0000000240)={&(0x7f0000000700)=@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x18, 0x4}, 0x20048054) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000640)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={r3, 0x3}, 0x8) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000008c0)="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", 0x1b8}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000cc0)=0xdf8, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000040)=0xa40, 0x4) recvmmsg(r5, &(0x7f0000001140)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/180}, {&(0x7f0000000800)=""/109}, {&(0x7f0000000880)=""/41}, {&(0x7f0000000a80)=""/155}], 0x0, &(0x7f0000000b80)=""/72}, 0x2}, {{&(0x7f0000000c00)=@ax25={{0x3, @default}, [@netrom, @null, @null, @remote, @null, @bcast, @rose, @rose]}, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/216}, {&(0x7f0000000e00)=""/182}, {&(0x7f0000000ec0)=""/248}, {&(0x7f0000000fc0)=""/237}], 0x0, &(0x7f0000001100)=""/38}, 0x94}], 0x40000000000000e, 0x10102, 0x0) (async) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r8, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x7fbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 1.08180935s ago: executing program 0 (id=3912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000000007910480000000000890424000000000095000000eb0aa5263c4168aec3bdeb7c5b80be27765328e334f8062969283319662f59cd2fe8d14f3f1f281f5eb487e2f5259e8c965e95c0395ebebc7bd2ad1de734d47395df4ccc97d4ad7e7f8f5ba3db0ea2e0c26335e9a3d344db9bcdb64ef4a9a7d267eeff7552362fc6b0f498f27ca8d327370a255064853cf446533c26ccc3307175b2e7eb1e88e33f3ae940209eb28195491240441b7bc549df5afa5f4b02f44fc7f00f65a3c65149ad5e998ffa21858b32ac181f1ff4e5ed8de821db4c44d701039fa48f5139e0bc6f73b5b99db994e8e47e90dd0a56"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24, '\x00', 0x0, @sk_msg}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r3}, 0x18) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r4, &(0x7f0000000300)="b75a1eaef6c1d88718d4f3c0084c6982cceedac278eecfd342831a33531e3d70c9504e8a8a4d484478de93091f7d7a7c97ee814a772f35440d496368062d5fa25eed294a8ea86d969a8916c25846a1a7707af683865d3db6aae4f836b1c30439a06aef1d85fc40acbf782002117de53083a60bcbf59d883584d9785d45a7dc8b4fe56a87f461ab8972d8da18dd26f86b86f82ce59e44ae95c2145450017d52081116215ba446e83e7f4ae566a06629e339c579f6f13b9ff69a347d32d0affafd04c6693e77fb77ccc02f4e5ce1403c0704c70f806ce6f3ea7110ca", &(0x7f0000000400)=""/187}, 0x20) 1.081500293s ago: executing program 3 (id=3913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) (fail_nth: 64) 793.683125ms ago: executing program 3 (id=3914): socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c020000", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES64=0x0], 0x21c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4008804) 666.375828ms ago: executing program 0 (id=3915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00290200000000fdffffff0c"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x3}]}, 0x1c}], 0x1}, 0x0) 493.906799ms ago: executing program 4 (id=3916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="068b03000000000014000300766c616e3100000000000000000000000a000100b8aaaaaaaa300000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="068b03000000000014000300766c616e3100000000000000000000000a000100b8aaaaaaaa300000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) 173.892327ms ago: executing program 2 (id=3917): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=@ipv6_deladdr={0x40, 0x15, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x80, 0x11, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x40}}, 0x40000) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000340), 0x2e9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000340)={0xe, 0x110, 0xa, 0x40e, 0x9}) setsockopt$sock_int(r0, 0x1, 0x53, &(0x7f0000000380)=0x401, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x53, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, 0x0, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xffffffffffffff1e, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmmsg(r6, &(0x7f0000000300), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r4, @ANYRESDEC=0x0], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 142.419399ms ago: executing program 0 (id=3918): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) unshare(0x400) listen(r0, 0xf5f) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 74.081842ms ago: executing program 1 (id=3919): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000b4000000000100000038000180060001000a00000007000600736800000800050001000000080008000300fcff0b00070000000000000000000800090080000000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="68129984", @ANYRES16=r4, @ANYBLOB="010000000000000000000500000014000180060001000a000000080005000100000040000280140001000000000000000000000000000000000106000200500000000800030002000000080004000100000008000500080000000800060008000000"], 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3ff, 0x6, 0x5, 0x3}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000380)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000080, &(0x7f00000003c0)={0x11, 0x86dd, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001840)={0x1}, 0x10}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002600090122bd7008faffffff02000000080002802f0009800800030047"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x11, 0xd, &(0x7f0000001a00)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC], &(0x7f0000001a40)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x4e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000003a000000080003006067b4fe20120d65a1f7ef7c80e1f08d6136141651a1f3", @ANYRES32=0x0, @ANYBLOB="04005b000600650040000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000001c80)={&(0x7f00000002c0), 0xc, &(0x7f0000001c40)={&(0x7f0000000900)={0x28, 0x0, 0x700, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x39}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040085}, 0x8000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000800)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf9a9673b4e0529f1}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0xa7c, r10}, 0x38) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r12) ioctl$SIOCSIFHWADDR(r12, 0x8b19, &(0x7f0000000580)={'bridge_slave_1\x00', @random="7cf1e97c9e4f"}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000018c0)=r5, 0x4) sendmsg$unix(r8, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x40044) 73.614098ms ago: executing program 4 (id=3920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0c02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'caif0\x00', 0x1}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 49.056393ms ago: executing program 2 (id=3921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0300000000000000fc010000000000000000060000000001fc010000000000000000000000000000000000003c2200020a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0100000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) 0s ago: executing program 3 (id=3922): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x8ec6, 0x10}, 0xc) r5 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001100)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000001140)="11c9064268", 0x5}], 0x2}, 0x40) kernel console output (not intermixed with test programs): ptables: counters copy to user failed while replacing table [ 370.530228][T17075] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.988531][T17077] rxe_eth0 speed is unknown, defaulting to 1000 [ 371.019482][T17092] validate_nla: 29 callbacks suppressed [ 371.019501][T17092] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 371.091171][T17092] 8021q: adding VLAN 0 to HW filter on device bond13 [ 371.139673][T17096] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.501086][T17113] netlink: 'syz.0.2841': attribute type 39 has an invalid length. [ 371.509792][T17114] netlink: 'syz.0.2841': attribute type 39 has an invalid length. [ 371.560573][T17116] netlink: 'syz.0.2841': attribute type 21 has an invalid length. [ 371.586713][T17115] __nla_validate_parse: 2 callbacks suppressed [ 371.586733][T17115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2840'. [ 371.857061][T17120] syz_tun: entered allmulticast mode [ 372.039593][T17126] dvmrp6: entered allmulticast mode [ 372.583818][T17133] syzkaller0: entered promiscuous mode [ 372.583843][T17133] syzkaller0: entered allmulticast mode [ 373.280398][T17148] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 373.338160][ T8581] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 373.341293][T17154] netlink: 'syz.1.2850': attribute type 2 has an invalid length. [ 373.432064][T17154] !;: entered promiscuous mode [ 373.730423][T17160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2853'. [ 373.869907][T17162] netlink: 'syz.0.2855': attribute type 5 has an invalid length. [ 373.953265][T17171] syzkaller0: left promiscuous mode [ 373.954052][T17171] syzkaller0: left allmulticast mode [ 374.507412][T17189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.830915][T17208] bond10: entered allmulticast mode [ 374.831312][T17208] 8021q: adding VLAN 0 to HW filter on device bond10 [ 375.051554][T17208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.264598][T17217] x_tables: duplicate entry at hook 3 [ 376.168354][T17220] TC_ACT_REPEAT abuse ? [ 376.169160][T17148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.435509][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 376.488483][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2870'. [ 376.765042][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'. [ 376.787755][T17250] 8021q: adding VLAN 0 to HW filter on device bond11 [ 376.956119][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2881'. [ 378.728471][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.672044][T17243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.953566][T17304] syzkaller0: entered promiscuous mode [ 379.953589][T17304] syzkaller0: entered allmulticast mode [ 379.981832][T17298] tipc: Enabled bearer , priority 0 [ 379.984459][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 380.053770][T17305] tipc: Resetting bearer [ 380.066620][T17296] tipc: Resetting bearer [ 380.090347][T17296] tipc: Disabling bearer [ 380.175335][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 380.261317][T17319] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 380.262788][T17319] netlink: 'syz.2.2892': attribute type 2 has an invalid length. [ 380.262807][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2892'. [ 380.700766][T17337] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2898'. [ 381.028813][ T5649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.031742][ T5649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.035423][ T5649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.054704][ T5649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.063294][ T5649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.091584][ T5649] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 381.764629][T17380] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.764751][T17380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.765074][T17380] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.765179][T17380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.819288][T17380] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 381.823070][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2910'. [ 381.934694][T17345] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.076431][T17390] netlink: 'syz.3.2911': attribute type 4 has an invalid length. [ 382.695427][T17402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.695455][T17402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.695474][T17402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 382.695492][T17402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 36198 - 0 [ 382.876136][T17402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.876176][T17402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.876206][T17402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 382.876233][T17402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 36198 - 0 [ 383.091192][T17413] Cannot find set identified by id 1 to match [ 383.096618][T17402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.099970][T17402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.100061][T17402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 383.100151][T17402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 36198 - 0 [ 383.134992][ T53] Bluetooth: hci5: command tx timeout [ 383.242171][T17345] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.242276][T17345] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.242568][T17345] bridge_slave_0: entered allmulticast mode [ 383.244207][T17345] bridge_slave_0: entered promiscuous mode [ 383.339426][T17402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.339467][T17402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.339497][T17402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 383.339526][T17402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 36198 - 0 [ 383.414407][T17345] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.414576][T17345] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.414733][T17345] bridge_slave_1: entered allmulticast mode [ 383.416557][T17345] bridge_slave_1: entered promiscuous mode [ 383.553042][T17422] bond12: entered allmulticast mode [ 383.553480][T17422] 8021q: adding VLAN 0 to HW filter on device bond12 [ 383.566525][T17345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.573730][T17345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.641591][T17422] bond12: (slave macvlan2): Error -22 calling dev_set_mtu [ 383.674582][T17345] team0: Port device team_slave_0 added [ 383.700039][T17345] team0: Port device team_slave_1 added [ 383.718122][T17433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 383.718192][T17433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 383.740074][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 383.740149][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 383.770271][T17422] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2918'. [ 383.789559][T17429] ip6gretap0: entered allmulticast mode [ 383.790116][T17429] bond12: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 383.820743][T17422] bond0 (unregistering): Released all slaves [ 383.877486][T14790] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 383.912797][T17345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.912816][T17345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.912844][T17345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.987527][ T8581] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 383.989730][T17345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.989755][T17345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.989791][T17345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.508736][T17450] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 384.582425][T17345] hsr_slave_0: entered promiscuous mode [ 384.583473][T17345] hsr_slave_1: entered promiscuous mode [ 384.584255][T17345] debugfs: 'hsr0' already exists in 'hsr' [ 384.584277][T17345] Cannot create hsr debugfs directory [ 384.631245][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 384.748175][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.748213][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 36198 - 0 [ 384.748241][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.748268][ T12] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 384.749857][T14790] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.749891][T14790] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 36198 - 0 [ 384.749920][T14790] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.749947][T14790] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 384.749987][T14790] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.750016][T14790] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 36198 - 0 [ 384.750043][T14790] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.750069][T14790] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 384.750109][T14790] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.750137][T14790] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 36198 - 0 [ 384.750164][T14790] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.750191][T14790] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 384.985663][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2931'. [ 385.132877][T17345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.132915][T17345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.132941][T17345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.208568][ T53] Bluetooth: hci5: command tx timeout [ 385.291518][T17345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.291569][T17345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.292457][T17345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.435990][T17345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.436031][T17345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.436061][T17345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.534286][T17476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.614979][T17345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.615006][T17345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.615026][T17345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.853557][T17345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.875959][T17345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.876920][T17345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.910863][T17345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.912393][T17345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.937838][T17345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.939472][T17345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.946108][T17487] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2938'. [ 385.975353][T17345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.061261][T17496] vlan3: entered promiscuous mode [ 386.111279][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.154489][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.173427][T17509] netlink: 'syz.3.2941': attribute type 58 has an invalid length. [ 386.173449][T17509] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2941'. [ 386.201733][T17499] vlan3: entered promiscuous mode [ 386.320412][T17345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.344450][T17345] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.362284][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.362393][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.394965][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.395039][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.430966][T17512] netlink: 'syz.4.2942': attribute type 5 has an invalid length. [ 387.054939][T17543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2950'. [ 387.076737][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2950'. [ 387.076761][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2950'. [ 387.205271][T17546] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 387.267925][T17345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.287346][ T53] Bluetooth: hci5: command tx timeout [ 387.350728][T17345] veth0_vlan: entered promiscuous mode [ 387.364645][T17345] veth1_vlan: entered promiscuous mode [ 387.416329][T17345] veth0_macvtap: entered promiscuous mode [ 387.430238][T17345] veth1_macvtap: entered promiscuous mode [ 387.460496][T17345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.497599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.551357][T17552] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.552103][T17552] tipc: Resetting bearer [ 387.580748][T14790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.624197][T17552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.624216][T17552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.665169][T17552] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 387.686965][T17345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.797631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.841717][T17562] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2955'. [ 387.912145][T17568] sit2: entered allmulticast mode [ 387.999440][ T8581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.028975][ T3340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.077935][ T8581] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.077996][ T8581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.078031][ T8581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.078066][ T8581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.078101][ T8581] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.078135][ T8581] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.209859][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.209883][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.283550][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.283573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.862667][T17605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2968'. [ 388.889148][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 389.335030][ T5649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.340998][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.350223][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.363271][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.364294][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.383131][ T53] Bluetooth: hci5: command tx timeout [ 390.034510][T17641] syzkaller0: entered promiscuous mode [ 390.034536][T17641] syzkaller0: entered allmulticast mode [ 390.148828][T17644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2976'. [ 390.275821][T17650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.601360][T17621] rxe_eth0 speed is unknown, defaulting to 1000 [ 391.120492][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2984'. [ 391.243166][T17680] bridge5: entered promiscuous mode [ 391.458472][ T53] Bluetooth: hci1: command tx timeout [ 391.594784][T17694] ip_tables: iptables: counters copy to user failed while replacing table [ 392.041891][T17711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2992'. [ 392.533044][T17736] xt_cluster: you have exceeded the maximum number of cluster nodes (134217732 > 32) [ 392.676571][T17621] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.676668][T17621] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.676783][T17621] bridge_slave_0: entered allmulticast mode [ 392.705852][T17621] bridge_slave_0: entered promiscuous mode [ 392.718611][T17621] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.720543][T17621] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.721701][T17621] bridge_slave_1: entered allmulticast mode [ 392.726609][T17621] bridge_slave_1: entered promiscuous mode [ 392.812743][T17621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.836603][T17621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.939836][T17621] team0: Port device team_slave_0 added [ 392.942864][T17621] team0: Port device team_slave_1 added [ 392.985923][T17621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.985938][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.985965][T17621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.033612][T17621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.033629][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.033657][T17621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.269449][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3005'. [ 393.284522][T17621] hsr_slave_0: entered promiscuous mode [ 393.295070][T17621] hsr_slave_1: entered promiscuous mode [ 393.302103][T17621] debugfs: 'hsr0' already exists in 'hsr' [ 393.302157][T17621] Cannot create hsr debugfs directory [ 393.528115][ T53] Bluetooth: hci1: command tx timeout [ 393.751763][T17769] xt_esp: unknown flags DD [ 394.082704][T17621] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.082743][T17621] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36198 - 0 [ 394.082772][T17621] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.082818][T17621] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 394.382214][T17781] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 394.386458][T17781] bond0 (unregistering): Released all slaves [ 394.582830][T17785] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 394.602951][T17785] bond0 (unregistering): Released all slaves [ 394.710524][T17621] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.710564][T17621] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36198 - 0 [ 394.710593][T17621] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.710621][T17621] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 394.893521][T17621] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.893561][T17621] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36198 - 0 [ 394.893590][T17621] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.893619][T17621] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 394.983181][T17621] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.983221][T17621] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36198 - 0 [ 394.983250][T17621] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.983278][T17621] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 395.405841][T17816] Bluetooth: MGMT ver 1.23 [ 395.492793][T17816] siw: device registration error -23 [ 395.607280][ T5649] Bluetooth: hci1: command tx timeout [ 397.353421][T17789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.374206][T17621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.403772][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.406349][T17621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.436061][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.445028][T17621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.454475][ T53] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 397.482824][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.486642][T17621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.546343][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.652398][T17832] netlink: 'syz.2.3017': attribute type 9 has an invalid length. [ 397.688179][ T53] Bluetooth: hci1: command 0x0419 tx timeout [ 397.963068][T17621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.012352][T17621] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.036193][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.036304][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.076250][T14790] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.076362][T14790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.133651][ T30] audit: type=1800 audit(1793804885.588:17): pid=17851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3021" name=680B20 dev="tmpfs" ino=3099 res=0 errno=-22 [ 398.170332][T17853] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 398.225705][T17854] lo speed is unknown, defaulting to 1000 [ 398.225827][T17854] lo speed is unknown, defaulting to 1000 [ 398.254720][T17854] lo speed is unknown, defaulting to 1000 [ 398.271898][T17854] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 398.271938][T17854] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 398.271984][T17854] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 398.506852][T17854] lo speed is unknown, defaulting to 1000 [ 398.528484][T17854] lo speed is unknown, defaulting to 1000 [ 398.540484][T17854] lo speed is unknown, defaulting to 1000 [ 398.568549][T17854] lo speed is unknown, defaulting to 1000 [ 398.593603][T17854] lo speed is unknown, defaulting to 1000 [ 398.615157][T17854] lo speed is unknown, defaulting to 1000 [ 398.645670][T17854] lo speed is unknown, defaulting to 1000 [ 398.948598][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 398.995152][T17879] syzkaller0: entered promiscuous mode [ 398.995178][T17879] syzkaller0: entered allmulticast mode [ 399.011004][T17879] tipc: Started in network mode [ 399.011050][T17879] tipc: Node identity 222f046025ae, cluster identity 4711 [ 399.011602][T17879] tipc: Enabled bearer , priority 0 [ 399.124304][T17884] sctp: [Deprecated]: syz.3.3029 (pid 17884) Use of int in max_burst socket option deprecated. [ 399.124304][T17884] Use struct sctp_assoc_value instead [ 399.264995][T17879] tipc: Resetting bearer [ 399.321564][T17879] tipc: Disabling bearer [ 399.358508][T17888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3030'. [ 399.575267][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 399.661091][T17900] pim6reg: entered allmulticast mode [ 399.665817][T17899] pim6reg: left allmulticast mode [ 399.767646][ T53] Bluetooth: hci1: command 0x0419 tx timeout [ 400.073038][T17920] ip_tables: iptables: counters copy to user failed while replacing table [ 400.111815][T17621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.126071][T17926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3038'. [ 400.138034][T17921] syzkaller1: entered promiscuous mode [ 400.138056][T17921] syzkaller1: entered allmulticast mode [ 400.580851][T17947] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 400.603566][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 400.634922][T17949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3043'. [ 401.105697][T17621] veth0_vlan: entered promiscuous mode [ 401.136518][T17621] veth1_vlan: entered promiscuous mode [ 401.178143][T17972] syzkaller0: entered promiscuous mode [ 401.178179][T17972] syzkaller0: entered allmulticast mode [ 401.319764][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'. [ 401.390164][T17621] veth0_macvtap: entered promiscuous mode [ 401.420206][T17621] veth1_macvtap: entered promiscuous mode [ 401.506995][T17621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.559648][T17621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.627986][T14790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.628899][T14790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.628939][T14790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.643295][T14790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.912150][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 401.912306][T17987] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 401.952025][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.952049][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.073342][T17991] xt_hashlimit: size too large, truncated to 1048576 [ 402.105131][T14790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.105154][T14790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.201245][T17992] xt_hashlimit: size too large, truncated to 1048576 [ 402.223075][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 402.223112][T18007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3061'. [ 402.996722][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.008919][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.009768][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.013707][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.014397][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.284350][T18039] bond1 (unregistering): Released all slaves [ 403.407603][ T5636] batman_adv: batadv0: Removing interface: syz_tun [ 403.754660][T18062] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 404.005463][T18073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.540796][T18089] __nla_validate_parse: 132 callbacks suppressed [ 404.540819][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 404.690023][ T8581] bond12: left allmulticast mode [ 404.690070][ T8581] bond12: left promiscuous mode [ 404.691382][ T8581] bridge0: port 3(bond12) entered disabled state [ 404.722885][ T8581] bond10: left allmulticast mode [ 404.722912][ T8581] bond10: left promiscuous mode [ 404.723153][ T8581] bridge0: port 2(bond10) entered disabled state [ 404.755696][ T8581] bond1: left allmulticast mode [ 404.755724][ T8581] bond1: left promiscuous mode [ 404.755922][ T8581] bridge0: port 1(bond1) entered disabled state [ 404.810965][ T8581] pimreg: left allmulticast mode [ 404.923989][T18104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3083'. [ 405.034442][ T8581] bond3 (unregistering): (slave ip6gre2): Releasing backup interface [ 405.137594][ T53] Bluetooth: hci3: command tx timeout [ 405.345173][T18124] ip_tables: iptables: counters copy to user failed while replacing table [ 405.442719][ T8581] erspan0 (unregistering): left promiscuous mode [ 405.485561][ T8581] 0ªX¹¦Dö» (unregistering): left promiscuous mode [ 405.513791][T18127] netlink: 'syz.4.3088': attribute type 10 has an invalid length. [ 405.531784][ T8581] bond8 (unregistering): (slave gretap0): Releasing backup interface [ 405.546200][T18130] netlink: 'syz.4.3088': attribute type 10 has an invalid length. [ 405.594316][ T8581] bond2 (unregistering): (slave geneve2): Releasing active interface [ 405.673080][ T8581] bond13 (unregistering): (slave bridge1): Releasing active interface [ 405.702365][ T8581] ÿÿÿÿÿÿ (unregistering): Released all slaves [ 405.713878][ T8581] bond1 (unregistering): Released all slaves [ 405.730501][ T8581] bond2 (unregistering): Released all slaves [ 405.745449][ T8581] bond3 (unregistering): Released all slaves [ 405.762931][ T8581] bond4 (unregistering): Released all slaves [ 405.790377][ T8581] bond0 (unregistering): Released all slaves [ 405.805355][ T8581] bond5 (unregistering): Released all slaves [ 405.821883][ T8581] bond6 (unregistering): Released all slaves [ 405.843354][ T8581] bond7 (unregistering): Released all slaves [ 405.865487][ T8581] bond8 (unregistering): (slave bond9): Releasing backup interface [ 405.866643][ T8581] bond8 (unregistering): Released all slaves [ 405.892522][ T8581] bond9 (unregistering): Released all slaves [ 405.913889][ T8581] bond10 (unregistering): Released all slaves [ 405.930771][ T8581] bond11 (unregistering): Released all slaves [ 405.945999][ T8581] bond12 (unregistering): Released all slaves [ 405.979182][ T8581] bond13 (unregistering): Released all slaves [ 406.034987][ T5300] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.185066][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.203852][T18127] team0: Port device netdevsim1 added [ 406.243043][T18130] team0: Port device netdevsim1 removed [ 406.265595][T18130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.281612][T18130] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 406.324880][ T8581] !: left promiscuous mode [ 406.461662][T18034] rxe_eth0 speed is unknown, defaulting to 1000 [ 406.507321][ T8581] !;: left promiscuous mode [ 406.632923][ T8581] tipc: Left network mode [ 406.705520][T18144] xt_CT: No such helper "netbios-ns" [ 407.081985][ T8581] IPVS: stopping backup sync thread 8388 ... [ 407.159324][T14790] IPVS: starting estimator thread 0... [ 407.208838][ T53] Bluetooth: hci3: command tx timeout [ 407.254369][T18167] IPVS: using max 26 ests per chain, 62400 per kthread [ 407.824904][ T5300] 8021q: adding VLAN 0 to HW filter on device eth3 [ 408.166962][T18034] lo speed is unknown, defaulting to 1000 [ 408.292849][T18192] netlink: 'syz.0.3102': attribute type 1 has an invalid length. [ 408.574449][T18193] bond1: (slave geneve2): making interface the new active one [ 408.575411][T18193] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 409.257668][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.258552][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.258608][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.258649][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 409.292837][ T53] Bluetooth: hci3: command tx timeout [ 409.425131][ T5300] 8021q: adding VLAN 0 to HW filter on device eth4 [ 409.552383][ T8581] hsr_slave_0: left promiscuous mode [ 409.555523][ T8581] hsr_slave_1: left promiscuous mode [ 409.783101][T18248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3112'. [ 410.174864][T18269] netlink: 'syz.0.3118': attribute type 1 has an invalid length. [ 410.210577][T18270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 410.232223][ T53] block nbd4: Receive control failed (result -107) [ 410.562291][ T8593] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 410.654034][T18245] ip6tnl0: left promiscuous mode [ 410.666535][T18245] bond3: left promiscuous mode [ 410.666700][T18245] bond4: left promiscuous mode [ 410.677847][ T8593] bond9: (slave dummy0): link status up again after 0 ms [ 410.688690][T18245] ipvlan2: left promiscuous mode [ 410.698016][ T3321] bond9: (slave dummy0): link status up again after 0 ms [ 410.703400][T18245] bond8: left promiscuous mode [ 410.703435][T18245] team_slave_1: left promiscuous mode [ 410.718456][T14790] bond9: (slave dummy0): link status up again after 0 ms [ 410.737613][ T8593] bond9: (slave dummy0): link status up again after 0 ms [ 410.758669][ T8583] bond9: (slave dummy0): link status up again after 0 ms [ 410.759198][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 410.951914][ T5300] 8021q: adding VLAN 0 to HW filter on device eth5 [ 411.113338][T18034] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.113514][T18034] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.113644][T18034] bridge_slave_0: entered allmulticast mode [ 411.115817][T18034] bridge_slave_0: entered promiscuous mode [ 411.126213][T18034] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.129366][T18034] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.129811][T18034] bridge_slave_1: entered allmulticast mode [ 411.142586][T18034] bridge_slave_1: entered promiscuous mode [ 411.227668][T18034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.228282][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 411.231270][T18034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.293683][T18034] team0: Port device team_slave_0 added [ 411.297050][T18304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3126'. [ 411.297071][T18304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3126'. [ 411.298316][T18304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3126'. [ 411.336556][T18034] team0: Port device team_slave_1 added [ 411.370052][ T53] Bluetooth: hci3: command tx timeout [ 411.485659][T18034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.485678][T18034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.485706][T18034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.532320][T18034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.532337][T18034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.532366][T18034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.636792][T18034] hsr_slave_0: entered promiscuous mode [ 411.645782][T18034] hsr_slave_1: entered promiscuous mode [ 411.646560][T18034] debugfs: 'hsr0' already exists in 'hsr' [ 411.646582][T18034] Cannot create hsr debugfs directory [ 411.707436][ T8581] IPVS: stop unused estimator thread 0... [ 412.018762][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 412.309430][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3135'. [ 412.327997][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 412.482524][T18345] ip_tables: iptables: counters copy to user failed while replacing table [ 413.323736][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 413.325517][T18034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.360616][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.364454][T18034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.399596][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.404048][T18034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.432797][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 413.450180][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.451128][T18034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.486316][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.841282][T18034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.905107][T18034] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.941881][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.941998][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.980360][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.980473][ T8593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.142082][T18423] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3152'. [ 414.489294][ T8581] IPVS: starting estimator thread 0... [ 414.577488][T18444] IPVS: using max 24 ests per chain, 57600 per kthread [ 414.577850][T18447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3154'. [ 416.957605][T14790] net_ratelimit: 16 callbacks suppressed [ 416.957626][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 417.067598][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 417.179693][ T3340] bond9: (slave dummy0): failed to get link speed/duplex [ 417.292570][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 417.331789][T18034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.400374][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 417.448862][T18034] veth0_vlan: entered promiscuous mode [ 417.475794][T18034] veth1_vlan: entered promiscuous mode [ 417.549478][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 417.621922][T18034] veth0_macvtap: entered promiscuous mode [ 417.632890][T18503] openvswitch: netlink: Missing key (keys=40, expected=100) [ 417.656010][T18034] veth1_macvtap: entered promiscuous mode [ 417.698318][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 417.763473][T18034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.994907][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 417.994942][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3167'. [ 418.081468][ T31] IPVS: starting estimator thread 0... [ 418.084140][T18034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.149505][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.149876][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 418.149917][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.149960][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.150002][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.178983][T18537] IPVS: using max 24 ests per chain, 57600 per kthread [ 418.339266][ T3340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.348341][ T3340] bond9: (slave dummy0): failed to get link speed/duplex [ 418.348384][ T3340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.538642][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.540790][T14790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.641671][T18551] netlink: 'syz.0.3172': attribute type 10 has an invalid length. [ 418.706189][T18551] team0 (unregistering): Port device team_slave_0 removed [ 418.734414][T18551] team0 (unregistering): Port device team_slave_1 removed [ 418.949083][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.949106][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.141197][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.141219][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.212054][T18574] netlink: 'syz.2.3176': attribute type 1 has an invalid length. [ 419.212076][T18574] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3176'. [ 419.572179][T18589] sctp: [Deprecated]: syz.0.3180 (pid 18589) Use of int in max_burst socket option deprecated. [ 419.572179][T18589] Use struct sctp_assoc_value instead [ 420.646496][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.659991][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.664409][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.679495][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.680479][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.357411][T18661] netlink: 'syz.4.3192': attribute type 7 has an invalid length. [ 421.638045][T18676] erspan0: entered promiscuous mode [ 421.638170][T18676] macsec1: entered promiscuous mode [ 421.641369][T18676] erspan0: left promiscuous mode [ 421.753389][T18682] nbd: nbd3 already in use [ 421.753853][T18682] block nbd3: NBD_DISCONNECT [ 421.753952][T18682] block nbd3: Send disconnect failed -32 [ 421.753980][T18682] block nbd3: shutting down sockets [ 421.784063][T18641] rxe_eth0 speed is unknown, defaulting to 1000 [ 422.039632][ T8581] net_ratelimit: 29 callbacks suppressed [ 422.039672][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 422.173037][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 422.173063][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 422.250436][T18694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.309251][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 422.417271][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 422.521728][T18710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3202'. [ 422.528463][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 422.638643][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 422.748738][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 422.808649][ T5649] Bluetooth: hci0: command tx timeout [ 422.858132][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 422.906410][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3206'. [ 422.944927][T18729] netlink: 'syz.3.3208': attribute type 1 has an invalid length. [ 422.944949][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 422.955907][T18725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.969330][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 423.042837][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 423.078724][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 423.302868][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 423.421110][T18750] netlink: 'syz.3.3212': attribute type 11 has an invalid length. [ 423.576667][T18736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.646184][T18735] bond1: option ad_select: invalid value (34) [ 423.662959][T18735] bond1 (unregistering): Released all slaves [ 423.792493][T18749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.189161][T18783] syzkaller0: entered promiscuous mode [ 424.189187][T18783] syzkaller0: entered allmulticast mode [ 424.226538][T18783] bridge1: entered promiscuous mode [ 424.313236][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 424.314885][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'. [ 424.406369][T18790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3223'. [ 424.629898][T18796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3224'. [ 424.888796][ T5649] Bluetooth: hci0: command tx timeout [ 426.383569][T18802] tipc: Enabling of bearer rejected, failed to enable media [ 426.688686][T18641] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.690490][T18641] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.690641][T18641] bridge_slave_0: entered allmulticast mode [ 426.719178][T18641] bridge_slave_0: entered promiscuous mode [ 426.735280][T18830] netlink: 'syz.1.3233': attribute type 10 has an invalid length. [ 426.735304][T18830] ipvlan0: entered allmulticast mode [ 426.735334][T18830] veth0_vlan: entered allmulticast mode [ 426.741579][T18830] team0: Device ipvlan0 failed to register rx_handler [ 426.766372][T18641] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.766569][T18641] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.766721][T18641] bridge_slave_1: entered allmulticast mode [ 426.789568][T18641] bridge_slave_1: entered promiscuous mode [ 426.830499][T18641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.833806][T18641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.885231][T18641] team0: Port device team_slave_0 added [ 426.894588][T18641] team0: Port device team_slave_1 added [ 426.930253][T18641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.930271][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.930301][T18641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.932574][T18641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.932589][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.932614][T18641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.971050][ T5649] Bluetooth: hci0: command tx timeout [ 427.096187][T18641] hsr_slave_0: entered promiscuous mode [ 427.103054][T18641] hsr_slave_1: entered promiscuous mode [ 427.103826][T18641] debugfs: 'hsr0' already exists in 'hsr' [ 427.103848][T18641] Cannot create hsr debugfs directory [ 427.255814][T18844] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3235'. [ 427.258755][ T31] net_ratelimit: 5 callbacks suppressed [ 427.258813][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 427.286722][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3235'. [ 427.372463][T18641] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 427.372501][T18641] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.427508][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 427.478854][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 427.500621][T18641] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 427.500659][T18641] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.588291][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 427.628227][T18641] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 427.628267][T18641] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.698105][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 427.738980][T18641] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 427.739019][T18641] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.807673][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 427.918383][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 428.029134][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 428.339170][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 428.393577][T18641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.416739][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.426418][T18641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.455848][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.464795][T18641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.493321][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.506808][T18641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.547868][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.587996][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 428.683495][T18879] syzkaller0: entered promiscuous mode [ 428.683521][T18879] syzkaller0: entered allmulticast mode [ 428.758479][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 428.942457][T18641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.943923][T18892] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3249'. [ 428.997887][T18641] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.035254][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.035355][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.051783][ T5649] Bluetooth: hci0: command tx timeout [ 429.104341][T18894] macsec0: entered promiscuous mode [ 429.113266][T14790] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.113387][T14790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.131572][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3250'. [ 429.150530][T18894] macsec0 (unregistering): left promiscuous mode [ 429.361619][T18903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3252'. [ 429.361651][T18903] netlink: 'syz.1.3252': attribute type 5 has an invalid length. [ 429.618318][T18913] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3255'. [ 429.653435][T18913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3255'. [ 429.656100][T18915] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3255'. [ 429.684432][T18918] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3255'. [ 430.062225][T18928] syzkaller0: entered promiscuous mode [ 430.062251][T18928] syzkaller0: entered allmulticast mode [ 430.164108][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3261'. [ 430.279222][T18641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.167616][ T53] Bluetooth: hci0: command 0x0405 tx timeout [ 432.200354][T18957] syzkaller0: entered promiscuous mode [ 432.200390][T18957] syzkaller0: entered allmulticast mode [ 432.371929][T18641] veth0_vlan: entered promiscuous mode [ 432.414947][T18641] veth1_vlan: entered promiscuous mode [ 432.465013][T18971] netlink: 'syz.3.3265': attribute type 3 has an invalid length. [ 432.478978][T18641] veth0_macvtap: entered promiscuous mode [ 432.505945][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3267'. [ 432.505965][T18974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3267'. [ 432.532810][T18641] veth1_macvtap: entered promiscuous mode [ 432.539122][ T8583] net_ratelimit: 15 callbacks suppressed [ 432.539174][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 432.587939][T18972] syzkaller0: entered promiscuous mode [ 432.587961][T18972] syzkaller0: entered allmulticast mode [ 432.609993][T18641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.626801][T18972] tipc: Started in network mode [ 432.626834][T18972] tipc: Node identity ee03e610dede, cluster identity 4711 [ 432.644718][T18972] tipc: Enabled bearer , priority 0 [ 432.662193][T18641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.689015][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 432.695923][T18972] tipc: Resetting bearer [ 432.716596][T18981] syzkaller1: entered promiscuous mode [ 432.716616][T18981] syzkaller1: entered allmulticast mode [ 432.735471][T18970] tipc: Resetting bearer [ 432.761285][T18970] tipc: Disabling bearer [ 432.939211][T18997] netlink: 'syz.4.3273': attribute type 5 has an invalid length. [ 432.968314][ T8593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.968504][ T8593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.969166][ T8593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.969208][ T8593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.970685][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.021842][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 433.075529][T18983] bond0: (slave ip6tnl0): refused to change device type [ 433.239599][ T8581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.239628][ T8581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.307774][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 433.345880][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.345902][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.417623][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 433.528281][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 433.611744][T12087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.640191][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 433.643286][T19032] IPVS: Error connecting to the multicast addr [ 433.753813][T19038] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 433.776274][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 434.796685][ T5300] veth0_macvtap: left promiscuous mode [ 434.833661][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.836255][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.837215][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.862064][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.862710][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.983076][T19094] netlink: 'syz.1.3289': attribute type 1 has an invalid length. [ 436.973648][ T53] Bluetooth: hci2: command tx timeout [ 437.974031][ T5640] syz_tun (unregistering): left allmulticast mode [ 438.078125][ T8581] net_ratelimit: 16 callbacks suppressed [ 438.078145][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 438.168252][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.188564][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 438.299500][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 438.344904][T19123] netlink: 'syz.2.3294': attribute type 10 has an invalid length. [ 438.361346][T19122] __nla_validate_parse: 3 callbacks suppressed [ 438.361366][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 438.366127][T19126] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3293'. [ 438.405890][ T8593] IPVS: starting estimator thread 0... [ 438.423768][T19133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3292'. [ 438.451888][T19123] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 438.497486][T19130] IPVS: using max 27 ests per chain, 64800 per kthread [ 438.847549][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 438.958186][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 439.001988][ T3321] IPVS: starting estimator thread 0... [ 439.049190][ T53] Bluetooth: hci2: command tx timeout [ 439.067311][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 439.087473][T19152] IPVS: using max 24 ests per chain, 57600 per kthread [ 439.209208][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.228251][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 439.244215][T19084] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.286246][T19162] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 439.295290][T19162] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 439.358923][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 440.116802][T19194] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3310'. [ 440.189597][T19197] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3311'. [ 440.189621][T19197] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 440.602644][T19213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3315'. [ 440.677768][T19190] block nbd0: reconnected socket [ 440.712670][T19190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3309'. [ 440.727499][ T53] block nbd0: Receive control failed (result -32) [ 440.834052][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3316'. [ 440.882673][T19228] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3315'. [ 440.882731][T19228] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3315'. [ 441.128699][ T53] Bluetooth: hci2: command tx timeout [ 441.147815][T19242] ip6gretap0: entered promiscuous mode [ 441.149109][T19084] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.149289][T19084] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.149821][T19084] bridge_slave_0: entered allmulticast mode [ 441.151696][T19084] bridge_slave_0: entered promiscuous mode [ 441.190654][T19238] ip6gretap0: left promiscuous mode [ 441.191640][T19084] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.191779][T19084] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.191904][T19084] bridge_slave_1: entered allmulticast mode [ 441.193749][T19084] bridge_slave_1: entered promiscuous mode [ 441.283476][T19084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.306826][T19084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.413050][T19084] team0: Port device team_slave_0 added [ 441.425110][T19084] team0: Port device team_slave_1 added [ 441.468539][T19084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.468557][T19084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.468585][T19084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.470705][T19084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.470721][T19084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.470749][T19084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.693498][T19084] hsr_slave_0: entered promiscuous mode [ 441.694568][T19084] hsr_slave_1: entered promiscuous mode [ 441.695289][T19084] debugfs: 'hsr0' already exists in 'hsr' [ 441.695309][T19084] Cannot create hsr debugfs directory [ 441.915318][T19084] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.966449][T19257] netlink: 'syz.0.3322': attribute type 1 has an invalid length. [ 442.048830][T19084] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.135817][T19084] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.203581][T19084] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.252144][ T30] audit: type=1804 audit(1793804929.698:18): pid=19274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3324" name="/newroot/11/cgroup.controllers" dev="tmpfs" ino=73 res=1 errno=0 [ 442.252200][ T30] audit: type=1800 audit(1793804929.698:19): pid=19274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3324" name="cgroup.controllers" dev="tmpfs" ino=73 res=0 errno=-22 [ 442.543374][T19287] netlink: 'syz.1.3329': attribute type 63 has an invalid length. [ 443.094720][T19084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.116849][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.126663][T19084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.150296][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.152137][T19084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 443.186122][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.195193][T19084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 443.209445][ T53] Bluetooth: hci2: command tx timeout [ 443.218730][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.267567][ T3321] net_ratelimit: 20 callbacks suppressed [ 443.267588][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 443.371741][T16459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.387540][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 443.474602][T19322] __nla_validate_parse: 13 callbacks suppressed [ 443.474625][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 443.613272][T19084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.620313][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 443.695968][T19084] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.851251][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.944054][T19334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.945733][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.945845][ T8581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.987763][ T8584] bond9: (slave dummy0): failed to get link speed/duplex [ 443.993679][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.993788][ T8581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.197336][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 444.307808][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 444.417408][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 444.526691][T19349] netlink: 'syz.0.3345': attribute type 1 has an invalid length. [ 444.526715][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 444.635783][T19344] tipc: Failed to remove unknown binding: 66,1,1/0:2006952903/2006952905 [ 444.670748][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 444.744526][T19344] team0: Port device team_slave_0 removed [ 444.772785][T19356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3347'. [ 444.906119][T19363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3349'. [ 444.991510][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 445.119789][ T8593] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.119864][ T8593] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.119902][ T8593] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.141137][ T8593] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.491551][T19084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.643970][T19084] veth0_vlan: entered promiscuous mode [ 445.664174][T19084] veth1_vlan: entered promiscuous mode [ 445.792766][T19084] veth0_macvtap: entered promiscuous mode [ 445.814915][T19084] veth1_macvtap: entered promiscuous mode [ 445.853684][T19084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.894130][T19084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.942190][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.946232][ T8583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.950036][ T8583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.123828][ T8593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.123850][ T8593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.222105][ T8581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.222128][ T8581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.239015][ T8581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.576172][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3359'. [ 446.651539][T19412] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 446.774675][T19416] netlink: 'syz.3.3362': attribute type 1 has an invalid length. [ 447.040112][T19428] ip6tnl1: entered allmulticast mode [ 447.085780][T19435] netlink: 'syz.2.3370': attribute type 1 has an invalid length. [ 447.142647][T19438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3370'. [ 447.159141][T19435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.003026][T19435] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 450.133352][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 450.176121][ T8584] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.176359][ T8584] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.204532][ T8584] net_ratelimit: 20 callbacks suppressed [ 450.204552][ T8584] bond9: (slave dummy0): failed to get link speed/duplex [ 450.236480][ T5725] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.272982][T19457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3373'. [ 450.317572][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 450.376076][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3373'. [ 450.428455][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 450.537299][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 450.560399][ T5725] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.649845][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 450.757426][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 450.867556][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 450.979918][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 451.088675][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 451.131180][ T193] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 451.199679][ T8584] bond9: (slave dummy0): failed to get link speed/duplex [ 453.072785][T19448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.073617][T19455] netlink: 'syz.2.3375': attribute type 4 has an invalid length. [ 453.073637][T19455] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3375'. [ 453.200260][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 453.284055][ T8571] IPVS: starting estimator thread 0... [ 453.346604][T19519] batadv_slave_1: entered promiscuous mode [ 453.351111][T19517] batadv_slave_1: left promiscuous mode [ 453.367500][T19516] IPVS: using max 27 ests per chain, 64800 per kthread [ 454.252127][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 454.351202][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 454.373529][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 454.730314][T19596] Bluetooth: MGMT ver 1.23 [ 455.025546][T19621] syz_tun: entered allmulticast mode [ 455.155901][T19625] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3404'. [ 455.155962][T19625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3404'. [ 455.171419][T19625] ipt_ECN: cannot use operation on non-tcp rule [ 455.231872][T19611] syz_tun: left allmulticast mode [ 455.311317][ T8572] net_ratelimit: 37 callbacks suppressed [ 455.311342][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 455.424787][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 455.667390][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 455.728705][ T5649] Bluetooth: hci2: hardware error 0x0d [ 455.783133][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 455.890844][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 455.999178][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 456.111260][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 456.217538][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 456.335920][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 456.437956][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 456.668825][T19665] veth0: entered promiscuous mode [ 456.718525][T19670] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 456.830802][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 456.873326][T19670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.965206][T19679] bond2: entered promiscuous mode [ 457.247719][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3422'. [ 457.251358][T19696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3422'. [ 457.299981][T19699] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 457.300010][T19699] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 457.300041][T19699] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 457.471653][T19703] syzkaller1: entered promiscuous mode [ 457.471678][T19703] syzkaller1: entered allmulticast mode [ 457.566382][T19667] bond2: left promiscuous mode [ 457.847389][ T5649] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 458.055243][T19724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3428'. [ 458.489126][T19706] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 458.489153][T19706] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 458.630230][T19706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.630257][T19706] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 458.718552][T19706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 458.718585][T19706] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 458.751289][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3437'. [ 459.150371][T19719] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 459.302594][T19764] sctp: [Deprecated]: syz.2.3439 (pid 19764) Use of int in max_burst socket option deprecated. [ 459.302594][T19764] Use struct sctp_assoc_value instead [ 459.354901][T19766] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3440'. [ 459.376827][T19766] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 459.586645][T19777] xt_time: unknown flags 0x4 [ 459.954050][T19792] bridge_slave_0: left allmulticast mode [ 459.954080][T19792] bridge_slave_0: left promiscuous mode [ 459.954298][T19792] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.982559][T19792] bridge_slave_1: left allmulticast mode [ 459.982585][T19792] bridge_slave_1: left promiscuous mode [ 459.982797][T19792] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.036498][T19792] bond0: (slave bond_slave_0): Releasing backup interface [ 460.073602][T19792] bond0: (slave bond_slave_1): Releasing backup interface [ 460.123524][T19792] team0: Port device team_slave_0 removed [ 460.146677][T19792] team0: Port device team_slave_1 removed [ 460.152127][T19792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.152191][T19792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.170411][T19792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.170451][T19792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.206565][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'. [ 460.223066][ T24] syz2: Port: 1 Link DOWN [ 460.339550][ T8593] net_ratelimit: 27 callbacks suppressed [ 460.339571][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 460.468878][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3454'. [ 460.489928][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 460.639979][T19804] bridge1: entered promiscuous mode [ 460.640458][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3454'. [ 460.720179][T19804] bridge2: entered promiscuous mode [ 460.720630][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3454'. [ 460.831806][ T8581] bond9: left allmulticast mode [ 460.842413][ T8581] bond9: left promiscuous mode [ 460.843154][ T8581] bridge0: port 5(bond9) entered disabled state [ 460.892963][ T8581] bond1: left allmulticast mode [ 460.893042][ T8581] bond1: left promiscuous mode [ 460.899624][ T8581] bridge0: port 3(bond1) entered disabled state [ 460.921491][ T8581] bridge_slave_1: left allmulticast mode [ 460.921517][ T8581] bridge_slave_1: left promiscuous mode [ 460.924742][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.982844][ T8581] bridge_slave_0: left allmulticast mode [ 460.982870][ T8581] bridge_slave_0: left promiscuous mode [ 460.983050][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.956598][ T8581] bond10 (unregistering): (slave gretap1): Releasing active interface [ 462.031818][ T8581] bond7 (unregistering): (slave geneve2): Releasing active interface [ 462.036750][ T8581] bond2 (unregistering): (slave geneve0): Releasing active interface [ 462.261999][ T8581] bond5 (unregistering): (slave ): Releasing backup interface [ 462.264672][ T8581]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.270001][ T8581]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.298730][ T8581]  (unregistering): Released all slaves [ 462.305147][ T8581] bond1 (unregistering): Released all slaves [ 462.325007][ T8581] bond2 (unregistering): Released all slaves [ 462.345212][ T8581] bond3 (unregistering): Released all slaves [ 462.364799][ T8581] bond4 (unregistering): Released all slaves [ 462.387662][ T8581] bond5 (unregistering): Released all slaves [ 462.403537][ T8581] bond0 (unregistering): Released all slaves [ 462.421781][ T8581] bond6 (unregistering): Released all slaves [ 462.438700][ T8581] bond7 (unregistering): Released all slaves [ 462.477316][ T8581] bond8 (unregistering): Released all slaves [ 462.486857][ T8581] bond9 (unregistering): Released all slaves [ 462.509615][ T8581] bond10 (unregistering): Released all slaves [ 462.538359][T19804] bridge3: entered promiscuous mode [ 462.567363][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 462.569534][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 462.596305][T19839] dvmrp0: entered allmulticast mode [ 462.596460][T19841] dvmrp0: left allmulticast mode [ 462.821742][ T8581] !: left promiscuous mode [ 462.880084][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 462.967591][ T8581] tipc: Left network mode [ 462.998130][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 463.111888][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 463.217874][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 463.332096][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 463.332902][T19868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.379477][T19880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.478604][ T8581] IPVS: stopping master sync thread 6287 ... [ 463.568335][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 463.568360][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 463.568629][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 463.568647][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 463.568943][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 463.568961][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 463.913363][T19898] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 465.808798][ T8572] net_ratelimit: 10 callbacks suppressed [ 465.808823][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 465.981271][ T8581] veth1_macvtap: left promiscuous mode [ 465.983329][ T8581] veth0_macvtap: left promiscuous mode [ 465.983538][ T8581] veth1_vlan: left promiscuous mode [ 465.983626][ T8581] veth0_vlan: left promiscuous mode [ 466.024641][T19972] __nla_validate_parse: 62 callbacks suppressed [ 466.024663][T19972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3489'. [ 466.485248][ T8571] smc: removing ib device syz1 [ 466.761250][ T8581] team0 (unregistering): Port device team_slave_1 removed [ 466.812364][ T8581] team0 (unregistering): Port device team_slave_0 removed [ 466.932176][T19999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3493'. [ 466.967735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.100395][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 467.260547][T19999] bond3: entered promiscuous mode [ 467.260995][T19999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.270328][ T8571] smbdirect: ib_dev[syz1] removed [ 467.318539][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 467.445459][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 467.520776][T20016] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3496'. [ 467.550767][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 467.659950][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 467.754832][T20027] x_tables: duplicate underflow at hook 2 [ 467.768188][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 467.885125][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 467.989736][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 468.132574][T20043] netlink: 'syz.2.3502': attribute type 1 has an invalid length. [ 468.303849][T20043] bond4: entered promiscuous mode [ 468.304297][T20043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.360872][T20058] netlink: 'syz.4.3504': attribute type 7 has an invalid length. [ 468.360892][T20058] netlink: 'syz.4.3504': attribute type 8 has an invalid length. [ 468.404457][T20057] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úéiÆâxà?ZøË_½á†˜ow¾Äº| [ 468.750799][T20063] veth2: entered promiscuous mode [ 468.750825][T20063] veth2: entered allmulticast mode [ 468.809348][T20066] netlink: 'syz.2.3507': attribute type 1 has an invalid length. [ 468.923555][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 468.942696][T20066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 468.985311][T20070] bond1: (slave syz_tun): Removing an active aggregator [ 469.004511][T20070] bond1: (slave syz_tun): Releasing backup interface [ 469.038748][T20070] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 469.365582][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3511'. [ 470.093119][T20109] netlink: 'syz.4.3517': attribute type 4 has an invalid length. [ 470.887607][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 470.913490][ T8593] net_ratelimit: 13 callbacks suppressed [ 470.913510][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 470.983464][ T8581] IPVS: stop unused estimator thread 0... [ 471.019422][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 471.079600][T20126] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3523'. [ 471.128417][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 471.224234][T20137] netlink: 2136 bytes leftover after parsing attributes in process `syz.4.3528'. [ 471.263943][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 471.367589][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3525'. [ 471.394043][T20134] bridge_slave_1: left allmulticast mode [ 471.394070][T20134] bridge_slave_1: left promiscuous mode [ 471.394320][T20134] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.432125][T20134] bridge_slave_0: left allmulticast mode [ 471.432154][T20134] bridge_slave_0: left promiscuous mode [ 471.445350][T20134] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.667817][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 471.779133][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 471.887892][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 471.925826][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 471.956971][T20169] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3535'. [ 472.288064][T20166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.308212][T20166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.499154][T20174] gre1: entered promiscuous mode [ 472.548162][ T8593] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.548199][ T8593] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.548226][ T8593] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.548266][ T8593] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.548302][ T8593] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.548329][ T8593] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.548368][ T8593] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.548396][ T8593] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.548422][ T8593] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.642749][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 472.667671][ T8572] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.667708][ T8572] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.667736][ T8572] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.747237][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 472.857559][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 473.186558][T20206] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3544'. [ 475.967701][ T8572] net_ratelimit: 28 callbacks suppressed [ 475.967727][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 476.077572][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 476.187617][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 476.297591][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 476.407826][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 476.517494][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 476.627445][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 476.737384][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 476.847559][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 476.957492][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 477.927416][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.037719][T14790] net_ratelimit: 36 callbacks suppressed [ 481.037746][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 481.147479][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 481.257494][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 481.367804][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 481.477684][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 481.587555][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 481.697694][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 481.807639][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 481.917479][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 482.027661][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 486.117419][T14790] net_ratelimit: 36 callbacks suppressed [ 486.117445][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 486.227768][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 486.337697][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 486.447629][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 486.557376][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 486.667656][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 486.777449][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 486.890086][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 486.997500][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 487.107539][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 491.187625][ T8581] net_ratelimit: 36 callbacks suppressed [ 491.187649][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 491.297611][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 491.407781][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 491.517380][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 491.627640][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 491.737536][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 491.848587][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 491.958515][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 492.067999][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 492.177607][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 496.249373][ T8593] net_ratelimit: 36 callbacks suppressed [ 496.249397][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 496.357644][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 496.467555][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 496.578046][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 496.687322][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 496.797559][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 496.907390][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 497.017556][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 497.128822][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 497.237694][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 501.317357][ T8572] net_ratelimit: 36 callbacks suppressed [ 501.317384][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 501.427543][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 501.537518][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 501.647552][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 501.757627][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 501.867392][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 501.977595][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 502.089774][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 502.197415][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 502.307606][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 506.387590][ T8593] net_ratelimit: 36 callbacks suppressed [ 506.387617][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 506.497604][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 506.607530][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 506.717769][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 506.827443][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 506.937467][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 507.047831][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 507.157523][ T8572] bond9: (slave dummy0): failed to get link speed/duplex [ 507.267664][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 507.377737][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 508.007305][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 511.449774][ T8571] net_ratelimit: 36 callbacks suppressed [ 511.449799][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 511.557596][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 511.667514][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 511.777614][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 511.887485][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 511.997559][ T8571] bond9: (slave dummy0): failed to get link speed/duplex [ 512.107562][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 512.217513][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 512.327888][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 512.437682][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 515.841112][T20271] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3552'. [ 515.978917][T20279] netlink: 'syz.1.3551': attribute type 6 has an invalid length. [ 516.252855][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.283627][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.283763][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.283882][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.283998][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.284114][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.284234][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.284360][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.285729][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 516.517456][T14789] net_ratelimit: 36 callbacks suppressed [ 516.517480][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 516.630573][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 516.738244][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 516.848288][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 516.957667][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 517.069140][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 517.177887][ T8593] bond9: (slave dummy0): failed to get link speed/duplex [ 517.308056][ T8581] bond9: (slave dummy0): failed to get link speed/duplex [ 517.417223][T14789] bond9: (slave dummy0): failed to get link speed/duplex [ 517.470124][T20328] ip_tables: iptables: counters copy to user failed while replacing table [ 517.771610][T20344] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 518.302229][T20368] bond5: (slave syz_tun): Removing an active aggregator [ 518.302877][T20368] bond5: (slave syz_tun): Releasing backup interface [ 518.352161][T20368] bond0: (slave dummy0): Releasing backup interface [ 518.381676][T20368] bridge_slave_0: left allmulticast mode [ 518.381704][T20368] bridge_slave_0: left promiscuous mode [ 518.381937][T20368] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.419641][T20368] bridge_slave_1: left allmulticast mode [ 518.419669][T20368] bridge_slave_1: left promiscuous mode [ 518.419942][T20368] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.467713][T20368] bond0: (slave bond_slave_0): Releasing backup interface [ 518.496409][T20368] bond0: (slave bond_slave_1): Releasing backup interface [ 518.519888][T20368] team0: Port device team_slave_0 removed [ 518.539775][T20368] team0: Port device team_slave_1 removed [ 518.544172][T20368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.544207][T20368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.569466][T20368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.569489][T20368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.618217][T20370] team0: Port device xfrm0 added [ 518.656096][T20373] netlink: 'syz.3.3583': attribute type 1 has an invalid length. [ 518.721848][T20373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.769825][T20375] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 518.796749][T20373] bond1: entered promiscuous mode [ 518.796777][T20373] bond1: entered allmulticast mode [ 519.664370][T20419] ipvlan2: entered allmulticast mode [ 519.664396][T20419] virt_wifi0: entered allmulticast mode [ 519.666165][T20419] batman_adv: batadv0: Adding interface: ipvlan2 [ 519.666181][T20419] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.666215][T20419] batman_adv: batadv0: Interface activated: ipvlan2 [ 519.988816][T20428] block nbd0: Unsupported socket: should be TCP or UNIX. [ 520.356370][T20438] veth5: entered allmulticast mode [ 520.398904][T20438] bond2: (slave veth5): Enslaving as an active interface with an up link [ 520.423174][T20449] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 520.891120][T20463] __nla_validate_parse: 34 callbacks suppressed [ 520.891142][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 521.060614][T20461] IPv6: Can't replace route, no match found [ 521.531314][ T8586] net_ratelimit: 33 callbacks suppressed [ 521.531337][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 521.637836][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 521.827285][ T8580] bond9: (slave dummy0): failed to get link speed/duplex [ 521.937575][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 522.047567][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 522.158778][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 522.334285][T20534] geneve2: entered promiscuous mode [ 522.366557][T20542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3627'. [ 522.447415][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 522.555140][T20556] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3630'. [ 522.556957][T20554] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3630'. [ 522.561201][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 522.667311][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 522.778394][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 523.326775][T20586] xt_CT: No such helper "syz0" [ 523.961336][T20627] syzkaller1: entered promiscuous mode [ 523.961359][T20627] syzkaller1: entered allmulticast mode [ 524.484106][T20659] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 524.719685][T20669] netlink: 'syz.2.3655': attribute type 30 has an invalid length. [ 524.721363][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3655'. [ 524.870368][T20679] siw: device registration error -23 [ 524.875578][T20680] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 524.875634][T20680] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 524.875685][T20680] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 525.071397][T20687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3660'. [ 525.302630][T20695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3663'. [ 525.324861][T20699] Bluetooth: MGMT ver 1.23 [ 525.791827][T20695] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 525.815969][T20695] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 525.984537][T20726] bridge4: entered promiscuous mode [ 525.984561][T20726] bridge4: entered allmulticast mode [ 526.010057][T20726] team0: Port device bridge4 added [ 526.044664][T20726] bridge0: port 3(team0) entered blocking state [ 526.045358][T20726] bridge0: port 3(team0) entered disabled state [ 526.045498][T20726] team0: entered allmulticast mode [ 526.045514][T20726] team_slave_1: entered allmulticast mode [ 526.082971][T20726] team0: entered promiscuous mode [ 526.082992][T20726] team_slave_1: entered promiscuous mode [ 526.086595][T20726] bridge0: port 3(team0) entered blocking state [ 526.086720][T20726] bridge0: port 3(team0) entered forwarding state [ 526.109323][T20730] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3673'. [ 526.180999][T20734] syzkaller0: entered promiscuous mode [ 526.181024][T20734] syzkaller0: entered allmulticast mode [ 526.260051][T20734] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 526.273769][T20734] netlink: 'syz.2.3675': attribute type 2 has an invalid length. [ 526.411543][T20743] netlink: 'syz.4.3676': attribute type 2 has an invalid length. [ 526.411566][T20743] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3676'. [ 526.681277][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 526.722721][T20758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.738311][T20758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.899954][T20758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.904262][T20758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.939820][T20758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.939845][T20758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.965286][T20758] net_ratelimit: 32 callbacks suppressed [ 526.965306][T20758] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 527.232160][T20773] bridge_slave_0: left allmulticast mode [ 527.232206][T20773] bridge_slave_0: left promiscuous mode [ 527.232481][T20773] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.279621][T20773] bridge_slave_1: left allmulticast mode [ 527.279653][T20773] bridge_slave_1: left promiscuous mode [ 527.279911][T20773] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.311140][T20792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3684'. [ 527.404258][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3683'. [ 527.426206][T20773] bond0: (slave bond_slave_0): Releasing backup interface [ 527.511482][T20773] bond0: (slave bond_slave_1): Releasing backup interface [ 527.572146][T20773] team0: Port device team_slave_0 removed [ 527.636721][T20773] team0: Port device team_slave_1 removed [ 527.649609][T20773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.649631][T20773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.678074][T20773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.678099][T20773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.715778][T20773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 527.847568][T20793] syzkaller0: entered promiscuous mode [ 527.847594][T20793] syzkaller0: entered allmulticast mode [ 527.912592][T20811] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 529.979693][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 530.067224][T20844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3693'. [ 530.087639][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 530.120456][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 530.193363][T20848] netlink: 'syz.2.3697': attribute type 30 has an invalid length. [ 530.199037][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 530.263252][T20852] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3698'. [ 530.428908][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 530.537775][ T8589] bond9: (slave dummy0): failed to get link speed/duplex [ 530.653494][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 530.757561][ T8589] bond9: (slave dummy0): failed to get link speed/duplex [ 530.869368][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 531.845652][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 531.957504][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 531.990463][ T12] net_ratelimit: 11 callbacks suppressed [ 531.990485][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 532.098252][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 532.099651][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3714'. [ 532.137582][T20922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 532.189598][T20923] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3717'. [ 532.208256][T20923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.228002][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 532.337911][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 532.449117][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 532.558960][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 532.840304][T20928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.947728][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 533.108684][T20928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.307681][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 533.417578][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 533.525427][T20928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.978371][T20928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.050227][ T30] audit: type=1804 audit(1793805021.508:20): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3732" name="/newroot/118/cgroup.controllers" dev="tmpfs" ino=615 res=1 errno=0 [ 534.050283][ T30] audit: type=1800 audit(1793805021.508:21): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3732" name="cgroup.controllers" dev="tmpfs" ino=615 res=0 errno=-22 [ 534.130531][ T30] audit: type=1804 audit(1793805021.588:22): pid=20979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3732" name="/newroot/118/cgroup.controllers" dev="tmpfs" ino=615 res=1 errno=0 [ 534.224174][T14790] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.259362][T20989] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3734'. [ 534.319463][T14790] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.328652][T14790] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.340080][T14790] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.951236][T21016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3735'. [ 535.333889][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3745'. [ 535.335171][T21036] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3745'. [ 535.359225][T21036] 0·: renamed from hsr0 [ 535.378183][T21036] 0·: entered allmulticast mode [ 535.378203][T21036] hsr_slave_0: entered allmulticast mode [ 535.378221][T21036] hsr_slave_1: entered allmulticast mode [ 535.653711][T21046] IPVS: Scheduler module ip_vs_mh not found [ 536.275898][T21078] netlink: 4337 bytes leftover after parsing attributes in process `syz.2.3756'. [ 537.084222][T14790] net_ratelimit: 25 callbacks suppressed [ 537.084244][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 537.188713][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 537.205623][T21114] __nla_validate_parse: 4 callbacks suppressed [ 537.205644][T21114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3766'. [ 537.298641][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 537.408183][ T8589] bond9: (slave dummy0): failed to get link speed/duplex [ 537.517653][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 537.627726][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 537.740038][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 537.849569][ T8589] bond9: (slave dummy0): failed to get link speed/duplex [ 537.957625][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 538.067745][ T8589] bond9: (slave dummy0): failed to get link speed/duplex [ 538.395186][T21149] netlink: 'syz.4.3774': attribute type 2 has an invalid length. [ 539.081211][T21187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3785'. [ 539.118607][T21187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3785'. [ 539.118636][T21187] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3785'. [ 539.175420][T21191] vlan2: entered promiscuous mode [ 539.175446][T21191] bridge0: entered promiscuous mode [ 539.356484][T21199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3786'. [ 539.416140][T21199] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 539.436493][T21199] bond6 (unregistering): Released all slaves [ 539.649852][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 539.870347][T21224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3792'. [ 539.982415][T21235] netlink: 'syz.2.3793': attribute type 1 has an invalid length. [ 540.050155][T21235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.112032][T21239] bond6: (slave gretap1): making interface the new active one [ 540.114358][T21239] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 540.747805][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'. [ 540.986946][T21283] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 541.005735][T21287] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3803'. [ 541.090788][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3803'. [ 541.093130][T21290] netlink: 'syz.1.3803': attribute type 11 has an invalid length. [ 541.851556][T21323] bond2: entered promiscuous mode [ 541.851579][T21323] bond2: entered allmulticast mode [ 541.885928][T21327] bond3: entered promiscuous mode [ 541.885948][T21327] bond3: entered allmulticast mode [ 541.899708][ T30] audit: type=1800 audit(1793805029.358:23): pid=21326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3814" name="blkio.bfq.time_recursive" dev="tmpfs" ino=773 res=0 errno=-22 [ 542.018069][ T5649] block nbd3: Receive control failed (result -22) [ 542.022216][T21331] nbd3: detected capacity change from 0 to 32 [ 542.051585][ T25] block nbd3: Dead connection, failed to find a fallback [ 542.051630][ T25] block nbd3: shutting down sockets [ 542.051801][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.051919][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.053735][ T1729] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.053766][ T1729] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.054310][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.054339][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.054456][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.054484][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.054601][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.054628][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.054774][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.054801][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.054936][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.054961][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.055067][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.055102][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.055146][T21154] ldm_validate_partition_table(): Disk read failed. [ 542.055322][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.055349][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.055471][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.055498][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 542.055763][T21154] Dev nbd3: unable to read RDB block 0 [ 542.056385][T21154] nbd3: unable to read partition table [ 542.197520][ T8586] net_ratelimit: 28 callbacks suppressed [ 542.197587][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 542.266451][T21337] __nla_validate_parse: 6 callbacks suppressed [ 542.266515][T21337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3818'. [ 542.271581][T21154] ldm_validate_partition_table(): Disk read failed. [ 542.285802][T21154] Dev nbd3: unable to read RDB block 0 [ 542.294700][T21154] nbd3: unable to read partition table [ 542.308773][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 542.407960][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 542.513828][T21350] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3822'. [ 542.518782][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 542.565077][T21352] netlink: 'syz.4.3823': attribute type 1 has an invalid length. [ 542.635876][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3823'. [ 542.760954][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 542.768942][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 542.794161][T21365] syzkaller0: entered promiscuous mode [ 542.794184][T21365] syzkaller0: entered allmulticast mode [ 542.977587][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 543.087423][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 543.136916][T21380] ip6_vti0: entered promiscuous mode [ 543.136940][T21380] ip6_vti0: entered allmulticast mode [ 543.201544][ T12] bond9: (slave dummy0): failed to get link speed/duplex [ 543.307232][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 543.385802][T21390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3833'. [ 543.429277][ T8580] bond9: (slave dummy0): failed to get link speed/duplex [ 543.528204][T21392] bond_slave_0: entered promiscuous mode [ 543.528234][T21392] bond_slave_0: entered allmulticast mode [ 543.632850][T21395] syzkaller0: entered promiscuous mode [ 543.632874][T21395] syzkaller0: entered allmulticast mode [ 543.722274][T21397] netlink: 'syz.4.3836': attribute type 1 has an invalid length. [ 543.722295][T21397] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3836'. [ 543.896890][T21403] sctp: [Deprecated]: syz.0.3838 (pid 21403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.896890][T21403] Use struct sctp_sack_info instead [ 543.913457][T21403] sctp: [Deprecated]: syz.0.3838 (pid 21403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.913457][T21403] Use struct sctp_sack_info instead [ 544.507817][T21428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3846'. [ 544.562847][T21434] x_tables: duplicate underflow at hook 1 [ 544.581414][T21432] tap0: tun_chr_ioctl cmd 1074025672 [ 544.581436][T21432] tap0: ignored: set checksum enabled [ 545.236991][T21468] netlink: 'syz.3.3860': attribute type 1 has an invalid length. [ 545.577887][ T30] audit: type=1804 audit(1793805033.038:24): pid=21479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3864" name="/newroot/166/cgroup.controllers" dev="tmpfs" ino=866 res=1 errno=0 [ 545.578116][ T30] audit: type=1800 audit(1793805033.038:25): pid=21479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3864" name="cgroup.controllers" dev="tmpfs" ino=866 res=0 errno=-22 [ 546.000803][T21493] syzkaller1: entered promiscuous mode [ 546.000828][T21493] syzkaller1: entered allmulticast mode [ 546.164118][T21506] netlink: 'syz.2.3871': attribute type 1 has an invalid length. [ 546.164145][T21506] netlink: 'syz.2.3871': attribute type 2 has an invalid length. [ 546.261223][T21510] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3874'. [ 546.264094][T21510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3874'. [ 546.518052][T21517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3875'. [ 547.204037][T21543] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 547.224436][T21543] bond7 (unregistering): Released all slaves [ 547.327782][ T8583] net_ratelimit: 33 callbacks suppressed [ 547.327804][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 547.437597][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 547.547126][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 547.677666][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 547.715327][T21571] netlink: 'syz.1.3888': attribute type 21 has an invalid length. [ 547.715349][T21571] netlink: 'syz.1.3888': attribute type 22 has an invalid length. [ 547.715364][T21571] netlink: 'syz.1.3888': attribute type 23 has an invalid length. [ 547.715378][T21571] netlink: 'syz.1.3888': attribute type 25 has an invalid length. [ 547.715391][T21571] netlink: 'syz.1.3888': attribute type 26 has an invalid length. [ 547.715406][T21571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3888'. [ 547.787187][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 547.894526][T21575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3890'. [ 547.894566][T21575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3890'. [ 547.896076][T21575] syzkaller1: entered promiscuous mode [ 547.896096][T21575] syzkaller1: entered allmulticast mode [ 547.913168][T21575] syzkaller1: left promiscuous mode [ 547.913219][T21575] syzkaller1: left allmulticast mode [ 547.928190][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 548.077336][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 548.120184][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3892'. [ 548.168005][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3892'. [ 548.207948][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 548.317204][ T8583] bond9: (slave dummy0): failed to get link speed/duplex [ 548.346785][T21598] netlink: 'syz.3.3898': attribute type 1 has an invalid length. [ 548.448716][T21598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.449820][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 548.469500][T21608] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3899'. [ 548.560149][T21608] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3899'. [ 548.892222][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 548.895168][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 549.076203][T21635] netlink: 'syz.3.3906': attribute type 8 has an invalid length. [ 549.077988][T21636] netlink: 'syz.3.3906': attribute type 8 has an invalid length. [ 549.466166][T21647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3908'. [ 549.820761][T21660] FAULT_INJECTION: forcing a failure. [ 549.820761][T21660] name failslab, interval 1, probability 0, space 0, times 0 [ 549.820809][T21660] CPU: 0 UID: 0 PID: 21660 Comm: syz.3.3913 Not tainted syzkaller #0 PREEMPT(full) [ 549.820852][T21660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 549.820878][T21660] Call Trace: [ 549.820886][T21660] [ 549.820897][T21660] dump_stack_lvl+0xe8/0x150 [ 549.820940][T21660] should_fail_ex+0x3eb/0x540 [ 549.820973][T21660] should_failslab+0xa8/0x100 [ 549.821009][T21660] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 549.821041][T21660] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 549.821070][T21660] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 549.821104][T21660] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 549.821136][T21660] krealloc_node_align_noprof+0x19a/0x390 [ 549.821165][T21660] ? rcu_is_watching+0x16/0xb0 [ 549.821204][T21660] kvrealloc_node_align_noprof+0x7b/0xf0 [ 549.821237][T21660] add_expr+0x2fd/0x6e0 [ 549.821262][T21660] ? __kvmalloc_node_noprof+0x340/0x820 [ 549.821298][T21660] ? bpf_init_scev+0x167/0x460 [ 549.821330][T21660] bpf_init_scev+0x1a2/0x460 [ 549.821358][T21660] bpf_check+0x2fd8/0x34e0 [ 549.821394][T21660] ? ktime_get_with_offset+0x93/0x2d0 [ 549.821426][T21660] ? ktime_get_with_offset+0x93/0x2d0 [ 549.821458][T21660] ? __pfx_bpf_check+0x10/0x10 [ 549.821485][T21660] ? bpf_obj_name_cpy+0x194/0x1e0 [ 549.821518][T21660] bpf_prog_load+0x14da/0x1c60 [ 549.821555][T21660] ? __pfx_bpf_prog_load+0x10/0x10 [ 549.821596][T21660] ? __might_fault+0xaf/0x130 [ 549.821626][T21660] __sys_bpf+0xd86/0xe00 [ 549.821657][T21660] ? __pfx___sys_bpf+0x10/0x10 [ 549.821692][T21660] ? __fget_files+0x2a/0x420 [ 549.821738][T21660] ? ksys_write+0x242/0x270 [ 549.821769][T21660] ? __pfx_ksys_write+0x10/0x10 [ 549.821817][T21660] __x64_sys_bpf+0xba/0xd0 [ 549.821851][T21660] do_syscall_64+0x166/0x520 [ 549.821877][T21660] ? trace_irq_disable+0x3b/0x140 [ 549.821905][T21660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.821927][T21660] ? clear_bhb_loop+0x70/0xc0 [ 549.821954][T21660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.821982][T21660] RIP: 0033:0x7fdfc079fb19 [ 549.822003][T21660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.822039][T21660] RSP: 002b:00007fdfc15bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.822061][T21660] RAX: ffffffffffffffda RBX: 00007fdfc0a25fa0 RCX: 00007fdfc079fb19 [ 549.822076][T21660] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 549.822089][T21660] RBP: 00007fdfc15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 549.822102][T21660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.822114][T21660] R13: 00007fdfc0a26038 R14: 00007fdfc0a25fa0 R15: 00007ffd94ae4d58 [ 549.822147][T21660] [ 550.228588][T21655] bridge0: port 3(team0) entered disabled state [ 550.228881][T21655] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.229531][T21655] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.431016][T21655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.452724][T21655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.556153][T21655] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 550.597736][T21670] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 550.598575][T21676] vlan1: entered promiscuous mode [ 550.598728][T21676] vlan1: entered allmulticast mode [ 550.598744][T21676] veth0_vlan: entered allmulticast mode [ 550.615544][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.622204][ T8582] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.622431][ T8582] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.622533][ T8582] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.873088][T21693] [ 550.875482][T21693] ====================================================== [ 550.882523][T21693] WARNING: possible circular locking dependency detected [ 550.889579][T21693] syzkaller #0 Not tainted [ 550.894001][T21693] ------------------------------------------------------ [ 550.901028][T21693] syz.1.3919/21693 is trying to acquire lock: [ 550.907103][T21693] ffff88801cec4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 550.917682][T21693] [ 550.917682][T21693] but task is already holding lock: [ 550.925065][T21693] ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 550.934658][T21693] [ 550.934658][T21693] which lock already depends on the new lock. [ 550.934658][T21693] [ 550.945082][T21693] [ 550.945082][T21693] the existing dependency chain (in reverse order) is: [ 550.954119][T21693] [ 550.954119][T21693] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 550.962133][T21693] down_write+0x91/0x200 [ 550.966939][T21693] kernfs_add_one+0x41/0x510 [ 550.972064][T21693] kernfs_create_dir_ns+0x18c/0x220 [ 550.977818][T21693] internal_create_group+0x440/0x1180 [ 550.983741][T21693] cpuhp_invoke_callback+0x434/0x810 [ 550.989572][T21693] cpuhp_issue_call+0x3f0/0x750 [ 550.994963][T21693] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 551.001573][T21693] __cpuhp_setup_state+0x3f/0x60 [ 551.007080][T21693] do_one_initcall+0x250/0x870 [ 551.012389][T21693] do_initcall_level+0x10a/0x1a0 [ 551.017877][T21693] do_initcalls+0x59/0xa0 [ 551.022779][T21693] kernel_init_freeable+0x29d/0x3e0 [ 551.028537][T21693] kernel_init+0x22/0x1d0 [ 551.033422][T21693] ret_from_fork+0x514/0xb70 [ 551.038549][T21693] ret_from_fork_asm+0x1a/0x30 [ 551.043870][T21693] [ 551.043870][T21693] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 551.051708][T21693] [ 551.051708][T21693] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 551.059492][T21693] cpus_read_lock+0x3d/0x160 [ 551.064639][T21693] static_key_slow_inc+0x12/0x30 [ 551.070217][T21693] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 551.076483][T21693] nbd_genl_foreach_sock+0x265/0x450 [ 551.082308][T21693] nbd_genl_reconfigure+0xbbb/0x1040 [ 551.088142][T21693] genl_family_rcv_msg_doit+0x233/0x340 [ 551.094239][T21693] genl_rcv_msg+0x614/0x7a0 [ 551.099289][T21693] netlink_rcv_skb+0x226/0x4a0 [ 551.104597][T21693] genl_rcv+0x28/0x40 [ 551.109114][T21693] netlink_unicast+0x8ef/0xa80 [ 551.114422][T21693] netlink_sendmsg+0x7f0/0xb20 [ 551.119746][T21693] sock_sendmsg_nosec+0x14e/0x190 [ 551.125333][T21693] ____sys_sendmsg+0x54e/0x850 [ 551.130634][T21693] ___sys_sendmsg+0x2a5/0x360 [ 551.135873][T21693] __x64_sys_sendmsg+0x1b1/0x290 [ 551.141355][T21693] do_syscall_64+0x166/0x520 [ 551.146495][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.152946][T21693] [ 551.152946][T21693] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 551.160616][T21693] __mutex_lock+0x197/0x15a0 [ 551.165765][T21693] nbd_queue_rq+0x373/0xff0 [ 551.170841][T21693] blk_mq_dispatch_rq_list+0x499/0x1990 [ 551.176987][T21693] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 551.183885][T21693] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 551.190424][T21693] blk_mq_run_work_fn+0x167/0x2f0 [ 551.195998][T21693] process_scheduled_works+0xc3d/0x1630 [ 551.202088][T21693] worker_thread+0xa47/0xfb0 [ 551.207226][T21693] kthread+0x38b/0x480 [ 551.211843][T21693] ret_from_fork+0x514/0xb70 [ 551.216970][T21693] ret_from_fork_asm+0x1a/0x30 [ 551.222282][T21693] [ 551.222282][T21693] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 551.229508][T21693] __mutex_lock+0x197/0x15a0 [ 551.234629][T21693] nbd_queue_rq+0xc1/0xff0 [ 551.239580][T21693] blk_mq_dispatch_rq_list+0x499/0x1990 [ 551.245665][T21693] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 551.252527][T21693] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 551.259041][T21693] blk_mq_run_work_fn+0x167/0x2f0 [ 551.264649][T21693] process_scheduled_works+0xc3d/0x1630 [ 551.270738][T21693] worker_thread+0xa47/0xfb0 [ 551.275883][T21693] kthread+0x38b/0x480 [ 551.280508][T21693] ret_from_fork+0x514/0xb70 [ 551.285643][T21693] ret_from_fork_asm+0x1a/0x30 [ 551.290956][T21693] [ 551.290956][T21693] -> #4 (set->srcu){.+.+}-{0:0}: [ 551.298103][T21693] __synchronize_srcu+0xca/0x2f0 [ 551.303588][T21693] elevator_switch+0x1e8/0x7b0 [ 551.308904][T21693] elevator_change+0x2fa/0x480 [ 551.314215][T21693] elevator_set_default+0x375/0x440 [ 551.319959][T21693] blk_register_queue+0x404/0x4f0 [ 551.325520][T21693] __add_disk+0x6b8/0xdb0 [ 551.330383][T21693] add_disk_fwnode+0x100/0x3a0 [ 551.335687][T21693] nbd_dev_add+0x733/0xb60 [ 551.340652][T21693] nbd_init+0x168/0x1f0 [ 551.345372][T21693] do_one_initcall+0x250/0x870 [ 551.350671][T21693] do_initcall_level+0x10a/0x1a0 [ 551.356159][T21693] do_initcalls+0x59/0xa0 [ 551.361024][T21693] kernel_init_freeable+0x29d/0x3e0 [ 551.366814][T21693] kernel_init+0x22/0x1d0 [ 551.371697][T21693] ret_from_fork+0x514/0xb70 [ 551.376839][T21693] ret_from_fork_asm+0x1a/0x30 [ 551.382164][T21693] [ 551.382164][T21693] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 551.390087][T21693] __mutex_lock+0x197/0x15a0 [ 551.395221][T21693] elevator_change+0x1af/0x480 [ 551.400521][T21693] elevator_set_none+0xb5/0x140 [ 551.405912][T21693] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 551.412262][T21693] nbd_start_device+0x189/0xb30 [ 551.417642][T21693] nbd_genl_connect+0x167d/0x1cd0 [ 551.423221][T21693] genl_family_rcv_msg_doit+0x233/0x340 [ 551.429299][T21693] genl_rcv_msg+0x614/0x7a0 [ 551.434341][T21693] netlink_rcv_skb+0x226/0x4a0 [ 551.439663][T21693] genl_rcv+0x28/0x40 [ 551.444235][T21693] netlink_unicast+0x8ef/0xa80 [ 551.449534][T21693] netlink_sendmsg+0x7f0/0xb20 [ 551.454857][T21693] sock_sendmsg_nosec+0x14e/0x190 [ 551.460444][T21693] ____sys_sendmsg+0x54e/0x850 [ 551.465746][T21693] ___sys_sendmsg+0x2a5/0x360 [ 551.470957][T21693] __x64_sys_sendmsg+0x1b1/0x290 [ 551.476429][T21693] do_syscall_64+0x166/0x520 [ 551.481559][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.487988][T21693] [ 551.487988][T21693] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 551.496604][T21693] blk_alloc_queue+0x544/0x690 [ 551.501916][T21693] __blk_mq_alloc_disk+0x194/0x390 [ 551.507559][T21693] nbd_dev_add+0x494/0xb60 [ 551.512507][T21693] nbd_init+0x168/0x1f0 [ 551.517204][T21693] do_one_initcall+0x250/0x870 [ 551.522494][T21693] do_initcall_level+0x10a/0x1a0 [ 551.527993][T21693] do_initcalls+0x59/0xa0 [ 551.532865][T21693] kernel_init_freeable+0x29d/0x3e0 [ 551.538604][T21693] kernel_init+0x22/0x1d0 [ 551.543472][T21693] ret_from_fork+0x514/0xb70 [ 551.548594][T21693] ret_from_fork_asm+0x1a/0x30 [ 551.553890][T21693] [ 551.553890][T21693] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 551.561106][T21693] fs_reclaim_acquire+0x71/0x100 [ 551.566581][T21693] kmem_cache_alloc_noprof+0x5f/0x600 [ 551.572490][T21693] __kernfs_iattrs+0xdd/0x380 [ 551.577708][T21693] kernfs_iop_setattr+0xe6/0x3f0 [ 551.583198][T21693] notify_change+0xbba/0xea0 [ 551.588343][T21693] do_truncate+0x1c2/0x250 [ 551.593346][T21693] path_openat+0x18a6/0x20f0 [ 551.598478][T21693] do_file_open+0x23e/0x4a0 [ 551.603518][T21693] do_sys_openat2+0x115/0x200 [ 551.608754][T21693] __x64_sys_openat+0x138/0x170 [ 551.614164][T21693] do_syscall_64+0x166/0x520 [ 551.619305][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.625738][T21693] [ 551.625738][T21693] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 551.634291][T21693] __lock_acquire+0x164c/0x2de0 [ 551.639690][T21693] lock_acquire+0x115/0x350 [ 551.644750][T21693] down_write+0x91/0x200 [ 551.649535][T21693] kernfs_unlink_sibling+0x6d/0x240 [ 551.655284][T21693] kernfs_rename_ns+0x575/0x9e0 [ 551.660673][T21693] sysfs_rename_link_ns+0x16e/0x1b0 [ 551.666420][T21693] device_rename+0x110/0x210 [ 551.671550][T21693] cfg80211_dev_rename+0x16f/0x250 [ 551.677205][T21693] nl80211_set_wiphy+0x63f/0x3430 [ 551.682775][T21693] genl_family_rcv_msg_doit+0x233/0x340 [ 551.688858][T21693] genl_rcv_msg+0x614/0x7a0 [ 551.693897][T21693] netlink_rcv_skb+0x226/0x4a0 [ 551.699200][T21693] genl_rcv+0x28/0x40 [ 551.703711][T21693] netlink_unicast+0x8ef/0xa80 [ 551.709015][T21693] netlink_sendmsg+0x7f0/0xb20 [ 551.714339][T21693] sock_sendmsg_nosec+0x14e/0x190 [ 551.719905][T21693] ____sys_sendmsg+0x54e/0x850 [ 551.725203][T21693] ___sys_sendmsg+0x2a5/0x360 [ 551.730411][T21693] __x64_sys_sendmsg+0x1b1/0x290 [ 551.735888][T21693] do_syscall_64+0x166/0x520 [ 551.741019][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.747533][T21693] [ 551.747533][T21693] other info that might help us debug this: [ 551.747533][T21693] [ 551.757775][T21693] Chain exists of: [ 551.757775][T21693] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 551.757775][T21693] [ 551.772238][T21693] Possible unsafe locking scenario: [ 551.772238][T21693] [ 551.779726][T21693] CPU0 CPU1 [ 551.785106][T21693] ---- ---- [ 551.790473][T21693] lock(&root->kernfs_rwsem); [ 551.795250][T21693] lock(cpuhp_state_mutex); [ 551.802371][T21693] lock(&root->kernfs_rwsem); [ 551.809665][T21693] lock(&root->kernfs_iattr_rwsem); [ 551.814986][T21693] [ 551.814986][T21693] *** DEADLOCK *** [ 551.814986][T21693] [ 551.823136][T21693] locks held by syz.1.3919/21693: 4, last CPU#0: [ 551.829465][T21693] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 551.837714][T21693] #1: ffffffff916d45c0 (cfg80211_mutex){+.+.}-{4:4}, at: nl80211_set_wiphy+0xaa/0x3430 [ 551.847478][T21693] #2: ffff888052300800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_set_wiphy+0x4e8/0x3430 [ 551.857505][T21693] #3: ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 551.867545][T21693] [ 551.867545][T21693] stack backtrace: [ 551.873446][T21693] CPU: 0 UID: 0 PID: 21693 Comm: syz.1.3919 Not tainted syzkaller #0 PREEMPT(full) [ 551.882830][T21693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 551.892905][T21693] Call Trace: [ 551.896219][T21693] [ 551.899161][T21693] dump_stack_lvl+0xe8/0x150 [ 551.903780][T21693] print_circular_bug+0x2e2/0x300 [ 551.908837][T21693] check_noncircular+0x12f/0x150 [ 551.913814][T21693] __lock_acquire+0x164c/0x2de0 [ 551.918713][T21693] ? __lock_acquire+0x747/0x2de0 [ 551.923678][T21693] ? __lock_acquire+0x747/0x2de0 [ 551.928644][T21693] lock_acquire+0x115/0x350 [ 551.933162][T21693] ? kernfs_unlink_sibling+0x6d/0x240 [ 551.938553][T21693] down_write+0x91/0x200 [ 551.942812][T21693] ? kernfs_unlink_sibling+0x6d/0x240 [ 551.948218][T21693] ? __pfx_down_write+0x10/0x10 [ 551.953086][T21693] ? kernfs_root+0x1c/0x230 [ 551.957613][T21693] ? kernfs_root+0x1c/0x230 [ 551.962160][T21693] ? kernfs_root+0x1c/0x230 [ 551.966705][T21693] ? kernfs_root+0x1ea/0x230 [ 551.971325][T21693] kernfs_unlink_sibling+0x6d/0x240 [ 551.976546][T21693] kernfs_rename_ns+0x575/0x9e0 [ 551.981418][T21693] sysfs_rename_link_ns+0x16e/0x1b0 [ 551.986660][T21693] device_rename+0x110/0x210 [ 551.991309][T21693] cfg80211_dev_rename+0x16f/0x250 [ 551.996469][T21693] nl80211_set_wiphy+0x63f/0x3430 [ 552.001524][T21693] ? lock_acquire+0x115/0x350 [ 552.006265][T21693] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 552.011754][T21693] ? nl80211_pre_doit+0x543/0xfa0 [ 552.016807][T21693] ? nl80211_pre_doit+0x86e/0xfa0 [ 552.021870][T21693] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 552.028234][T21693] genl_family_rcv_msg_doit+0x233/0x340 [ 552.033800][T21693] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 552.039901][T21693] ? bpf_lsm_capable+0x9/0x20 [ 552.044595][T21693] ? security_capable+0x7e/0x2c0 [ 552.049575][T21693] genl_rcv_msg+0x614/0x7a0 [ 552.054111][T21693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.059155][T21693] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 552.064539][T21693] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 552.070008][T21693] ? __pfx_nl80211_post_doit+0x10/0x10 [ 552.075521][T21693] netlink_rcv_skb+0x226/0x4a0 [ 552.080323][T21693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.085366][T21693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.090681][T21693] ? down_read+0x2b9/0x320 [ 552.095139][T21693] genl_rcv+0x28/0x40 [ 552.099148][T21693] netlink_unicast+0x8ef/0xa80 [ 552.103936][T21693] netlink_sendmsg+0x7f0/0xb20 [ 552.108720][T21693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.114033][T21693] ? aa_sock_msg_perm+0x144/0x210 [ 552.119073][T21693] ? apparmor_socket_sendmsg+0x98/0x360 [ 552.124641][T21693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.129942][T21693] sock_sendmsg_nosec+0x14e/0x190 [ 552.134990][T21693] ____sys_sendmsg+0x54e/0x850 [ 552.139778][T21693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.145085][T21693] ? import_iovec+0x73/0xa0 [ 552.149606][T21693] ___sys_sendmsg+0x2a5/0x360 [ 552.154304][T21693] ? __lock_acquire+0x747/0x2de0 [ 552.159292][T21693] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.164541][T21693] ? futex_wait+0x2a2/0x390 [ 552.169075][T21693] ? __fget_files+0x3a2/0x420 [ 552.173766][T21693] ? __fget_files+0x2a/0x420 [ 552.178388][T21693] __x64_sys_sendmsg+0x1b1/0x290 [ 552.183348][T21693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.188825][T21693] do_syscall_64+0x166/0x520 [ 552.193441][T21693] ? trace_irq_disable+0x3b/0x140 [ 552.198485][T21693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.204562][T21693] ? clear_bhb_loop+0x70/0xc0 [ 552.209256][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.215159][T21693] RIP: 0033:0x7f0bac19fb19 [ 552.219584][T21693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.239209][T21693] RSP: 002b:00007f0bad023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.247637][T21693] RAX: ffffffffffffffda RBX: 00007f0bac425fa0 RCX: 00007f0bac19fb19 [ 552.255635][T21693] RDX: 000000000600c800 RSI: 0000200000000480 RDI: 0000000000000006 [ 552.263621][T21693] RBP: 00007f0bac237b70 R08: 0000000000000000 R09: 0000000000000000 [ 552.271633][T21693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.279736][T21693] R13: 00007f0bac426038 R14: 00007f0bac425fa0 R15: 00007ffe0483bd58 [ 552.287733][T21693] [ 552.411504][T14790] net_ratelimit: 16 callbacks suppressed [ 552.411527][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 552.518233][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 552.627438][ T8580] bond9: (slave dummy0): failed to get link speed/duplex [ 552.747977][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 552.857286][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 552.967702][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 553.077187][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 553.187278][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 553.297527][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 553.407346][ T31] bond9: (slave dummy0): failed to get link speed/duplex [ 557.477967][ T8586] net_ratelimit: 36 callbacks suppressed [ 557.477991][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 557.587457][ T8582] bond9: (slave dummy0): failed to get link speed/duplex [ 557.697137][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 557.807121][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 557.917335][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 558.027246][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 558.137250][T14790] bond9: (slave dummy0): failed to get link speed/duplex [ 558.257206][ T8586] bond9: (slave dummy0): failed to get link speed/duplex [ 558.367496][ T3321] bond9: (slave dummy0): failed to get link speed/duplex [ 558.477521][ T8582] bond9: (slave dummy0): failed to get link speed/duplex