last executing test programs: 4.867877711s ago: executing program 3 (id=4588): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 4.348961039s ago: executing program 4 (id=4590): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)={0x28, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.204508877s ago: executing program 4 (id=4591): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300"], 0x76) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000080)={0x1, 0x80, 0x67, &(0x7f0000000000)=""/103}) 3.980084905s ago: executing program 3 (id=4593): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x298, r1, 0x822, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcbef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1aa}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x1}}}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x808}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc45}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x14}, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x298, r1, 0x822, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcbef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1aa}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x1}}}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x808}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc45}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x14}, 0x1) (async) 3.903993958s ago: executing program 1 (id=4594): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000007e7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) (async, rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c7, r1, 0x4}, 0x38) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0xf, 0x3fe, 0x4005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) (rerun: 32) 3.573285634s ago: executing program 2 (id=4596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="5600000011002914000602080000000000000400200000", 0x17) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x9234}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 3.572825489s ago: executing program 3 (id=4597): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xde, '\x00', r2, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x3}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x32, 0x1, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xc, 0x7, 0x7f}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r7, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0x44000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) 3.374869518s ago: executing program 2 (id=4598): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r2, 0x0, &(0x7f00000000c0)) write(0xca, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4a815}, 0x0) 3.282334931s ago: executing program 4 (id=4599): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000540)) ioctl(r2, 0x8914, &(0x7f0000000000)="7770616e3000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000040)="6c6f7770616e300000000000000000000100"/40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x8911, &(0x7f0000000000)="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") write$cgroup_int(r5, &(0x7f0000000040)=0x7, 0x12) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0xa2c7f0f8f6504e02, 0x5, 0xd5d1, 0x5, 0x1}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r10, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) bind$phonet(r9, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r8, 0x0, 0x20004180) sendmsg$802154_dgram(r7, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000080)={0x0}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 3.060316081s ago: executing program 1 (id=4600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x800fe, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x20, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x4, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0x2, 0x9}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0xfffffff1}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc801}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e819ddf15bb2597, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3a00, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.944849587s ago: executing program 0 (id=4601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000400)) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr=0x640100fe}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x8000) 2.833611697s ago: executing program 2 (id=4602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000500)={'bridge0\x00'}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1202086}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x6c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd0}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd4}}, 0x0) 2.832287215s ago: executing program 3 (id=4603): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001000)={{r0, &(0x7f0000000240)='GPL\x00', 0x640000, &(0x7f0000000280)={@_ha_fsid={[0x19, 0x7]}, {0x1, 0x6, 0x3, 0x8}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x3ac9e5ee}, 0x7, &(0x7f0000000f00)=[{0x3, 0x3, &(0x7f0000000400)='-/\'$!\x00', &(0x7f0000000480)="41b7613cf549f062edcb12d119a4ecf21ff9101df1f97990e6e8ab00254fc137a1c040aa95c25fca2f78535fb6a1b2b1148b7ed8ab185e246606a91be8b0146563420daff776d035e1ac3f9bb8080bf7e8ec8c153c6a2f8bb7f8c81d9f701104a00158e43084ccee05c6136e6f56dfff6e70e7d574caef7597195fe299c4456524072184525621ca125a7e39c67407a43892463f3703e75e33100b8cb2b4b82ba14915acec618bf82d8cbdf3feb20bf728bae67cecf187eab79a51b802a66c386ed32ed595db75c2fe0c17c11213eefd81ec8c9906b15c36e19326f0959966", 0xdf, 0x10}, {0x2, 0x6bea, &(0x7f0000000640)='\x00', &(0x7f0000000880)="18ba6e30420d61d42264ad8a5bd04f68bb0d7db40c71a30698147d81aede3a64104973b26083ad59243f01e99cd1d981a291f5d874be39f5cca0b376e5256c3127bb59108f17930966cff1ae5d8126641f8d812f987a44918d50b9156410ade92d5604ac", 0x64, 0x12}, {0x2, 0x80000001, &(0x7f0000000900)='[^^\x00', &(0x7f0000000940)="b7721d1936a57339074e8bac087b270eef0a6c3ae67141e4c8182a8311e6654fcbcade1ebc5cfb886d48c205352f1158e61a944419a8ff3cdfbbe7b9fc1025c5e3357b71f87cd814ed6fe03e44dd200b85324e76290d9486fce47f3280553e24369762beb7f7dd31d7520b1e9b554729320d32cbfb1204cf0072bc6c907159bc16b89e11e3d753b98e8518d26dedbfa16866840d109ac04055", 0x99, 0x20}, {0x2, 0xb2d0, &(0x7f0000000a00)='\x00', &(0x7f0000000a40)="88cec461631405e307c6d083cfd94a87ddc79fef4c744624", 0x18, 0x1a}, {0x1, 0x400, &(0x7f0000000a80)='GPL\x00', &(0x7f0000000bc0)="23a512ad2100b8b6c2882c59b2949ae6a3915cabb60983205d61202a22fedd5a937c4e71628a7c3d9dab1d55f0fe9f116bbe34bde6813c70c71e807f8021367bfad3f16407340eaa73", 0x49, 0x8}, {0x1, 0x8, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)="11c7b96b800d9a57006be78f9537f7863425a368e44290d88870403c6713bfc35987d6b9e784636e9b4a1deb08e9be8a06c3493d9f5dd51f6fbdc3299fc2c3ff24c863b82b3f3803aa25fc9a71a5", 0x4e, 0x2}, {0x2, 0x3, &(0x7f0000000d00)='\x00', &(0x7f0000000d40)="edb069a0cf837d3a39a9fffc4cf41d125005cd8246623437158f5ef55a115fccc36a5de439bc21c04f075cde8fd7030807e27766ef0324849df1b85e9c8c06905b2851793589ff4f4e58ff61861cdbf21000cca9a6536cd16001a1539461aefb4389725b62cb5178", 0x68, 0x8}]}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) ppoll(&(0x7f0000000140)=[{r2, 0x200}, {r1, 0x421}], 0x2, 0x0, 0x0, 0x0) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) (async) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001740)}], 0x1, 0x1) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000100003c"], 0x6a) (async) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000700)="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", 0xfdef}], 0x1}}], 0x1, 0x0) 2.396465254s ago: executing program 1 (id=4604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x12, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40810}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="018e000018000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB="9b3cad4db70bd357283f5c3746a2df1e41b829e868aedb0c48484b006c303714c2a0c19a0de200d72a5b12"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r6, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, r7, 0x25, 0x2, @val=@netkit={@void, @value=r8}}, 0x1c) 2.209993053s ago: executing program 0 (id=4605): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000300000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c00018005"], 0xbc}}, 0x0) 2.05335862s ago: executing program 4 (id=4606): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2aea9c400000746842e93017000000000000007a00"/31, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800a0001000000000000000000"], 0x40}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) unshare(0x2c060000) close(0x4) 2.00117282s ago: executing program 2 (id=4607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20}}]}, 0x24}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) close(r0) 1.677496542s ago: executing program 1 (id=4608): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="81454920f4355b30bdcac3903eea1ab1c967", 0x12}, {&(0x7f0000000100)="f19b4cfeaddd0a9327aac595a43dcc7a8529acc1318575", 0x17}, {&(0x7f0000001880)="d6e53f92715a3e0d76d37844c967dab58b012b9d4e4a9946469d94f363e1d8ee09b57f2851b6b0e1a940560dacf2d90b8f558385afb5a89fa6de574859bc08bc0e9ea023193263b2c5b5127d42b8b342acebc45f88516612e138bbcac1f463ef615ad0ce8a75cc989e58066795eb3950a614002b0d2f78bcaa17ff2bf8984608e3a32700bc5110b5c5585b2b5dfbdeb935e49f23284a8f4073f0f0fc8f1e415154c05ada8a55fd36b8888425e508724887568098b10d4c4b2aab605cd428df65ab854cbdd89ba423a3d7d958da165072b370b058ff2237a46309c45d7486f6aef62ced1a26e8b722ac43364a5b4b92624c330875bec057baf09bfaf32220253357800e1c6ec27753412890cc1b87857d5d0eb48bb01dbad137affde5ca0663a2cb215d787b7d98546ce209c62d5551e4debeedeabcb2f6e35a7c0f7a30e2e6e566bfcd271015e02ed85d54b071ce125f255c5c7d6785c8d77ca5aea2d229b283b80e4777e25eed22bd2f332bf7840290db736bf8310dbfc530d00938921ad6aed6642d511e487d351ae20a1b2defd2ba4c5a6d3777030524379ca1ab91ff939cbfa5a73396328aee9e4ce6180a75432962d8b9e850483ffaf345326e10658b9112957615fd2afc62e52e2fc5ebf479f1e7f1cf6db20ef7d4e16d9a6997c431013b1b741db1f0bd83a210e6cff09c31bb449b6aba95ac1163e4dec9abdd04a477d278645eff01f55456d41e2542b682b79619c4f6a4ce67c30d89c32e91832882872276a9fcfc4653bc03d4b15919d4f4afa78aba39ada927b671636cebb2606ea484f278472f3390542fb8a7d5221ab173a0efc637731ac252f94554cbbf3ce84464efced8a6933faaf4ea780aacdf3e84e3ac96c27ba434bf5123960ccf730b465a9bbcaee1ee690586ddb52a6c26650359eadd06c7e82414712a63d835abe159ed7d876adbb6cada4919e3634541408783053084fd446c265916a80d6d64a58333a7445d1ce0dd53faacc85a4ab532a612c1844476e7a679e55a275e32fc5c950ef18bbec2c3bd2d3c99f865757e67e6da3e9c6840313073930c76ed32ed857b9e75f40f92e2c9ec6804aeb4504c2bce5210166b4b4d1fffb630f34d211b2e3ce3d79c9248f20a9be6e29e45e1f6dcf2387b75cb33a0aa5d8061493750c8cb209cc2b0a2f0cf556becbbbfb87e14ada1adf9b1399fe9242c4e22dbc7fb5d723181bc5d88afc65cebe3c560db503d99f7f9f09feb9378caefa8d9b57e6d4eab5fe15c28135bcf1116c91851eb5eb451ca3344576fa5c548e514010d9711528c25d180faf2e6f5c08168229c32ea95d13eb66ae50c33b2337088eceb0d16c8fa4fcffbe78e7220029b5a840e2c0ffe4018ee2bd8511de110ad5c323fe330f88b96d463dfccc2ab01898401871731ed49b70245698fc3e7fb59cee72bf7f9113d0d8d0ed5cff32ecf7d5aab17eb315b505d3586c63c4f8dd60f1fd7151340e25fc044680d4167ae334e2f7c1ce7c713021f0b5089ab891cd3783650796277e332f767562d6689b643ba435051e5680b0c678a56575db354b434349899c45cf5e625060bf9b22ff43ff94b7364914ab2f48cf678602cef73d3e5ae1157e404d3c5bc6da2ec9c32e634cec35933ce5362fe52ea9b95d5bc8385827a3504034ccc58d5bcac8c87a23619779ebbd638b2c3c52c1497b86d0da948b9c7bced5c6fd2da352e84438ca0725d275a00f697ec544dddfc65bd6232a6df54bff091dea01b449ab4aadaba3f86e7968b115dab0a96fbe581b16aa6b5e6bf73b3e8d9bdc3124736358ab044458dc14572b24a71393a99c012bd93d3145f55289402b88550d6df830579e4e31c2de0d1bbe7315fc872887181c8ad84280e2819a856da4fe423a81010970e4c6f47490f112eb5eee1dec90d3504be6d97b92ad6c7b93d84d3ee87aadc7f66ea3f7d401c38e34cea1188c339351c7644004ff3f52a3ec186ac78eed763920aa81efa0ebac84c5739dae0c6fe38e36e203ddc44b52f0d9084971e839b159a3d85a512ee723e39ed8218f96d05cf6de52c70c762689a7983d29524f446e97120683469942b7f27983e9a08c9d326cd70d6046a620501107f64e698b42e2c2478193243bca86d10dcef92f1e678df0c197f80886cfb9799a96ffd96bbcd657ba3519c75682895501ac4529451fda11a97e3f678fd4a315dc0613a338a68bcfa4b05f316fbafada22fc88390efcdafddcb01c42cdb3c04facb615754095dd561956f2f2997ac1a2f6e0b3c2ddaab567926d2336aa018f73d25ae001eec561b0bd3b29c67378481dfa56fdf244cbc31a3bbb577168d5ff34df68ccd704808a1435edef3339d227146268899ae97fa28ec3d94c5f172", 0x698}], 0x3) 1.604368242s ago: executing program 2 (id=4609): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0xf9, 0xe, 0x100, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x40, 0x40, 0x2, 0x100}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv6_newaddrlabel={0x5c, 0x48, 0x400, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r1, 0x40}, [@IFAL_LABEL={0x8, 0x2, 0x9}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x5c}}, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e21, @multicast2}, 0x46, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_to_batadv\x00', 0x4, 0xe23, 0x400}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x63}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) 1.380807949s ago: executing program 3 (id=4610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf7d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1401, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf7d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1401, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004000) (async) 1.380485001s ago: executing program 4 (id=4611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x90, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000001000000f8ff00000000000008000000dc28567713e4431e850000009100000095000000000000004416f8da0cea7fffefbb7fdefb726daa72cfac569e1c0ad0ccbe3d94099360be1ae7645de514acb4cb7f4eddb1de0f6bd512bab269f61ae5fe4806d3e57aecd08b36d1ea20a5c9ffad26b99c289dabdccba3539fdeab857ba992ac9f3634636bb189d31d44a7f4c4e8da80643f85122bb7ec9386009b100c191ba1030f6b2d03653063da166d666e2fabd03e11cc26380cc32d818299aa2e6f1ec39fd74cfd0e78914eebf90cf620e8d7d364d7979d82a6"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 1.359217509s ago: executing program 0 (id=4612): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000100)=0x2, 0xfffffffffffffd47) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) sendto(r0, &(0x7f0000000300)="7840b1901e2a5b01e660d8e96524ebfe695cc127829c11611f568d6ef9ecc8325e5e4f12dff66eba02b4b06507e7b29f6e2bf9919b3cb41b2c0f92223031529509bda35f5f2004dd6f91bd12ab91b20003f6546a648194e342d341bb1e3401eaf6d444932f12f29f9259f6d41b30d976d42086726ae9472e20e700dd62f5e6447b5e8817013121ea1e6b32a2c060fd64d96717c660b23df7818308d4", 0x9c, 0x40, &(0x7f00000003c0)=@hci={0x1f, 0x4, 0x4}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503002c000000000004907800000000e000000100004e200018907804010000000000000000020000000000"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc000040}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x84) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf25060000000800040008000500000014000600fc010000000000000000000000000001050008000a00000008000500ac14140008000400000001000800040007000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc010}, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000100)=r8, 0x8) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f0000000100)=r6, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) 1.171790144s ago: executing program 1 (id=4613): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x9d88, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x1, 0x6}, {0x3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) 796.712734ms ago: executing program 0 (id=4614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007311330000000000851000000200000085000000c4000000950000000b0000009500a50500000000b2add82f26c64554b340461d9823fb9cc12107fc46e1c51d98bf2ab4b9e5bf27ba941c8a8063851c26552d8c723a116d949f84bb7d23ca967f7454db6f776c369af11a395bffe1d0551550f727554929c90e218c2530c72bb82423e5d95db6b37843665e56d1d713ca99257694be472d832f5b3d3bbf67f7d16652aab9eaad689234c431cb379034a2cf0ae1479b76b92dcaded89f51aa0db0d2584fe367a6cc72c070cde0e36d5396c19df729a97086447b02e29d1f9e7a0502"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 573.268625ms ago: executing program 2 (id=4615): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000100)) (async, rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x20020880) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002380)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, r8, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0xf43, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 315.802406ms ago: executing program 3 (id=4616): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a11800150004001401000000000000801000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000000)=@tcp6, 0x3}, 0x20) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="070000000200000000000000000000000000010017f49c860900000000000000d0c9356b0a998fbd75bcd5c0ddc4ceea4210005da0824d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000100"/28], 0x50) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 257.419622ms ago: executing program 0 (id=4617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYBLOB="d7a44d02e682955c354a9f18adaf71e3b130690b57ee1d2106d87551627bda4d4869600d84a13457a32ede360e413de7ec0c51f1d83304c59f0d79a2"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 256.945556ms ago: executing program 1 (id=4618): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001aca80c0000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@remote, @in=@broadcast, 0x4e20, 0x101, 0x4e20, 0x8, 0xa, 0x80, 0x80, 0x5e, r3, r4}, {0x2, 0x7e, 0x2fb, 0x7, 0xffff, 0x3, 0x4, 0x3}, {0x6, 0x10, 0x8000000000000001, 0x2}, 0x6, 0x6e6bbf, 0x0, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d7}, 0xa, @in6=@empty, 0x3500, 0x0, 0x1, 0x6f, 0x10, 0xc, 0x8}}, 0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0x5, 0x3, 0x4, 0x401, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@o_path={&(0x7f0000001640)='./file0\x00', 0x0, 0x4018, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x2, 0x5, 0x7, 0xffffffffffffffc0, 0x1}], &(0x7f0000000040)='GPL\x00', 0xa5f7, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0x3, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001580)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000016c0)=[r5, r6, 0xffffffffffffffff], &(0x7f0000001700)=[{0x1, 0x2, 0x5, 0xa}, {0x1, 0x1, 0x3, 0x2}, {0x4, 0x3, 0x10, 0xb}, {0x1, 0x3, 0x3}, {0x800, 0x4, 0x5, 0x1}, {0x1, 0x4, 0x0, 0x6}, {0x0, 0x3, 0x8, 0x8}], 0x10, 0x7}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='a', 0x1}], 0x1}, 0x240280d1) 35.244123ms ago: executing program 0 (id=4619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r5, r4, 0x0, 0x400000000000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000140)={0x29, 0x2, 0x2, 0x80, 0x0, [@private0]}, 0x18) 0s ago: executing program 4 (id=4620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) kernel console output (not intermixed with test programs): 318][T19300] syzkaller0: entered promiscuous mode [ 542.992347][T19300] syzkaller0: entered allmulticast mode [ 543.119758][T19302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3212'. [ 543.152810][T19309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3213'. [ 543.309492][T19313] Bluetooth: MGMT ver 1.23 [ 543.618478][T19313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3213'. [ 543.784593][T19317] syzkaller0: entered promiscuous mode [ 543.784621][T19317] syzkaller0: entered allmulticast mode [ 543.963714][ T53] Bluetooth: hci3: command tx timeout [ 543.980442][T19330] netlink: 'syz.3.3217': attribute type 1 has an invalid length. [ 543.984274][T19329] netlink: 'syz.0.3216': attribute type 4 has an invalid length. [ 544.220446][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'. [ 544.240094][T19332] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 544.266079][T19330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.497351][T19339] bond1: (slave geneve2): making interface the new active one [ 544.516934][T19339] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 544.619106][T19338] ip6erspan0: entered allmulticast mode [ 544.874493][T19357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3220'. [ 545.108424][T19222] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.124815][T19222] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.125000][T19222] bridge_slave_0: entered allmulticast mode [ 545.138166][T19222] bridge_slave_0: entered promiscuous mode [ 545.178722][T19222] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.178845][T19222] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.179014][T19222] bridge_slave_1: entered allmulticast mode [ 545.195456][T19222] bridge_slave_1: entered promiscuous mode [ 545.344478][T19026] net_ratelimit: 9 callbacks suppressed [ 545.344500][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 545.475714][T19222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.505973][T19222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.768731][T19222] team0: Port device team_slave_0 added [ 545.781905][T19387] netlink: Unknown NAT attribute (type=2049, max=9) [ 545.781947][T19387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.785332][T19222] team0: Port device team_slave_1 added [ 546.030071][T19222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.030091][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.030126][T19222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.041391][ T53] Bluetooth: hci3: command tx timeout [ 546.056002][T19222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.056022][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.056045][T19222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.164593][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 546.584894][T19222] hsr_slave_0: entered promiscuous mode [ 546.586082][T19222] hsr_slave_1: entered promiscuous mode [ 546.589408][T19222] debugfs: 'hsr0' already exists in 'hsr' [ 546.589432][T19222] Cannot create hsr debugfs directory [ 546.656111][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'. [ 546.656137][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'. [ 546.656160][T19405] netlink: 'syz.0.3229': attribute type 12 has an invalid length. [ 546.656173][T19405] netlink: 'syz.0.3229': attribute type 11 has an invalid length. [ 546.660869][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 546.744453][T19405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3229'. [ 546.753727][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 546.753753][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 546.753814][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 547.089230][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 547.515543][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 547.622474][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 547.623287][T19442] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3236'. [ 547.816781][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 547.921257][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 548.121255][ T53] Bluetooth: hci3: command tx timeout [ 548.527593][T19222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.719473][T19462] netlink: 'syz.3.3242': attribute type 2 has an invalid length. [ 548.804484][T19455] tipc: Started in network mode [ 548.804517][T19455] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 548.804771][T19455] tipc: Enabled bearer , priority 10 [ 548.805078][T19468] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 549.301085][T19222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.301123][T19222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.308029][T19484] netlink: 'syz.3.3245': attribute type 11 has an invalid length. [ 549.828072][T19222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.828109][T19222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.932701][T19498] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3247'. [ 549.962743][T19222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.962782][T19222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.007502][T13831] tipc: Node number set to 10136234 [ 550.193479][T19498] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 550.256818][T19507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3247'. [ 550.256846][T19507] bridge: RTM_NEWNEIGH with invalid ether address [ 550.299045][T19497] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002 [ 550.489803][T19025] net_ratelimit: 8 callbacks suppressed [ 550.489828][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 550.592294][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 550.710144][T19516] netlink: 'syz.4.3250': attribute type 7 has an invalid length. [ 550.710171][T19516] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3250'. [ 550.742301][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 550.915004][T19222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 550.942922][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.944816][T19222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 550.978849][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.990213][T19222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.035258][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.036172][T19222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.059276][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.151092][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 551.282440][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 551.389260][T19222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.402171][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 551.453115][T19222] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.491601][T19025] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.491721][T19025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.517618][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 551.570002][T19026] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.570102][T19026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.628254][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 551.760730][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 551.930679][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 552.041947][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 552.743727][T19576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3261'. [ 552.744901][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3261'. [ 552.747542][T19576] 8021q: VLANs not supported on vcan0 [ 552.748852][T19565] 8021q: VLANs not supported on vcan0 [ 552.767079][T19577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3263'. [ 553.268896][T19586] syzkaller0: entered promiscuous mode [ 553.268921][T19586] syzkaller0: entered allmulticast mode [ 553.607591][T19222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.766821][T19222] veth0_vlan: entered promiscuous mode [ 553.785621][T19222] veth1_vlan: entered promiscuous mode [ 553.872027][T19222] veth0_macvtap: entered promiscuous mode [ 553.896520][T19222] veth1_macvtap: entered promiscuous mode [ 553.977709][T19222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.031092][T19606] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3270'. [ 554.031118][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'. [ 554.073207][T19222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.152920][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'. [ 554.191321][T19610] bridge0: port 3(batadv1) entered blocking state [ 554.191592][T19610] bridge0: port 3(batadv1) entered disabled state [ 554.191893][T19610] batadv1: entered allmulticast mode [ 554.194181][T19610] batadv1: entered promiscuous mode [ 554.252869][T19026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.262181][T19022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.505428][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.505958][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.689131][T19027] batman_adv: batadv1: IGMP Querier appeared [ 554.689151][T19027] batman_adv: batadv1: MLD Querier appeared [ 554.888315][T19027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.888340][T19027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.962022][T19618] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 555.030271][T19027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.030295][T19027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.335610][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 555.500596][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'. [ 555.536731][T19641] net_ratelimit: 22 callbacks suppressed [ 555.536753][T19641] ip_tables: iptables: counters copy to user failed while replacing table [ 555.537299][T19640] ip_tables: iptables: counters copy to user failed while replacing table [ 555.911278][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 556.023648][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 556.085388][T19658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3285'. [ 556.085452][T19658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3285'. [ 556.186355][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 556.378139][T19655] netlink: 'syz.3.3282': attribute type 17 has an invalid length. [ 556.435994][T19680] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 556.436082][T19679] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 556.631551][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 556.812076][T19655] syz_tun: entered promiscuous mode [ 556.891474][T19655] syz_tun: left promiscuous mode [ 556.999204][T17203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.019736][T17203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.031217][T17203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.035010][T17203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.037769][T17203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.141365][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 557.267130][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 557.372655][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 557.488214][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 558.000011][T19711] bond2: entered promiscuous mode [ 558.000248][T19711] bond2: entered allmulticast mode [ 559.171243][T17203] Bluetooth: hci1: command tx timeout [ 559.687591][T19749] netlink: 'syz.3.3297': attribute type 1 has an invalid length. [ 559.734948][T19747] __nla_validate_parse: 16 callbacks suppressed [ 559.734973][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'. [ 559.739773][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'. [ 559.816250][T19747] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 560.057919][T19688] C speed is unknown, defaulting to 1000 [ 560.073039][T19688] lo speed is unknown, defaulting to 1000 [ 560.303316][T19732] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 560.581702][T19024] net_ratelimit: 18 callbacks suppressed [ 560.581726][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 560.699301][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 560.805275][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 560.911611][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 561.021946][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 561.241535][T17203] Bluetooth: hci1: command tx timeout [ 561.486414][T19688] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.489823][T19688] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.489995][T19688] bridge_slave_0: entered allmulticast mode [ 561.508238][T19688] bridge_slave_0: entered promiscuous mode [ 561.528717][T19688] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.533324][T19688] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.534467][T19688] bridge_slave_1: entered allmulticast mode [ 561.543578][T19688] bridge_slave_1: entered promiscuous mode [ 561.606396][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 561.833826][T19688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.869714][T19688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.983204][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 562.072781][T19688] team0: Port device team_slave_0 added [ 562.101759][T19688] team0: Port device team_slave_1 added [ 562.343031][T19688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.343051][T19688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.343075][T19688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.350442][T19688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.350462][T19688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.350484][T19688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.495936][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 562.716162][T19806] IPv6: sit1: Disabled Multicast RS [ 562.843397][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 563.004966][T19688] hsr_slave_0: entered promiscuous mode [ 563.014008][T19688] hsr_slave_1: entered promiscuous mode [ 563.018869][T19688] debugfs: 'hsr0' already exists in 'hsr' [ 563.018894][T19688] Cannot create hsr debugfs directory [ 563.137588][T19819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3314'. [ 563.256629][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.341354][T17203] Bluetooth: hci1: command tx timeout [ 563.490863][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 563.615264][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3317'. [ 563.869424][T19837] xt_nat: multiple ranges no longer supported [ 564.050030][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 564.063625][T19840] netlink: 'syz.0.3321': attribute type 4 has an invalid length. [ 564.114573][T19843] ip6t_hbh: unknown flags 38 [ 564.226048][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'. [ 564.488771][T19688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.488812][T19688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.792212][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3326'. [ 564.792252][T19856] netlink: 'syz.1.3326': attribute type 5 has an invalid length. [ 564.792267][T19856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3326'. [ 564.934792][T19863] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 564.935511][T19856] geneve2: entered promiscuous mode [ 564.935531][T19856] geneve2: entered allmulticast mode [ 564.944864][T19022] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 564.946663][T19026] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 564.946837][T19026] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 564.946867][T19026] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 565.202837][T19870] netlink: 'syz.3.3328': attribute type 11 has an invalid length. [ 565.238503][T19688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.238541][T19688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.360110][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'. [ 565.402371][T17203] Bluetooth: hci1: command tx timeout [ 565.585255][T19688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.585293][T19688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.714562][T19024] net_ratelimit: 3 callbacks suppressed [ 565.714588][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 565.784650][T19883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3331'. [ 566.010110][T19688] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.010147][T19688] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.012728][T19895] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3333'. [ 566.028298][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3334'. [ 566.103476][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 566.211351][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 566.321404][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 566.431827][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 566.541511][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 566.651351][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 566.761356][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 566.871204][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 566.981781][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 567.094057][T19907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3338'. [ 567.285043][T19913] bridge0: port 3(vlan2) entered blocking state [ 567.286039][T19913] bridge0: port 3(vlan2) entered disabled state [ 567.286902][T19913] vlan2: entered allmulticast mode [ 567.286921][T19913] geneve0: entered allmulticast mode [ 567.296325][T19913] vlan2: entered promiscuous mode [ 567.296347][T19913] geneve0: entered promiscuous mode [ 567.873915][T19688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.888776][T19688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.895978][T19688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.916365][T19688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.918621][T19688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 567.973165][T19688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.980374][T19688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 568.037543][T19688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.623865][T19688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.731860][T19688] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.765077][T19025] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.765196][T19025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.809907][T19022] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.810081][T19022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.197006][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3357'. [ 570.610451][T20007] netlink: 'syz.0.3359': attribute type 1 has an invalid length. [ 570.838289][T20007] bond2: entered promiscuous mode [ 570.839474][T20007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.906807][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3361'. [ 570.946035][T20011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.946444][T20011] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 570.952794][T20011] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 570.988888][T20011] bond2: (slave ip6gre1): making interface the new active one [ 570.988918][T20011] ip6gre1: entered promiscuous mode [ 570.998342][T20011] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 571.285310][T19026] net_ratelimit: 22 callbacks suppressed [ 571.285337][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 571.370203][ T30] audit: type=1800 audit(1790932101.112:7): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3363" name=0A dev="tmpfs" ino=252 res=0 errno=0 [ 571.396491][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 571.538040][T19688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.622426][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 571.813379][T19688] veth0_vlan: entered promiscuous mode [ 572.067339][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'. [ 572.085441][T19688] veth1_vlan: entered promiscuous mode [ 572.172595][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 572.289556][T19688] veth0_macvtap: entered promiscuous mode [ 572.323377][T19688] veth1_macvtap: entered promiscuous mode [ 572.342017][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 572.428108][T19688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.486627][T19688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.524806][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3372'. [ 572.531887][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 572.613246][T19022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.613296][T19022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.613329][T19022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.613361][T19022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.741881][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 572.872574][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 572.908057][T20051] sctp: [Deprecated]: syz.4.3374 (pid 20051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.908057][T20051] Use struct sctp_sack_info instead [ 573.122563][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.122585][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.122887][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 573.219926][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 573.294191][T20057] veth0_to_bond: entered allmulticast mode [ 573.385626][T19025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.385649][T19025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.406256][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 574.495185][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 574.808691][T20097] netlink: 'syz.2.3387': attribute type 3 has an invalid length. [ 574.808716][T20097] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3387'. [ 574.985859][T20098] netlink: 'syz.4.3388': attribute type 12 has an invalid length. [ 574.985888][T20098] netlink: 'syz.4.3388': attribute type 29 has an invalid length. [ 574.985902][T20098] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3388'. [ 574.985921][T20098] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 575.223440][T20106] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3390'. [ 575.385800][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 575.399020][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 575.825242][T20129] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 575.827159][T20129] syzkaller0: entered promiscuous mode [ 575.827183][T20129] syzkaller0: entered allmulticast mode [ 576.381311][T19024] net_ratelimit: 25 callbacks suppressed [ 576.381336][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 576.491805][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 576.604738][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 576.719960][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 576.823087][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 576.919132][T20163] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 576.930795][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 577.041201][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 577.151763][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 577.261256][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 577.799363][T20098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.741149][T20189] pim6reg: entered allmulticast mode [ 578.846217][T20189] pim6reg: left allmulticast mode [ 578.907455][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 579.299840][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3414'. [ 579.715585][T20229] 8021q: VLANs not supported on lo [ 580.055710][T20234] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3424'. [ 580.081912][T20236] sctp: [Deprecated]: syz.2.3423 (pid 20236) Use of int in maxseg socket option. [ 580.081912][T20236] Use struct sctp_assoc_value instead [ 580.427549][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3428'. [ 580.434515][T20241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3427'. [ 580.648461][T20250] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3429'. [ 580.648489][T20250] nbd: illegal input index 65508 [ 580.649004][T20251] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3429'. [ 580.649022][T20251] nbd: illegal input index 65508 [ 581.490840][T19025] net_ratelimit: 35 callbacks suppressed [ 581.490864][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 581.605259][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 581.724562][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 581.833139][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 581.942306][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 582.029548][T20311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3437'. [ 582.066427][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 582.106977][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 582.179524][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 582.298528][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 582.408968][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 582.522561][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 582.679602][T20345] syz_tun: entered allmulticast mode [ 583.151967][T20341] syz_tun: left allmulticast mode [ 584.357356][T20407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3449'. [ 584.965240][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 584.965269][T20417] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3452'. [ 584.965288][T20417] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3452'. [ 585.751276][T20448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3461'. [ 585.854193][T20446] bond3 (unregistering): Released all slaves [ 585.901192][T20458] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20001 [ 586.061747][T20463] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3460'. [ 586.302728][T20468] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3464'. [ 586.544074][T19025] net_ratelimit: 19 callbacks suppressed [ 586.544100][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 586.689953][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 586.794491][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 586.913274][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 587.023820][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 587.131781][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 587.245863][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 587.355830][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 587.452742][T20501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3474'. [ 587.461625][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 587.585003][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 587.601569][T20508] syz_tun: entered allmulticast mode [ 588.402181][T20535] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3485'. [ 590.064947][T20494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.636197][T20565] netlink: 'syz.0.3492': attribute type 2 has an invalid length. [ 590.636225][T20565] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3492'. [ 590.786182][T20548] syzkaller0: entered promiscuous mode [ 590.786426][T20548] syzkaller0: entered allmulticast mode [ 590.922164][T17203] Bluetooth: hci5: command 0x0406 tx timeout [ 595.638456][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3489'. [ 595.638678][T20564] syz_tun: entered promiscuous mode [ 595.638805][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'. [ 595.638824][T20568] syz_tun: left promiscuous mode [ 595.901186][T19027] net_ratelimit: 24 callbacks suppressed [ 595.901212][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 596.154283][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3499'. [ 596.222068][T20610] netlink: 5412 bytes leftover after parsing attributes in process `syz.4.3499'. [ 596.261583][T20610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3499'. [ 596.715386][T20614] team0: Cannot enslave team device to itself [ 596.801945][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 596.911366][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 597.051566][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 597.143379][T20634] Cannot find add_set index 0 as target [ 597.169618][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 597.272735][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 597.299861][T20637] netlink: 'syz.4.3509': attribute type 10 has an invalid length. [ 597.317559][T20637] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.318284][T20637] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.355426][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3509'. [ 597.373984][T20637] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.374129][T20637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.374477][T20637] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.374658][T20637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.416139][T20637] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 597.417452][T20638] bridge_slave_1: left allmulticast mode [ 597.417474][T20638] bridge_slave_1: left promiscuous mode [ 597.417925][T20638] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.454611][T20638] bridge_slave_0: left allmulticast mode [ 597.454639][T20638] bridge_slave_0: left promiscuous mode [ 597.454877][T20638] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.507088][T20638] bond0: (slave bridge0): Releasing backup interface [ 597.541324][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 597.651238][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 597.763641][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 597.881543][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 598.346027][T20645] syzkaller0: entered promiscuous mode [ 598.346052][T20645] syzkaller0: entered allmulticast mode [ 598.538309][T20648] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3512'. [ 598.748912][T20607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.749484][T20608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.753219][T20631] netlink: 'syz.2.3508': attribute type 11 has an invalid length. [ 598.753240][T20631] netlink: 'syz.2.3508': attribute type 11 has an invalid length. [ 598.753253][T20631] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3508'. [ 599.310028][T20664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3517'. [ 599.502737][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.505992][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.506992][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.507599][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.508074][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.509390][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.512783][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.524527][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.527657][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.534796][T20674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 599.628654][T20673] vcan0: tx address claim with broadcast sa [ 599.693341][T20673] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3519'. [ 599.693366][T20673] tc_dump_action: action bad kind [ 600.538316][T20697] block nbd0: Unsupported socket: should be TCP or UNIX. [ 600.828213][T20714] batman_adv: batadv0: Adding interface: veth0 [ 600.828246][T20714] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.828280][T20714] batman_adv: batadv0: Interface activated: veth0 [ 600.855826][T20714] __nla_validate_parse: 1 callbacks suppressed [ 600.855850][T20714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3532'. [ 600.855868][T20714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.855885][T20714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.883403][T20714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.883428][T20714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.899431][T20714] batman_adv: batadv0: Interface deactivated: veth0 [ 600.899456][T20714] batman_adv: batadv0: Removing interface: veth0 [ 601.061414][T19027] net_ratelimit: 26 callbacks suppressed [ 601.061436][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 601.164629][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 601.173149][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 601.661915][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 601.681537][T17203] Bluetooth: hci2: connection err: -111 [ 601.742479][T20732] lo: entered allmulticast mode [ 601.786966][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 601.892747][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 601.977160][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3539'. [ 601.977198][T20737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3539'. [ 602.071375][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.071615][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.071839][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.112130][T19025] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.121626][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 602.233416][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 602.341885][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 602.454140][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 602.565724][T20753] sctp: [Deprecated]: syz.1.3544 (pid 20753) Use of int in maxseg socket option. [ 602.565724][T20753] Use struct sctp_assoc_value instead [ 602.641175][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 603.021805][T20757] sctp: [Deprecated]: syz.4.3546 (pid 20757) Use of int in maxseg socket option. [ 603.021805][T20757] Use struct sctp_assoc_value instead [ 603.139894][T20771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3548'. [ 603.670316][T20791] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3553'. [ 603.889195][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 604.019370][T20784] team0 (unregistering): Port device team_slave_0 removed [ 604.053871][T20784] team0 (unregistering): Port device team_slave_1 removed [ 604.103863][T20807] Bluetooth: hci0: load_link_keys: expected 38428 bytes, got 28 bytes [ 604.192606][T20806] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 604.361764][T20806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3556'. [ 604.467851][T20806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.481894][T20814] syzkaller1: entered promiscuous mode [ 604.482114][T20814] syzkaller1: entered allmulticast mode [ 604.769730][T20827] x_tables: duplicate underflow at hook 1 [ 604.894805][T20831] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 604.918925][T20831] bond2 (unregistering): Released all slaves [ 604.999701][T20837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 605.293068][T20831] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 605.386282][T20831] bond2 (unregistering): Released all slaves [ 605.634453][T20859] netlink: 'syz.0.3569': attribute type 1 has an invalid length. [ 605.691953][T20831] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 605.766143][T20831] bond2 (unregistering): Released all slaves [ 605.803877][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 605.936460][T20853] can: request_module (can-proto-0) failed. [ 606.079111][T20866] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 606.104254][T20866] team0: Device vxcan1 is of different type [ 606.182804][T19027] net_ratelimit: 21 callbacks suppressed [ 606.182828][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 606.309951][T20870] siw: device registration error -23 [ 606.310896][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 606.434777][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 606.540775][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 606.653315][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 606.734314][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 606.734340][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 606.759417][T17203] Bluetooth: hci5: unexpected event 0x17 length: 7 > 6 [ 606.760021][T20879] netlink: 'syz.0.3573': attribute type 1 has an invalid length. [ 606.773850][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 606.830627][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 606.830658][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 606.881501][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 606.992097][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 607.100363][T20879] block nbd296: server does not support multiple connections per device. [ 607.101743][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 607.105846][T20879] block nbd296: shutting down sockets [ 607.145969][T20899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.976608][T20933] gtp0: entered promiscuous mode [ 607.976633][T20933] gtp0: entered allmulticast mode [ 607.994505][T20932] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3588'. [ 608.380294][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'. [ 608.447517][T20944] C speed is unknown, defaulting to 1000 [ 608.449096][T20944] lo speed is unknown, defaulting to 1000 [ 609.981425][T20891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.568085][T20972] xt_MASQUERADE: bad rangesize 2147483646 [ 610.593510][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 610.682680][T20981] xt_MASQUERADE: bad rangesize 2147483646 [ 610.788001][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'. [ 611.232329][T19023] net_ratelimit: 32 callbacks suppressed [ 611.232352][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 611.343180][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 611.452977][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 611.563807][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 611.683302][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 611.803780][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 611.916675][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 612.022639][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 612.069244][T21036] team0: No ports can be present during mode change [ 612.147424][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 612.256213][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 612.354175][T21044] syzkaller1: entered promiscuous mode [ 612.354200][T21044] syzkaller1: entered allmulticast mode [ 612.868294][T21066] netlink: 'syz.3.3618': attribute type 1 has an invalid length. [ 612.868319][T21066] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3618'. [ 612.868334][T21066] netlink: 'syz.3.3618': attribute type 1 has an invalid length. [ 614.171272][T21137] netlink: 'syz.2.3626': attribute type 49 has an invalid length. [ 614.408022][T21119] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 614.444610][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.626936][T21146] netlink: 'syz.2.3628': attribute type 4 has an invalid length. [ 615.119092][T21159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'. [ 615.205698][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'. [ 615.460555][T21170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3635'. [ 615.641713][T17203] Bluetooth: hci0: command 0x0406 tx timeout [ 615.676436][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 615.676543][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 615.902633][T21166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.281089][T19023] net_ratelimit: 27 callbacks suppressed [ 616.281112][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 616.284490][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 616.429631][T21198] sit2: entered promiscuous mode [ 616.429657][T21198] sit2: entered allmulticast mode [ 616.492517][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 616.493041][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3646'. [ 616.602986][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 616.883793][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'. [ 616.963687][T21225] netlink: 'syz.4.3653': attribute type 3 has an invalid length. [ 617.462030][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 617.477360][T21228] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 617.514523][T21228] bond2: (slave lo): Enslaving as an active interface with an up link [ 617.547126][T21228] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 617.572230][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 617.572544][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 617.593733][T21231] tipc: Enabling of bearer rejected, failed to enable media [ 617.707827][T21231] batman_adv: batadv0: Adding interface: syzkaller0 [ 617.707857][T21231] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.707889][T21231] batman_adv: batadv0: Interface activated: syzkaller0 [ 617.723658][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 617.747528][ T376] IPVS: starting estimator thread 0... [ 617.842399][T21247] IPVS: using max 26 ests per chain, 62400 per kthread [ 617.915497][T21236] syzkaller0: entered promiscuous mode [ 617.915523][T21236] syzkaller0: entered allmulticast mode [ 618.078145][T21256] netlink: 'syz.3.3658': attribute type 1 has an invalid length. [ 618.078169][T21256] __nla_validate_parse: 1 callbacks suppressed [ 618.078181][T21256] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3658'. [ 618.078196][T21256] NCSI netlink: No device for ifindex 0 [ 618.139420][T21251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.149282][T21229] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 618.279026][T21229] batman_adv: batadv0: Removing interface: syzkaller0 [ 618.395234][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 618.501354][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 618.689352][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 618.850146][T21270] gretap1: entered promiscuous mode [ 618.865260][T21270] batman_adv: batadv0: Adding interface: gretap1 [ 618.865280][T21270] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 618.865306][T21270] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 619.192421][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 619.192448][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3665'. [ 619.244695][T21281] netlink: 'syz.0.3665': attribute type 4 has an invalid length. [ 619.244719][T21281] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3665'. [ 619.244786][T21277] bond0: left promiscuous mode [ 619.244803][T21277] bridge1: left promiscuous mode [ 619.284502][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'. [ 619.588529][T21286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.701394][T21290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.818671][T21295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.026345][T21297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.082277][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3673'. [ 621.509269][T21326] batman_adv: batadv0: Adding interface: macvtap1 [ 621.509289][T21326] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.509313][T21326] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 621.565692][T19023] net_ratelimit: 18 callbacks suppressed [ 621.565716][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 621.587135][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 621.664446][T21346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3682'. [ 621.776842][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 621.812908][T21333] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 621.927362][T17203] Bluetooth: unknown link type 231 [ 621.927441][T17203] Bluetooth: hci5: connection err: -111 [ 622.070984][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 622.182833][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 622.518945][T21390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3685'. [ 622.591528][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 622.689195][T21393] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20002 [ 622.707644][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 622.821468][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 622.931460][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 623.073680][T21403] bridge_slave_0: left allmulticast mode [ 623.073707][T21403] bridge_slave_0: left promiscuous mode [ 623.073950][T21403] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.179567][T17203] Bluetooth: hci5: unexpected event for opcode 0x203d [ 623.209131][T21403] bridge_slave_1: left allmulticast mode [ 623.209172][T21403] bridge_slave_1: left promiscuous mode [ 623.209411][T21403] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.256738][T21403] bond0: (slave bond_slave_0): Releasing backup interface [ 623.316469][T21418] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.344658][T21403] bond0: (slave bond_slave_1): Releasing backup interface [ 623.376302][T21403] team0: Port device team_slave_0 removed [ 623.394306][T21403] team0: Port device team_slave_1 removed [ 623.395368][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.395391][T21403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.397361][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.397380][T21403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.400116][T21403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.475766][T21407] team0: Port device xfrm0 added [ 623.491876][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 623.532364][T21414] tipc: Started in network mode [ 623.532447][T21414] tipc: Node identity 0a6a2d18752a, cluster identity 4711 [ 623.532890][T21414] tipc: Enabled bearer , priority 0 [ 623.675854][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 623.778669][T21426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3695'. [ 624.141346][T21439] veth0: entered promiscuous mode [ 624.141621][T21439] veth0: left promiscuous mode [ 624.377459][T21440] netlink: 'syz.4.3699': attribute type 49 has an invalid length. [ 624.404608][T21453] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3701'. [ 624.411052][T21456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3701'. [ 624.482053][T21451] netlink: 'syz.4.3699': attribute type 49 has an invalid length. [ 624.686077][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.859066][T21451] ip6gretap0: entered promiscuous mode [ 624.859091][T21451] ip6gretap0: entered allmulticast mode [ 624.907943][T21103] tipc: Node number set to 2134912280 [ 625.086533][ T30] audit: type=1800 audit(1790932154.832:8): pid=21483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3708" name=680B20 dev="tmpfs" ino=911 res=0 errno=0 [ 625.483047][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'. [ 625.483076][T21493] netlink: 'syz.0.3711': attribute type 1 has an invalid length. [ 625.542737][T21491] tipc: New replicast peer: 255.255.255.255 [ 625.543893][T21491] tipc: Enabled bearer , priority 10 [ 625.718088][T21500] sctp: [Deprecated]: syz.0.3714 (pid 21500) Use of int in maxseg socket option. [ 625.718088][T21500] Use struct sctp_assoc_value instead [ 625.832172][T21503] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 625.943641][T21507] 8021q: VLANs not supported on ip_vti0 [ 625.944602][T21506] 8021q: VLANs not supported on ip_vti0 [ 626.380636][T21521] netlink: 'syz.2.3718': attribute type 2 has an invalid length. [ 626.559716][T21524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3721'. [ 626.633493][T19024] net_ratelimit: 14 callbacks suppressed [ 626.633517][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 626.637974][T21521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3718'. [ 626.772533][T21532] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3719'. [ 626.807149][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 626.921478][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 627.184595][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 627.301716][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 627.385698][T21561] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 627.425258][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 627.534263][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 627.641339][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 628.016044][T21572] netlink: 'syz.1.3728': attribute type 1 has an invalid length. [ 628.222622][T21572] bond1: entered promiscuous mode [ 628.223069][T21572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.404458][T21579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.404997][T21579] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 628.405025][T21579] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 628.506513][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 628.506546][T21570] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3728'. [ 628.583943][T21579] bond1: (slave wireguard0): making interface the new active one [ 628.583970][T21579] wireguard0: entered promiscuous mode [ 628.586175][T21579] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 628.892634][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 629.244047][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 629.336378][T21606] netlink: 'syz.1.3734': attribute type 21 has an invalid length. [ 629.336409][T21606] IPv6: NLM_F_CREATE should be specified when creating new route [ 629.336503][T21606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.336513][T21606] IPv6: NLM_F_CREATE should be set when creating new route [ 629.336555][T21606] IPv6: NLM_F_CREATE should be set when creating new route [ 629.336581][T21606] IPv6: NLM_F_CREATE should be set when creating new route [ 629.677313][T21618] vcan0: tx address claim with dest, not broadcast [ 629.780245][T21620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3739'. [ 629.806991][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 630.389979][T21632] gtp0: entered promiscuous mode [ 630.390006][T21632] gtp0: entered allmulticast mode [ 630.805924][T21650] netlink: 'syz.0.3745': attribute type 5 has an invalid length. [ 631.793400][T19027] net_ratelimit: 19 callbacks suppressed [ 631.793425][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 631.903018][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 632.012284][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 632.058310][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'. [ 632.172445][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 632.284013][T21694] netlink: 'syz.0.3758': attribute type 4 has an invalid length. [ 632.291023][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 632.345741][T21700] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3762'. [ 632.347112][T21700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3762'. [ 632.401964][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 632.634548][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 633.631536][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 633.749981][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 633.851761][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 633.999456][T21742] netlink: 'syz.2.3769': attribute type 4 has an invalid length. [ 633.999481][T21742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3769'. [ 634.064614][T21742] .`: renamed from bond0 (while UP) [ 634.427615][T21765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3776'. [ 634.477332][T21758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3775'. [ 635.294614][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3780'. [ 635.415117][T21786] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.3783'. [ 636.258968][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'. [ 636.292789][T21811] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 636.913585][T19026] net_ratelimit: 17 callbacks suppressed [ 636.913618][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 636.936538][T21829] netlink: 'syz.1.3795': attribute type 83 has an invalid length. [ 637.002225][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 637.041520][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 637.166222][T21832] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3796'. [ 637.199903][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 637.213747][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3794'. [ 637.213772][T21837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3794'. [ 637.218430][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3794'. [ 637.218453][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3794'. [ 637.303017][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 637.415884][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 637.547211][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 637.652489][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 637.748105][T21856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3800'. [ 637.847582][T21859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 637.860664][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 638.031757][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 638.146858][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 638.287689][T21876] 8021q: VLANs not supported on ip6tnl0 [ 638.429444][T21881] netlink: 'syz.1.3807': attribute type 1 has an invalid length. [ 638.698789][T21896] netlink: 'syz.4.3810': attribute type 1 has an invalid length. [ 638.723005][T21881] bond3: entered promiscuous mode [ 638.728973][T21881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 639.128878][T21896] bond4: entered promiscuous mode [ 639.129795][T21896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 639.246598][T21897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 639.246984][T21897] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 639.247004][T21897] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 639.304186][T21897] bond4: (slave xfrm1): making interface the new active one [ 639.304213][T21897] xfrm1: entered promiscuous mode [ 639.334238][T21897] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 639.501235][T21926] SET target dimension over the limit! [ 639.523055][T21928] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 639.606944][T21928] bond3 (unregistering): Released all slaves [ 640.302744][T21964] netlink: 'syz.1.3818': attribute type 26 has an invalid length. [ 640.347444][T21951] geneve0: entered promiscuous mode [ 640.347471][T21951] geneve0: entered allmulticast mode [ 641.493695][T22000] syz_tun: entered allmulticast mode [ 641.526314][T22000] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 641.582432][T22000] bond3: entered promiscuous mode [ 641.582951][T22000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 641.603816][T21998] syz_tun: left allmulticast mode [ 641.626336][T22007] __nla_validate_parse: 1 callbacks suppressed [ 641.626357][T22007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3830'. [ 641.931319][T19022] net_ratelimit: 20 callbacks suppressed [ 641.931343][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 642.008489][T22018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3832'. [ 642.105607][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 642.167063][T22017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.231136][T22022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.341625][T22022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.432409][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 642.545596][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 642.751197][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 642.863424][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 642.979725][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 643.030430][T22052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3840'. [ 643.030466][T22052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3840'. [ 643.170810][T22058] netlink: 'syz.4.3841': attribute type 16 has an invalid length. [ 643.170835][T22058] netlink: 'syz.4.3841': attribute type 17 has an invalid length. [ 643.734070][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3845'. [ 643.754404][T22081] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3846'. [ 643.764587][T22058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.184347][T22058] tipc: Resetting bearer [ 644.186876][T22099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3848'. [ 644.214629][T22058] geneve0: left promiscuous mode [ 644.214655][T22058] geneve0: left allmulticast mode [ 644.226874][T22058] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 644.227703][T22058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.276224][T22058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.290387][T22058] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 644.306394][T22058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.316079][T22058] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 644.317543][T22058] batman_adv: batadv0: Interface activated: macvtap1 [ 644.330312][T22058] bond4: left promiscuous mode [ 644.330345][T22058] xfrm1: left promiscuous mode [ 644.495458][T21102] bond_slave_0: entered promiscuous mode [ 644.495501][T21102] bond_slave_1: entered promiscuous mode [ 644.512819][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 644.682851][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 644.792833][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 645.112015][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 645.339969][T22129] Bluetooth: hci0: unsupported parameter 5135 [ 645.339997][T22129] Bluetooth: hci0: unsupported parameter 8192 [ 645.340019][T22129] Bluetooth: hci0: unsupported parameter 5135 [ 645.340031][T22129] Bluetooth: hci0: unsupported parameter 8192 [ 645.627796][T22132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.828647][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3857'. [ 645.840046][T22142] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3857'. [ 646.258194][T22158] netlink: 'syz.0.3861': attribute type 3 has an invalid length. [ 646.341530][T22163] netlink: 'syz.1.3863': attribute type 14 has an invalid length. [ 646.341556][T22163] netlink: 'syz.1.3863': attribute type 13 has an invalid length. [ 646.618980][T22158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.145783][T19023] nci: nci_rsp_packet: unknown rsp opcode 0xa04 [ 647.504468][T19028] net_ratelimit: 13 callbacks suppressed [ 647.504491][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 647.611343][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 647.665682][T22172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.667704][T22204] __nla_validate_parse: 6 callbacks suppressed [ 647.667723][T22204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3869'. [ 647.667741][T22204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3869'. [ 647.668655][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3869'. [ 647.668690][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3869'. [ 647.793960][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 647.901244][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 648.037470][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 648.141774][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 648.239500][T22223] xfrm1: entered promiscuous mode [ 648.256360][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 648.295122][T22219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3872'. [ 648.393489][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 648.435403][T22226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3876'. [ 648.480207][T22226] ipvlan2: entered allmulticast mode [ 648.480234][T22226] syz_tun: entered allmulticast mode [ 648.691766][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 648.795095][T22242] team0 (unregistering): Port device team_slave_0 removed [ 648.841406][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 649.011133][T22246] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 649.017493][T22246] bond0 (unregistering): Released all slaves [ 649.772715][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3880'. [ 650.408183][T22293] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3887'. [ 650.429439][T22293] gretap0: entered promiscuous mode [ 650.574322][T22300] netlink: 'syz.1.3889': attribute type 1 has an invalid length. [ 650.595004][T22303] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3887'. [ 650.766130][T22300] bond4: entered promiscuous mode [ 650.766623][T22300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.808615][T22303] 0ªî{X¹¦: renamed from gretap0 [ 650.836914][T22303] 0ªî{X¹¦: left promiscuous mode [ 650.843827][T22303] 0ªî{X¹¦: entered allmulticast mode [ 651.242913][T22321] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3894'. [ 652.521923][T19022] net_ratelimit: 24 callbacks suppressed [ 652.521949][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 652.631448][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 652.741278][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 652.793105][T22363] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3907'. [ 652.863005][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 652.949050][T22373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3910'. [ 652.972654][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 653.087571][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 653.191448][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 653.303035][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 653.375945][T22380] netlink: 'syz.2.3911': attribute type 21 has an invalid length. [ 653.376041][T22380] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3911'. [ 653.411936][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 653.531504][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 653.684331][T22387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3916'. [ 653.684829][T22387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3916'. [ 653.684846][T22387] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3916'. [ 654.769180][T22402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3922'. [ 655.053563][T22432] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3927'. [ 655.435305][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 655.437423][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 655.512806][T22437] netlink: 'syz.4.3929': attribute type 10 has an invalid length. [ 655.713484][T22437] team0: Port device dummy0 added [ 655.967123][T22468] xt_time: unknown flags 0x68 [ 656.155491][T22470] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 656.253801][T22470] geneve2: entered promiscuous mode [ 656.254039][T22470] geneve2: entered allmulticast mode [ 656.512246][T22496] erspan0: entered promiscuous mode [ 656.514924][T22488] syzkaller1: entered promiscuous mode [ 656.515152][T22488] syzkaller1: entered allmulticast mode [ 657.214937][T22523] IPVS: set_ctl: invalid protocol: 136 172.20.20.60:3 [ 657.736264][T22516] veth1_macvtap: left promiscuous mode [ 657.810677][T19024] net_ratelimit: 21 callbacks suppressed [ 657.810706][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 658.321580][T22544] ip_tables: iptables: counters copy to user failed while replacing table [ 658.509129][T22548] __nla_validate_parse: 17 callbacks suppressed [ 658.509153][T22548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3953'. [ 658.509169][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3953'. [ 658.552162][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 658.559499][T22549] netlink: 'syz.3.3953': attribute type 4 has an invalid length. [ 658.559523][T22549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3953'. [ 658.847256][T22549] .`: renamed from bond0 (while UP) [ 659.042959][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 659.171301][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 659.176450][T22563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3957'. [ 659.283322][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 659.300413][T22567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3959'. [ 659.372479][T22567] netlink: 'syz.3.3959': attribute type 2 has an invalid length. [ 659.391573][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 659.500827][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 659.613170][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 659.721438][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 659.748999][T22579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3964'. [ 659.814348][T22582] netlink: 'syz.3.3964': attribute type 21 has an invalid length. [ 659.814373][T22582] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3964'. [ 659.814461][T22582] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3964'. [ 660.617391][T22615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3968'. [ 660.705655][T22619] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3971'. [ 661.024735][T22635] IPVS: length: 239 != 24 [ 662.607421][T17203] Bluetooth: hci3: command 0x0406 tx timeout [ 662.883338][T19028] net_ratelimit: 26 callbacks suppressed [ 662.883365][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 663.317556][T22715] sctp: [Deprecated]: syz.4.3992 (pid 22715) Use of int in max_burst socket option. [ 663.317556][T22715] Use struct sctp_assoc_value instead [ 663.401926][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 663.513230][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 663.622593][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 663.646980][T22724] xt_hashlimit: size too large, truncated to 1048576 [ 663.776236][T22725] ovs0: entered promiscuous mode [ 663.791349][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 663.905750][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 664.011377][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 664.087200][T22737] __nla_validate_parse: 5 callbacks suppressed [ 664.087224][T22737] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3999'. [ 664.135896][T22743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 664.224959][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 664.255427][T22740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.668188][T22767] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 664.687622][T22766] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 666.098305][T22801] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4016'. [ 666.168860][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4017'. [ 666.729216][T22812] bridge0: port 3(vlan2) entered blocking state [ 666.729392][T22812] bridge0: port 3(vlan2) entered forwarding state [ 666.889928][T22812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 667.260988][T19022] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.261066][T19022] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.261102][T19022] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.261134][T19022] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.685822][T22848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4027'. [ 668.103145][T19027] net_ratelimit: 22 callbacks suppressed [ 668.103169][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 668.142788][T22873] SET target dimension over the limit! [ 668.163326][T22873] nft_compat: unsupported protocol 0 [ 668.231219][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 668.252634][T19022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.252959][T19022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.271828][T21107] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.542058][T21102] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.543958][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 668.614973][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4034'. [ 668.694567][T21104] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.751866][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 668.881487][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 668.984728][T22888] sctp: [Deprecated]: syz.2.4036 (pid 22888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.984728][T22888] Use struct sctp_sack_info instead [ 668.993946][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 668.996457][T22888] netlink: 'syz.2.4036': attribute type 10 has an invalid length. [ 669.030215][T22888] team0: Device dummy0 is of different type [ 669.073937][T22894] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4036'. [ 669.204167][T19023] bond1: (slave dummy0): failed to get link speed/duplex [ 669.283437][T22897] v: renamed from veth0_vlan (while UP) [ 669.342365][T19022] tipc: Resetting bearer [ 669.435056][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 669.504174][T22911] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 669.684413][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 669.756870][T22914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4044'. [ 669.793937][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 671.477156][T22965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4059'. [ 671.810208][T22974] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4061'. [ 671.931133][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 671.965534][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 672.283922][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.432518][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 672.432549][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 672.912142][T23006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'. [ 672.988334][T23006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.021821][T23016] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4072'. [ 673.103824][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'. [ 673.117606][T23016] gretap0: entered promiscuous mode [ 673.222460][T19027] net_ratelimit: 25 callbacks suppressed [ 673.222485][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 673.524601][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 673.772089][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 673.891068][T19022] bond1: (slave dummy0): failed to get link speed/duplex [ 674.003438][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 674.111866][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 674.223776][T13857] bond1: (slave dummy0): failed to get link speed/duplex [ 674.344032][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 674.463893][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 674.577008][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 674.849544][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4084'. [ 675.147756][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4086'. [ 675.305329][T23079] netlink: 'syz.2.4088': attribute type 1 has an invalid length. [ 675.357363][T23082] pimreg: entered allmulticast mode [ 675.366400][T23082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4089'. [ 675.641206][T23085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4090'. [ 675.641236][T23085] block nbd5: Unsupported socket: should be TCP or UNIX. [ 676.090979][T23097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4094'. [ 676.168296][T23111] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.452270][T23114] sock: sock_timestamping_bind_phc: sock not bind to device [ 677.213937][T23128] netlink: 'syz.0.4105': attribute type 1 has an invalid length. [ 677.255194][T23128] bond5: entered promiscuous mode [ 677.255772][T23128] 8021q: adding VLAN 0 to HW filter on device bond5 [ 677.476023][T23128] bond5: (slave bridge4): making interface the new active one [ 677.476051][T23128] bridge4: entered promiscuous mode [ 677.479878][T23128] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 678.190279][T23170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4114'. [ 678.190307][T23170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4114'. [ 678.253521][T19021] net_ratelimit: 26 callbacks suppressed [ 678.253546][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 678.420893][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 678.531894][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 678.575340][T23191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4120'. [ 678.641701][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 678.754155][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 678.862627][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 678.973059][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 679.263154][T23204] netlink: 'syz.4.4124': attribute type 25 has an invalid length. [ 679.300762][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 679.653231][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 679.872707][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 680.344059][T23232] netlink: 'syz.4.4132': attribute type 21 has an invalid length. [ 680.344086][T23232] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4132'. [ 680.344167][T23232] netlink: 'syz.4.4132': attribute type 5 has an invalid length. [ 680.344180][T23232] netlink: 'syz.4.4132': attribute type 6 has an invalid length. [ 680.344191][T23232] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4132'. [ 680.659415][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 680.659444][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 680.659653][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 680.659699][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 680.670384][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 680.670409][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 680.676538][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 680.678039][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 681.012272][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.272151][ T376] net_ratelimit: 12 callbacks suppressed [ 683.272176][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 683.382004][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 683.432629][T23285] netlink: 'syz.0.4146': attribute type 1 has an invalid length. [ 683.491370][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 683.603871][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 683.665123][T23290] C speed is unknown, defaulting to 1000 [ 683.676855][T23290] lo speed is unknown, defaulting to 1000 [ 683.871758][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 684.001740][ T380] bond1: (slave dummy0): failed to get link speed/duplex [ 684.118364][ T380] bond1: (slave dummy0): failed to get link speed/duplex [ 684.221909][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 684.268625][T23290] netlink: 'syz.4.4147': attribute type 4 has an invalid length. [ 684.332603][ T380] bond1: (slave dummy0): failed to get link speed/duplex [ 685.325562][ T380] bond1: (slave dummy0): failed to get link speed/duplex [ 686.135450][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.656431][T23356] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 688.023309][T23366] __nla_validate_parse: 52 callbacks suppressed [ 688.023334][T23366] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4167'. [ 688.291207][T19028] net_ratelimit: 14 callbacks suppressed [ 688.291234][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 688.401871][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 688.505794][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'. [ 688.628582][T23396] 8021q: adding VLAN 0 to HW filter on device team1 [ 688.650885][ T380] bond1: (slave dummy0): failed to get link speed/duplex [ 688.656533][T23398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.766081][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 688.872957][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 688.983147][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 689.092803][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 689.206593][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 689.256351][T23414] netlink: 'syz.3.4178': attribute type 23 has an invalid length. [ 689.431290][ T380] bond1: (slave dummy0): failed to get link speed/duplex [ 689.728990][T23426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4180'. [ 689.757186][ T5628] Bluetooth: hci3: Malformed Event: 0x02 [ 689.775396][T23429] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 690.333977][T23448] sctp: [Deprecated]: syz.4.4184 (pid 23448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.333977][T23448] Use struct sctp_sack_info instead [ 690.386198][T23448] netlink: 'syz.4.4184': attribute type 10 has an invalid length. [ 690.459961][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4185'. [ 690.496059][T23448] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4184'. [ 690.508658][T23448] team0: Port device dummy0 removed [ 690.588738][T23454] netlink: 'syz.1.4187': attribute type 1 has an invalid length. [ 690.816239][T23454] bond5: entered promiscuous mode [ 690.826308][T23454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 690.873872][T23456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 690.875040][T23456] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address [ 690.875063][T23456] bond5: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 690.898391][T23456] bond5: (slave wireguard2): making interface the new active one [ 690.898419][T23456] wireguard2: entered promiscuous mode [ 690.908109][T23456] bond5: (slave wireguard2): Enslaving as an active interface with an up link [ 690.910422][T23461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4188'. [ 691.263903][T23483] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4193'. [ 691.270097][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4195'. [ 691.270121][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4195'. [ 691.392833][T23487] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4196'. [ 692.704196][T23535] veth3: entered promiscuous mode [ 693.282902][T23529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 693.288978][T23530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 693.381839][ T376] net_ratelimit: 28 callbacks suppressed [ 693.381865][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 693.481967][T21084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.493602][ T376] bond1: (slave dummy0): failed to get link speed/duplex [ 693.600778][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 693.655617][T23562] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 693.786844][T23564] __nla_validate_parse: 6 callbacks suppressed [ 693.786869][T23564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4217'. [ 694.102931][T19024] bond1: (slave dummy0): failed to get link speed/duplex [ 694.300149][T23562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4214'. [ 694.383062][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.492874][T23588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4218'. [ 694.524061][T21085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.602272][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 694.775104][T23562] bond3: (slave bridge1): making interface the new active one [ 694.796792][T23562] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 694.831374][T19028] bond1: (slave dummy0): failed to get link speed/duplex [ 694.941797][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 694.948654][T23598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.546821][T23616] netlink: 'syz.1.4225': attribute type 11 has an invalid length. [ 696.097912][T23624] 8021q: VLANs not supported on ip6_vti0 [ 696.135572][T23624] netlink: 'syz.2.4227': attribute type 2 has an invalid length. [ 696.534055][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4232'. [ 696.586800][T23629] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 696.586832][T23629] bond6: option packets_per_slave: allowed values 0 - 65535 [ 696.629401][T23629] bond6 (unregistering): Released all slaves [ 696.682250][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 697.640791][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 698.100358][T19021] bridge0: port 1(1¾x9ÿ) entered disabled state [ 698.115511][T23671] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 698.115539][T23671] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 698.501285][T19025] net_ratelimit: 19 callbacks suppressed [ 698.501308][T19025] bond1: (slave dummy0): failed to get link speed/duplex [ 698.612093][T19021] bond1: (slave dummy0): failed to get link speed/duplex [ 698.725391][T13857] bond1: (slave dummy0): failed to get link speed/duplex [ 698.767567][T21086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.831233][T23693] bond1: (slave dummy0): failed to get link speed/duplex [ 698.942988][T19035] bond1: (slave dummy0): failed to get link speed/duplex [ 699.063805][T19040] bond1: (slave dummy0): failed to get link speed/duplex [ 699.174144][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 699.287823][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 699.392073][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 699.528078][T23713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4249'. [ 699.528375][T23715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4249'. [ 699.530542][T23707] netlink: 'syz.0.4247': attribute type 1 has an invalid length. [ 699.619967][T23707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 699.760125][T23707] macvlan2: entered promiscuous mode [ 699.760152][T23707] macvlan2: entered allmulticast mode [ 699.796251][T23719] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4250'. [ 699.974312][T23727] Bluetooth: MGMT ver 1.23 [ 700.074389][T23733] syz_tun: entered allmulticast mode [ 700.090394][T23733] dvmrp8: entered allmulticast mode [ 700.869395][T23757] siw: device registration error -23 [ 700.954429][T23732] syz_tun: left allmulticast mode [ 700.988134][T23759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4259'. [ 701.296363][T23769] xt_addrtype: ipv6 does not support BROADCAST matching [ 701.515094][T23775] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4264'. [ 701.535393][T23775] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4264'. [ 702.815998][T23789] bond5: invalid ARP target 0.0.0.0 specified for addition [ 702.816027][T23789] bond5: option arp_ip_target: invalid value (0) [ 702.819275][T23789] bond5 (unregistering): Released all slaves [ 703.006732][T23734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.080297][T23794] netlink: 'syz.4.4270': attribute type 11 has an invalid length. [ 703.080497][T23794] netlink: 'syz.4.4270': attribute type 4 has an invalid length. [ 703.080514][T23794] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4270'. [ 703.195193][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 703.432299][T23801] bond0: invalid NS target :: specified for addition [ 703.432333][T23801] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 703.550953][T13852] net_ratelimit: 34 callbacks suppressed [ 703.550979][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 703.963153][T21084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.313538][T23818] ip6_vti0: entered promiscuous mode [ 704.434400][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'. [ 704.563020][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 705.001922][T21089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.082592][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 705.191936][T13858] bond1: (slave dummy0): failed to get link speed/duplex [ 705.301420][T13854] bond1: (slave dummy0): failed to get link speed/duplex [ 705.419008][T13854] bond1: (slave dummy0): failed to get link speed/duplex [ 705.518356][T23869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.539038][T13858] bond1: (slave dummy0): failed to get link speed/duplex [ 706.539573][T23891] bond4: Unable to set up delay as MII monitoring is disabled [ 706.624889][T23907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4294'. [ 706.699935][T23891] bond4 (unregistering): Released all slaves [ 706.822957][T23906] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4293'. [ 706.894167][T23906] bond7 (unregistering): Released all slaves [ 707.436096][T23932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4302'. [ 707.915185][T23930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4301'. [ 707.915215][T23930] bridge: RTM_NEWNEIGH with invalid ether address [ 708.333731][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4304'. [ 708.562968][T23693] net_ratelimit: 79 callbacks suppressed [ 708.562994][T23693] bond1: (slave dummy0): failed to get link speed/duplex [ 708.637652][T23954] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4307'. [ 708.644121][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4306'. [ 708.647079][T23956] netlink: 'syz.4.4305': attribute type 1 has an invalid length. [ 708.779522][T23956] bond5: entered promiscuous mode [ 708.780056][T23956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.807831][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 708.939149][T23964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.939536][T23964] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 708.939556][T23964] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 708.998593][T23964] bond5: (slave ip6gre1): making interface the new active one [ 708.998622][T23964] ip6gre1: entered promiscuous mode [ 709.027061][T23964] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 709.031591][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 709.162256][T21084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.184456][T13864] bond1: (slave dummy0): failed to get link speed/duplex [ 709.293894][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 709.422591][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 709.462081][T23986] netlink: 'syz.0.4311': attribute type 1 has an invalid length. [ 709.533325][T19040] bond1: (slave dummy0): failed to get link speed/duplex [ 709.644062][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.644079][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 709.989946][T24001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'. [ 710.015851][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4316'. [ 710.044827][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'. [ 710.204156][T24004] geneve3: entered promiscuous mode [ 710.204180][T24004] geneve3: entered allmulticast mode [ 711.220349][T24052] netlink: 'syz.1.4329': attribute type 13 has an invalid length. [ 711.245388][T24052] netlink: 'syz.1.4329': attribute type 13 has an invalid length. [ 711.764684][T24076] Bluetooth: MGMT ver 1.23 [ 711.764725][T24076] Bluetooth: hci1: too big key_count value 23818 [ 712.016195][T24082] sctp: [Deprecated]: syz.0.4335 (pid 24082) Use of int in max_burst socket option. [ 712.016195][T24082] Use struct sctp_assoc_value instead [ 712.092314][T24086] netlink: 'syz.4.4337': attribute type 2 has an invalid length. [ 712.495440][T24096] netlink: 'syz.4.4340': attribute type 1 has an invalid length. [ 712.508854][T24103] __nla_validate_parse: 7 callbacks suppressed [ 712.508874][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4342'. [ 712.518011][T24100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4342'. [ 712.567525][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4340'. [ 712.794590][T24096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 713.063799][T24114] bond6: (slave bridge1): making interface the new active one [ 713.067349][T24114] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 713.113694][T24106] syzkaller1: entered promiscuous mode [ 713.113718][T24106] syzkaller1: entered allmulticast mode [ 713.519612][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4347'. [ 713.609860][T24133] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4349'. [ 713.609887][T24133] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4349'. [ 713.720535][T19027] net_ratelimit: 33 callbacks suppressed [ 713.720560][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 713.931982][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 713.985117][T24136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.057894][T19040] bond1: (slave dummy0): failed to get link speed/duplex [ 714.161483][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 714.274473][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 714.295610][T21084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.329588][T19035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.362310][T21084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.381844][T13864] bond1: (slave dummy0): failed to get link speed/duplex [ 714.755696][T24173] IPVS: set_ctl: invalid protocol: 46 172.20.20.19:20004 [ 714.793132][T24173] netlink: 'syz.2.4354': attribute type 9 has an invalid length. [ 714.907915][T24178] netlink: 'syz.1.4357': attribute type 1 has an invalid length. [ 714.994893][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4358'. [ 715.004281][T24185] netlink: 'syz.0.4358': attribute type 3 has an invalid length. [ 715.004303][T24185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4358'. [ 715.035420][T24185] erspan0: entered promiscuous mode [ 715.057320][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4358'. [ 715.238256][T24194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4361'. [ 715.585759][T24205] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 717.079954][T24250] sock: sock_timestamping_bind_phc: sock not bind to device [ 717.126792][T24251] netlink: 'syz.0.4376': attribute type 39 has an invalid length. [ 717.446894][T24264] IPv6: Can't replace route, no match found [ 717.447328][T24264] IPv6: Can't replace route, no match found [ 717.739833][T24268] __nla_validate_parse: 2 callbacks suppressed [ 717.739859][T24268] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4378'. [ 717.956319][T24270] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 718.273632][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4382'. [ 718.466404][T24288] tipc: Enabling of bearer rejected, already enabled [ 718.489313][T24287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4384'. [ 718.763426][T13864] net_ratelimit: 45 callbacks suppressed [ 718.763449][T13864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.832312][T13864] bond1: (slave dummy0): failed to get link speed/duplex [ 718.875505][T24300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4386'. [ 718.941884][T19035] bond1: (slave dummy0): failed to get link speed/duplex [ 718.989600][T24302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4386'. [ 719.055926][T19040] bond1: (slave dummy0): failed to get link speed/duplex [ 719.162531][T19040] bond1: (slave dummy0): failed to get link speed/duplex [ 719.279039][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 719.381551][T19035] bond1: (slave dummy0): failed to get link speed/duplex [ 719.414456][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.491848][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 719.527260][T24319] gtp1: entered promiscuous mode [ 719.527287][T24319] gtp1: entered allmulticast mode [ 719.604027][T13864] bond1: (slave dummy0): failed to get link speed/duplex [ 719.897357][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4392'. [ 719.897386][T24331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4392'. [ 719.918016][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4393'. [ 720.077061][T23693] tipc: Resetting bearer [ 720.174535][T24339] netlink: 'syz.3.4396': attribute type 9 has an invalid length. [ 720.664702][T24356] netlink: 'syz.3.4399': attribute type 7 has an invalid length. [ 720.692592][T24349] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.4397'. [ 720.781885][T24357] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4400'. [ 720.939419][T24361] batman_adv: batadv0: Adding interface: syzkaller0 [ 720.939441][T24361] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.939472][T24361] batman_adv: batadv0: Interface activated: syzkaller0 [ 721.822160][T24360] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 721.881890][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 722.055980][T24360] batman_adv: batadv0: Removing interface: syzkaller0 [ 722.465247][T24400] hsr_slave_0: left promiscuous mode [ 722.482228][T24400] hsr_slave_1: left promiscuous mode [ 723.232637][T24414] xt_cluster: node mask cannot exceed total number of nodes [ 723.342873][T24414] __nla_validate_parse: 6 callbacks suppressed [ 723.342897][T24414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4419'. [ 723.367606][T24414] netlink: 'syz.1.4419': attribute type 12 has an invalid length. [ 723.792164][T19027] net_ratelimit: 30 callbacks suppressed [ 723.792190][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 723.810186][T19027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.065740][ T104] bond1: (slave dummy0): failed to get link speed/duplex [ 724.172257][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 724.282446][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 724.304781][T24435] netlink: 'syz.1.4422': attribute type 10 has an invalid length. [ 724.306385][T24435] veth0_vlan: entered allmulticast mode [ 724.495697][T24435] team0: Device veth0_vlan failed to register rx_handler [ 724.755114][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 724.985367][T21089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.042385][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 725.166157][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.252936][T24447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4425'. [ 725.273783][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 725.999137][T24469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 726.054871][T24460] netlink: 'syz.3.4430': attribute type 8 has an invalid length. [ 726.054895][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4430'. [ 726.056604][T24460] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.235150][T24477] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4432'. [ 727.371366][T24504] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4439'. [ 727.513478][T24508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4442'. [ 727.595477][T24513] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 728.700364][T24539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4448'. [ 728.831028][ T104] net_ratelimit: 30 callbacks suppressed [ 728.831056][ T104] bond1: (slave dummy0): failed to get link speed/duplex [ 728.954924][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 729.006308][T13864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.007036][T13864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.092186][T19027] bond1: (slave dummy0): failed to get link speed/duplex [ 729.212472][T21086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.515113][T24550] netlink: 'syz.2.4450': attribute type 1 has an invalid length. [ 729.699182][T24550] bond5: entered promiscuous mode [ 729.700337][T24550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 730.047887][T24559] 8021q: adding VLAN 0 to HW filter on device bond5 [ 730.048436][T24559] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 730.048460][T24559] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 730.132028][T24559] bond5: (slave xfrm1): making interface the new active one [ 730.132057][T24559] xfrm1: entered promiscuous mode [ 730.139997][T24559] xfrm1: left promiscuous mode [ 730.210414][T23693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.219918][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 730.283139][T21085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.449991][T24579] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 730.473960][T24580] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 730.526738][T24585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4460'. [ 730.582241][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 730.616865][T24585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4460'. [ 731.560839][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 731.905187][T24619] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20001 [ 732.032452][T24627] netlink: 'syz.1.4470': attribute type 15 has an invalid length. [ 732.136153][T24630] netlink: 'syz.1.4470': attribute type 10 has an invalid length. [ 732.175495][T24627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4470'. [ 732.275361][T24627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4470'. [ 733.050283][T24655] netlink: 'syz.2.4480': attribute type 4 has an invalid length. [ 733.253741][T24664] gretap0: left promiscuous mode [ 733.295811][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'. [ 733.297905][T24664] ip6_vti0: left promiscuous mode [ 733.378362][T24664] 8021q: adding VLAN 0 to HW filter on device .` [ 733.457108][T24664] tipc: Resetting bearer [ 733.535842][T24676] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 733.598688][T24680] netlink: 'syz.4.4483': attribute type 2 has an invalid length. [ 733.598715][T24680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4483'. [ 733.909939][T24690] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 733.910392][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4488'. [ 733.949704][T24664] veth1_macvtap: entered promiscuous mode [ 734.002424][T24664] sit2: left promiscuous mode [ 734.003697][T24664] gretap1: left promiscuous mode [ 734.007409][T24664] batman_adv: batadv0: Interface activated: gretap1 [ 734.038179][T24664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 734.039456][T24664] geneve2: left promiscuous mode [ 734.068925][T24664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.084186][T24664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 734.089672][T24664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 734.114773][T24664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 734.150020][ T51] net_ratelimit: 25 callbacks suppressed [ 734.150044][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 734.170637][T19035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.217877][T23693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.385014][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 734.533627][T13864] bond1: (slave dummy0): failed to get link speed/duplex [ 734.642139][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 734.702163][T21085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.767724][T24706] 8021q: adding VLAN 0 to HW filter on device .` [ 734.795509][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 734.913770][T19035] bond1: (slave dummy0): failed to get link speed/duplex [ 735.021765][ T104] bond1: (slave dummy0): failed to get link speed/duplex [ 736.144092][T24742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4499'. [ 736.533377][T24762] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20000 [ 736.965269][T24781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4506'. [ 737.277974][T24783] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4507'. [ 737.655716][T24793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4510'. [ 737.669877][T24793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4510'. [ 737.776790][T24803] sctp: [Deprecated]: syz.1.4511 (pid 24803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.776790][T24803] Use struct sctp_sack_info instead [ 737.903986][T24797] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4511'. [ 737.904215][T24797] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4511'. [ 737.904403][T24797] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4511'. [ 737.904602][T24797] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4511'. [ 737.927113][T24798] netlink: 'syz.1.4511': attribute type 10 has an invalid length. [ 738.264871][T24798] team0: Port device dummy0 added [ 738.265316][T24798] netlink: 'syz.1.4511': attribute type 10 has an invalid length. [ 738.266926][T24807] hsr_slave_0: left promiscuous mode [ 738.270278][T24807] hsr_slave_1: left promiscuous mode [ 738.538877][T24802] team0: Port device dummy0 removed [ 739.182717][T19026] net_ratelimit: 26 callbacks suppressed [ 739.182752][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 739.222755][T24842] __nla_validate_parse: 63 callbacks suppressed [ 739.222780][T24842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4522'. [ 739.222809][T24842] block nbd5: Unsupported socket: should be TCP or UNIX. [ 739.292593][T23693] bond1: (slave dummy0): failed to get link speed/duplex [ 739.404108][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 739.453847][T24849] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4526'. [ 739.456431][T24849] netlink: 'syz.2.4526': attribute type 83 has an invalid length. [ 739.458438][T24849] IPv6: NLM_F_REPLACE set, but no existing node found! [ 739.511530][T21084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.538297][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 739.703976][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4527'. [ 739.771881][T21086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.773596][T24860] netlink: 'syz.2.4527': attribute type 9 has an invalid length. [ 739.773610][T24860] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4527'. [ 739.817144][T24856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.867507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.868906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.905063][T21085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.965013][ T104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.087351][T24856] veth0_vlan: left promiscuous mode [ 740.087388][T24856] veth0_vlan: left allmulticast mode [ 740.155745][T24856] veth0_vlan: entered promiscuous mode [ 740.156533][T24865] netlink: 'syz.2.4527': attribute type 9 has an invalid length. [ 740.156554][T24865] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4527'. [ 740.379405][T24856] geneve2: left allmulticast mode [ 740.482464][T21086] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 740.557175][T24856] gtp1: left allmulticast mode [ 741.164573][T21084] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 741.317257][T24897] Cannot find add_set index 4 as target [ 741.427807][T24907] tunl0: Caught tx_queue_len zero misconfig [ 741.459095][T24910] veth0_to_bond: left allmulticast mode [ 741.779987][T24922] xt_hashlimit: size too large, truncated to 1048576 [ 741.876557][T24916] vlan3: entered allmulticast mode [ 741.876582][T24916] bond0: entered allmulticast mode [ 741.878472][T24915] netlink: 'syz.2.4541': attribute type 2 has an invalid length. [ 742.766128][T24948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4551'. [ 742.766169][T24948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4551'. [ 742.902941][T24952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4553'. [ 743.216938][T24963] netlink: 'syz.1.4555': attribute type 1 has an invalid length. [ 743.523606][T24963] bond6: entered promiscuous mode [ 743.524078][T24963] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.574860][T24966] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.575223][T24966] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 743.575243][T24966] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 743.617797][T24966] bond6: (slave xfrm1): making interface the new active one [ 743.617823][T24966] xfrm1: entered promiscuous mode [ 743.661046][T24966] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 743.685424][T24943] netlink: 'syz.3.4550': attribute type 2 has an invalid length. [ 743.685441][T24943] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4550'. [ 744.137457][T19035] tipc: Resetting bearer [ 744.231184][T24976] netlink: 'syz.3.4550': attribute type 2 has an invalid length. [ 744.231208][T24976] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4550'. [ 744.265059][ T51] net_ratelimit: 35 callbacks suppressed [ 744.265081][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 744.375402][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 744.486886][T13864] bond1: (slave dummy0): failed to get link speed/duplex [ 744.597323][T19032] bond1: (slave dummy0): failed to get link speed/duplex [ 744.802248][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 744.918536][T19026] bond1: (slave dummy0): failed to get link speed/duplex [ 745.033993][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 745.143133][T19035] bond1: (slave dummy0): failed to get link speed/duplex [ 745.266761][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 745.369526][T25023] netlink: 'syz.3.4565': attribute type 13 has an invalid length. [ 745.369553][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'. [ 745.379240][T13852] bond1: (slave dummy0): failed to get link speed/duplex [ 745.399885][T25023] netlink: 'syz.3.4565': attribute type 13 has an invalid length. [ 745.399907][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'. [ 745.669223][T25037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4569'. [ 746.795485][T25064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4574'. [ 746.959236][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 746.976932][T25053] block nbd0: reconnected socket [ 746.979117][ T5628] block nbd0: Receive control failed (result -107) [ 747.517821][T25069] syzkaller0: entered promiscuous mode [ 747.518061][T25069] syzkaller0: entered allmulticast mode [ 747.576796][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.703331][T19035] batadv1: left allmulticast mode [ 747.735431][T19035] batadv1: left promiscuous mode [ 747.736708][T19035] bridge0: port 3(batadv1) entered disabled state [ 747.820315][T19035] bridge_slave_1: left allmulticast mode [ 747.831540][T19035] bridge_slave_1: left promiscuous mode [ 747.832605][T19035] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.896448][T19035] bridge_slave_0: left allmulticast mode [ 747.897650][T19035] bridge_slave_0: left promiscuous mode [ 747.898781][T19035] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.716027][T19035] bond0 (unregistering): (slave ip6gre3): Releasing backup interface [ 748.923257][T19035] bond5 (unregistering): (slave xfrm1): Releasing backup interface [ 748.923311][T19035] xfrm1 (unregistering): left promiscuous mode [ 749.139197][T19035] bond9 (unregistering): (slave geneve3): Releasing active interface [ 749.349559][T19035] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.364590][T19035] .` (unregistering): Released all slaves [ 749.385980][T19035] bond1 (unregistering): (slave dummy0): Removing an active aggregator [ 749.386959][T19035] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 749.438147][T19035] bond1 (unregistering): (slave veth3): Releasing backup interface [ 749.457195][T19035] bond1 (unregistering): Released all slaves [ 749.484099][T19035] bond2 (unregistering): Released all slaves [ 749.529720][T19035] bond0 (unregistering): Released all slaves [ 749.559061][T19035] bond3 (unregistering): Released all slaves [ 749.568384][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 749.590380][T25069] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 749.609708][T19035] bond4 (unregistering): Released all slaves [ 749.635107][T19035] bond5 (unregistering): Released all slaves [ 749.668161][T19035] bond6 (unregistering): Released all slaves [ 749.697972][T19035] bond7 (unregistering): Released all slaves [ 749.726325][T19035] bond8 (unregistering): Released all slaves [ 749.763451][T19035] bond9 (unregistering): Released all slaves [ 749.792236][T19035] bond10 (unregistering): Released all slaves [ 750.587140][T19035] : left promiscuous mode [ 750.887603][T25118] syzkaller1: entered promiscuous mode [ 750.887838][T25118] syzkaller1: entered allmulticast mode [ 750.904657][T19035] tipc: Disabling bearer [ 750.905340][T19035] tipc: Left network mode [ 751.004008][T25145] net_ratelimit: 23 callbacks suppressed [ 751.004036][T25145] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 751.364816][T19035] IPVS: stopping master sync thread 12259 ... [ 751.417043][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.417485][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.418011][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.898450][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4595'. [ 751.973202][T25164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4595'. [ 752.125420][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4597'. [ 752.125573][T25182] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4597'. [ 752.514580][T25195] sctp: [Deprecated]: syz.4.4599 (pid 25195) Use of int in max_burst socket option deprecated. [ 752.514580][T25195] Use struct sctp_assoc_value instead [ 752.686004][T19026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.296714][T25223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 753.320903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.401663][T25224] netlink: zone id is out of range [ 753.401684][T25224] netlink: zone id is out of range [ 753.401698][T25224] netlink: zone id is out of range [ 753.401710][T25224] netlink: zone id is out of range [ 753.464674][T25222] netlink: 'syz.0.4605': attribute type 2 has an invalid length. [ 753.464700][T25222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 753.528978][T25233] lo: entered allmulticast mode [ 753.734044][T25241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'. [ 753.805960][T25206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 754.058021][T25237] bond7: entered promiscuous mode [ 754.069092][T25241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'. [ 754.164857][T25252] blkio.reset_stats is deprecated [ 754.610064][T19035] batman_adv: batadv0: Removing interface: macvtap1 [ 755.256282][T25282] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 755.256306][T25282] netlink: 'syz.3.4616': attribute type 4 has an invalid length. [ 755.256318][T25282] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4616'. [ 755.318886][T19035] [ 755.321257][T19035] ====================================================== [ 755.328407][T19035] WARNING: possible circular locking dependency detected [ 755.335622][T19035] syzkaller #0 Not tainted [ 755.340155][T19035] ------------------------------------------------------ [ 755.347857][T19035] kworker/u8:36/19035 is trying to acquire lock: [ 755.354291][T19035] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170 [ 755.365408][T19035] [ 755.365408][T19035] but task is already holding lock: [ 755.372970][T19035] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x77/0x930 [ 755.382648][T19035] [ 755.382648][T19035] which lock already depends on the new lock. [ 755.382648][T19035] [ 755.393233][T19035] [ 755.393233][T19035] the existing dependency chain (in reverse order) is: [ 755.402272][T19035] [ 755.402272][T19035] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 755.410438][T19035] down_write+0x96/0x200 [ 755.415329][T19035] kernfs_add_one+0x41/0x6f0 [ 755.420734][T19035] kernfs_create_dir_ns+0x1a1/0x230 [ 755.426611][T19035] internal_create_group+0x440/0x1180 [ 755.432690][T19035] cpuhp_invoke_callback+0x434/0x810 [ 755.438552][T19035] cpuhp_issue_call+0x3f0/0x750 [ 755.444034][T19035] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 755.450646][T19035] __cpuhp_setup_state+0x3f/0x60 [ 755.456126][T19035] do_one_initcall+0x250/0x870 [ 755.461538][T19035] do_initcall_level+0x10a/0x1a0 [ 755.467093][T19035] do_initcalls+0x59/0xa0 [ 755.471955][T19035] kernel_init_freeable+0x29d/0x3e0 [ 755.477781][T19035] kernel_init+0x22/0x1d0 [ 755.482635][T19035] ret_from_fork+0x514/0xb70 [ 755.487773][T19035] ret_from_fork_asm+0x1a/0x30 [ 755.493327][T19035] [ 755.493327][T19035] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 755.501241][T19035] [ 755.501241][T19035] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 755.509159][T19035] cpus_read_lock+0x42/0x160 [ 755.514280][T19035] static_key_slow_inc+0x12/0x30 [ 755.519778][T19035] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 755.526216][T19035] nbd_genl_foreach_sock+0x265/0x450 [ 755.532203][T19035] nbd_genl_reconfigure+0xbbb/0x1040 [ 755.538100][T19035] genl_family_rcv_msg_doit+0x233/0x340 [ 755.544483][T19035] genl_rcv_msg+0x614/0x7a0 [ 755.549571][T19035] netlink_rcv_skb+0x226/0x4a0 [ 755.555037][T19035] genl_rcv+0x28/0x40 [ 755.559560][T19035] netlink_unicast+0x7bd/0x940 [ 755.564872][T19035] netlink_sendmsg+0x813/0xb40 [ 755.570443][T19035] sock_sendmsg_nosec+0x13a/0x180 [ 755.576446][T19035] ____sys_sendmsg+0x54e/0x850 [ 755.581843][T19035] ___sys_sendmsg+0x2a5/0x360 [ 755.587057][T19035] __x64_sys_sendmsg+0x1b1/0x290 [ 755.592533][T19035] do_syscall_64+0x166/0x520 [ 755.597703][T19035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.604149][T19035] [ 755.604149][T19035] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 755.611803][T19035] __mutex_lock+0x19d/0x1550 [ 755.616921][T19035] nbd_queue_rq+0x373/0xff0 [ 755.622499][T19035] blk_mq_dispatch_rq_list+0x499/0x1990 [ 755.628832][T19035] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 755.636033][T19035] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 755.642659][T19035] blk_mq_run_work_fn+0x16c/0x300 [ 755.648228][T19035] process_scheduled_works+0xc3d/0x1630 [ 755.654505][T19035] worker_thread+0xa47/0xfb0 [ 755.659638][T19035] kthread+0x38b/0x480 [ 755.664320][T19035] ret_from_fork+0x514/0xb70 [ 755.669627][T19035] ret_from_fork_asm+0x1a/0x30 [ 755.675126][T19035] [ 755.675126][T19035] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 755.682540][T19035] __mutex_lock+0x19d/0x1550 [ 755.687692][T19035] nbd_queue_rq+0xc1/0xff0 [ 755.693105][T19035] blk_mq_dispatch_rq_list+0x499/0x1990 [ 755.699549][T19035] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 755.706515][T19035] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 755.713042][T19035] blk_mq_run_work_fn+0x16c/0x300 [ 755.719400][T19035] process_scheduled_works+0xc3d/0x1630 [ 755.725501][T19035] worker_thread+0xa47/0xfb0 [ 755.730638][T19035] kthread+0x38b/0x480 [ 755.735600][T19035] ret_from_fork+0x514/0xb70 [ 755.740747][T19035] ret_from_fork_asm+0x1a/0x30 [ 755.746165][T19035] [ 755.746165][T19035] -> #4 (set->srcu){.+.+}-{0:0}: [ 755.753393][T19035] __synchronize_srcu+0xc9/0x2f0 [ 755.758927][T19035] elevator_switch+0x1e8/0x7b0 [ 755.764362][T19035] elevator_change+0x2fa/0x480 [ 755.769651][T19035] elevator_set_default+0x375/0x440 [ 755.775378][T19035] blk_register_queue+0x3f3/0x4e0 [ 755.780986][T19035] __add_disk+0x6b8/0xdb0 [ 755.785933][T19035] add_disk_fwnode+0x100/0x3a0 [ 755.791246][T19035] nbd_dev_add+0x733/0xb60 [ 755.796301][T19035] nbd_init+0x168/0x1f0 [ 755.801272][T19035] do_one_initcall+0x250/0x870 [ 755.806945][T19035] do_initcall_level+0x10a/0x1a0 [ 755.815016][T19035] do_initcalls+0x59/0xa0 [ 755.819872][T19035] kernel_init_freeable+0x29d/0x3e0 [ 755.825865][T19035] kernel_init+0x22/0x1d0 [ 755.830832][T19035] ret_from_fork+0x514/0xb70 [ 755.836397][T19035] ret_from_fork_asm+0x1a/0x30 [ 755.842051][T19035] [ 755.842051][T19035] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 755.850205][T19035] __mutex_lock+0x19d/0x1550 [ 755.855443][T19035] elevator_change+0x1af/0x480 [ 755.860782][T19035] elevator_set_none+0xb5/0x140 [ 755.866187][T19035] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 755.872549][T19035] nbd_start_device+0x189/0xb30 [ 755.878197][T19035] nbd_genl_connect+0x167d/0x1cd0 [ 755.883774][T19035] genl_family_rcv_msg_doit+0x233/0x340 [ 755.890557][T19035] genl_rcv_msg+0x614/0x7a0 [ 755.896310][T19035] netlink_rcv_skb+0x226/0x4a0 [ 755.901979][T19035] genl_rcv+0x28/0x40 [ 755.906494][T19035] netlink_unicast+0x7bd/0x940 [ 755.911958][T19035] netlink_sendmsg+0x813/0xb40 [ 755.917417][T19035] sock_sendmsg_nosec+0x13a/0x180 [ 755.923141][T19035] ____sys_sendmsg+0x54e/0x850 [ 755.928537][T19035] ___sys_sendmsg+0x2a5/0x360 [ 755.934009][T19035] __x64_sys_sendmsg+0x1b1/0x290 [ 755.939707][T19035] do_syscall_64+0x166/0x520 [ 755.945001][T19035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.952026][T19035] [ 755.952026][T19035] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 755.961122][T19035] blk_alloc_queue+0x544/0x690 [ 755.967008][T19035] __blk_mq_alloc_disk+0x194/0x390 [ 755.973441][T19035] nbd_dev_add+0x494/0xb60 [ 755.978718][T19035] nbd_init+0x168/0x1f0 [ 755.983435][T19035] do_one_initcall+0x250/0x870 [ 755.988750][T19035] do_initcall_level+0x10a/0x1a0 [ 755.994236][T19035] do_initcalls+0x59/0xa0 [ 755.999286][T19035] kernel_init_freeable+0x29d/0x3e0 [ 756.005019][T19035] kernel_init+0x22/0x1d0 [ 756.009877][T19035] ret_from_fork+0x514/0xb70 [ 756.015084][T19035] ret_from_fork_asm+0x1a/0x30 [ 756.020590][T19035] [ 756.020590][T19035] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 756.027836][T19035] fs_reclaim_acquire+0x71/0x100 [ 756.033533][T19035] kmem_cache_alloc_noprof+0x5f/0x600 [ 756.039458][T19035] __kernfs_iattrs+0xdd/0x380 [ 756.044671][T19035] kernfs_iop_setattr+0xe6/0x3f0 [ 756.050148][T19035] notify_change+0xbba/0xea0 [ 756.055395][T19035] do_truncate+0x1c2/0x250 [ 756.060358][T19035] path_openat+0x15b5/0x1d60 [ 756.065757][T19035] do_file_open+0x23e/0x4a0 [ 756.070835][T19035] do_sys_openat2+0x115/0x200 [ 756.076151][T19035] __x64_sys_openat+0x138/0x170 [ 756.081632][T19035] do_syscall_64+0x166/0x520 [ 756.086757][T19035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.093361][T19035] [ 756.093361][T19035] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 756.102357][T19035] __lock_acquire+0x164c/0x2de0 [ 756.107793][T19035] lock_acquire+0x115/0x350 [ 756.112823][T19035] down_write+0x96/0x200 [ 756.117792][T19035] kernfs_unlink_sibling+0x6d/0x170 [ 756.123909][T19035] kernfs_rename_ns+0x4a2/0x930 [ 756.129590][T19035] sysfs_rename_link_ns+0x16e/0x1b0 [ 756.135585][T19035] device_rename+0x110/0x210 [ 756.141831][T19035] __cfg80211_switch_netns+0x38f/0x640 [ 756.147977][T19035] cfg80211_pernet_exit+0x97/0x120 [ 756.153701][T19035] ops_undo_list+0x43d/0x8d0 [ 756.158885][T19035] cleanup_net+0x572/0x810 [ 756.163830][T19035] process_scheduled_works+0xc3d/0x1630 [ 756.169911][T19035] worker_thread+0xa47/0xfb0 [ 756.175060][T19035] kthread+0x38b/0x480 [ 756.179770][T19035] ret_from_fork+0x514/0xb70 [ 756.184911][T19035] ret_from_fork_asm+0x1a/0x30 [ 756.190407][T19035] [ 756.190407][T19035] other info that might help us debug this: [ 756.190407][T19035] [ 756.200656][T19035] Chain exists of: [ 756.200656][T19035] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 756.200656][T19035] [ 756.215151][T19035] Possible unsafe locking scenario: [ 756.215151][T19035] [ 756.222673][T19035] CPU0 CPU1 [ 756.228090][T19035] ---- ---- [ 756.233755][T19035] lock(&root->kernfs_rwsem); [ 756.238642][T19035] lock(cpuhp_state_mutex); [ 756.245881][T19035] lock(&root->kernfs_rwsem); [ 756.253446][T19035] lock(&root->kernfs_iattr_rwsem); [ 756.258919][T19035] [ 756.258919][T19035] *** DEADLOCK *** [ 756.258919][T19035] [ 756.267156][T19035] locks held by kworker/u8:36/19035: 6, last CPU#0: [ 756.273790][T19035] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 756.285045][T19035] #1: ffffc90004517c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 756.295598][T19035] #2: ffffffff90246308 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 756.305196][T19035] #3: ffffffff90254b40 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 756.315304][T19035] #4: ffff888145a80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: __cfg80211_switch_netns+0x27b/0x640 [ 756.325767][T19035] #5: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x77/0x930 [ 756.335882][T19035] [ 756.335882][T19035] stack backtrace: [ 756.341978][T19035] CPU: 0 UID: 0 PID: 19035 Comm: kworker/u8:36 Not tainted syzkaller #0 PREEMPT(full) [ 756.351708][T19035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.361783][T19035] Workqueue: netns cleanup_net [ 756.366589][T19035] Call Trace: [ 756.369894][T19035] [ 756.372924][T19035] dump_stack_lvl+0xe8/0x150 [ 756.377692][T19035] print_circular_bug+0x2e2/0x300 [ 756.382816][T19035] check_noncircular+0x12f/0x150 [ 756.387849][T19035] __lock_acquire+0x164c/0x2de0 [ 756.392822][T19035] ? __lock_acquire+0x747/0x2de0 [ 756.397807][T19035] ? __lock_acquire+0x747/0x2de0 [ 756.402948][T19035] lock_acquire+0x115/0x350 [ 756.407464][T19035] ? kernfs_unlink_sibling+0x6d/0x170 [ 756.412878][T19035] down_write+0x96/0x200 [ 756.417233][T19035] ? kernfs_unlink_sibling+0x6d/0x170 [ 756.422886][T19035] ? __pfx_down_write+0x10/0x10 [ 756.427745][T19035] ? kernfs_root+0x1c/0x230 [ 756.432362][T19035] ? kernfs_root+0x1c/0x230 [ 756.436870][T19035] ? kernfs_root+0x1c/0x230 [ 756.441378][T19035] ? kernfs_root+0x1ea/0x230 [ 756.445970][T19035] kernfs_unlink_sibling+0x6d/0x170 [ 756.451188][T19035] kernfs_rename_ns+0x4a2/0x930 [ 756.456047][T19035] sysfs_rename_link_ns+0x16e/0x1b0 [ 756.461265][T19035] device_rename+0x110/0x210 [ 756.465963][T19035] __cfg80211_switch_netns+0x38f/0x640 [ 756.471751][T19035] cfg80211_pernet_exit+0x97/0x120 [ 756.477057][T19035] ops_undo_list+0x43d/0x8d0 [ 756.481687][T19035] ? __pfx_ops_undo_list+0x10/0x10 [ 756.487818][T19035] ? idr_destroy+0x227/0x290 [ 756.492725][T19035] cleanup_net+0x572/0x810 [ 756.497188][T19035] ? __pfx_cleanup_net+0x10/0x10 [ 756.502145][T19035] ? rcu_is_watching+0x16/0xb0 [ 756.506921][T19035] ? process_scheduled_works+0x97a/0x1630 [ 756.512759][T19035] process_scheduled_works+0xc3d/0x1630 [ 756.518413][T19035] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.524408][T19035] ? assign_work+0x3cf/0x5d0 [ 756.529098][T19035] worker_thread+0xa47/0xfb0 [ 756.533711][T19035] ? __kthread_parkme+0x71/0x1f0 [ 756.538955][T19035] kthread+0x38b/0x480 [ 756.543031][T19035] ? __pfx_worker_thread+0x10/0x10 [ 756.548150][T19035] ? __pfx_kthread+0x10/0x10 [ 756.552742][T19035] ret_from_fork+0x514/0xb70 [ 756.557423][T19035] ? __pfx_ret_from_fork+0x10/0x10 [ 756.562695][T19035] ? __switch_to+0xc89/0x1420 [ 756.567672][T19035] ? __pfx_kthread+0x10/0x10 [ 756.572622][T19035] ret_from_fork_asm+0x1a/0x30 [ 756.577500][T19035] [ 757.161117][ T104] net_ratelimit: 9 callbacks suppressed [ 757.161142][ T104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.161557][ T104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.161903][ T104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.612913][T19035] hsr_slave_0: left promiscuous mode [ 757.613848][T19035] hsr_slave_1: left promiscuous mode [ 757.615068][T19035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.615086][T19035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.616037][T19035] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 757.616052][T19035] batman_adv: batadv0: Removing interface: ipvlan2 [ 757.616877][T19035] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 757.616891][T19035] batman_adv: batadv0: Removing interface: ipvlan3 [ 757.622560][T19035] veth0_macvtap: left promiscuous mode [ 758.223669][ T51] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 758.452502][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.587376][T19035] IPVS: stop unused estimator thread 0... [ 762.205553][T23692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.938726][T19035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.958579][T19035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.563895][T19035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog