last executing test programs: 5.080930788s ago: executing program 2 (id=3520): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x130, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xaa8f81e6499f6dce, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x4, 0x2, 0xd, 0x4}, {0x0, 0x3, 0x8, 0xa}, {0x2, 0x3, 0xf, 0x1}, {0x4, 0x4, 0x1, 0x8}], 0x10, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r1, r2}, 0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000440)={@remote, @multicast2, 0x0}, &(0x7f0000000480)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r2, 0x1f, 0x0, 0xffffffff, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r1, r3, 0x25, 0xd, @val=@tcx={@void, @value=r2, @void, @void, r5}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000700)=0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000880)={{r2, &(0x7f0000000740)='\x00', 0x6a4c1, &(0x7f0000000780)={@_ha_fsid={[0xfffffffa, 0x3]}, {0x80, 0x3, 0x5799}}, 0x9, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x401}, {[0x10001, 0x7, 0x9, 0x7fffffff]}, 0x8000, 0x12, &(0x7f0000000840)=""/18}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r8, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x14, 0x3, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000a40), &(0x7f0000000a80)=0x30) sendto$rxrpc(r7, &(0x7f0000000ac0)="9c3a4a49f0b2fcaa6deca3eddef457823c947fa1adee2242dfd039c61b1c95d00f6df187100963b9a3637eb14f4f61b4b489d2e33e733e4cca9ad6fafff8ea78d3fbd6153efcd44b520e7aaca7b32761f643fb4c8144b944d4ea", 0x5a, 0x4c080, &(0x7f0000000b40)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000000b80), 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000c00)={0xd, 0x30, [0x6, 0x100000001, 0x0, 0x5], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_devices(r4, &(0x7f0000000c40)='devices.deny\x00', 0x2, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000cc0), r7) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x4) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000d80)={@broadcast, @multicast1, 0x0}, &(0x7f0000000dc0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ec0)={'ip_vti0\x00', &(0x7f0000000e00)={'ip_vti0\x00', r6, 0x20, 0x700, 0x100, 0x81, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @local, {[@timestamp_addr={0x44, 0x44, 0x8d, 0x1, 0x3, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0x40}, {@local, 0x9}, {@remote, 0x1000}, {@rand_addr=0x64010101, 0x35d6}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xf8, 0x3, 0x0, [{@local, 0x9}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001340)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000000f00)={0x3f4, r10, 0x310, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc1b}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x20008021}, 0x20000084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000001500)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001540)=0x28) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f00000017c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000001600)={0x150, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x11}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x11}, {0x8, 0x13, 0x2}, {0x5}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000051) 5.004404541s ago: executing program 0 (id=3521): syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}, @ssrr={0x89, 0x7, 0x3a, [@broadcast]}]}}}}}}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000089000000080003"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r8, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r7, @ANYBLOB="15000443d8e2090000000000fdffffff000000000000"], 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=@getpolicy={0x2c0, 0x15, 0x100, 0x70bd28, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@empty, 0x4e24, 0x3, 0x4e20, 0x4, 0x2, 0x20, 0x20, 0x89, r3, r4}, 0x6e6bbe, 0x2}, [@algo_aead={0xeb, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x4f8, 0xc0, "0a8c22d9466dff6e2e80cb6519dc06db2260a327ae5830ffece2723fcdad907ddc8850eed6c50efb603324ff4b16969a699fc2620b56f1a6442bf4bd193653ba9e55b83daf39f4c5acb8b46e7a9daaac22969d49968a7b07d8f5ce1f9d4f252c46b00e1f1b7be72f6eba7819e2c46a7d266442f605206cb2c6466a2094499a073ccd3842b7c96ddd146886244c506d4becbea05bc77403128d7812f15c65c7"}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e24, @in=@multicast1}}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@empty, 0x0, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0xa, 0x2, 0x6}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @coaddr={0x14, 0xe, @in=@loopback}, @tfcpad={0x8, 0x16, 0x9}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, @in=@local, 0x4e23, 0x7, 0x4e20, 0x9, 0x2, 0x20, 0x20, 0x87, r5, r7}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x57b, 0x5b, 0x8000, 0x6, 0xffffffffffffffff, 0x100000001, 0x3}, {0xd, 0xffffffffffffffff, 0x1, 0x38}, {0x0, 0x3, 0x2a47}, 0x70bd2c, 0x3501, 0xa, 0x0, 0x9, 0x40}}, @mark={0xc, 0x15, {0x35075c, 0x3}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000844}, 0x40000) 4.843322511s ago: executing program 2 (id=3523): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='\x00', 0x8a000, &(0x7f0000000300)={@align=0x8, {0x4, 0x5, 0x9, 0x2000000000000000}}, 0x54d, &(0x7f0000000340), &(0x7f0000000380)=0x6}) connect$pptp(r4, &(0x7f00000004c0)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x11}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060101000000000000000007000000050001000700000007000100070000000c00078008000b40000000040500040002000000120003006269746d61703a69702c6d6163000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4801}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000041000100fcff0700040000000100000004004880140001801000108004000b8008000b00ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x0) 4.756155449s ago: executing program 4 (id=3524): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000240)="97", 0x0, 0x0, 0x0, 0x8, r2}, 0x38) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r4, 0x1ff}, &(0x7f0000000400)=0x8) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) 4.586879292s ago: executing program 0 (id=3526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) recvfrom$rxrpc(r5, &(0x7f0000000240)=""/180, 0xb4, 0x10000, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @private}}) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 4.530450539s ago: executing program 3 (id=3527): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYRES32=r0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x80}}, 0x0) (async) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) (async) syz_emit_ethernet(0xd2, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) 4.524322181s ago: executing program 4 (id=3528): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @str='nbd\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x1ff}]}, 0x24}}, 0x4008014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)="1dc4bfb9", 0x4) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x24040014}, 0x4000) 4.325745236s ago: executing program 2 (id=3529): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x6, r2, 0x0, r0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.257399767s ago: executing program 3 (id=3530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x30, r1, 0x389, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @val={0xc, 0x99, {0x904, 0x5e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4c841}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) 4.256405536s ago: executing program 4 (id=3531): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa797, 0xb, 0x20000000, 0x1000005}, 0x4f, 0x5}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x1ff, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x8, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8002, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x78b83211, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24dd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x4, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x4, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x5, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0xc}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x1, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0x1ff}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010100}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r10, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r10, @ANYBLOB="000129bd7000fbdbdf254a000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e00a80066697273746e616d65000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000009d4c65e2a15771efa1ba4db61f0d7467bc545054ee"], 0xdc}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000400001304"], 0x0, 0x6c, 0x0, 0x1}, 0x28) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) 3.976952787s ago: executing program 3 (id=3532): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0x7ff5}}, [@TCA_CHAIN={0x7, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20000800) 3.794445597s ago: executing program 3 (id=3533): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r1, 0x11, 0x70bd29, 0xffffffff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}}, 0x0) 3.671250491s ago: executing program 3 (id=3534): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x464, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x438, 0x2, [@TCA_BPF_ACT={0x434, 0x1, [@m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xf8, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x81, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc1571"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x27c, 0x13, 0x0, 0x0, {{0x7}, {0x140, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x76, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929"}}, @TCA_IPT_TARG={0xc1, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f51a102feb"}}]}, {0x115, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350e0500630400002400128009000100626f6e64000026c3a9fb2416a6c8b98e23fc2d00001400028008000200", @ANYRES32=r2, @ANYBLOB="0500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000000)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.64441896s ago: executing program 2 (id=3535): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) write$nci(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.587906477s ago: executing program 0 (id=3536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7fffffff, 0x20}, &(0x7f0000000080)=0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.519416556s ago: executing program 3 (id=3537): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) (async) close(0x3) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x6, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) (async, rerun: 64) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000001c0)) (async, rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}]}, 0xf) (rerun: 64) 1.379046486s ago: executing program 4 (id=3538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000000000000000000000000000000200"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r3 = accept$alg(r1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) sendmmsg$alg(r3, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@iv={0x28, 0x117, 0x2, 0x10, "159e95e98b4d1ed5411a98b279503760"}], 0x28, 0x1}], 0x1, 0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100003042abd70000000000000007400", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32, @ANYBLOB="f68ebfd4133b2f469a07290b0b510867010400000b001300", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) close(0x3) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18) (async) write$nci(r6, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r6, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) 1.34427279s ago: executing program 0 (id=3539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005e00)={&(0x7f0000000200)=ANY=[], 0x4780}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r3, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24880}, 0x800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x0, 0x563de1c6eba3ad61, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="6a5d0e8f64aa", @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @local, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendto$inet6(r10, &(0x7f0000000080)="046b", 0x2, 0x80, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0xfffffffffffffcfa, 0x0, 0x0, 0x0, 0x1}, 0x496}], 0x1, 0x102, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x8, 0x70bd27, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0x2}, {0xffe0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x81}}]}, 0x2c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x50, 0x2c, 0x100, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xffe0}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x8001}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1.135181049s ago: executing program 1 (id=3540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) socket$inet(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}}, 0x4000890) 990.333829ms ago: executing program 1 (id=3541): r0 = socket(0x34, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) write(r0, &(0x7f0000000000)="7ac154b454ad259506af3788da146b3fe794890e0d958dac2c9fc5d343a64d2fbba2f73fba89469739c1878df66407ad473d9ec84efbf66aa84b99b5ba7906659053c255866669bcc518b766bbef0d2c742d385690d8116f6918ddb3e6a9dec4cee6add97450fa013da33c58baae50e6267dc4aa24dcd5260db1823463727e3aa66ed4303b9f2d14acef00f6056fa19d865c6f59c6d325dd07625894e8edac8a5b95e9179220ba1fac5c27a990af1d6c4e4f0d54c7", 0xb5) write(r0, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000180), 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000420001000000000000000000030100000700010000112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3d67aa5b0000040002800400038000000000"], 0x60}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)={0x2, 'ip6gre0\x00', {0x1}, 0x25}) 896.686391ms ago: executing program 0 (id=3542): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000004c0)={r0, &(0x7f00000002c0)='!\\&&#]($)\x94&`)!\\\x00', 0x204580, &(0x7f0000000380)={@_ha_fsid={[0x0, 0x6]}, {0x6, 0x8001, 0x9, 0xa67}}, 0x2, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x158}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f00000001c0)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="2dba95cf6ddfbab774947bad2d0b1f349b961a74ed9d5bb803c2ba45f88a7384bd405a7a8bc52e58b1dee3a9fbfc9ccb13cd118ee6f3ec527c03003923aca743ce9896fa4397a269078c3b999bd13791f898a2d9942bead084470a4a2f951a1836d924bb4510071bceab2c030bee32a1c060cb1dd6aee55ad1096e36b0a34a774d09084d1b0b3eee685c49ffda336f9381743c5a8c2e5907fec0abd16330a81d33bbad8c9c1d38fd61a65e559a3ac6e372c9a91bdb014a87", @ANYRES32=0x0, @ANYBLOB="a2210400000000002b000300776c616e30000000000000000000000014001680100001800c000700fcffffff030000005c6dffad67fe04565856c8823cffb4ae486bbc6c6ae70295d7ab7ba8fa3a2e68691dfefbb1e2166f0b56650852d27db20fbaf0cdae9c5a453eee84d1e5b65214d47fd0afe4ecb9273a4dab5f373851b4aebe790981adbe2a3c2b1015f6ea68d218d11cc80c865720ee520d7cb6695aae95ef57746c648c7435db5712559c572ed08b5cff18cd95d8397c3216144278f2372e3661e1bb246a095a8aa38b0f93777f7ed600b78d2da92bc35d1e8e47d17bdfb7a3d90ce9b57cc2f51bf3bf4db41a0c9e1419b3ff"], 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000004c0)={r0, &(0x7f00000002c0)='!\\&&#]($)\x94&`)!\\\x00', 0x204580, &(0x7f0000000380)={@_ha_fsid={[0x0, 0x6]}, {0x6, 0x8001, 0x9, 0xa67}}, 0x2, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x158}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f00000001c0)=0x2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="2dba95cf6ddfbab774947bad2d0b1f349b961a74ed9d5bb803c2ba45f88a7384bd405a7a8bc52e58b1dee3a9fbfc9ccb13cd118ee6f3ec527c03003923aca743ce9896fa4397a269078c3b999bd13791f898a2d9942bead084470a4a2f951a1836d924bb4510071bceab2c030bee32a1c060cb1dd6aee55ad1096e36b0a34a774d09084d1b0b3eee685c49ffda336f9381743c5a8c2e5907fec0abd16330a81d33bbad8c9c1d38fd61a65e559a3ac6e372c9a91bdb014a87", @ANYRES32=0x0, @ANYBLOB="a2210400000000002b000300776c616e30000000000000000000000014001680100001800c000700fcffffff030000005c6dffad67fe04565856c8823cffb4ae486bbc6c6ae70295d7ab7ba8fa3a2e68691dfefbb1e2166f0b56650852d27db20fbaf0cdae9c5a453eee84d1e5b65214d47fd0afe4ecb9273a4dab5f373851b4aebe790981adbe2a3c2b1015f6ea68d218d11cc80c865720ee520d7cb6695aae95ef57746c648c7435db5712559c572ed08b5cff18cd95d8397c3216144278f2372e3661e1bb246a095a8aa38b0f93777f7ed600b78d2da92bc35d1e8e47d17bdfb7a3d90ce9b57cc2f51bf3bf4db41a0c9e1419b3ff"], 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) (async) 771.473887ms ago: executing program 4 (id=3543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x7, 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040000000090a01040000000000000e00070000000c00118008000100647570000900020073797a31000000000900010073797a30000000000800054000000021380000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000000900020073797a3100000000140000001000010000000000000000000084000a"], 0xc0}}, 0x0) 689.103348ms ago: executing program 1 (id=3544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4004080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_regs}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000000007116b61979e090001006c3274700000000008000240b54ba2fbda1eba9173797a30000000000900020073797a3200000000010000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 557.262107ms ago: executing program 0 (id=3545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x210, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e22, 0x4e24], [0x40, 0x3, 0x6, 0x8, 0x34, 0x0, 0x0, 0x5, 0x8000, 0x81, 0xfffffffd, 0xfffffffe, 0x8000, 0x7ff, 0x44, 0x58639972, 0x9, 0x10, 0x8, 0x3ff, 0xfffffff2, 0x91, 0x9, 0x1, 0x1ca8, 0xb96d, 0x100, 0x9, 0x80000000, 0x8, 0xe, 0x6, 0x26c, 0xb9ae, 0x80, 0x400, 0x99d8, 0x1, 0x10000, 0x7, 0x6, 0x3, 0x9, 0x5, 0xad3, 0x6, 0xff, 0x8, 0x8, 0x1, 0x0, 0x7, 0xb, 0xd, 0x6, 0xc, 0x5, 0x40000000, 0x10, 0x3, 0x3, 0x78, 0x9, 0x9], 0x0, [{0x0, 0x0, 0xd5}, {0x0, 0x51, 0x6}, {0x3, 0x3, 0xa}, {0x8, 0x80, 0x8}], 0x0, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@private=0xa010103, @loopback, 0xff000000, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x62, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x6, 0x31, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) connect$l2tp(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002dbd7000fb9bdf25020082000100000009000200010000000000000000000000000000000bcaba279c478f3d1a739de4270226604adcca05829a4be7d3ecc972bebd71291ac3d4a178fe05c80ed21e944e5f4dd1c1109a4bead2b6740127c8ed2ea0086a792d222344ea9adb51a36b35923c11c1fd011d8bd2e661959a8fafac9d31981bf6405aecb48bf77232d490a0650571e92519de27614f90387527a4bf616ec5fd9b7034d69b2c96511570ec5e0040c702537a204937aef2d82c7f01553a23572455d5305d559c982fcb413a"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x8801) r5 = socket(0xa, 0x801, 0x0) getsockopt(r5, 0x3, 0x5, &(0x7f0000000000)=""/106, &(0x7f00000000c0)=0x6a) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="95adc6e89ef8df89375697169ece3d4ec2f810df0f7dd2f021fde9a56ef40c771cca2659d1f5b411280a31fa1208b4b2b8493e9f0489e9b5bcc6beaf55c03417d79534fda65934857e54b08848bb3f2fee44eb24329d233733b76800d81b524895fa00"/108, @ANYRES16=r1, @ANYBLOB="000828bd7000fbdbdf252000000008000300", @ANYRES32=r3, @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYRES64=r6, @ANYBLOB="b4c4e602777ef17e14c4e202518dc7e0433d6913cbfd348a417fc4e3ffebdf634614e5e8d05e3dfb54f7b32b6659114f9bc97eafca2930b763fab3a9dcd3f0849cc8607b7c56e34ca357888c4cfe9ca4592d346af31fe13e0605c7e80048eeb4ae33a2cefac83dab3c4c93a1e8623f124d7f6d00e4d8152bb419573ac2472d9e02d676ddb37bcc429c0bfa3cd9faf2d5e7e89e56adcd3713b2917dfa2d596b5915eea9fe149ad119c1a8a1776f48a77e3141aea96ee42d09ce356162e7b6b7d56f43f7", @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001", @ANYRESHEX=r3, @ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 543.351939ms ago: executing program 2 (id=3546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r4, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) 492.078559ms ago: executing program 4 (id=3547): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000001ae400000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) (rerun: 32) 466.984374ms ago: executing program 1 (id=3548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 147.360257ms ago: executing program 1 (id=3549): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) shutdown(r1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f00000001c0)=0xfc, 0x4) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r2, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4c23, 0x800e5, @mcast2, 0xffefffff}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xf) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x4000, r2}, 0x18) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000022c0)={{r2, &(0x7f0000000400)='.\xf5}\xa1:Y\x00\x17\x84\xd0\x97\x03\x1d*\x1cx\xa1\"\xcd', 0x84040, &(0x7f0000000200)={@_ha_fsid={[0xe, 0x10]}, {0xfff, 0xd, 0x10000, 0xc5a}}, 0x800080, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x85}, 0x1, &(0x7f0000002280)=[{0x2, 0x2, &(0x7f00000002c0)='\x00', &(0x7f0000001240)="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", 0x1000, 0x10}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="186a00000d000000000000003702000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000000675ba7272aa8255b8beb7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018260000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc800) 83.621213ms ago: executing program 2 (id=3550): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, '\x00', 0xf4e, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=3551): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) close(0x4) kernel console output (not intermixed with test programs): ttributes in process `syz.4.2045'. [ 297.040135][T13901] netlink: 'syz.2.2050': attribute type 2 has an invalid length. [ 297.040178][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 297.044872][T13891] 8021q: adding VLAN 0 to HW filter on device bond19 [ 297.175667][T13890] bond11: Invalid ad_actor_system MAC address. [ 297.176971][T13890] bond11: option ad_actor_system: invalid value (1) [ 297.199906][T13890] bond11 (unregistering): Released all slaves [ 297.424824][T13897] bond11: Invalid ad_actor_system MAC address. [ 297.424876][T13897] bond11: option ad_actor_system: invalid value (1) [ 297.436345][T13897] bond11 (unregistering): Released all slaves [ 297.660028][T13922] netlink: Invalid conntrack timeout [ 297.660086][T13922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.740161][T13928] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.932584][T13937] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 297.968508][T13940] veth0: entered promiscuous mode [ 298.126706][T13938] veth0: left promiscuous mode [ 298.140836][T13946] netlink: 'syz.4.2059': attribute type 39 has an invalid length. [ 298.456353][T13961] 8021q: adding VLAN 0 to HW filter on device bond15 [ 298.501451][T13963] macvlan2: entered promiscuous mode [ 298.506936][T13963] macvlan2: entered allmulticast mode [ 298.507865][T13963] bond15: (slave macvlan2): Error -22 calling dev_set_mtu [ 298.798670][T13979] tipc: Enabling of bearer rejected, failed to enable media [ 298.826834][T13981] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 299.105883][T13997] unsupported nlmsg_type 40 [ 299.439124][T14015] netlink: NAT attribute has 1 unknown bytes [ 299.439190][T14015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.788456][T14026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.819525][T14031] macvlan0: entered promiscuous mode [ 299.819571][T14031] macvlan0: entered allmulticast mode [ 299.833406][T14031] bond7: (slave macvlan0): Error -22 calling dev_set_mtu [ 299.867174][T14036] xt_nfacct: accounting object `syz0' does not exist [ 300.112157][T14044] syzkaller1: entered promiscuous mode [ 300.112201][T14044] syzkaller1: entered allmulticast mode [ 300.198054][T14046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.211306][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.224571][T14053] macvlan0: entered promiscuous mode [ 300.224611][T14053] macvlan0: entered allmulticast mode [ 300.224877][T14053] bond8: entered allmulticast mode [ 300.224916][T14053] bond8: entered promiscuous mode [ 300.225671][T14053] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 300.227419][T14053] team0: Port device macvlan0 added [ 300.240420][T14046] netlink: 'syz.1.2087': attribute type 12 has an invalid length. [ 300.459450][T14059] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 300.606396][T14061] netlink: 'syz.2.2091': attribute type 9 has an invalid length. [ 300.606436][T14061] netlink: 'syz.2.2091': attribute type 4 has an invalid length. [ 300.666177][T14068] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 300.920736][T14086] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.991635][T14086] macvlan1: entered promiscuous mode [ 301.000757][T14086] macvlan1: entered allmulticast mode [ 301.011969][T14086] bond9: (slave macvlan1): Error -22 calling dev_set_mtu [ 301.474911][T14117] Bluetooth: MGMT ver 1.23 [ 302.167468][T14154] __nla_validate_parse: 13 callbacks suppressed [ 302.169311][T14154] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2109'. [ 302.176238][T14155] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2114'. [ 302.190766][T14139] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.216324][T14155] netlink: 'syz.4.2114': attribute type 1 has an invalid length. [ 302.216380][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 302.252324][T14149] macvlan1: entered promiscuous mode [ 302.259373][T14149] macvlan1: entered allmulticast mode [ 302.268160][T14149] bond11: (slave macvlan1): Error -22 calling dev_set_mtu [ 302.764407][T14175] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 303.029498][T14181] netlink: 'syz.4.2120': attribute type 21 has an invalid length. [ 303.168273][T14199] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2126'. [ 303.220366][T14200] syzkaller1: entered promiscuous mode [ 303.220594][T14200] syzkaller1: entered allmulticast mode [ 303.627176][T14223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2133'. [ 305.790225][T14180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.395179][T14265] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 306.395232][T14265] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2144'. [ 306.639166][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 306.652528][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 306.665548][T14281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 306.718889][T14280] xt_hashlimit: size too large, truncated to 1048576 [ 306.965653][T14291] netlink: 'syz.0.2151': attribute type 10 has an invalid length. [ 307.043278][T14291] dummy0: left promiscuous mode [ 307.061125][T14291] team0: Port device dummy0 added [ 307.063237][T14293] tunl0: entered promiscuous mode [ 307.069489][T14293] netlink: 'syz.3.2153': attribute type 4 has an invalid length. [ 307.069508][T14293] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2153'. [ 307.152030][T14296] syzkaller0: entered promiscuous mode [ 307.152079][T14296] syzkaller0: entered allmulticast mode [ 307.213171][T14299] netlink: 'syz.3.2153': attribute type 29 has an invalid length. [ 307.779931][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2160'. [ 307.840120][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2160'. [ 307.857591][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2160'. [ 308.669339][T14358] IPVS: length: 8 != 1152 [ 308.746351][T14368] SET target dimension over the limit! [ 309.406507][T14398] netlink: 'syz.0.2180': attribute type 8 has an invalid length. [ 309.414577][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 309.522459][T14393] bond20: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 309.552907][T14393] bond20 (unregistering): Released all slaves [ 309.627993][T14398] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.629198][T14398] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.980995][T14418] batman_adv: batadv0: Adding interface: veth0 [ 309.987471][T14418] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.013528][T14418] batman_adv: batadv0: Interface activated: veth0 [ 310.127268][T14431] netlink: Setting conntrack mark requires 'commit' flag. [ 310.136307][T14431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.258535][T14470] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 311.433540][T14485] bridge_slave_1: left allmulticast mode [ 311.454972][T14485] bridge_slave_1: left promiscuous mode [ 311.464554][T14485] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.534851][T14485] bridge_slave_0: left allmulticast mode [ 311.541270][T14485] bridge_slave_0: left promiscuous mode [ 311.547260][T14485] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.937562][T14498] tipc: Started in network mode [ 311.937607][T14498] tipc: Node identity ac14140f, cluster identity 4711 [ 311.938766][T14498] tipc: New replicast peer: 255.255.255.255 [ 311.947757][T14498] tipc: Enabled bearer , priority 10 [ 311.969918][T14508] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2208'. [ 312.462353][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'. [ 312.946186][T14568] veth1_macvtap: left promiscuous mode [ 313.114603][ T5719] tipc: Node number set to 2886997007 [ 313.228256][T14575] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 313.246475][T14575] bond11 (unregistering): Released all slaves [ 313.556060][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 313.576985][T14585] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 313.588125][T14585] netlink: 'syz.2.2222': attribute type 2 has an invalid length. [ 313.588364][T14587] veth1_to_bond: entered allmulticast mode [ 313.600407][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 313.603333][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 313.625779][T14587] veth1_to_bond (unregistering): left allmulticast mode [ 313.837932][T14592] netlink: 'syz.1.2224': attribute type 5 has an invalid length. [ 314.617340][ T4935] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 314.796050][T14641] 8021q: adding VLAN 0 to HW filter on device bond20 [ 314.803160][ T5280] veth1_macvtap: entered promiscuous mode [ 315.002730][T14650] openvswitch: netlink: Duplicate or invalid key (type 0). [ 315.072969][T14657] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2239'. [ 315.086945][T14657] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2239'. [ 315.099913][T14657] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2239'. [ 315.118950][T14658] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2239'. [ 315.119293][T14658] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2239'. [ 315.119310][T14658] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2239'. [ 315.297543][T14667] openvswitch: netlink: Duplicate or invalid key (type 0). [ 315.303763][T14662] bridge6: entered promiscuous mode [ 315.303835][T14662] bridge6: entered allmulticast mode [ 315.341530][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 316.138413][T14702] xt_NFQUEUE: number of total queues is 0 [ 316.197843][T14702] macsec1: entered promiscuous mode [ 316.547541][T14722] netlink: 'syz.0.2257': attribute type 6 has an invalid length. [ 317.046686][T14747] 8021q: adding VLAN 0 to HW filter on device bond21 [ 317.172118][ T5621] Bluetooth: hci4: command 0x0405 tx timeout [ 317.196602][T14759] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 317.329796][T14764] netlink: 'syz.0.2269': attribute type 8 has an invalid length. [ 317.393568][T14757] macvlan1: entered promiscuous mode [ 317.393610][T14757] macvlan1: entered allmulticast mode [ 317.409505][T14757] bond12: entered promiscuous mode [ 317.416358][T14757] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 317.440734][T14757] bond12: left promiscuous mode [ 317.495204][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.502863][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.540456][T14768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.790018][T14816] bond0: entered promiscuous mode [ 317.796744][T14816] batadv0: entered promiscuous mode [ 317.804846][T14816] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 317.817268][T14816] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 317.846087][T14816] bond0: left promiscuous mode [ 317.866543][T14816] batadv0: left promiscuous mode [ 317.958932][T14819] bond0: entered promiscuous mode [ 317.966174][T14819] batadv0: entered promiscuous mode [ 317.976374][T14819] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 317.987080][T14819] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 318.003006][T14819] bond0: left promiscuous mode [ 318.010362][T14819] batadv0: left promiscuous mode [ 318.379328][T14853] sctp: [Deprecated]: syz.3.2282 (pid 14853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.379328][T14853] Use struct sctp_sack_info instead [ 318.431534][T14855] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.443537][T14855] macvlan6: entered promiscuous mode [ 318.443585][T14855] macvlan6: entered allmulticast mode [ 318.444321][T14855] bond11: (slave macvlan6): Error -22 calling dev_set_mtu [ 318.672628][T14867] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 318.721831][T14867] 8021q: adding VLAN 0 to HW filter on device bond22 [ 318.750476][T14867] __nla_validate_parse: 13 callbacks suppressed [ 318.750529][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 318.800744][T14867] bond22: (slave geneve3): making interface the new active one [ 318.812503][T14867] bond22: (slave geneve3): Enslaving as an active interface with an up link [ 319.082828][T14881] netlink: 'syz.4.2290': attribute type 4 has an invalid length. [ 319.440521][T14898] 8021q: adding VLAN 0 to HW filter on device bond23 [ 319.798535][T14916] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 319.888858][T14916] bond24: entered promiscuous mode [ 319.889330][T14916] 8021q: adding VLAN 0 to HW filter on device bond24 [ 320.139081][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 320.294349][T14949] 8021q: adding VLAN 0 to HW filter on device bond13 [ 320.306713][T14956] syzkaller0: left promiscuous mode [ 320.306760][T14956] syzkaller0: left allmulticast mode [ 320.328593][T14949] macvlan1: entered promiscuous mode [ 320.338886][T14949] macvlan1: entered allmulticast mode [ 320.345435][T14949] bond13: (slave macvlan1): Error -22 calling dev_set_mtu [ 320.870626][T14979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2311'. [ 320.916444][T14975] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 320.929411][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2314'. [ 320.992362][T14982] 8021q: adding VLAN 0 to HW filter on device team1 [ 321.315465][T14996] 8021q: adding VLAN 0 to HW filter on device bond16 [ 321.351392][T14999] macvlan2: entered promiscuous mode [ 321.351436][T14999] macvlan2: entered allmulticast mode [ 321.352250][T14999] bond16: (slave macvlan2): Error -22 calling dev_set_mtu [ 321.498913][T15004] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2320'. [ 321.498974][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 321.577151][T15004] dvmrp0: entered allmulticast mode [ 321.879460][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2328'. [ 321.928785][T15034] xt_hashlimit: size too large, truncated to 1048576 [ 321.983906][T15038] C: renamed from 04±ÿ [ 321.996777][T15038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.006163][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 322.042940][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 322.055197][T15040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.320716][T15047] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2334'. [ 322.345194][T15047] Bluetooth: hci0: unsupported parameter 5135 [ 322.347849][T15047] Bluetooth: hci0: unsupported parameter 8192 [ 322.347867][T15047] Bluetooth: hci0: unsupported parameter 5135 [ 322.347878][T15047] Bluetooth: hci0: unsupported parameter 8192 [ 322.350375][T15048] Bluetooth: hci0: unsupported parameter 5135 [ 322.350391][T15048] Bluetooth: hci0: unsupported parameter 8192 [ 322.350402][T15048] Bluetooth: hci0: unsupported parameter 5135 [ 322.350413][T15048] Bluetooth: hci0: unsupported parameter 8192 [ 322.602236][T15065] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 322.753082][T15070] netlink: 'syz.4.2339': attribute type 12 has an invalid length. [ 322.768355][T15069] netlink: 'syz.4.2339': attribute type 12 has an invalid length. [ 322.774036][T14790] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 322.992876][T15086] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.204726][T15091] netlink: 'syz.1.2346': attribute type 2 has an invalid length. [ 323.275714][T15096] netlink: 'syz.2.2347': attribute type 4 has an invalid length. [ 323.418930][T15106] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 323.418987][T15106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.436962][T15103] netlink: 'syz.4.2348': attribute type 30 has an invalid length. [ 323.684619][T15118] geneve2: entered promiscuous mode [ 323.693343][T15118] geneve2: entered allmulticast mode [ 323.811578][T15126] __nla_validate_parse: 4 callbacks suppressed [ 323.811630][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 323.831760][T15126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2355'. [ 324.029553][T15133] block nbd2: Unsupported socket: should be TCP or UNIX. [ 324.147009][T15139] openvswitch: netlink: IP tunnel dst address not specified [ 324.147069][T15139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.208062][T15139] tipc: Enabled bearer , priority 0 [ 324.219320][T15143] x_tables: duplicate underflow at hook 2 [ 324.274456][T15146] xt_TPROXY: Can be used only with -p tcp or -p udp [ 324.460575][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 324.460634][T15149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2362'. [ 324.530220][T15151] bond25: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 324.548971][T15151] bond25 (unregistering): Released all slaves [ 324.663732][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2366'. [ 324.663789][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2366'. [ 324.694594][ T59] IPVS: starting estimator thread 0... [ 324.786492][T15166] IPVS: using max 24 ests per chain, 57600 per kthread [ 324.873791][T15173] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 325.087050][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'. [ 325.113384][T15187] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 325.117563][T15187] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2372'. [ 325.126136][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'. [ 325.254173][T15192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.379657][T15196] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2377'. [ 325.939363][T15237] netlink: 'syz.4.2390': attribute type 4 has an invalid length. [ 326.207765][T15251] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 326.226838][T15251] xt_hashlimit: size too large, truncated to 1048576 [ 326.519923][T15270] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 326.545541][T15269] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 326.605270][T15268] team0: Device xfrm0 is of different type [ 326.672327][T15269] tipc: Started in network mode [ 326.677399][T15269] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 326.685012][T15269] tipc: Enabled bearer , priority 0 [ 326.735869][T15270] tipc: Enabling of bearer rejected, already enabled [ 326.837856][T15280] vlan4: entered promiscuous mode [ 326.851818][T15280] bridge0: entered promiscuous mode [ 326.853664][T15280] vlan4: entered allmulticast mode [ 326.853680][T15280] bridge0: entered allmulticast mode [ 327.017691][T15290] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 327.439884][T15310] syzkaller0: entered promiscuous mode [ 327.439937][T15310] syzkaller0: entered allmulticast mode [ 327.601482][T15318] netlink: 'syz.0.2411': attribute type 21 has an invalid length. [ 327.747409][T15326] bond14: option fail_over_mac: invalid value (16) [ 327.760154][T15326] bond14 (unregistering): Released all slaves [ 328.294081][ T5728] tipc: Node number set to 11578026 [ 328.388966][T15356] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.852454][T15340] __nla_validate_parse: 17 callbacks suppressed [ 328.859523][T15340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2415'. [ 328.884934][T15366] netlink: 'syz.3.2421': attribute type 8 has an invalid length. [ 328.884985][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 328.885272][T15366] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.887289][T15366] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.893165][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 329.997606][T15413] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2431'. [ 330.053375][T15419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2432'. [ 330.162271][T15422] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 330.494015][T15431] xt_esp: unknown flags DD [ 330.600331][T15433] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 330.787056][T15433] 8021q: adding VLAN 0 to HW filter on device bond25 [ 330.792236][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 331.037043][T15439] bond25: (slave geneve4): making interface the new active one [ 331.066523][T15439] bond25: (slave geneve4): Enslaving as an active interface with an up link [ 331.861389][T15485] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 332.248872][T15517] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2456'. [ 332.644762][T15541] hsr0: entered allmulticast mode [ 332.648197][T15541] hsr_slave_0: entered allmulticast mode [ 332.723613][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 332.818930][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 332.934652][T15562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2462'. [ 335.495132][T15536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.496850][T15550] netlink: 'syz.3.2464': attribute type 2 has an invalid length. [ 335.496869][T15550] __nla_validate_parse: 1 callbacks suppressed [ 335.496879][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 335.780404][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 335.860079][T15582] block nbd2: not configured, cannot reconfigure [ 335.886332][T15579] bond14: option xmit_hash_policy: invalid value (64) [ 335.895363][T15579] bond14 (unregistering): Released all slaves [ 336.254302][T15600] ip6t_hbh: Not strict - not implemented [ 336.258424][T15600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.269081][T15600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.514574][T15574] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 336.753131][T15619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.790589][T15625] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 337.050699][T15635] openvswitch: netlink: Tunnel attr 259 out of range max 16 [ 337.055435][T15638] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2493'. [ 337.315960][T15651] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 337.330517][T15651] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 337.510650][T15667] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2501'. [ 337.510707][T15667] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2501'. [ 337.705117][T15676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2504'. [ 337.846776][T15684] netlink: 'syz.0.2506': attribute type 1 has an invalid length. [ 337.918554][T15684] bond19: option mode: invalid value (7) [ 337.933007][T15684] bond19 (unregistering): Released all slaves [ 338.099700][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2507'. [ 338.169748][T15684] sctp: [Deprecated]: syz.0.2506 (pid 15684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.169748][T15684] Use struct sctp_sack_info instead [ 338.715450][T15723] netlink: 'syz.0.2511': attribute type 1 has an invalid length. [ 338.715519][T15723] netlink: 'syz.0.2511': attribute type 7 has an invalid length. [ 338.715766][T15723] netlink: 'syz.0.2511': attribute type 8 has an invalid length. [ 338.715782][T15723] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2511'. [ 338.715797][T15723] NCSI netlink: No device for ifindex 65584 [ 339.020700][T15734] tipc: Enabling of bearer rejected, already enabled [ 339.068740][T15734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2514'. [ 339.207888][T15739] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2515'. [ 339.292621][T15742] bond15: (slave .`): Releasing active interface [ 339.347685][T15742] batman_adv: batadv0: Interface deactivated: veth0 [ 339.347743][T15742] batman_adv: batadv0: Removing interface: veth0 [ 339.370510][T15742] bridge_slave_0: left allmulticast mode [ 339.377188][T15742] bridge_slave_0: left promiscuous mode [ 339.377449][T15742] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.403336][T15742] bridge_slave_1: left allmulticast mode [ 339.409155][T15742] bridge_slave_1: left promiscuous mode [ 339.409407][T15742] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.437391][T15742] .`: (slave bond_slave_0): Releasing backup interface [ 339.464920][T15742] .`: (slave bond_slave_1): Releasing backup interface [ 339.495478][T15742] team0: Port device team_slave_0 removed [ 339.539202][T15742] team0: Port device team_slave_1 removed [ 339.540328][T15742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.540374][T15742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.569856][T15742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.579620][T15742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.597954][T15742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.601289][T15744] tipc: Started in network mode [ 339.601316][T15744] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 339.601497][T15744] tipc: Enabled bearer , priority 0 [ 339.642575][ T13] tipc: Resetting bearer [ 340.610281][T15792] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 340.623235][ T5728] tipc: Node number set to 11578026 [ 341.110446][T15811] netlink: 'syz.1.2532': attribute type 7 has an invalid length. [ 341.379478][T15831] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 341.421437][ T31] audit: type=1804 audit(1788890053.083:4): pid=15827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2539" name="/newroot/491/cgroup.controllers" dev="tmpfs" ino=2540 res=1 errno=0 [ 341.421586][ T31] audit: type=1800 audit(1788890053.083:5): pid=15827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2539" name="cgroup.controllers" dev="tmpfs" ino=2540 res=0 errno=0 [ 342.095110][T15856] __nla_validate_parse: 3 callbacks suppressed [ 342.095515][T15856] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2544'. [ 342.097059][T15858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.194077][T15865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.368194][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 342.543626][T15879] bridge_slave_1: default FDB implementation only supports local addresses [ 343.251200][T15914] bond14: option mode: invalid value (10) [ 343.265120][T15914] bond14 (unregistering): Released all slaves [ 346.179190][T15919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.411729][T15950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2566'. [ 346.455820][T15950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2566'. [ 346.548193][T15954] tipc: Trying to set illegal importance in message [ 346.550777][T15962] veth0: entered promiscuous mode [ 346.570552][T15959] veth0: left promiscuous mode [ 347.434637][T16008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2579'. [ 347.537280][T16017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2583'. [ 347.659741][T16015] : renamed from bond0 (while UP) [ 347.707033][T16027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2584'. [ 347.926387][T16032] syzkaller0: mtu greater than device maximum [ 347.961685][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2588'. [ 348.087713][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 348.497872][T16067] netlink: 'syz.0.2596': attribute type 1 has an invalid length. [ 348.497921][T16067] netlink: 'syz.0.2596': attribute type 4 has an invalid length. [ 348.497935][T16067] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2596'. [ 348.499867][T16070] netlink: 'syz.0.2596': attribute type 1 has an invalid length. [ 348.499883][T16070] netlink: 'syz.0.2596': attribute type 4 has an invalid length. [ 348.499894][T16070] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2596'. [ 348.618360][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 348.631385][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 348.897363][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 349.294348][T16108] Unsupported ieee802154 address type: 0 [ 349.392991][T16108] netlink: 'syz.1.2610': attribute type 4 has an invalid length. [ 349.424327][T16108] bridge_slave_0 (unregistering): left allmulticast mode [ 349.424381][T16108] bridge_slave_0 (unregistering): left promiscuous mode [ 349.424463][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.454083][T16120] Unsupported ieee802154 address type: 0 [ 349.776587][T16131] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 349.809569][T16138] dvmrp0: entered allmulticast mode [ 350.050220][T16150] netlink: 'syz.4.2618': attribute type 21 has an invalid length. [ 350.050304][T16150] netlink: 'syz.4.2618': attribute type 1 has an invalid length. [ 350.105299][T16150] netlink: 'syz.4.2618': attribute type 11 has an invalid length. [ 350.105719][T16150] netlink: 'syz.4.2618': attribute type 10 has an invalid length. [ 350.445815][T16167] netlink: 'syz.1.2624': attribute type 3 has an invalid length. [ 350.477596][T16169] nbd: illegal input index 65508 [ 350.633000][T16174] 8021q: adding VLAN 0 to HW filter on device bond14 [ 350.635601][T16174] bridge0: port 1(bond14) entered blocking state [ 350.639003][T16174] bridge0: port 1(bond14) entered disabled state [ 350.639158][T16174] bond14: entered allmulticast mode [ 350.648340][T16174] bond14: entered promiscuous mode [ 350.656879][T16174] bridge0: port 1(bond14) entered blocking state [ 350.656999][T16174] bridge0: port 1(bond14) entered forwarding state [ 350.713545][ T6482] bridge0: port 1(bond14) entered disabled state [ 351.399903][T16222] xt_TCPMSS: Only works on TCP SYN packets [ 351.446834][ T6475] IPVS: starting estimator thread 0... [ 351.453394][T16227] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 351.471145][T16225] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 351.479185][T16225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.545975][T16229] IPVS: using max 28 ests per chain, 67200 per kthread [ 351.671249][T16235] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 351.671307][T16235] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 351.748441][T16235] netlink: 'syz.1.2642': attribute type 16 has an invalid length. [ 351.809176][T16235] erspan0: entered promiscuous mode [ 351.885742][T16256] x_tables: duplicate underflow at hook 1 [ 351.885874][T16256] x_tables: duplicate underflow at hook 1 [ 351.887875][T16256] x_tables: duplicate underflow at hook 1 [ 351.888399][T16256] x_tables: duplicate underflow at hook 1 [ 351.898159][T16256] x_tables: duplicate underflow at hook 1 [ 351.898252][T16256] x_tables: duplicate underflow at hook 1 [ 351.898325][T16256] x_tables: duplicate underflow at hook 1 [ 351.898398][T16256] x_tables: duplicate underflow at hook 1 [ 351.898470][T16256] x_tables: duplicate underflow at hook 1 [ 351.898553][T16256] x_tables: duplicate underflow at hook 1 [ 351.947115][T16235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.955813][T16235] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.956441][T16235] tipc: Resetting bearer [ 351.956754][T16235] tipc: Resetting bearer [ 351.960264][T16235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.061421][T16235] veth0_to_bond: left allmulticast mode [ 352.086474][T16235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.088927][T16235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.096066][T16235] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.096129][T16235] 0·: left allmulticast mode [ 352.096142][T16235] hsr_slave_0: left allmulticast mode [ 352.097550][T16235] veth1_macvtap: left promiscuous mode [ 352.098790][T16235] veth0_macvtap: left promiscuous mode [ 352.100007][T16235] veth0_macvtap: entered promiscuous mode [ 352.102835][T16235] veth1_macvtap: entered promiscuous mode [ 352.110846][T16235] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 352.113988][T16235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.116000][T16235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.134298][T16235] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 352.138796][T16235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.144100][T16235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.145307][T16235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.154794][T16235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.161853][ T59] bond1: (slave gretap1): link status up again after 0 ms [ 352.163747][T16235] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.178560][T16235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.182195][ T6486] bond1: (slave gretap1): link status up again after 0 ms [ 352.193554][T16235] macvlan0: left promiscuous mode [ 352.193574][T16235] bond8: left promiscuous mode [ 352.193758][T16235] macvlan0: left allmulticast mode [ 352.193771][T16235] bond8: left allmulticast mode [ 352.196965][T16235] 8021q: adding VLAN 0 to HW filter on device bond10 [ 352.201609][ T13] bond1: (slave gretap1): link status up again after 0 ms [ 352.207692][T16235] 8021q: adding VLAN 0 to HW filter on device bond12 [ 352.219465][T16235] geneve2: left promiscuous mode [ 352.219489][T16235] geneve2: left allmulticast mode [ 352.221930][ T59] bond1: (slave gretap1): link status up again after 0 ms [ 352.233802][ T59] bond1: (slave gretap1): link status up again after 0 ms [ 352.257174][ T6486] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.291526][T16235] 8021q: adding VLAN 0 to HW filter on device bond14 [ 352.330764][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.330884][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.477048][T16266] __nla_validate_parse: 6 callbacks suppressed [ 352.477124][T16266] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2650'. [ 352.513837][T16269] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 352.561914][ T6475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.562016][ T6475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.801896][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2653'. [ 352.871329][T16281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2655'. [ 352.888614][T16281] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2655'. [ 352.954471][T16278] syzkaller1: entered promiscuous mode [ 352.954522][T16278] syzkaller1: entered allmulticast mode [ 353.082728][ T3343] net_ratelimit: 17 callbacks suppressed [ 353.083183][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 353.194245][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 353.266126][T16306] netlink: NAT attribute has 4 unknown bytes [ 353.266185][T16306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.290396][T16305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2660'. [ 353.321401][ T59] bond1: (slave gretap1): failed to get link speed/duplex [ 353.331849][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 353.392973][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2661'. [ 353.433502][ T6482] bond1: (slave gretap1): failed to get link speed/duplex [ 353.541783][ T6482] bond1: (slave gretap1): failed to get link speed/duplex [ 353.643325][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2666'. [ 353.670093][ T6486] bond1: (slave gretap1): failed to get link speed/duplex [ 353.728376][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 353.878215][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 353.962196][ T59] bond1: (slave gretap1): failed to get link speed/duplex [ 354.039367][T16340] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 354.040106][T16340] team0: Device ipvlan2 is already an upper device of the team interface [ 354.092642][ T59] bond1: (slave gretap1): failed to get link speed/duplex [ 354.313354][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2678'. [ 355.184079][T16399] vlan0: entered promiscuous mode [ 355.300890][T16407] validate_nla: 5 callbacks suppressed [ 355.307079][T16407] netlink: 'syz.4.2691': attribute type 6 has an invalid length. [ 355.753142][T16426] netlink: 'syz.3.2697': attribute type 32 has an invalid length. [ 356.045847][T16420] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 356.580391][T16450] batadv_slave_0: entered allmulticast mode [ 357.108690][T16483] SET target dimension over the limit! [ 357.203315][ T4935] block nbd2: Receive control failed (result -107) [ 357.482869][T16509] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 358.164017][ T6482] net_ratelimit: 31 callbacks suppressed [ 358.164070][ T6482] bond1: (slave gretap1): failed to get link speed/duplex [ 358.170880][T16531] syzkaller1: entered promiscuous mode [ 358.170939][T16531] syzkaller1: entered allmulticast mode [ 358.177902][T16533] netlink: 'syz.2.2725': attribute type 32 has an invalid length. [ 358.345849][ T6486] bond1: (slave gretap1): failed to get link speed/duplex [ 358.472450][ T3393] bond1: (slave gretap1): failed to get link speed/duplex [ 358.628937][T16551] __nla_validate_parse: 28 callbacks suppressed [ 358.629211][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2731'. [ 358.652671][ T6482] bond1: (slave gretap1): failed to get link speed/duplex [ 358.768020][ T3393] bond1: (slave gretap1): failed to get link speed/duplex [ 358.891920][ T3393] bond1: (slave gretap1): failed to get link speed/duplex [ 358.913900][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 359.001824][ T6482] bond1: (slave gretap1): failed to get link speed/duplex [ 359.024890][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.037500][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.037816][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.038101][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.038394][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.050855][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.051280][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.051503][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.123250][ T3393] bond1: (slave gretap1): failed to get link speed/duplex [ 359.232308][ T3393] bond1: (slave gretap1): failed to get link speed/duplex [ 359.366679][T16584] smc: adding net device ip6erspan0 with user defined pnetid SYZ2 [ 359.382996][ T6475] bond1: (slave gretap1): failed to get link speed/duplex [ 359.551968][T16598] netlink: 'syz.0.2746': attribute type 39 has an invalid length. [ 360.140803][T16627] netlink: 'syz.3.2755': attribute type 8 has an invalid length. [ 360.147746][T16628] netlink: 'syz.3.2755': attribute type 8 has an invalid length. [ 360.569258][T16648] vlan3: entered allmulticast mode [ 360.576647][T16648] veth1_virt_wifi: entered allmulticast mode [ 361.433865][T16687] ªªªªª»: renamed from bond_slave_0 (while UP) [ 362.125899][T16719] xt_check_table_hooks: 56 callbacks suppressed [ 362.125948][T16719] x_tables: duplicate underflow at hook 2 [ 363.204078][T16760] syzkaller1: entered promiscuous mode [ 363.204121][T16760] syzkaller1: entered allmulticast mode [ 363.242649][ T6488] net_ratelimit: 27 callbacks suppressed [ 363.242713][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 363.351339][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 363.480552][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 363.596808][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 363.779790][T16794] __nla_validate_parse: 133 callbacks suppressed [ 363.779845][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2795'. [ 363.842027][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 363.857116][ T4935] Bluetooth: hci4: link tx timeout [ 363.857311][ T4935] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.862685][ T5621] Bluetooth: hci4: link tx timeout [ 363.862704][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.885498][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2795'. [ 363.952361][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 364.062912][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 364.089302][ T5621] Bluetooth: hci4: link tx timeout [ 364.089341][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.134187][ T5621] Bluetooth: hci4: link tx timeout [ 364.134236][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.171133][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 364.281066][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 364.392442][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 364.454864][ T31] audit: type=1804 audit(1788890076.103:6): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2799" name="/newroot/557/cgroup.controllers" dev="tmpfs" ino=2857 res=1 errno=0 [ 364.478152][ T31] audit: type=1800 audit(1788890076.143:7): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2799" name="cgroup.controllers" dev="tmpfs" ino=2857 res=0 errno=0 [ 364.514877][T16819] netlink: 'syz.3.2800': attribute type 10 has an invalid length. [ 364.539297][T16819] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 364.593829][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 364.593879][T16827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2801'. [ 364.593896][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 364.949458][ T5621] Bluetooth: hci4: link tx timeout [ 364.949499][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 365.004016][T16846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2807'. [ 365.007922][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 365.161030][T16846] team0 (unregistering): Port device team_slave_0 removed [ 365.171979][ T5621] Bluetooth: hci4: link tx timeout [ 365.172021][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 365.224319][T16846] team0 (unregistering): Port device team_slave_1 removed [ 365.256513][T16856] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2810'. [ 365.284036][T16846] team0 (unregistering): Port device dummy0 removed [ 365.309297][T16855] netlink: 'syz.4.2810': attribute type 7 has an invalid length. [ 365.333892][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 365.334153][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 365.421185][T16844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.703477][T16881] vlan0: entered promiscuous mode [ 365.892691][ T5621] Bluetooth: hci4: command 0x0405 tx timeout [ 366.528547][T16932] netlink: 'syz.1.2828': attribute type 8 has an invalid length. [ 367.379158][T16969] netlink: 'syz.2.2840': attribute type 1 has an invalid length. [ 368.281098][T16596] net_ratelimit: 29 callbacks suppressed [ 368.281148][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 368.433665][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 368.543555][T17021] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 368.555017][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 368.671352][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 368.691212][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.781709][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 368.891059][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 369.001405][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 369.111288][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 369.241509][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 369.426002][T17066] __nla_validate_parse: 70 callbacks suppressed [ 369.426062][T17066] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2864'. [ 369.426417][T17066] 8021q: VLANs not supported on gre0 [ 370.092249][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 370.213437][ T6476] wlan1: Trigger new scan to find an IBSS to join [ 370.707073][T17137] x_tables: duplicate underflow at hook 1 [ 370.824377][T17134] xt_CT: No such helper "snmp_trap" [ 370.979717][T17147] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 371.200762][T17164] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2884'. [ 371.481658][T17173] netlink: 'syz.1.2887': attribute type 8 has an invalid length. [ 371.492771][T17176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2889'. [ 371.901089][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2895'. [ 371.975330][T17202] ksmbd: Unknown IPC event: 1, ignore. [ 372.026528][T17194] sctp: [Deprecated]: syz.1.2895 (pid 17194) Use of int in max_burst socket option deprecated. [ 372.026528][T17194] Use struct sctp_assoc_value instead [ 372.035688][T17194] sctp: [Deprecated]: syz.1.2895 (pid 17194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.035688][T17194] Use struct sctp_sack_info instead [ 372.036177][T17194] netlink: 'syz.1.2895': attribute type 10 has an invalid length. [ 372.086882][T17208] netlink: 'syz.0.2896': attribute type 4 has an invalid length. [ 372.443524][T17225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2902'. [ 372.807835][T17243] netlink: 'syz.4.2906': attribute type 83 has an invalid length. [ 372.982451][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2908'. [ 373.078196][T17254] Bluetooth: hci0: unsupported parameter 5161 [ 373.084596][T17254] Bluetooth: hci0: unsupported parameter 8192 [ 373.091277][T17254] Bluetooth: hci0: unsupported parameter 5161 [ 373.091308][T17254] Bluetooth: hci0: unsupported parameter 8192 [ 373.298613][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2915'. [ 373.622717][ T6483] net_ratelimit: 36 callbacks suppressed [ 373.622766][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 373.623803][T17285] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 373.623822][T17285] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2918'. [ 373.624277][T17285] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 373.624292][T17285] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.2918'. [ 373.733725][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 373.772320][T17287] netlink: 'syz.4.2921': attribute type 9 has an invalid length. [ 373.852740][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 373.961320][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 374.040349][T17296] xt_hashlimit: size too large, truncated to 1048576 [ 374.071171][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 374.181227][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 374.322537][T17315] bond0: invalid ARP target 0.0.0.0 specified for addition [ 374.331616][T17315] bond0: option arp_ip_target: invalid value (0) [ 374.340585][T17315] bond0 (unregistering): Released all slaves [ 374.358989][T17317] netlink: 'syz.3.2928': attribute type 12 has an invalid length. [ 374.453768][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 374.562558][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 374.671182][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 374.748042][T17334] xt_TCPMSS: Only works on TCP SYN packets [ 374.779540][T17331] netlink: 'syz.0.2933': attribute type 29 has an invalid length. [ 374.793738][T17335] netlink: 'syz.2.2934': attribute type 12 has an invalid length. [ 374.906380][T17337] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 374.934329][T16596] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.938940][ T6483] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.938983][ T6483] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.939015][ T6483] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.253139][ T6483] wlan1: Trigger new scan to find an IBSS to join [ 375.255809][T17357] __nla_validate_parse: 6 callbacks suppressed [ 375.255827][T17357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2941'. [ 375.255841][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2941'. [ 375.500404][T17361] bond19: entered promiscuous mode [ 375.502720][T17361] 8021q: adding VLAN 0 to HW filter on device bond19 [ 375.580188][T17375] 8021q: adding VLAN 0 to HW filter on device bond19 [ 375.589600][T17375] bond19: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 375.589647][T17375] bond19: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 375.614254][T17375] bond19: (slave ip6gre3): making interface the new active one [ 375.622403][T17375] ip6gre3: entered promiscuous mode [ 375.629346][T17375] bond19: (slave ip6gre3): Enslaving as an active interface with an up link [ 375.711252][T17378] macvtap0: entered allmulticast mode [ 375.711334][T17378] veth0_macvtap: entered allmulticast mode [ 375.724397][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'. [ 376.799688][T17442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2960'. [ 376.847568][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2960'. [ 376.904096][T17451] validate_nla: 1 callbacks suppressed [ 376.907744][T17451] netlink: 'syz.0.2961': attribute type 9 has an invalid length. [ 376.922016][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 377.057346][T17439] veth0_macvtap: left promiscuous mode [ 377.261582][T17464] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2964'. [ 377.482940][T17456] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 377.538314][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.551332][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.553947][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.572253][T16596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.582478][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.590263][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.603599][T17462] syzkaller0: entered promiscuous mode [ 377.609302][T17462] syzkaller0: entered allmulticast mode [ 377.869087][T17481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2967'. [ 378.793342][ T6483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.793409][ T6483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.940762][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.940853][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.981212][T17525] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.147615][ T6483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.167139][ T6483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.231900][T17546] net_ratelimit: 23 callbacks suppressed [ 379.237950][T17546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.263428][T17543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2978'. [ 379.274461][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 379.442548][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 379.596603][ T6483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.596670][ T6483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.633837][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 379.651759][ T4935] Bluetooth: hci5: command tx timeout [ 379.777489][ T6483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.788120][ T6483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.861347][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 380.040293][T17576] macvlan1: entered promiscuous mode [ 380.047072][T17576] macvlan1: entered allmulticast mode [ 380.248620][T17591] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 380.402965][T17594] xt_hashlimit: size too large, truncated to 1048576 [ 380.406155][T17575] 8021q: adding VLAN 0 to HW filter on device bond15 [ 380.421376][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 380.531666][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 380.651335][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 380.958909][T17614] macvtap0: entered promiscuous mode [ 380.958951][T17614] bond8: entered promiscuous mode [ 380.975748][T17614] macvtap0: entered allmulticast mode [ 380.992797][T17614] bond8: entered allmulticast mode [ 380.993423][T17614] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 380.998730][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 381.141589][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 381.245726][T17627] syzkaller0: entered promiscuous mode [ 381.252277][T17627] syzkaller0: entered allmulticast mode [ 381.498786][ T6483] dvmrp0: left allmulticast mode [ 381.731865][ T4935] Bluetooth: hci5: command tx timeout [ 381.740121][T17659] netlink: 'syz.2.3009': attribute type 1 has an invalid length. [ 381.750260][T17659] netlink: 'syz.2.3009': attribute type 3 has an invalid length. [ 381.760049][T17659] __nla_validate_parse: 2 callbacks suppressed [ 381.766530][T17659] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3009'. [ 382.167951][ T6483] bond16 (unregistering): (slave ip6gretap1): Releasing active interface [ 382.347238][ T6483] bond11 (unregistering): (slave macvlan2): Releasing backup interface [ 382.413474][ T6483] bond9 (unregistering): (slave gretap0): Releasing backup interface [ 382.490198][ T6483] bond25 (unregistering): (slave geneve4): Releasing active interface [ 382.514852][ T6483] bond22 (unregistering): (slave geneve3): Releasing active interface [ 382.672747][ T6483] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 382.688159][ T6483] .` (unregistering): Released all slaves [ 382.697027][ T6483] bond2 (unregistering): Released all slaves [ 382.715049][ T6483] bond1 (unregistering): Released all slaves [ 382.740513][ T6483] bond3 (unregistering): Released all slaves [ 382.763659][ T6483] bond4 (unregistering): Released all slaves [ 382.789744][ T6483] bond5 (unregistering): Released all slaves [ 382.808535][ T6483] bond6 (unregistering): Released all slaves [ 382.825582][ T6483] bond7 (unregistering): Released all slaves [ 382.856535][ T6483] bond8 (unregistering): Released all slaves [ 382.874085][ T6483] bond9 (unregistering): (slave bond10): Releasing backup interface [ 382.887427][ T6483] bond9 (unregistering): Released all slaves [ 382.907867][ T6483] bond10 (unregistering): Released all slaves [ 382.924838][ T6483] bond11 (unregistering): Released all slaves [ 382.947241][ T6483] bond12 (unregistering): Released all slaves [ 382.968598][ T6483] bond13 (unregistering): Released all slaves [ 382.990578][ T6483] bond14 (unregistering): Released all slaves [ 383.008266][ T6483] bond15 (unregistering): Released all slaves [ 383.028858][ T6483]  (unregistering): Released all slaves [ 383.049297][ T6483] bond16 (unregistering): Released all slaves [ 383.073978][ T6483] bond17 (unregistering): Released all slaves [ 383.087696][ T6483] bond18 (unregistering): Released all slaves [ 383.098573][ T6483] bond19 (unregistering): Released all slaves [ 383.122888][ T6483] bond20 (unregistering): Released all slaves [ 383.133977][ T6483] bond21 (unregistering): Released all slaves [ 383.149297][ T6483] bond22 (unregistering): Released all slaves [ 383.169032][ T6483] bond23 (unregistering): Released all slaves [ 383.179994][ T6483] bond24 (unregistering): Released all slaves [ 383.203082][ T6483] bond25 (unregistering): Released all slaves [ 383.522887][ T6483] tipc: Disabling bearer [ 383.550735][ T6483] tipc: Left network mode [ 383.811493][ T4935] Bluetooth: hci5: command tx timeout [ 384.341770][T17642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.788188][T16595] net_ratelimit: 3 callbacks suppressed [ 384.788237][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 384.920098][T17471] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.922876][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.923045][T17471] bridge_slave_0: entered allmulticast mode [ 384.939619][T17471] bridge_slave_0: entered promiscuous mode [ 385.036496][T17756] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3022'. [ 385.048617][T17756] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3022'. [ 385.210834][T17471] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.214890][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.215065][T17471] bridge_slave_1: entered allmulticast mode [ 385.231293][T17471] bridge_slave_1: entered promiscuous mode [ 385.421246][T17471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.442464][T17471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.795005][T17775] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3027'. [ 385.814692][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 385.893969][ T4935] Bluetooth: hci5: command tx timeout [ 385.940771][T17471] team0: Port device team_slave_0 added [ 385.981942][T17797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.269649][T17471] team0: Port device team_slave_1 added [ 388.322914][ T6483] hsr_slave_0: left promiscuous mode [ 388.343916][ T6483] hsr_slave_1: left promiscuous mode [ 388.396803][ T6483] veth0_macvtap: left promiscuous mode [ 388.396982][ T6483] veth1_vlan: left promiscuous mode [ 388.397062][ T6483] veth0_vlan: left promiscuous mode [ 388.540814][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 388.555817][T17822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 388.679263][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 389.226369][T17471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.226429][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.226475][T17471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.233160][T17471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.233176][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.233224][T17471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.492768][T17471] hsr_slave_0: entered promiscuous mode [ 389.495406][T17471] hsr_slave_1: entered promiscuous mode [ 389.573807][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 389.874734][T17837] ip6gre2: entered allmulticast mode [ 389.893222][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 389.913936][T17841] tc_dump_action: action bad kind [ 389.965699][ T6476] tipc: Subscription rejected, illegal request [ 390.301456][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 390.309536][ T6483] IPVS: stop unused estimator thread 0... [ 390.463199][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 390.724533][T17863] tipc: Enabling of bearer rejected, failed to enable media [ 390.868941][T17845] bond16 (unregistering): Released all slaves [ 390.957055][T17886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3044'. [ 391.004585][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 391.056513][T17893] netlink: 'syz.4.3044': attribute type 3 has an invalid length. [ 391.056561][T17893] netlink: 'syz.4.3044': attribute type 4 has an invalid length. [ 391.056928][T17893] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.3044'. [ 391.242654][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 391.250307][T17884] ip6_vti0: entered promiscuous mode [ 391.266891][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 391.300167][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 391.612939][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 391.742149][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 391.893701][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 392.070335][T17471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.097660][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.098651][T17471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.164336][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.175406][T17471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.208721][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.217735][T17471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.255080][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.291696][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 392.404754][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 392.535002][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 392.702324][T17958] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 392.760867][T17963] x_tables: duplicate underflow at hook 2 [ 392.875895][T17958] bond16: entered promiscuous mode [ 392.888441][T17958] 8021q: adding VLAN 0 to HW filter on device bond16 [ 392.895211][T17471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.981552][T17471] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.024037][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.024175][ T6485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.055439][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.055584][ T6483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.285876][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'. [ 393.300053][T17980] Cannot find del_set index 32 as target [ 393.300230][T17980] Cannot find del_set index 32 as target [ 393.300365][T17980] Cannot find del_set index 32 as target [ 393.305298][T17980] Cannot find del_set index 32 as target [ 393.305447][T17980] Cannot find del_set index 32 as target [ 393.305567][T17980] Cannot find del_set index 32 as target [ 393.305687][T17980] Cannot find del_set index 32 as target [ 393.305807][T17980] Cannot find del_set index 32 as target [ 393.305940][T17980] Cannot find del_set index 32 as target [ 393.306081][T17980] Cannot find del_set index 32 as target [ 393.723136][T17999] veth1: entered promiscuous mode [ 394.130400][T18015] erspan0: entered promiscuous mode [ 394.136163][T18015] erspan0: entered allmulticast mode [ 394.589662][T18038] netlink: 'syz.0.3075': attribute type 2 has an invalid length. [ 394.594881][T18038] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3075'. [ 394.661918][T18041] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3076'. [ 394.853305][T17471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.993899][T17471] veth0_vlan: entered promiscuous mode [ 395.023740][T17471] veth1_vlan: entered promiscuous mode [ 395.074737][T17471] veth0_macvtap: entered promiscuous mode [ 395.162580][T17471] veth1_macvtap: entered promiscuous mode [ 395.181320][T16596] net_ratelimit: 17 callbacks suppressed [ 395.181379][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 395.239707][T17471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.265168][T17471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.307362][T18062] netlink: 'syz.4.3083': attribute type 10 has an invalid length. [ 395.339435][T18062] team0: Device dummy0 is of different type [ 395.420787][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'. [ 395.424168][T18064] openvswitch: netlink: Multiple metadata blocks provided [ 395.522264][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.522357][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 395.522736][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.523022][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.553600][ T6483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.654686][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 395.747434][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.747490][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.773457][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 395.888638][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.888693][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.912213][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 396.023260][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 396.145414][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 396.261889][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 396.376182][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 396.526937][T18116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3094'. [ 396.760546][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.773611][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.782710][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.793474][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.805049][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.960005][T18130] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3095'. [ 397.156886][T18141] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.3097'. [ 398.518301][T18171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.529323][T18167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.851888][ T4935] Bluetooth: hci4: command tx timeout [ 399.524273][T18239] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3114'. [ 399.675473][T18245] xfrm1: entered allmulticast mode [ 399.832438][T18242] bond12 (unregistering): Released all slaves [ 400.140645][T18259] raw_sendmsg: syz.1.3118 forgot to set AF_INET. Fix it! [ 400.248882][T18280] x_tables: unsorted underflow at hook 2 [ 400.303662][T18124] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.303886][T18124] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.304041][T18124] bridge_slave_0: entered allmulticast mode [ 400.317978][T18124] bridge_slave_0: entered promiscuous mode [ 400.327546][T18124] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.330766][T18124] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.336264][T18124] bridge_slave_1: entered allmulticast mode [ 400.346224][T18124] bridge_slave_1: entered promiscuous mode [ 400.351198][ T6483] net_ratelimit: 22 callbacks suppressed [ 400.351216][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 400.523198][T18124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.534258][T18289] netlink: 'syz.1.3123': attribute type 6 has an invalid length. [ 400.546441][T18124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.593846][T18124] team0: Port device team_slave_0 added [ 400.604143][T18124] team0: Port device team_slave_1 added [ 400.642677][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 400.651415][T18124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.658638][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.685689][T18124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.706108][T18124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.713380][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.739614][T18124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.844615][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 400.933023][ T4935] Bluetooth: hci4: command tx timeout [ 401.194349][T18307] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 401.194386][T18307] bond1: option packets_per_slave: allowed values 0 - 65535 [ 401.219613][T18307] bond1 (unregistering): Released all slaves [ 401.286424][T18320] sctp: [Deprecated]: syz.0.3133 (pid 18320) Use of int in maxseg socket option. [ 401.286424][T18320] Use struct sctp_assoc_value instead [ 401.370834][T18124] hsr_slave_0: entered promiscuous mode [ 401.379802][T18124] hsr_slave_1: entered promiscuous mode [ 401.388388][T18124] debugfs: 'hsr0' already exists in 'hsr' [ 401.388442][T18124] Cannot create hsr debugfs directory [ 401.464363][ T31] audit: type=1804 audit(1788890113.123:8): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3136" name="/newroot/628/cgroup.controllers" dev="tmpfs" ino=3221 res=1 errno=0 [ 401.464443][ T31] audit: type=1800 audit(1788890113.123:9): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3136" name="cgroup.controllers" dev="tmpfs" ino=3221 res=0 errno=0 [ 401.829926][T18345] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3138'. [ 401.961224][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 402.059361][T18124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.071130][T18124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.082303][T18124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 402.112030][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 402.221406][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 402.459314][T18124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.459382][T18124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.459410][T18124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 402.495468][T18366] syzkaller0: left promiscuous mode [ 402.495519][T18366] syzkaller0: left allmulticast mode [ 402.501358][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 402.506693][T18366] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3147'. [ 402.739052][T18124] : (slave netdevsim1): Releasing backup interface [ 402.753389][T18124] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 402.757212][T18124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.759916][T18124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.759952][T18124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 402.928716][T18124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.928785][T18124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.928831][T18124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 402.978075][T18383] syzkaller0: entered promiscuous mode [ 402.978130][T18383] syzkaller0: entered allmulticast mode [ 403.021165][ T4935] Bluetooth: hci4: command tx timeout [ 403.052513][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 403.057776][T18389] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3154'. [ 403.084360][T18389] gretap0: entered promiscuous mode [ 403.104286][T18389] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3154'. [ 403.104414][T18389] 0ªî{X¹¦: renamed from gretap0 [ 403.129825][T18389] 0ªî{X¹¦: left promiscuous mode [ 403.129875][T18389] 0ªî{X¹¦: entered allmulticast mode [ 403.140759][T18389] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 403.165632][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 403.566432][T18409] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 403.585258][T18407] nftables ruleset with unbound set [ 403.663880][T18409] block nbd296: server does not support multiple connections per device. [ 403.665222][T18409] block nbd296: shutting down sockets [ 403.720399][T18124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.740170][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.750524][T18124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.786545][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.795608][T18124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.819361][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.829193][T18124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.856621][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.060227][T18124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.133852][T18124] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.157645][T16595] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.157789][T16595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.193796][T16596] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.193931][T16596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.240641][T18433] netlink: 1092 bytes leftover after parsing attributes in process `syz.4.3169'. [ 404.282852][T18437] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3168'. [ 405.091261][ T4935] Bluetooth: hci4: command tx timeout [ 405.139703][T18472] vlan3: entered allmulticast mode [ 405.139761][T18472] bond0: entered allmulticast mode [ 405.372658][ T6485] net_ratelimit: 11 callbacks suppressed [ 405.372712][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 405.431118][T18124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.581737][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 405.616845][T18124] veth0_vlan: entered promiscuous mode [ 405.639986][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 405.834923][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 405.858103][T18124] veth1_vlan: entered promiscuous mode [ 405.935578][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'. [ 406.035941][T18124] veth0_macvtap: entered promiscuous mode [ 406.044186][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 406.066631][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'. [ 406.083235][T18124] veth1_macvtap: entered promiscuous mode [ 406.158338][T18124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.183841][T18124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.212374][ T6485] bond1: (slave gretap1): failed to get link speed/duplex [ 406.237463][T18515] netlink: 'syz.4.3191': attribute type 8 has an invalid length. [ 406.304897][ T6480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.308000][ T6485] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.308814][ T6485] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.308851][ T6485] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.325059][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 406.423789][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.423838][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.485836][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.485878][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.492732][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 406.520836][T18524] netlink: NAT attribute has 5 unknown bytes [ 406.522479][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.603545][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 407.369377][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.383951][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.394536][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.404439][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.413875][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.706133][T18605] gretap0: entered promiscuous mode [ 408.724692][T18605] vlan2: entered promiscuous mode [ 409.439011][T18643] netlink: 'syz.3.3221': attribute type 9 has an invalid length. [ 409.491420][ T4935] Bluetooth: hci1: command tx timeout [ 409.956734][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3228'. [ 410.034506][T18663] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3227'. [ 410.298491][ T6476] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 410.363260][T18686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3232'. [ 410.461369][ T6483] net_ratelimit: 26 callbacks suppressed [ 410.461431][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 410.572180][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 410.682498][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 410.691543][T18689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3232'. [ 410.691591][T18689] nbd: nbd64 already in use [ 410.801848][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 410.863790][T18705] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3236'. [ 411.206022][ T5624] udevd[5624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 411.322613][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 411.322671][T18718] netlink: 'syz.4.3240': attribute type 18 has an invalid length. [ 411.322705][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 411.341303][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 411.341336][T18718] netlink: 'syz.4.3240': attribute type 18 has an invalid length. [ 411.341349][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 411.409222][T18552] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.410400][T18552] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.410551][T18552] bridge_slave_0: entered allmulticast mode [ 411.435750][T18552] bridge_slave_0: entered promiscuous mode [ 411.448629][T18552] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.450332][T18552] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.450514][T18552] bridge_slave_1: entered allmulticast mode [ 411.473803][T18552] bridge_slave_1: entered promiscuous mode [ 411.572188][ T4935] Bluetooth: hci1: command tx timeout [ 411.607322][T18552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.617841][T18552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.634404][T18729] smc: removing ib device syz0 [ 411.813927][T18552] team0: Port device team_slave_0 added [ 411.828397][T18729] smbdirect: ib_dev[syz0] removed [ 411.830420][T18552] team0: Port device team_slave_1 added [ 411.888891][T18743] netlink: 'syz.4.3247': attribute type 3 has an invalid length. [ 411.888930][T18743] netlink: 'syz.4.3247': attribute type 1 has an invalid length. [ 411.888962][T18743] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3247'. [ 412.033428][T18552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.033470][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.033497][T18552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.047759][T18552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.047777][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.047802][T18552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.240238][T18755] netlink: 'syz.1.3250': attribute type 1 has an invalid length. [ 412.424906][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 412.456154][T18552] hsr_slave_0: entered promiscuous mode [ 412.463103][T18552] hsr_slave_1: entered promiscuous mode [ 412.479071][T18552] debugfs: 'hsr0' already exists in 'hsr' [ 412.479127][T18552] Cannot create hsr debugfs directory [ 412.501447][T18765] netlink: 'syz.1.3252': attribute type 5 has an invalid length. [ 412.762770][T18777] nbd: socks must be embedded in a SOCK_ITEM attr [ 412.764500][T18778] nbd: socks must be embedded in a SOCK_ITEM attr [ 413.242251][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 413.347908][T18798] openvswitch: netlink: Flow key attr not present in new flow. [ 413.462044][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 413.652099][ T4935] Bluetooth: hci1: command tx timeout [ 413.654685][T18805] ip6t_rpfilter: unknown options [ 413.655601][T18805] netlink: 'syz.3.3258': attribute type 1 has an invalid length. [ 413.655618][T18805] netlink: 'syz.3.3258': attribute type 2 has an invalid length. [ 414.101653][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 414.282404][T18552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.295733][T18552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.445947][T18827] Bluetooth: hci0: unsupported parameter 5135 [ 414.445998][T18827] Bluetooth: hci0: unsupported parameter 8192 [ 414.446031][T18827] Bluetooth: hci0: unsupported parameter 5135 [ 414.446044][T18827] Bluetooth: hci0: unsupported parameter 8192 [ 414.843580][T18552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.859663][T18552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.911252][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 415.119587][T18552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.119652][T18552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.494808][T18552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.494878][T18552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.532328][ T6480] net_ratelimit: 1 callbacks suppressed [ 415.532392][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 415.572074][T18845] __nla_validate_parse: 5 callbacks suppressed [ 415.572139][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 415.572174][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 415.642772][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 415.734749][ T4935] Bluetooth: hci1: command tx timeout [ 415.755384][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 415.759916][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 415.759937][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 415.941749][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 416.191151][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 416.283551][T18873] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3271'. [ 416.334328][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 416.334451][T18877] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3271'. [ 416.365855][T18876] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3271'. [ 416.441080][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 416.446619][T18552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.494138][T18552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.495319][T18552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.553835][T18552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.556729][T18552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.598755][T18552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.607536][T18552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.640136][T18552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.655716][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 416.761673][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 416.893291][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 416.964868][T18910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3279'. [ 417.059071][T18910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3279'. [ 417.209955][T18926] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3280'. [ 417.498475][T18552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.560149][T18552] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.615262][T16595] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.615400][T16595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.647252][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.647384][ T6483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.789674][T18552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.789730][T18552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.057430][ T31] audit: type=1800 audit(1788890129.713:10): pid=18954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3288" name=0A dev="tmpfs" ino=95 res=0 errno=0 [ 418.345222][T18969] netlink: 'syz.4.3290': attribute type 16 has an invalid length. [ 418.353642][T18969] netlink: 'syz.4.3290': attribute type 17 has an invalid length. [ 418.442203][T18969] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.453377][T18969] tipc: Resetting bearer [ 418.460052][T18969] tipc: Resetting bearer [ 418.550444][T18969] veth3: left allmulticast mode [ 418.605175][T18969] veth1_vlan: entered promiscuous mode [ 418.642385][T18969] bridge6: left promiscuous mode [ 418.642445][T18969] bridge6: left allmulticast mode [ 418.655954][T18969] bridge7: left promiscuous mode [ 418.665640][T18969] bridge7: left allmulticast mode [ 418.675447][T18969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 418.687619][T18969] bond5: left promiscuous mode [ 418.693045][T18969] bond5: left allmulticast mode [ 418.693456][T18969] 8021q: adding VLAN 0 to HW filter on device bond5 [ 418.708503][T18969] veth7: left allmulticast mode [ 418.716196][T18969] 8021q: adding VLAN 0 to HW filter on device bond6 [ 418.724115][T18969] bond7: left promiscuous mode [ 418.729024][T18969] ipip1: left promiscuous mode [ 418.736345][T18969] veth0_to_team: entered promiscuous mode [ 418.775904][T18969] 8021q: adding VLAN 0 to HW filter on device eth0 [ 418.787249][T18969] 8021q: adding VLAN 0 to HW filter on device eth1 [ 418.801624][T18969] 8021q: adding VLAN 0 to HW filter on device eth2 [ 418.811730][T18969] 8021q: adding VLAN 0 to HW filter on device eth3 [ 418.815421][T18984] netlink: 'syz.1.3291': attribute type 11 has an invalid length. [ 418.840550][T18969] vlan3: left allmulticast mode [ 418.849474][T18969] bond0: left allmulticast mode [ 419.425864][T19003] sctp: [Deprecated]: syz.4.3294 (pid 19003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.425864][T19003] Use struct sctp_sack_info instead [ 419.485919][T18552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.609327][T18552] veth0_vlan: entered promiscuous mode [ 419.645204][T18552] veth1_vlan: entered promiscuous mode [ 419.787555][T19012] netlink: 'syz.2.3298': attribute type 23 has an invalid length. [ 419.789273][T18552] veth0_macvtap: entered promiscuous mode [ 419.827017][T18552] veth1_macvtap: entered promiscuous mode [ 419.862474][T18552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.909688][T18552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.953150][ T6480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.953320][ T6480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.953355][ T6480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.953386][ T6480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.327947][T16595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.327995][T16595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.498092][ T6480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.498150][ T6480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.557575][T19042] bridge1: entered promiscuous mode [ 420.557627][T19042] bridge1: entered allmulticast mode [ 420.593436][T19042] team0: Port device bridge1 added [ 420.601511][ T3343] net_ratelimit: 18 callbacks suppressed [ 420.601550][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 420.616789][T19049] bridge0: port 3(team0) entered blocking state [ 420.616893][T19049] bridge0: port 3(team0) entered disabled state [ 420.617029][T19049] team0: entered allmulticast mode [ 420.617045][T19049] team_slave_0: entered allmulticast mode [ 420.617060][T19049] team_slave_1: entered allmulticast mode [ 420.667091][T19049] team0: entered promiscuous mode [ 420.696601][T19049] team_slave_0: entered promiscuous mode [ 420.696909][T19049] team_slave_1: entered promiscuous mode [ 420.710282][T19040] __nla_validate_parse: 4 callbacks suppressed [ 420.710336][T19040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3306'. [ 420.748065][T19049] bridge0: port 3(team0) entered blocking state [ 420.748223][T19049] bridge0: port 3(team0) entered forwarding state [ 420.851753][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 420.993225][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 421.121025][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 421.242252][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 421.343682][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 421.346393][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 421.613271][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 421.674511][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.690167][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.699110][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.714330][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.726699][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.727419][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 421.853544][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 421.962050][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 421.991807][T19083] ÿ: renamed from team0 (while UP) [ 422.080370][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 422.246941][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 422.444683][T19103] C: renamed from lo (while UP) [ 422.581560][T19109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3321'. [ 422.707699][T19113] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3323'. [ 422.978933][ T4935] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 422.978993][ T4935] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 423.009433][T19131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3328'. [ 423.244496][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'. [ 423.474544][T19148] syzkaller0: entered promiscuous mode [ 423.474601][T19148] syzkaller0: entered allmulticast mode [ 423.821457][ T4935] Bluetooth: hci2: command tx timeout [ 424.253939][T19175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3340'. [ 424.271765][T19171] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3338'. [ 424.587625][T19183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.715413][T19188] macvlan2: entered promiscuous mode [ 424.715469][T19188] macvlan2: entered allmulticast mode [ 424.718258][T19188] bond1: (slave macvlan2): Error -22 calling dev_set_mtu [ 424.918098][T19072] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.918241][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.918386][T19072] bridge_slave_0: entered allmulticast mode [ 424.927768][T19072] bridge_slave_0: entered promiscuous mode [ 424.932451][T19072] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.932556][T19072] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.932678][T19072] bridge_slave_1: entered allmulticast mode [ 424.944869][T19072] bridge_slave_1: entered promiscuous mode [ 425.176225][T19072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.198895][T19072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.319596][T19072] team0: Port device team_slave_0 added [ 425.319703][T19215] vcan0: entered allmulticast mode [ 425.337402][T19072] team0: Port device team_slave_1 added [ 425.452802][T19226] lo: entered promiscuous mode [ 425.464435][T19072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.472356][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.472420][T19072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.521884][T19072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.530313][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.530375][T19072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.661439][ T6488] net_ratelimit: 20 callbacks suppressed [ 425.661504][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 425.685302][T19072] hsr_slave_0: entered promiscuous mode [ 425.694235][T19072] hsr_slave_1: entered promiscuous mode [ 425.704028][T19072] debugfs: 'hsr0' already exists in 'hsr' [ 425.710067][T19072] Cannot create hsr debugfs directory [ 425.758018][T19234] __nla_validate_parse: 3 callbacks suppressed [ 425.765533][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3357'. [ 425.779032][T19234] netlink: 'syz.2.3357': attribute type 1 has an invalid length. [ 425.891002][ T4935] Bluetooth: hci2: command tx timeout [ 425.915217][T19234] bond1: entered promiscuous mode [ 425.924349][T19234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.010180][T19236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.025252][T19236] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 426.035726][T19236] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 426.049039][T19236] bond1: (slave ip6gre1): making interface the new active one [ 426.057225][T19236] ip6gre1: entered promiscuous mode [ 426.070102][T19236] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 426.076882][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 426.184585][T19242] syzkaller1: entered promiscuous mode [ 426.194132][T19242] syzkaller1: entered allmulticast mode [ 426.319767][T19244] bond12: option min_links: invalid value (18446744073709551614) [ 426.319829][T19244] bond12: option min_links: allowed values 0 - 2147483647 [ 426.348842][T19244] bond12 (unregistering): Released all slaves [ 426.602401][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 426.614150][T19260] openvswitch: netlink: Flow actions attr not present in new flow. [ 426.912720][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 427.004367][T19286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3372'. [ 427.022439][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 427.287665][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 427.351141][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 427.461438][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 427.642813][T19310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3378'. [ 427.659977][T19072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.660015][T19072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.708694][T19312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3381'. [ 427.748883][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 427.971922][ T4935] Bluetooth: hci2: command tx timeout [ 428.009839][T19072] bond0: (slave netdevsim1): Releasing backup interface [ 428.023869][T19072] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 428.029461][T19072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.029496][T19072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.079212][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 428.088393][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 428.273388][T19329] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 428.298956][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 428.489443][T19345] tls_set_device_offload_rx: netdev not found [ 428.729922][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 428.808306][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 428.936884][T19360] bond0 (unregistering): Released all slaves [ 429.006134][T19370] vlan2: entered promiscuous mode [ 429.006167][T19370] bridge0: entered promiscuous mode [ 429.263646][T19374] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 429.278014][T19374] bond2 (unregistering): Released all slaves [ 429.319447][T19381] xt_TCPMSS: Only works on TCP SYN packets [ 429.326177][T19387] xt_TCPMSS: Only works on TCP SYN packets [ 429.405003][T19375] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 429.423660][T19375] bond2 (unregistering): Released all slaves [ 429.472170][T19390] can: request_module (can-proto-0) failed. [ 429.600366][T19072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.622662][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.634800][T19072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 429.655565][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.663672][T19072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 429.687089][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.701106][T19072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 429.718166][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.051384][ T4935] Bluetooth: hci2: command tx timeout [ 430.293805][T19072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.368928][T19072] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.422409][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.422560][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.450768][T19426] netlink: 'syz.4.3407': attribute type 10 has an invalid length. [ 430.470930][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.471065][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.723907][T16596] net_ratelimit: 11 callbacks suppressed [ 430.725117][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 430.839498][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 430.942262][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 431.039273][T19453] ip6gre0: entered promiscuous mode [ 431.057918][T19453] __nla_validate_parse: 9 callbacks suppressed [ 431.058176][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 431.143516][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 431.254516][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 431.265045][T19465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 431.364134][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 431.473606][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 431.582022][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 431.695610][T19072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.696519][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 431.887124][T19072] veth0_vlan: entered promiscuous mode [ 431.903580][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 431.915114][T19072] veth1_vlan: entered promiscuous mode [ 431.991611][T19072] veth0_macvtap: entered promiscuous mode [ 432.021327][T19072] veth1_macvtap: entered promiscuous mode [ 432.048664][T19072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.093589][T19072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.183706][ T3343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.185321][ T6480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.185384][ T6480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.185416][ T6480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.381525][T16595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.381574][T16595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.448063][T16595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.448112][T16595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.581582][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 432.583507][T19506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 432.713699][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3427'. [ 432.878542][T19515] syzkaller1: entered promiscuous mode [ 432.878592][T19515] syzkaller1: entered allmulticast mode [ 432.897361][T19515] syzkaller1: left promiscuous mode [ 432.897402][T19515] syzkaller1: left allmulticast mode [ 433.195807][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 433.195859][T19528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3433'. [ 433.317645][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.327607][T19529] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3433'. [ 433.332291][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.355166][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.367018][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.378107][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.425679][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3434'. [ 433.556484][T19537] netlink: 'syz.1.3436': attribute type 2 has an invalid length. [ 433.556528][T19537] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3436'. [ 433.649579][T19541] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 433.859815][T19549] vlan2: entered promiscuous mode [ 433.859864][T19549] bond_slave_0: entered promiscuous mode [ 433.860403][T19549] vlan2: entered allmulticast mode [ 433.860419][T19549] bond_slave_0: entered allmulticast mode [ 434.367234][ T5630] syz_tun (unregistering): left allmulticast mode [ 434.694207][T19586] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 434.958383][T19596] syzkaller0: entered promiscuous mode [ 434.958432][T19596] syzkaller0: entered allmulticast mode [ 435.162758][ T6483] IPVS: starting estimator thread 0... [ 435.255517][T19608] IPVS: using max 25 ests per chain, 60000 per kthread [ 435.491075][ T5621] Bluetooth: hci0: command tx timeout [ 435.767198][T19530] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.776422][T19530] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.776617][T19530] bridge_slave_0: entered allmulticast mode [ 435.796249][T19530] bridge_slave_0: entered promiscuous mode [ 435.815851][T19530] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.824741][T19530] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.824899][T19530] bridge_slave_1: entered allmulticast mode [ 435.842829][T19530] bridge_slave_1: entered promiscuous mode [ 435.921497][ T6476] net_ratelimit: 28 callbacks suppressed [ 435.921556][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 435.932201][T19530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.938632][T19530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.009515][T19530] team0: Port device team_slave_0 added [ 436.020049][T19530] team0: Port device team_slave_1 added [ 436.045278][T19530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.045326][T19530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.045352][T19530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.047798][T19530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.047812][T19530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.047836][T19530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.109516][T19530] hsr_slave_0: entered promiscuous mode [ 436.110633][T19530] hsr_slave_1: entered promiscuous mode [ 436.115420][T19530] debugfs: 'hsr0' already exists in 'hsr' [ 436.119137][T19530] Cannot create hsr debugfs directory [ 436.354069][T19530] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.354140][T19530] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.374947][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 436.432185][T19530] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.432227][T19530] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.506475][T19530] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.506520][T19530] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.541146][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 436.606930][T19530] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.606981][T19530] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.651612][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 436.761080][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 436.871602][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 436.981093][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 437.091425][ T6476] bond1: (slave gretap1): failed to get link speed/duplex [ 437.201190][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 437.311161][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 437.571126][ T5621] Bluetooth: hci0: command tx timeout [ 438.044738][T19599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.105063][T19530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.123215][T19530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.132096][T19530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.157209][T19530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.166497][T19530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.202378][T19530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.203335][T19530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.227968][T19530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.355940][T19664] __nla_validate_parse: 11 callbacks suppressed [ 438.356005][T19664] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3466'. [ 438.385195][T19664] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3466'. [ 438.386162][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3464'. [ 438.567714][T19530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.614771][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 438.632847][T19530] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.660618][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.660797][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.669215][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.669337][ T6476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.952298][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 439.191347][ T4935] Bluetooth: hci5: unexpected event 0x0e length: 257 > 255 [ 439.527063][T19530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.651509][ T4935] Bluetooth: hci0: command tx timeout [ 439.784055][T19530] veth0_vlan: entered promiscuous mode [ 439.793413][T19530] veth1_vlan: entered promiscuous mode [ 439.824937][T19530] veth0_macvtap: entered promiscuous mode [ 439.839039][T19530] veth1_macvtap: entered promiscuous mode [ 439.851405][ T5621] block nbd3: Receive control failed (result -32) [ 439.858100][T19530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.868049][T19530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.950193][ T3343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.960277][ T6476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.960807][ T6476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.993754][ T6483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.372465][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.372546][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.932345][ T6483] net_ratelimit: 27 callbacks suppressed [ 440.936975][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 441.041105][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 441.151327][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 441.281918][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 441.401117][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 441.511155][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 441.621178][ T3343] bond1: (slave gretap1): failed to get link speed/duplex [ 441.731848][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 441.732274][ T5621] Bluetooth: hci0: command tx timeout [ 441.841121][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 441.961241][ T6488] bond1: (slave gretap1): failed to get link speed/duplex [ 442.001648][T19699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.198174][ T6488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.198217][ T6488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.332741][ T6483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.332792][ T6483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.373535][T19743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3483'. [ 442.613564][T19752] netlink: 'syz.4.3432': attribute type 6 has an invalid length. [ 442.613611][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'. [ 443.333454][T19797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3495'. [ 443.360169][T19797] netlink: 'syz.1.3495': attribute type 2 has an invalid length. [ 443.372547][T16596] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.374553][ T3343] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.374590][ T3343] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.374622][ T3343] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.475852][T19803] netlink: 'syz.0.3497': attribute type 21 has an invalid length. [ 443.503797][T19806] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 443.575606][ T6483] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 443.797376][T19813] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3500'. [ 443.817191][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 444.249051][T19833] bridge_slave_0: left allmulticast mode [ 444.249097][T19833] bridge_slave_0: left promiscuous mode [ 444.249731][T19833] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.308148][T19833] bridge_slave_1: left allmulticast mode [ 444.308211][T19833] bridge_slave_1: left promiscuous mode [ 444.308434][T19833] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.367891][T19833] bond0: (slave bond_slave_0): Releasing backup interface [ 444.456730][T19833] bond0: (slave bond_slave_1): Releasing backup interface [ 444.486349][T19856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 444.486405][T19856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 444.533376][T19833] team0: Port device team_slave_0 removed [ 444.559347][T19833] team0: Port device team_slave_1 removed [ 444.571940][T19833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.579534][T19833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.609852][T19833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.609893][T19833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.670967][T19835] team0: Port device xfrm0 added [ 444.676828][T19839] tipc: Started in network mode [ 444.676890][T19839] tipc: Node identity 0e85879908d5, cluster identity 4711 [ 444.677932][T19839] tipc: Enabled bearer , priority 0 [ 444.679850][T19844] netlink: 'syz.4.3510': attribute type 9 has an invalid length. [ 444.743471][T19851] tipc: Resetting bearer [ 444.770012][T19851] team0: Port device xfrm0 removed [ 444.782319][T19850] team0: Port device xfrm0 added [ 444.783162][T19856] vlan0: entered promiscuous mode [ 444.809019][T19852] tipc: Enabling of bearer rejected, already enabled [ 444.980542][T19876] syzkaller0: entered promiscuous mode [ 444.990306][T19876] syzkaller0: entered allmulticast mode [ 445.103530][T19873] nbd4: detected capacity change from 0 to 63 [ 445.222880][ T5621] block nbd4: Receive control failed (result -104) [ 445.400595][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 445.560215][T19900] netlink: 'syz.2.3523': attribute type 49 has an invalid length. [ 445.642035][T19904] netlink: 'syz.2.3523': attribute type 11 has an invalid length. [ 445.647635][T19904] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3523'. [ 445.733055][T19908] sctp: [Deprecated]: syz.4.3524 (pid 19908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.733055][T19908] Use struct sctp_sack_info instead [ 445.774714][T19900] ip6gretap0: entered promiscuous mode [ 445.774759][T19900] ip6gretap0: entered allmulticast mode [ 445.868773][T19914] netlink: 'syz.4.3528': attribute type 1 has an invalid length. [ 445.882512][T14810] tipc: Node number set to 105940889 [ 446.365136][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 446.404849][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 446.536916][T19941] netlink: 'syz.3.3532': attribute type 11 has an invalid length. [ 446.719052][T19945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3534'. [ 448.674019][T19945] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 448.717131][ T3343] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.717251][ T3343] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.717293][ T3343] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.717325][ T3343] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.721033][ T34] net_ratelimit: 27 callbacks suppressed [ 448.721051][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 448.831199][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 448.952165][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 449.061724][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 449.172303][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 449.187976][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'. [ 449.258721][T19970] xt_nat: multiple ranges no longer supported [ 449.302708][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 449.447726][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 449.552670][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 449.555143][T19986] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3541'. [ 449.662909][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 449.773252][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 449.833524][T20002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3544'. [ 450.100994][T20014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3546'. [ 450.159696][T20017] xt_ecn: cannot match TCP bits for non-tcp packets [ 450.304135][T19951] infiniband syz0: set down [ 450.316423][T19951] infiniband syz0: added ipvlan1 [ 450.357981][T19951] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 450.433360][T19951] infiniband syz0: Couldn't open port 1 [ 450.450085][T19951] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 450.450148][T19951] smbdirect: ib_dev[syz0]: num_ports=1 ** replaying previous printk message ** [ 450.450148][T19951] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 450.450185][T19951] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 450.473781][T19951] [ 450.507560][T19951] ====================================================== [ 450.514617][T19951] WARNING: possible circular locking dependency detected [ 450.521737][T19951] syzkaller #0 Not tainted [ 450.526179][T19951] ------------------------------------------------------ [ 450.533234][T19951] syz.3.3537/19951 is trying to acquire lock: [ 450.539305][T19951] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 450.549803][T19951] [ 450.549803][T19951] but task is already holding lock: [ 450.557175][T19951] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 450.568054][T19951] [ 450.568054][T19951] which lock already depends on the new lock. [ 450.568054][T19951] [ 450.578461][T19951] [ 450.578461][T19951] the existing dependency chain (in reverse order) is: [ 450.587477][T19951] [ 450.587477][T19951] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 450.596217][T19951] down_read+0x4a/0x330 [ 450.600988][T19951] kernfs_remove_by_name_ns+0x3f/0x140 [ 450.606999][T19951] internal_create_group+0x58e/0x1180 [ 450.612999][T19951] sysfs_update_groups+0x60/0x130 [ 450.618563][T19951] pmu_dev_alloc+0x29b/0x300 [ 450.623723][T19951] perf_event_sysfs_init+0x76/0x100 [ 450.629574][T19951] do_one_initcall+0x250/0x870 [ 450.634924][T19951] do_initcall_level+0x10a/0x1a0 [ 450.640458][T19951] do_initcalls+0x59/0xa0 [ 450.645314][T19951] kernel_init_freeable+0x29d/0x3e0 [ 450.651040][T19951] kernel_init+0x22/0x1d0 [ 450.655953][T19951] ret_from_fork+0x514/0xb70 [ 450.661115][T19951] ret_from_fork_asm+0x1a/0x30 [ 450.666422][T19951] [ 450.666422][T19951] -> #9 (pmus_lock){+.+.}-{4:4}: [ 450.673566][T19951] __mutex_lock+0x19d/0x1550 [ 450.678698][T19951] perf_event_init_cpu+0x1d1/0x7a0 [ 450.684350][T19951] cpuhp_invoke_callback+0x434/0x810 [ 450.690298][T19951] cpuhp_thread_fun+0x362/0x780 [ 450.695705][T19951] smpboot_thread_fn+0x565/0xa70 [ 450.701182][T19951] kthread+0x38b/0x480 [ 450.705783][T19951] ret_from_fork+0x514/0xb70 [ 450.710938][T19951] ret_from_fork_asm+0x1a/0x30 [ 450.716237][T19951] [ 450.716237][T19951] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 450.723805][T19951] cpuhp_thread_fun+0x127/0x780 [ 450.729271][T19951] smpboot_thread_fn+0x565/0xa70 [ 450.734744][T19951] kthread+0x38b/0x480 [ 450.739333][T19951] ret_from_fork+0x514/0xb70 [ 450.744442][T19951] ret_from_fork_asm+0x1a/0x30 [ 450.749730][T19951] [ 450.749730][T19951] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 450.757547][T19951] cpus_read_lock+0x42/0x160 [ 450.762666][T19951] static_key_slow_inc+0x12/0x30 [ 450.768151][T19951] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 450.774488][T19951] nbd_genl_foreach_sock+0x265/0x450 [ 450.780342][T19951] nbd_genl_reconfigure+0xbbb/0x1040 [ 450.786160][T19951] genl_family_rcv_msg_doit+0x233/0x340 [ 450.792392][T19951] genl_rcv_msg+0x614/0x7a0 [ 450.797439][T19951] netlink_rcv_skb+0x226/0x4a0 [ 450.802737][T19951] genl_rcv+0x28/0x40 [ 450.807265][T19951] netlink_unicast+0x7bd/0x940 [ 450.812566][T19951] netlink_sendmsg+0x813/0xb40 [ 450.817870][T19951] sock_sendmsg_nosec+0x13a/0x180 [ 450.823531][T19951] ____sys_sendmsg+0x54e/0x850 [ 450.828835][T19951] ___sys_sendmsg+0x2a5/0x360 [ 450.834041][T19951] __x64_sys_sendmsg+0x1b1/0x290 [ 450.839508][T19951] do_syscall_64+0x166/0x520 [ 450.844707][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.851155][T19951] [ 450.851155][T19951] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 450.858805][T19951] __mutex_lock+0x19d/0x1550 [ 450.863923][T19951] nbd_queue_rq+0x373/0xff0 [ 450.868952][T19951] blk_mq_dispatch_rq_list+0x499/0x1990 [ 450.875110][T19951] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 450.881987][T19951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 450.888493][T19951] blk_mq_run_work_fn+0x16c/0x300 [ 450.894079][T19951] process_scheduled_works+0xc3d/0x1630 [ 450.900148][T19951] worker_thread+0xa47/0xfb0 [ 450.905264][T19951] kthread+0x38b/0x480 [ 450.909858][T19951] ret_from_fork+0x514/0xb70 [ 450.914968][T19951] ret_from_fork_asm+0x1a/0x30 [ 450.920265][T19951] [ 450.920265][T19951] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 450.927480][T19951] __mutex_lock+0x19d/0x1550 [ 450.932599][T19951] nbd_queue_rq+0xc1/0xff0 [ 450.937538][T19951] blk_mq_dispatch_rq_list+0x499/0x1990 [ 450.943608][T19951] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 450.950463][T19951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 450.956966][T19951] blk_mq_run_work_fn+0x16c/0x300 [ 450.962514][T19951] process_scheduled_works+0xc3d/0x1630 [ 450.968586][T19951] worker_thread+0xa47/0xfb0 [ 450.973699][T19951] kthread+0x38b/0x480 [ 450.978286][T19951] ret_from_fork+0x514/0xb70 [ 450.983394][T19951] ret_from_fork_asm+0x1a/0x30 [ 450.988683][T19951] [ 450.988683][T19951] -> #4 (set->srcu){.+.+}-{0:0}: [ 450.995811][T19951] __synchronize_srcu+0xc9/0x2f0 [ 451.001293][T19951] elevator_switch+0x1e8/0x7b0 [ 451.006647][T19951] elevator_change+0x2fa/0x480 [ 451.011934][T19951] elevator_set_default+0x375/0x440 [ 451.017661][T19951] blk_register_queue+0x3f3/0x4e0 [ 451.023237][T19951] __add_disk+0x6cb/0xe30 [ 451.028091][T19951] add_disk_fwnode+0x100/0x3a0 [ 451.033377][T19951] nbd_dev_add+0x733/0xb60 [ 451.038316][T19951] nbd_init+0x168/0x1f0 [ 451.043038][T19951] do_one_initcall+0x250/0x870 [ 451.048328][T19951] do_initcall_level+0x10a/0x1a0 [ 451.053790][T19951] do_initcalls+0x59/0xa0 [ 451.058648][T19951] kernel_init_freeable+0x29d/0x3e0 [ 451.064376][T19951] kernel_init+0x22/0x1d0 [ 451.069224][T19951] ret_from_fork+0x514/0xb70 [ 451.074334][T19951] ret_from_fork_asm+0x1a/0x30 [ 451.079628][T19951] [ 451.079628][T19951] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 451.087452][T19951] __mutex_lock+0x19d/0x1550 [ 451.092570][T19951] elevator_change+0x1af/0x480 [ 451.097858][T19951] elevator_set_none+0xb5/0x140 [ 451.103232][T19951] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 451.109560][T19951] nbd_start_device+0x189/0xb30 [ 451.114938][T19951] nbd_genl_connect+0x167d/0x1cd0 [ 451.120491][T19951] genl_family_rcv_msg_doit+0x233/0x340 [ 451.126565][T19951] genl_rcv_msg+0x614/0x7a0 [ 451.131595][T19951] netlink_rcv_skb+0x226/0x4a0 [ 451.136886][T19951] genl_rcv+0x28/0x40 [ 451.141394][T19951] netlink_unicast+0x7bd/0x940 [ 451.146677][T19951] netlink_sendmsg+0x813/0xb40 [ 451.151962][T19951] sock_sendmsg_nosec+0x13a/0x180 [ 451.157520][T19951] ____sys_sendmsg+0x54e/0x850 [ 451.162806][T19951] ___sys_sendmsg+0x2a5/0x360 [ 451.168002][T19951] __x64_sys_sendmsg+0x1b1/0x290 [ 451.173466][T19951] do_syscall_64+0x166/0x520 [ 451.178589][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.185002][T19951] [ 451.185002][T19951] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 451.193829][T19951] blk_alloc_queue+0x544/0x690 [ 451.199122][T19951] __blk_mq_alloc_disk+0x194/0x390 [ 451.204753][T19951] nbd_dev_add+0x494/0xb60 [ 451.209700][T19951] nbd_init+0x168/0x1f0 [ 451.214400][T19951] do_one_initcall+0x250/0x870 [ 451.219691][T19951] do_initcall_level+0x10a/0x1a0 [ 451.225165][T19951] do_initcalls+0x59/0xa0 [ 451.230114][T19951] kernel_init_freeable+0x29d/0x3e0 [ 451.235856][T19951] kernel_init+0x22/0x1d0 [ 451.240719][T19951] ret_from_fork+0x514/0xb70 [ 451.245841][T19951] ret_from_fork_asm+0x1a/0x30 [ 451.251139][T19951] [ 451.251139][T19951] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 451.258357][T19951] fs_reclaim_acquire+0x71/0x100 [ 451.263858][T19951] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 451.270103][T19951] alloc_inode+0xb8/0x1b0 [ 451.274970][T19951] iget_locked+0x131/0x6a0 [ 451.279913][T19951] kernfs_get_inode+0x4f/0x770 [ 451.285203][T19951] kernfs_get_tree+0x5cd/0x980 [ 451.290491][T19951] vfs_get_tree+0x92/0x2a0 [ 451.295454][T19951] do_new_mount+0x319/0xdc0 [ 451.300492][T19951] __se_sys_mount+0x31d/0x420 [ 451.305693][T19951] do_syscall_64+0x166/0x520 [ 451.310811][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.317226][T19951] [ 451.317226][T19951] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 451.325323][T19951] __lock_acquire+0x15ff/0x2e50 [ 451.330723][T19951] lock_acquire+0x115/0x350 [ 451.335743][T19951] down_write+0x96/0x200 [ 451.340509][T19951] kernfs_remove_by_name_ns+0x4e/0x140 [ 451.346488][T19951] sysfs_remove_group+0x101/0x2e0 [ 451.352062][T19951] sysfs_remove_groups+0x54/0xb0 [ 451.357525][T19951] cm_add_one+0x729/0xa60 [ 451.362475][T19951] add_client_context+0x37c/0x7b0 [ 451.368051][T19951] enable_device_and_get+0x19c/0x3e0 [ 451.373861][T19951] ib_register_device+0xdc8/0x1080 [ 451.379505][T19951] rxe_register_device+0x1e3/0x350 [ 451.385185][T19951] rxe_net_add+0x81/0x110 [ 451.390061][T19951] rxe_newlink+0xf4/0x1c0 [ 451.394918][T19951] nldev_newlink+0x5be/0x650 [ 451.400064][T19951] rdma_nl_rcv+0x6ef/0xa40 [ 451.405026][T19951] netlink_unicast+0x7bd/0x940 [ 451.410319][T19951] netlink_sendmsg+0x813/0xb40 [ 451.415607][T19951] sock_sendmsg_nosec+0x13a/0x180 [ 451.421171][T19951] ____sys_sendmsg+0x54e/0x850 [ 451.426458][T19951] ___sys_sendmsg+0x2a5/0x360 [ 451.431665][T19951] __x64_sys_sendmsg+0x1b1/0x290 [ 451.437123][T19951] do_syscall_64+0x166/0x520 [ 451.442242][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.448659][T19951] [ 451.448659][T19951] other info that might help us debug this: [ 451.448659][T19951] [ 451.458973][T19951] Chain exists of: [ 451.458973][T19951] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 451.458973][T19951] [ 451.472807][T19951] Possible unsafe locking scenario: [ 451.472807][T19951] [ 451.480266][T19951] CPU0 CPU1 [ 451.485631][T19951] ---- ---- [ 451.491001][T19951] rlock(&root->kernfs_supers_rwsem); [ 451.496462][T19951] lock(pmus_lock); [ 451.502875][T19951] lock(&root->kernfs_supers_rwsem); [ 451.510772][T19951] lock(&root->kernfs_rwsem); [ 451.515543][T19951] [ 451.515543][T19951] *** DEADLOCK *** [ 451.515543][T19951] [ 451.523718][T19951] locks held by syz.3.3537/19951: 6, last CPU#0: [ 451.530093][T19951] #0: ffffffff9ad80a48 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 451.540108][T19951] #1: ffffffff8ffacd28 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 451.549508][T19951] #2: ffffffff8ff9de48 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 451.559434][T19951] #3: ffffffff8ff9e148 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 451.569444][T19951] #4: ffff888079c5c658 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 451.580338][T19951] #5: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 451.591647][T19951] [ 451.591647][T19951] stack backtrace: [ 451.597553][T19951] CPU: 0 UID: 0 PID: 19951 Comm: syz.3.3537 Not tainted syzkaller #0 PREEMPT(full) [ 451.606925][T19951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.616980][T19951] Call Trace: [ 451.620261][T19951] [ 451.623245][T19951] dump_stack_lvl+0xe8/0x150 [ 451.627892][T19951] print_circular_bug+0x2e2/0x300 [ 451.632924][T19951] check_noncircular+0x12f/0x150 [ 451.637887][T19951] __lock_acquire+0x15ff/0x2e50 [ 451.642793][T19951] ? lockdep_unlock+0x5c/0xd0 [ 451.647575][T19951] lock_acquire+0x115/0x350 [ 451.652090][T19951] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 451.657743][T19951] down_write+0x96/0x200 [ 451.661990][T19951] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 451.667626][T19951] ? __pfx_down_write+0x10/0x10 [ 451.672572][T19951] kernfs_remove_by_name_ns+0x4e/0x140 [ 451.678039][T19951] sysfs_remove_group+0x101/0x2e0 [ 451.683073][T19951] sysfs_remove_groups+0x54/0xb0 [ 451.688030][T19951] cm_add_one+0x729/0xa60 [ 451.692392][T19951] ? __pfx_cm_add_one+0x10/0x10 [ 451.697353][T19951] ? downgrade_write+0x242/0x430 [ 451.702307][T19951] ? __pfx_downgrade_write+0x10/0x10 [ 451.707615][T19951] ? _raw_spin_unlock+0x28/0x50 [ 451.712497][T19951] add_client_context+0x37c/0x7b0 [ 451.717544][T19951] ? __pfx_add_client_context+0x10/0x10 [ 451.723095][T19951] ? xa_find_after+0xae/0x430 [ 451.727784][T19951] enable_device_and_get+0x19c/0x3e0 [ 451.733081][T19951] ? __pfx_enable_device_and_get+0x10/0x10 [ 451.738894][T19951] ? device_add+0x6f6/0xb80 [ 451.743494][T19951] ib_register_device+0xdc8/0x1080 [ 451.748622][T19951] ? __pfx_ib_register_device+0x10/0x10 [ 451.754177][T19951] ? ib_device_set_netdev+0x5c9/0x6d0 [ 451.759557][T19951] rxe_register_device+0x1e3/0x350 [ 451.764677][T19951] rxe_net_add+0x81/0x110 [ 451.769012][T19951] rxe_newlink+0xf4/0x1c0 [ 451.773350][T19951] nldev_newlink+0x5be/0x650 [ 451.777945][T19951] ? __pfx_nldev_newlink+0x10/0x10 [ 451.783069][T19951] ? __page_table_check_zero+0x6c/0x430 [ 451.788672][T19951] ? apparmor_capable+0x126/0x170 [ 451.793758][T19951] ? security_capable+0x7e/0x2c0 [ 451.798720][T19951] ? __pfx_nldev_newlink+0x10/0x10 [ 451.803841][T19951] rdma_nl_rcv+0x6ef/0xa40 [ 451.808266][T19951] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 451.813231][T19951] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.818450][T19951] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.823653][T19951] netlink_unicast+0x7bd/0x940 [ 451.828428][T19951] netlink_sendmsg+0x813/0xb40 [ 451.833204][T19951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.838501][T19951] ? apparmor_socket_sendmsg+0x18b/0x360 [ 451.844193][T19951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.849482][T19951] sock_sendmsg_nosec+0x13a/0x180 [ 451.854516][T19951] ____sys_sendmsg+0x54e/0x850 [ 451.859282][T19951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.864569][T19951] ? import_iovec+0x73/0xa0 [ 451.869131][T19951] ___sys_sendmsg+0x2a5/0x360 [ 451.873807][T19951] ? __lock_acquire+0x6df/0x2e50 [ 451.878759][T19951] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.883973][T19951] ? futex_wait+0x2a2/0x390 [ 451.888509][T19951] ? __fget_files+0x2a/0x420 [ 451.893104][T19951] ? __fget_files+0x3a2/0x420 [ 451.897787][T19951] __x64_sys_sendmsg+0x1b1/0x290 [ 451.902727][T19951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.908197][T19951] do_syscall_64+0x166/0x520 [ 451.912795][T19951] ? trace_irq_disable+0x3b/0x140 [ 451.918011][T19951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.924077][T19951] ? clear_bhb_loop+0x70/0xc0 [ 451.928756][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.934650][T19951] RIP: 0033:0x7f101d39e159 [ 451.939068][T19951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.958677][T19951] RSP: 002b:00007f101e312028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.967135][T19951] RAX: ffffffffffffffda RBX: 00007f101d625fa0 RCX: 00007f101d39e159 [ 451.975110][T19951] RDX: 000000002400c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 451.983084][T19951] RBP: 00007f101d43503b R08: 0000000000000000 R09: 0000000000000000 [ 451.991054][T19951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.999038][T19951] R13: 00007f101d626038 R14: 00007f101d625fa0 R15: 00007ffc196da308 [ 452.007016][T19951] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 452.158674][T19951] RDS/IB: syz0: added [ 452.162970][T19951] smc: adding ib device syz0 with port count 1 [ 452.169204][T19951] smc: ib device syz0 port 1 has no pnetid [ 452.672452][ T6480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.672511][ T6480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.784943][ T6480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.784982][ T6480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.954767][ T6480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.954818][ T6480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.992872][ T6480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.992933][ T6480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.062018][ T6480] team0: left allmulticast mode [ 453.066993][ T6480] team_slave_0: left allmulticast mode [ 453.073121][ T6480] team_slave_1: left allmulticast mode [ 453.079061][ T6480] team0: left promiscuous mode [ 453.084161][ T6480] team_slave_0: left promiscuous mode [ 453.089734][ T6480] team_slave_1: left promiscuous mode [ 453.090136][ T6480] bridge0: port 3(team0) entered disabled state [ 453.107531][ T6480] bridge_slave_1: left allmulticast mode [ 453.113509][ T6480] bridge_slave_1: left promiscuous mode [ 453.119276][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.129283][ T6480] bridge_slave_0: left allmulticast mode [ 453.135874][ T6480] bridge_slave_0: left promiscuous mode [ 453.141141][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.150526][ T6480] vcan0: left allmulticast mode [ 453.178928][ T6480] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 453.178960][ T6480] ip6gre1 (unregistering): left promiscuous mode [ 453.227743][ T6480] team0: Port device bridge1 removed [ 453.237159][ T6480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.248475][ T6480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.257998][ T6480] bond0 (unregistering): Released all slaves [ 453.262195][ T6480] bond1 (unregistering): Released all slaves [ 453.679316][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 453.771091][ T6483] net_ratelimit: 17 callbacks suppressed [ 453.778008][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 453.910971][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 453.966427][ T6480] hsr_slave_0: left promiscuous mode [ 453.973130][ T6480] hsr_slave_1: left promiscuous mode [ 453.973666][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.973682][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.979275][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.979291][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.994003][ T6480] veth1_macvtap: left promiscuous mode [ 453.994035][ T6480] veth0_macvtap: left promiscuous mode [ 453.994106][ T6480] veth1_vlan: left promiscuous mode [ 453.994151][ T6480] veth0_vlan: left promiscuous mode [ 454.212726][ T6480] team0 (unregistering): Port device team_slave_1 removed [ 454.225073][ T6480] team0 (unregistering): Port device team_slave_0 removed [ 454.266237][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 454.281394][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 454.391824][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 454.509268][ T6480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.532946][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 454.548553][ T6480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.576916][ T6480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.610562][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 454.634588][ T6480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.661945][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 454.750110][ T6480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.750173][ T6480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.773014][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 454.796838][ T6480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.809934][ T6480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.871952][ T6480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.872005][ T6480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.901290][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 454.928364][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 454.945988][ T6480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.946040][ T6480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.013821][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 455.075769][ T6480] bridge_slave_1: left allmulticast mode [ 455.075808][ T6480] bridge_slave_1: left promiscuous mode [ 455.075966][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.100123][ T6480] bridge_slave_0: left allmulticast mode [ 455.107417][ T6480] bridge_slave_0: left promiscuous mode [ 455.113232][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.129070][ T6480] bridge_slave_1: left allmulticast mode [ 455.135428][ T6480] bridge_slave_1: left promiscuous mode [ 455.141263][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.150455][ T6480] bridge_slave_0: left allmulticast mode [ 455.161129][ T6480] bridge_slave_0: left promiscuous mode [ 455.164644][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.356951][ T6480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.369702][ T6480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.381364][ T6480] bond0 (unregistering): Released all slaves [ 455.390805][ T6480] bond1 (unregistering): Released all slaves [ 455.455865][ T6480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.469420][ T6480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.485068][ T6480] bond0 (unregistering): Released all slaves [ 455.494296][ T6480] bond1 (unregistering): Released all slaves [ 455.521043][T16596] bond1: (slave gretap1): failed to get link speed/duplex [ 456.099693][ T6480] hsr_slave_0: left promiscuous mode [ 456.106176][ T6480] hsr_slave_1: left promiscuous mode [ 456.106834][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.106854][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.108227][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.108244][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.131577][ T6480] hsr_slave_0: left promiscuous mode [ 456.139118][ T6480] hsr_slave_1: left promiscuous mode [ 456.139637][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.139654][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.146795][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.146814][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.165434][ T6480] veth1_macvtap: left promiscuous mode [ 456.165467][ T6480] veth0_macvtap: left promiscuous mode [ 456.165530][ T6480] veth1_vlan: left promiscuous mode [ 456.165572][ T6480] veth0_vlan: left promiscuous mode [ 456.208342][ T6480] veth1_macvtap: left promiscuous mode [ 456.208390][ T6480] veth0_macvtap: left promiscuous mode [ 456.208457][ T6480] veth1_vlan: left promiscuous mode [ 456.208506][ T6480] veth0_vlan: left promiscuous mode [ 456.350014][T16595] smc: removing ib device syz0 [ 456.414996][ T6480] ÿ (unregistering): Port device team_slave_1 removed [ 456.422363][ T6480] ÿ (unregistering): Port device team_slave_0 removed [ 456.526189][ T6480] team0 (unregistering): Port device team_slave_1 removed [ 456.543106][ T6480] team0 (unregistering): Port device team_slave_0 removed [ 456.605719][T16595] smbdirect: ib_dev[syz0] removed [ 457.289935][ T6480] IPVS: stop unused estimator thread 0... [ 457.718566][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 457.943731][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 458.166825][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 458.392713][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 458.618386][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 458.836731][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 458.872557][ T6483] net_ratelimit: 24 callbacks suppressed [ 458.872848][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 458.981053][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 459.069561][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 459.101249][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 459.211464][ T34] bond1: (slave gretap1): failed to get link speed/duplex [ 459.299912][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 459.321380][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 459.431751][ T6480] bond1: (slave gretap1): failed to get link speed/duplex [ 459.543128][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 459.651256][T16595] bond1: (slave gretap1): failed to get link speed/duplex [ 459.761143][ T6483] bond1: (slave gretap1): failed to get link speed/duplex [ 459.871639][ T6483] bond1: (slave gretap1): failed to get link speed/duplex