last executing test programs: 6.390330317s ago: executing program 2 (id=3755): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = epoll_create1(0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="06800300006d87ba7365f900000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000200aaaaaaaaaabb0000"], 0x48}}, 0x800) 6.180928367s ago: executing program 2 (id=3757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150041000400000000000000fc000000006ba4a82e1d1a37ed20c9a95662000000000000000000000100"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000030000000000000000000000000000000000000000000000000000000000000009"], 0xb8}}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000480)={r1, &(0x7f0000000380)='nl802154\x00', 0x222002, &(0x7f00000003c0)={@_ha_fsid={[0x4e2ce107, 0x3]}, {0x3, 0x100, 0x7f, 0x7}}, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x80, 0x6, 0x20000, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x4}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004800)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000020a050000000000000000000000000a34000000140a010100000000000000000a007aaec16442f780777a320000000008000340000000030900010073797a3100000000140000001100010000000000000000000000000a"], 0x70}}, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150041000400000000000000fc000000006ba4a82e1d1a37ed20c9a95662000000000000000000000100"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000030000000000000000000000000000000000000000000000000000000000000009"], 0xb8}}, 0x4000040) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000480)={r1, &(0x7f0000000380)='nl802154\x00', 0x222002, &(0x7f00000003c0)={@_ha_fsid={[0x4e2ce107, 0x3]}, {0x3, 0x100, 0x7f, 0x7}}, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x80, 0x6, 0x20000, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x4}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004800)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000020a050000000000000000000000000a34000000140a010100000000000000000a007aaec16442f780777a320000000008000340000000030900010073797a3100000000140000001100010000000000000000000000000a"], 0x70}}, 0x8000) (async) 5.525622878s ago: executing program 2 (id=3761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x5, 0x4, 0x405, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000002c0)={r1, &(0x7f0000000100)='GPL\x00', 0x1914c1, &(0x7f0000000140)={@_ha_fsid={[0x1, 0x5]}, {0x7, 0x8, 0x7, 0x5}}, 0x400000, &(0x7f0000000180), &(0x7f00000001c0)=0x80000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000000300), &(0x7f0000000400)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.055963641s ago: executing program 2 (id=3766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000a40)='GPL\x00', 0x5, 0x29e, &(0x7f0000000a80)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000740)={{r1}, {@void, @actul_num={@val=0x2d, 0xeb63, 0x26}}}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xb, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x5, 0x20000000, 0x3, 0x401}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}}, 0x40004) write$tun(r0, &(0x7f0000000940)=ANY=[], 0x6e) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup, 0xffffffffffffffff, 0x2b}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) r8 = socket(0x11, 0x800000003, 0x0) accept4$packet(r8, 0x0, 0x0, 0x800) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) listen(r9, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, r10, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x23, 0x5, "9f0f4993717b093b74a639fe53e8d41723186fc7c362fd73c81d9a51c1ba9e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$#[}-@\'-(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x10, 0x4, "e981a5d12a9e06d4c5d1b2e5"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc528}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x1000c080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) 4.296132418s ago: executing program 1 (id=3770): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x4000884) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 4.295416579s ago: executing program 3 (id=3771): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd92}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x55}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private1, 0x6}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000040) 4.1925756s ago: executing program 4 (id=3772): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0xfffffe7f) 3.897442994s ago: executing program 3 (id=3774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040850) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1c8, 0x98, 0x1c8, 0x130, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, 0xff000000, 'nicvf0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3, 0x50}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38, 0xf, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'nicvf0\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000007d00000300000a800000001b0a010100000000000000000a00000a0900010073797a31000021000c00024000000000000000022c0004"], 0xc8}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff, {0x7, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000400)={0x8, 'bond0\x00', {'wg2\x00'}}) 3.897014647s ago: executing program 4 (id=3775): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c041}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) 3.850891449s ago: executing program 2 (id=3776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="98020000110001040000000000000000000017ff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 3.818435351s ago: executing program 0 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f00000000c0)="97", 0x0, 0x0, 0x0, 0x8, r2}, 0x38) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x7, 0x40, 0x3, 0x4, {{0x18, 0x4, 0x3, 0x18, 0x60, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x6f, 0x3, 0x5, [{@rand_addr=0x64010100, 0x6}, {@multicast2, 0x8c4}, {@private=0xa010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x2}]}, @ssrr={0x89, 0x1f, 0x92, [@empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @private=0xa010100]}]}}}}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x1, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r4, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x0, 0x1, 0x0, &(0x7f0000000740)=[{0x0, 0xc, 0xd, 0x2}], 0x10, 0xffffffff}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r8, 0x1f4d2000) (async) close(r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="010000000300000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x3, r10, 0x4}, 0x38) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x2, 0x14}, 0xc) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000c80)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1a, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r14, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xc, &(0x7f0000000200)=@raw=[@exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x7, 0xb, 0x1, 0x7, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0xa3, &(0x7f0000000340)=""/163, 0x41000, 0x40, '\x00', r3, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x6, 0x8, 0x100}, 0x10, r4, r0, 0x0, &(0x7f0000000e40)=[r6, r7, r8, r10, 0x1, r11, r12], 0x0, 0x10, 0x7fff}, 0x94) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r16, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 3.467356695s ago: executing program 2 (id=3778): unshare(0xc040480) (async) unshare(0x42000200) unshare(0x34020100) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x366, 0x10, &(0x7f00000003c0), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r2, r0, 0x4, r0}, 0x10) (async) unshare(0xc040480) 3.466328101s ago: executing program 1 (id=3779): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000300)=@caif=@dgm={0x25, 0x2b, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="62043fff590200000012002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8045) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x4d, &(0x7f00000001c0)=""/145, &(0x7f00000002c0)=0x91) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000067000000080001004000000008000300", @ANYRES32=r4, @ANYBLOB="0c000074135a4201e2bd83bff4baa57ffba9b1455879553b3dd7687da45206649872c73902b53ddc8447bab52e6730ab15670b800dfbc802475a9f387e1dfb9be1737c6a06f92e7bc206a8a8498d28cb85f6723e2c493b64a9f1319fa86bcaf1d69a9174ff2a236f292d9b1a6cb1b5c19e08ac6b54cc9e90d671bb522c33de550352e1c94c0d718c18c25551c0e9e8eb2b1c72c8e01076e2a1d89a55d15850f29f68be3f8429424c3aa1fae159185f0305b62f32d8a453e10f680dc654a6dbe0dfb00dc3ebf64b51aeb0691013b186c5000000000000"], 0x38}}, 0x0) 3.38846255s ago: executing program 0 (id=3780): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000f40)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000f80)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0xc, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xf6}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x4, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0xc840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x2c, r5, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb, 0x587, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000580)=@ethtool_cmd={0x3d, 0x0, 0xfffffffd, 0x1, 0x2, 0x3, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, [0x0, 0x2]}}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000340)={r10, 0x5, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r2, 0x84, 0x83, &(0x7f0000000380)={r10, 0x1}, &(0x7f00000003c0)=0x8) bind$inet(r1, &(0x7f0000000500)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000640)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000006c0)="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", 0x660}], 0x1}}], 0x1, 0x20000046) 2.938880685s ago: executing program 4 (id=3781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.852005646s ago: executing program 1 (id=3782): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x4000884) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 2.851400789s ago: executing program 3 (id=3783): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006"], 0x58}}, 0x20000000) (async) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffff}, 0x10) (async) write(r2, &(0x7f00000002c0)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r4) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) (async) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) 2.585935461s ago: executing program 0 (id=3784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000540)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000000580)='GPL\x00', 0x5, 0xfd90, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000700), 0xf7}, 0x48) 2.554414489s ago: executing program 4 (id=3785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040a5}, 0x4890) r3 = socket$netlink(0x10, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245aacde00800450000000002907800000000ffffffff11e09097000000000081000100"/54], 0x0) (async, rerun: 64) ioctl$sock_ifreq(r3, 0x8932, &(0x7f0000000240)={'bond_slave_1\x00', @ifru_flags=0x1000}) (rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x22, 0x0, &(0x7f0000000280)=0x9e) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3, 0x0}, 0x8) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x0, @val=@target_btf_id=r8}, 0x14) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f0000000900)=0xccb, 0x4) (async) bind$bt_hci(r10, &(0x7f0000000940)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) bind$bt_hci(r11, &(0x7f00000009c0)={0x1f, 0x0, 0x1}, 0x6) getpeername$netlink(r12, 0x0, &(0x7f0000000a00)) write$bt_hci(r11, &(0x7f0000000a40)=ANY=[], 0x6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (rerun: 64) 2.489964397s ago: executing program 1 (id=3786): r0 = socket(0x6, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xdc4c, 0x1, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.396264351s ago: executing program 3 (id=3787): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000003c0)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x35, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x80) r3 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYRES16=r3], 0xa) r4 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x40000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r6, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000740)={{r0}, r8, 0x1a, @unused=[0x3, 0x6, 0x0, 0xfffffffffffffffd], @name="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"}) write$cgroup_devices(r4, &(0x7f0000000280)={'a', ' *:* ', 'rm\x00'}, 0x9) 2.224699984s ago: executing program 0 (id=3788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='GPL\x00', 0xfffffffd}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000208000600480a000005000b"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x1, 0x9, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0xa4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x5849ba1b, 0x3, 0x8b0000, 0x798, 0x1}, &(0x7f0000000240)=0x98) sendmsg$inet_sctp(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x8001, 0x8, 0x203, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) 1.952230207s ago: executing program 1 (id=3789): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000940)={&(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) r8 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r8, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3400000056e9c865c757a7fe0000000000000003", @ANYRES32=0x0, @ANYBLOB="50010000000000000a000200ffffffffffff000008001b0000000000"], 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0xffffffff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8014}, 0x8880) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20010040}, 0x0) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async, rerun: 64) sendmmsg(r9, &(0x7f00000005c0), 0x40000000000009f, 0x0) (async, rerun: 64) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4) (async, rerun: 32) connect$inet6(r11, &(0x7f00000009c0)={0xa, 0x4e23, 0x30, @local, 0x1}, 0x1c) (rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00012bbd7000fb00e24c9b5ed844fcdbdf251200000008000b00ff00000021002a0112000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) setsockopt(r11, 0x84, 0x80, &(0x7f00000005c0)="1af3050000f2bd5b", 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32=r9, @ANYRES64=r7, @ANYRESDEC=r1, @ANYRESOCT=r4, @ANYRES16, @ANYRES32=r2, @ANYRES16=r6, @ANYRESHEX=r12, @ANYRES8=r9], 0x28}, 0x1, 0x0, 0x0, 0x4044840}, 0x20040040) 1.937493002s ago: executing program 3 (id=3790): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0xfffffffffffffe89}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x8, 0x803, 0x100) sendmsg$nl_route_sched(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x1fffffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_hci(r0, &(0x7f00000014c0)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="170000000000000004000000ff00000000006684", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1f, 0xc, &(0x7f0000001680)=ANY=[], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r4, 0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.675124985s ago: executing program 0 (id=3791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010445bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001c0002000000"], 0x3c}}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010445bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001c0002000000"], 0x3c}}, 0x4008000) (async) 609.217097ms ago: executing program 4 (id=3792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 332.557648ms ago: executing program 0 (id=3793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0xc2) (async, rerun: 64) sendto(r0, &(0x7f0000000380)="1bb6a076f1632f922fd60c58aa9c7ab1373db128bb543dab8ef7f96916cdd4e295223b4203e4ca9ab470b8ae01d0496f261fdbd1ac8cd2d01871d717ae0e5a3d31190a870f1c92e1120c906c2234783222511c24dc6067", 0x57, 0x40, &(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5a476cfbdfb42ac5, 0xc3, 0x1, "3e7cff983e60303b5a759e008ca07a2a2523b5e412f0d2761e9d0d6dd37101651d12aff8cb4bba9a1c50101c6164e68100b64ae2bd421115cfe5280b389e09", 0x7}, 0x80) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x10) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000500)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="850000006c0000009510"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmmsg(r2, &(0x7f0000000540)=[{{&(0x7f0000000580)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10}}], 0x1, 0x4044c50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xe76, @local, 0x6}, @in6={0xa, 0x4e22, 0xfffffff7, @private0, 0x4}], 0x38) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x28}}, 0x44044) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x926, 0xd, 0x5, 0x3}, {0x3, 0x2, 0x8, 0x3, 0x6, 0x6}, 0x53c, 0x9, 0x964}}, @TCA_TBF_BURST={0xfffffffffffffdfa, 0x6, 0xf1c1}]}}]}, 0x1b1a4cff8d7cd1a9}}, 0x24000084) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) 82.871425ms ago: executing program 3 (id=3794): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r0], 0xc4}}, 0x0) 52.265351ms ago: executing program 1 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008051}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) 0s ago: executing program 4 (id=3796): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000b00)='GPL\x00'}, 0x80) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4014011) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$rds(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1, &(0x7f00000008c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0)=0x1, 0x0, 0x9, 0x0, 0x480000000, 0x0, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x5}, &(0x7f0000000300)=0x2, &(0x7f0000000340)=0x8, 0x4d0, 0x58, 0x8000000000000000, 0x30000000000000, 0x65780ec6f43d0d68, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x7}, {&(0x7f0000000380)=""/191, 0xbf}, &(0x7f0000000840)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000540)}, {&(0x7f0000000a40)=""/157, 0x9d}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000740)=""/22, 0x16}, {&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/51, 0x33}], 0x7, 0x11, 0x4}}], 0x110, 0x4080}, 0x4000000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0xe, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4042084) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x9, 0x8, 0x7, 0xb0e, 0x8, 0xfe, 0x86}, 0x20) close(0x4) kernel console output (not intermixed with test programs): uous mode [ 295.412749][T14944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.866340][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 295.866366][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 295.924499][T14961] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 295.924521][T14961] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2368'. [ 295.975598][T14953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.004180][T14957] bond0: left promiscuous mode [ 296.004207][T14957] veth0_to_bond: left promiscuous mode [ 296.004458][T14957] bond0: left allmulticast mode [ 296.004474][T14957] veth0_to_bond: left allmulticast mode [ 296.034347][T14957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.044114][T14957] bond5: (slave bond0): making interface the new active one [ 296.045514][T14957] bond5: (slave bond0): Enslaving as an active interface with an up link [ 296.090454][T14932] netlink: 'syz.2.2366': attribute type 11 has an invalid length. [ 296.152930][T14964] netlink: 'syz.4.2369': attribute type 1 has an invalid length. [ 296.234843][T14964] bond10: entered promiscuous mode [ 296.244969][T14964] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.356027][T14972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.357020][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2369'. [ 297.153784][T15010] syzkaller0: entered promiscuous mode [ 297.153810][T15010] syzkaller0: entered allmulticast mode [ 297.263061][T15026] netlink: 'syz.0.2383': attribute type 13 has an invalid length. [ 297.413039][T15040] netlink: 'syz.3.2384': attribute type 9 has an invalid length. [ 297.726289][T15056] __nla_validate_parse: 2 callbacks suppressed [ 297.726309][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 297.926930][T15061] ovs-dp0: entered promiscuous mode [ 298.011265][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 298.011353][T15067] veth1: Caught tx_queue_len zero misconfig [ 298.014808][T15067] lo: Caught tx_queue_len zero misconfig [ 298.037396][T15067] syzkaller0: left promiscuous mode [ 298.037419][T15067] syzkaller0: left allmulticast mode [ 298.043182][T15067] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 298.335397][T15083] ip_tables: iptables: counters copy to user failed while replacing table [ 298.427547][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2399'. [ 298.428348][T15083] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 298.434349][T15092] netlink: 'syz.1.2398': attribute type 10 has an invalid length. [ 298.533428][T15092] dummy0: entered promiscuous mode [ 298.536224][T15092] dummy0: entered allmulticast mode [ 298.547302][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 298.550460][T15092] team0: Port device dummy0 added [ 298.581685][T15083] vlan2: entered promiscuous mode [ 298.581715][T15083] bond0: entered promiscuous mode [ 298.581731][T15083] veth0_to_bond: entered promiscuous mode [ 298.630212][T15096] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2401'. [ 299.169014][T15124] --map-set only usable from mangle table [ 299.482087][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2415'. [ 299.519745][T15146] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.886502][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2421'. [ 299.921740][T15177] xt_hashlimit: size too large, truncated to 1048576 [ 299.948393][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2420'. [ 299.983393][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 299.983808][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'. [ 300.031273][T15174] ip_tables: iptables: counters copy to user failed while replacing table [ 300.067749][T15174] xt_ecn: cannot match TCP bits for non-tcp packets [ 300.862039][T15181] xt_hashlimit: size too large, truncated to 1048576 [ 301.270262][T15225] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 301.324361][T15229] netlink: 'syz.4.2433': attribute type 10 has an invalid length. [ 301.332296][T15229] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.332660][T15229] bridge0: port 1(bridge_slave_0) entered listening state [ 301.364937][T15229] bridge0: entered allmulticast mode [ 301.374529][T15229] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 301.966889][T15262] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.990559][T15262] bridge_slave_1: left allmulticast mode [ 301.990591][T15262] bridge_slave_1: left promiscuous mode [ 301.991077][T15262] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.020806][T15262] bridge_slave_0: left allmulticast mode [ 302.020832][T15262] bridge_slave_0: left promiscuous mode [ 302.022314][T15262] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.071355][T15262] bond0: (slave bridge0): Releasing backup interface [ 303.045344][T15327] __nla_validate_parse: 6 callbacks suppressed [ 303.045366][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2457'. [ 303.359796][T15344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2464'. [ 303.904786][T15376] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 303.968067][T15382] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2474'. [ 303.968094][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2474'. [ 304.458456][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 304.481003][T15407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2478'. [ 304.482939][T15407] ip_tables: iptables: counters copy to user failed while replacing table [ 304.522428][T15407] syzkaller0: entered promiscuous mode [ 304.522454][T15407] syzkaller0: entered allmulticast mode [ 304.594560][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 304.851252][T15422] netlink: 42 bytes leftover after parsing attributes in process `syz.2.2479'. [ 305.090518][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2484'. [ 305.097671][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2484'. [ 305.612146][T15456] syzkaller0: entered promiscuous mode [ 305.612171][T15456] syzkaller0: entered allmulticast mode [ 306.107235][T15483] vlan2: entered promiscuous mode [ 306.107260][T15483] bond0: entered promiscuous mode [ 306.107275][T15483] bond_slave_0: entered promiscuous mode [ 306.110050][T15483] team0: entered promiscuous mode [ 306.110080][T15483] team_slave_0: entered promiscuous mode [ 306.110397][T15483] team_slave_1: entered promiscuous mode [ 306.110999][T15483] bridge0: entered promiscuous mode [ 306.339767][T15500] bridge0: port 3(syz_tun) entered disabled state [ 306.340144][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.341508][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.345682][T15500] bridge0: entered allmulticast mode [ 306.366271][T15500] syz_tun: left allmulticast mode [ 306.366343][T15500] syz_tun: left promiscuous mode [ 306.366664][T15500] bridge0: port 3(syz_tun) entered disabled state [ 306.401052][T15500] bridge_slave_1: left allmulticast mode [ 306.401084][T15500] bridge_slave_1: left promiscuous mode [ 306.401305][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.436405][T15500] bridge_slave_0: left allmulticast mode [ 306.436438][T15500] bridge_slave_0: left promiscuous mode [ 306.436649][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.644280][T15516] netlink: 'syz.3.2507': attribute type 4 has an invalid length. [ 306.752013][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.864212][T15529] ip6gre1: entered allmulticast mode [ 307.151490][T15544] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.151622][T15544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.184027][T15544] bridge0: port 1(team0) entered blocking state [ 307.184191][T15544] bridge0: port 1(team0) entered forwarding state [ 307.184491][T15544] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.572083][T15575] tipc: Enabled bearer , priority 10 [ 308.090559][T15607] netlink: 'syz.0.2534': attribute type 21 has an invalid length. [ 308.172119][T15611] netlink: 'syz.0.2534': attribute type 21 has an invalid length. [ 308.266716][T15618] netlink: 'syz.4.2536': attribute type 21 has an invalid length. [ 308.508581][T15627] netlink: 'syz.4.2540': attribute type 1 has an invalid length. [ 308.508604][T15627] __nla_validate_parse: 80 callbacks suppressed [ 308.508617][T15627] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2540'. [ 308.508644][T15627] block nbd0: NBD_DISCONNECT [ 308.508667][T15627] block nbd0: Send disconnect failed -32 [ 308.508690][T15627] block nbd0: Send disconnect failed -32 [ 308.508710][T15627] block nbd0: shutting down sockets [ 308.563180][T15631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.578517][ T5770] tipc: Node number set to 3568117826 [ 308.669365][T15630] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 308.669388][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.686823][T15630] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 308.686876][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.690389][T15630] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 308.690431][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.691047][T15630] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 308.691089][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.691737][T15630] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 308.691771][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.695251][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.702869][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.704989][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 308.715520][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 309.066277][ T767] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.066329][ T767] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.066366][ T767] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.066403][ T767] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 309.612656][T15672] lo: entered promiscuous mode [ 309.626762][T15672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.635411][T15677] ip6t_srh: unknown srh invflags 4000 [ 309.938333][T15692] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.048801][T15704] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.490493][T15720] syzkaller1: entered promiscuous mode [ 310.490519][T15720] syzkaller1: entered allmulticast mode [ 310.622842][T15728] Bluetooth: MGMT ver 1.23 [ 310.651012][T15728] bond6: (slave bridge7): making interface the new active one [ 310.651558][T15728] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 311.442526][T15775] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.195480][T15811] validate_nla: 29 callbacks suppressed [ 312.195504][T15811] netlink: 'syz.1.2595': attribute type 30 has an invalid length. [ 312.298718][T15811] bond7: option arp_missed_max: invalid value (0) [ 312.298739][T15811] bond7: option arp_missed_max: allowed values 1 - 255 [ 312.305248][T15811] bond7 (unregistering): Released all slaves [ 312.760418][T15847] netlink: 'syz.4.2604': attribute type 1 has an invalid length. [ 312.888455][T15847] bond11: (slave bridge0): making interface the new active one [ 312.888923][T15847] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 313.008310][T15859] syzkaller0: entered promiscuous mode [ 313.008334][T15859] syzkaller0: entered allmulticast mode [ 313.095395][T15869] x_tables: duplicate underflow at hook 3 [ 313.608767][T15899] __nla_validate_parse: 41 callbacks suppressed [ 313.608793][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 313.636848][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 313.636873][T15903] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2620'. [ 313.689520][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2620'. [ 313.803151][T15915] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2623'. [ 313.872570][T15918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2624'. [ 313.872601][T15918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2624'. [ 313.896485][ C1] TC_ACT_REPEAT abuse ? [ 313.896604][ C1] TC_ACT_REPEAT abuse ? [ 313.970781][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'. [ 314.000077][T15924] xfrm1: entered promiscuous mode [ 314.000101][T15924] xfrm1: entered allmulticast mode [ 314.072295][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 314.178459][T15940] 8021q: adding VLAN 0 to HW filter on device bond12 [ 314.210739][ C1] TC_ACT_REPEAT abuse ? [ 314.210874][ C1] TC_ACT_REPEAT abuse ? [ 314.215473][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 314.278269][T15942] netlink: 'syz.0.2628': attribute type 4 has an invalid length. [ 314.333522][T15942] .`: renamed from bond0 [ 314.744766][T15969] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 314.744790][T15969] netlink: 'syz.3.2637': attribute type 2 has an invalid length. [ 315.094984][T15981] Cannot find set identified by id 65534 to match [ 315.201885][T15986] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 315.201909][T15986] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 315.449013][T15995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 315.993595][T16022] team0: Caught tx_queue_len zero misconfig [ 316.517179][T16041] veth6: entered promiscuous mode [ 316.517205][T16041] veth6: entered allmulticast mode [ 316.655107][T16046] tipc: Resetting bearer [ 316.665383][T16046] tipc: Resetting bearer [ 316.934691][T16064] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:19999 [ 317.073341][T16078] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 317.289364][T16091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.298279][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.993746][T16132] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 318.367145][T16140] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 318.644426][T16153] __nla_validate_parse: 57 callbacks suppressed [ 318.644450][T16153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2694'. [ 318.789554][T16165] xt_hashlimit: size too large, truncated to 1048576 [ 318.807312][T16165] xt_hashlimit: max too large, truncated to 1048576 [ 318.807534][T16165] xt_hashlimit: invalid rate [ 319.103521][T16168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2698'. [ 319.210226][T16168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.211410][T16168] bridge0: port 3(bond7) entered blocking state [ 319.214240][T16168] bridge0: port 3(bond7) entered disabled state [ 319.215283][T16168] bond7: entered allmulticast mode [ 319.251525][T16168] bond7: entered promiscuous mode [ 319.252563][T16168] bridge0: port 3(bond7) entered blocking state [ 319.252691][T16168] bridge0: port 3(bond7) entered forwarding state [ 319.287224][ T62] bridge0: port 3(bond7) entered disabled state [ 319.463188][T16185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2704'. [ 319.463215][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 319.556309][T16189] syzkaller0: left promiscuous mode [ 319.556350][T16189] syzkaller0: left allmulticast mode [ 319.601041][T16195] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 319.654519][T16204] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 319.933984][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 319.959922][T16211] netlink: 65031 bytes leftover after parsing attributes in process `syz.1.2708'. [ 320.583145][T16229] netlink: 'syz.0.2716': attribute type 11 has an invalid length. [ 320.804223][T16236] openvswitch: netlink: Duplicate or invalid key (type 0). [ 320.804262][T16236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.846933][T16239] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 320.928154][T16240] bond0: entered promiscuous mode [ 320.928242][T16240] bond0: entered allmulticast mode [ 320.928694][T16240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.932367][T16242] syzkaller1: entered promiscuous mode [ 320.932384][T16242] syzkaller1: entered allmulticast mode [ 321.201821][T16248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2722'. [ 321.229325][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 321.443226][T16266] bond7: left allmulticast mode [ 321.443332][T16266] bond7: left promiscuous mode [ 321.443625][T16266] bridge0: port 3(bond7) entered disabled state [ 321.483126][T16266] team0: left allmulticast mode [ 321.483150][T16266] team_slave_0: left allmulticast mode [ 321.483168][T16266] team_slave_1: left allmulticast mode [ 321.483187][T16266] dummy0: left allmulticast mode [ 321.509230][T16266] team0: left promiscuous mode [ 321.509252][T16266] team_slave_0: left promiscuous mode [ 321.509560][T16266] team_slave_1: left promiscuous mode [ 321.509910][T16266] dummy0: left promiscuous mode [ 321.510448][T16266] bridge0: port 1(team0) entered disabled state [ 321.603231][T16266] bridge_slave_1: left allmulticast mode [ 321.603260][T16266] bridge_slave_1: left promiscuous mode [ 321.613868][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.614549][T16307] x_tables: unsorted entry at hook 3 [ 322.841626][T16316] team0 (unregistering): Port device team_slave_0 removed [ 322.861297][T16316] team0 (unregistering): Port device team_slave_1 removed [ 323.182146][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.222255][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.229535][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.260194][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.266911][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'. [ 323.271755][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.275500][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'. [ 323.300021][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.312227][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.328794][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 323.329742][T16324] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 324.239792][T16365] netlink: 'syz.4.2750': attribute type 2 has an invalid length. [ 324.239815][T16365] __nla_validate_parse: 63 callbacks suppressed [ 324.239828][T16365] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2750'. [ 324.532153][T16380] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.797558][T16392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 324.819936][T16392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2756'. [ 324.820010][T16392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2756'. [ 324.977932][T16401] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.387503][T16415] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2760'. [ 325.405106][T16415] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 325.424521][T16415] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2760'. [ 325.617273][ C0] TC_ACT_REPEAT abuse ? [ 325.617418][ C0] TC_ACT_REPEAT abuse ? [ 325.634699][T16426] bridge0: entered allmulticast mode [ 325.650303][T16426] netlink: 'syz.4.2767': attribute type 1 has an invalid length. [ 325.728456][T16426] 8021q: adding VLAN 0 to HW filter on device bond13 [ 325.780280][T16433] bond13: (slave gretap2): making interface the new active one [ 325.783178][T16433] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 325.806012][T16434] erspan0: entered allmulticast mode [ 325.872602][T16426] bond11: (slave bridge0): Releasing backup interface [ 325.953090][ T13] tipc: Subscription rejected, illegal request [ 326.030565][T16448] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 326.048682][T16450] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2771'. [ 326.120139][T16448] 8021q: adding VLAN 0 to HW filter on device bond13 [ 326.155311][T16454] syzkaller1: entered promiscuous mode [ 326.155338][T16454] syzkaller1: entered allmulticast mode [ 326.171652][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2772'. [ 326.200445][T16448] bond13: (slave geneve2): making interface the new active one [ 326.204074][T16448] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 326.246731][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2772'. [ 326.388026][T16456] netlink: 'syz.3.2772': attribute type 5 has an invalid length. [ 326.394596][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 327.654399][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'. [ 327.720539][T16514] netlink: 'syz.0.2785': attribute type 1 has an invalid length. [ 327.927356][T16522] netlink: 'syz.1.2788': attribute type 1 has an invalid length. [ 328.308132][T16537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 328.400241][T16545] netlink: 'syz.0.2794': attribute type 3 has an invalid length. [ 328.730539][T16553] netlink: 'syz.1.2797': attribute type 1 has an invalid length. [ 328.815967][T16553] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.015566][T16567] netlink: 'syz.0.2801': attribute type 21 has an invalid length. [ 329.318764][T16570] __nla_validate_parse: 5 callbacks suppressed [ 329.318791][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 329.566548][T16583] ip_tables: iptables: counters copy to user failed while replacing table [ 329.748151][T16591] syzkaller0: entered promiscuous mode [ 329.748177][T16591] syzkaller0: entered allmulticast mode [ 329.902630][T16604] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.994542][T16602] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2811'. [ 330.696712][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 330.945431][T16648] ip_tables: iptables: counters copy to user failed while replacing table [ 331.095006][T16657] tipc: Enabling of bearer rejected, media not registered [ 331.550736][T16675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.603372][T16677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2837'. [ 332.378959][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2848'. [ 332.620806][T16685] netlink: 'syz.0.2839': attribute type 10 has an invalid length. [ 332.640680][T16685] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.668772][T16685] .`: (slave team0): Enslaving as an active interface with a down link [ 332.735215][T16723] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2852'. [ 332.746446][T16721] netlink: 'syz.4.2851': attribute type 1 has an invalid length. [ 332.746468][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'. [ 332.853602][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 333.310602][T16739] veth0: entered promiscuous mode [ 333.372018][T16735] veth0: left promiscuous mode [ 333.417701][T16742] netlink: 'syz.3.2857': attribute type 12 has an invalid length. [ 333.524967][T16742] bond7: option primary_reselect: invalid value (255) [ 333.544290][T16742] bond7 (unregistering): Released all slaves [ 333.588123][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2860'. [ 333.588164][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2860'. [ 333.808575][T16758] nla_validate_range_unsigned: 24 callbacks suppressed [ 333.808598][T16758] netlink: 'syz.2.2861': attribute type 11 has an invalid length. [ 333.867436][T16761] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 333.990143][T16761] 8021q: adding VLAN 0 to HW filter on device bond14 [ 334.005639][T16766] syzkaller0: entered promiscuous mode [ 334.005663][T16766] syzkaller0: entered allmulticast mode [ 334.091327][T16763] bond14: (slave gretap3): making interface the new active one [ 334.109819][T16763] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 334.810487][T16810] __nla_validate_parse: 3 callbacks suppressed [ 334.810509][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2879'. [ 334.848757][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 334.868640][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 334.889567][T16815] tc_dump_action: action bad kind [ 335.214816][T16834] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2886'. [ 335.511997][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 335.539820][T16847] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.612929][T16855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.737779][T16861] IPVS: length: 1152 != 8 [ 335.907184][T16881] netlink: 'syz.1.2900': attribute type 21 has an invalid length. [ 335.907212][T16881] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.913497][T16869] 8021q: adding VLAN 0 to HW filter on device bond13 [ 336.106226][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 336.165374][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 336.378279][T16902] netlink: 'syz.4.2907': attribute type 10 has an invalid length. [ 336.573284][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 336.919224][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 337.130956][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 337.130994][T16946] netlink: 'syz.3.2921': attribute type 12 has an invalid length. [ 337.131008][T16946] netlink: 'syz.3.2921': attribute type 11 has an invalid length. [ 337.224128][T16951] openvswitch: netlink: EtherType 50a is less than min 600 [ 337.991753][T16984] team0: Port device dummy0 removed [ 338.003580][T16984] bond0: (slave veth0_to_bond): Releasing active interface [ 338.003609][T16984] veth0_to_bond: left promiscuous mode [ 338.037396][T16984] team0: Port device team_slave_0 removed [ 338.043765][T16984] team0: Port device team_slave_1 removed [ 338.044683][T16984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.044704][T16984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.064119][T16984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.094986][ T1172] bond5: (slave bond0): link status definitely down, disabling slave [ 338.104721][ T1172] bond5: now running without any active interface! [ 338.123062][T16983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.145402][T16983] set match dimension is over the limit! [ 338.191308][T16992] team0: No ports can be present during mode change [ 338.268507][T16988] netlink: 'syz.3.2934': attribute type 2 has an invalid length. [ 338.440097][T17003] block nbd0: not configured, cannot reconfigure [ 338.525610][T17008] netlink: 'syz.2.2937': attribute type 4 has an invalid length. [ 338.544564][T17008] netlink: 'syz.2.2937': attribute type 4 has an invalid length. [ 338.671760][T17016] syzkaller0: entered promiscuous mode [ 338.671788][T17016] syzkaller0: entered allmulticast mode [ 339.444415][T17060] netlink: 'syz.2.2951': attribute type 1 has an invalid length. [ 339.578268][T17064] bond14: (slave bridge44): making interface the new active one [ 339.579086][T17064] bond14: (slave bridge44): Enslaving as an active interface with an up link [ 339.641895][T17062] v: renamed from vlan1 (while UP) [ 339.688025][T17066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.249141][T17103] __nla_validate_parse: 11 callbacks suppressed [ 340.249166][T17103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2960'. [ 340.495559][T17110] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2963'. [ 340.813716][T17123] xt_IDLETIMER: timeout value is too big [ 340.911186][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.919144][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.931576][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.939326][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.952403][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.017879][ T5650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.019875][ T5650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.020376][ T5650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.025317][ T5650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.062578][ T5650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.334118][T17141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.795112][T17164] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2972'. [ 341.795242][T17164] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 341.820641][T17164] 0ªX¹¦Dö»: entered allmulticast mode [ 341.859122][T17154] netlink: 'syz.2.2970': attribute type 1 has an invalid length. [ 341.859146][T17154] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2970'. [ 342.402802][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2975'. [ 342.422424][T17194] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.422454][T17194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.627717][T17124] rxe_eth0 speed is unknown, defaulting to 1000 [ 342.905904][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.906858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.946279][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'. [ 342.967968][T17221] ip_tables: iptables: counters copy to user failed while replacing table [ 343.137074][ T5644] Bluetooth: hci5: command tx timeout [ 344.040530][T13705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.082031][T17124] lo speed is unknown, defaulting to 1000 [ 344.127284][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'. [ 344.157396][T17276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2995'. [ 344.169391][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2995'. [ 344.532019][T17292] batadv_slave_0: Caught tx_queue_len zero misconfig [ 344.594206][T17296] netlink: 10408 bytes leftover after parsing attributes in process `syz.3.3001'. [ 344.682060][T17300] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 344.898367][T17307] nft_compat: unsupported protocol 0 [ 345.017296][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.017504][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.017655][T17124] bridge_slave_0: entered allmulticast mode [ 345.019448][T17124] bridge_slave_0: entered promiscuous mode [ 345.023093][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.023317][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.023470][T17124] bridge_slave_1: entered allmulticast mode [ 345.025371][T17124] bridge_slave_1: entered promiscuous mode [ 345.165129][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.184994][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.199447][ T5770] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.200571][T17318] bond0: left promiscuous mode [ 345.200596][T17318] bond0: left allmulticast mode [ 345.226976][T17318] netlink: 'syz.0.3007': attribute type 4 has an invalid length. [ 345.259004][T17320] __nla_validate_parse: 4 callbacks suppressed [ 345.259027][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 345.333112][T17124] team0: Port device team_slave_0 added [ 345.351194][T17124] team0: Port device team_slave_1 added [ 345.407727][T17322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3009'. [ 345.478203][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.478224][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.478253][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.490920][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.490970][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.491036][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.593293][T17332] netlink: 'syz.1.3010': attribute type 12 has an invalid length. [ 345.623347][T17327] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 345.696839][T17124] hsr_slave_0: entered promiscuous mode [ 345.697901][T17124] hsr_slave_1: entered promiscuous mode [ 345.698638][T17124] debugfs: 'hsr0' already exists in 'hsr' [ 345.698658][T17124] Cannot create hsr debugfs directory [ 346.218949][T17124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.218991][T17124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.219021][T17124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 346.419362][T17124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.419403][T17124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.419434][T17124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 346.488039][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3023'. [ 346.584169][T17124] bond0: (slave netdevsim1): Releasing backup interface [ 346.604106][T17124] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 346.615273][T17124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.615311][T17124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.615340][T17124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 346.672534][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3027'. [ 346.688308][T17381] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3027'. [ 346.762717][T17124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.762757][T17124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.762786][T17124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 346.839079][T17384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3030'. [ 346.884599][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 347.206199][T17402] bond9: entered promiscuous mode [ 347.206328][T17402] bond9: entered allmulticast mode [ 347.206731][T17402] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.208347][T17124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.239425][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.240466][T17124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.266306][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.267480][T17124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.294610][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.304249][T17124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.322805][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.560634][T17124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.641160][T17124] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.644901][T17428] netlink: 'syz.1.3039': attribute type 1 has an invalid length. [ 347.670143][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.670259][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.708317][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.708431][ T6180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.039658][T17440] netlink: 'syz.1.3042': attribute type 29 has an invalid length. [ 348.218051][T17447] ip_tables: iptables: counters copy to user failed while replacing table [ 348.261912][T17447] syzkaller1: entered promiscuous mode [ 348.261941][T17447] syzkaller1: entered allmulticast mode [ 348.295403][T17449] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3044'. [ 348.318647][T17449] gretap0: entered promiscuous mode [ 348.403532][T17459] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3044'. [ 348.461246][T17460] netlink: 'syz.0.3047': attribute type 1 has an invalid length. [ 348.463312][T17452] syzkaller0: left promiscuous mode [ 348.463337][T17452] syzkaller0: left allmulticast mode [ 348.476814][T17459] 0ªî{X¹¦: renamed from gretap0 [ 348.498342][T17459] 0ªî{X¹¦: left promiscuous mode [ 348.498368][T17459] 0ªî{X¹¦: entered allmulticast mode [ 348.500670][T17459] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 348.572604][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'. [ 348.642262][T17460] 8021q: adding VLAN 0 to HW filter on device bond14 [ 349.156836][T17124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.396842][T17503] macvlan0: left promiscuous mode [ 349.523157][T17510] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 349.557235][T17510] 8021q: adding VLAN 0 to HW filter on device bond15 [ 349.732969][T17517] xt_IDLETIMER: label is empty or not nul-terminated [ 349.760065][T17521] bond15: (slave bridge6): making interface the new active one [ 349.776973][T17521] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 350.122344][T17124] veth0_vlan: entered promiscuous mode [ 350.148709][T17124] veth1_vlan: entered promiscuous mode [ 350.239853][T17124] veth0_macvtap: entered promiscuous mode [ 350.256651][T17124] veth1_macvtap: entered promiscuous mode [ 350.320113][T17124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.382493][T17124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.441836][ T6155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.461072][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.461144][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.461183][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.616284][T17543] __nla_validate_parse: 5 callbacks suppressed [ 350.616307][T17543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3067'. [ 350.616966][T17549] ip_tables: iptables: counters copy to user failed while replacing table [ 350.619083][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 350.620937][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.620956][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.833901][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.833925][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.902018][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 351.174163][T17561] syzkaller0: entered promiscuous mode [ 351.174190][T17561] syzkaller0: entered allmulticast mode [ 351.237383][T17583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2961'. [ 351.798462][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.801630][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.828831][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.875309][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.892628][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.809315][T17608] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 353.894039][T17614] syzkaller0: entered promiscuous mode [ 353.894065][T17614] syzkaller0: entered allmulticast mode [ 353.974004][T17621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3082'. [ 353.974045][T17621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3082'. [ 353.999078][T17621] netlink: 'syz.0.3082': attribute type 1 has an invalid length. [ 353.999103][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'. [ 354.024055][ T5644] Bluetooth: hci0: command tx timeout [ 354.333125][T17630] nbd0: detected capacity change from 0 to 63 [ 354.347250][ T5644] block nbd0: Receive control failed (result -32) [ 354.352815][ T1739] block nbd0: Dead connection, failed to find a fallback [ 354.469852][T17603] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.472323][T17637] ip_tables: iptables: counters copy to user failed while replacing table [ 354.481210][T17641] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 354.559531][T17641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.574160][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3087'. [ 354.619289][T17644] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 354.651612][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3086'. [ 354.652499][T17641] veth0_to_bond: entered allmulticast mode [ 354.761563][T17652] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3088'. [ 354.951568][T17660] ip_tables: iptables: counters copy to user failed while replacing table [ 355.321003][T17603] lo speed is unknown, defaulting to 1000 [ 355.370461][T17673] xt_hashlimit: size too large, truncated to 1048576 [ 355.593739][T17684] netlink: 'syz.0.3095': attribute type 23 has an invalid length. [ 355.710176][T17691] sctp: [Deprecated]: syz.2.3098 (pid 17691) Use of int in maxseg socket option. [ 355.710176][T17691] Use struct sctp_assoc_value instead [ 355.714377][T17691] __nla_validate_parse: 3 callbacks suppressed [ 355.714397][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'. [ 356.063349][T17705] 8021q: VLANs not supported on ip6_vti0 [ 356.106513][ T5644] Bluetooth: hci0: command tx timeout [ 356.260681][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.260797][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.260966][T17603] bridge_slave_0: entered allmulticast mode [ 356.264478][T17603] bridge_slave_0: entered promiscuous mode [ 356.300320][T17714] syzkaller0: entered promiscuous mode [ 356.300384][T17714] syzkaller0: entered allmulticast mode [ 356.303164][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.304241][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.304700][T17603] bridge_slave_1: entered allmulticast mode [ 356.319607][T17603] bridge_slave_1: entered promiscuous mode [ 356.515401][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3103'. [ 356.584139][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.603694][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.727846][T17603] team0: Port device team_slave_0 added [ 356.733988][T17603] team0: Port device team_slave_1 added [ 356.805603][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.805624][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.805651][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.869300][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.869320][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.869349][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.957515][T17744] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 357.028976][T17603] hsr_slave_0: entered promiscuous mode [ 357.031751][T17603] hsr_slave_1: entered promiscuous mode [ 357.034239][T17603] debugfs: 'hsr0' already exists in 'hsr' [ 357.034262][T17603] Cannot create hsr debugfs directory [ 357.360533][T17603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.360575][T17603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.360623][T17603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.537574][T17769] bridge0: port 1(veth0) entered blocking state [ 357.537698][T17769] bridge0: port 1(veth0) entered disabled state [ 357.537888][T17769] veth0: entered allmulticast mode [ 357.562022][T17769] veth0: entered promiscuous mode [ 357.578469][T17769] bridge0: port 1(veth0) entered blocking state [ 357.578613][T17769] bridge0: port 1(veth0) entered forwarding state [ 357.580271][T17773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.655257][T17603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.655299][T17603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.655328][T17603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.706340][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3125'. [ 357.711113][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'. [ 357.740182][T17775] netlink: 'syz.2.3123': attribute type 12 has an invalid length. [ 357.740207][T17775] netlink: 'syz.2.3123': attribute type 29 has an invalid length. [ 357.740223][T17775] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3123'. [ 357.740242][T17775] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3123'. [ 357.856789][T17603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.856825][T17603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.856850][T17603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.907313][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3126'. [ 358.071311][T17789] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 358.186141][ T5644] Bluetooth: hci0: command tx timeout [ 358.279743][T17603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.298972][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.299950][T17603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.328198][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.330666][T17603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.355659][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.366221][T17603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.401095][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.821205][T17603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.914839][T17603] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.960884][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.961126][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.019342][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.019456][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.050932][T17843] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.081238][T17897] netlink: 'syz.2.3151': attribute type 1 has an invalid length. [ 360.248286][T17914] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 360.256680][ T5644] Bluetooth: hci0: command tx timeout [ 360.540402][T17603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.650579][T17603] veth0_vlan: entered promiscuous mode [ 360.682061][T17603] veth1_vlan: entered promiscuous mode [ 360.772832][T17603] veth0_macvtap: entered promiscuous mode [ 360.806600][T17603] veth1_macvtap: entered promiscuous mode [ 360.839322][T17603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.893786][T17603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.970152][T17929] Bluetooth: MGMT ver 1.23 [ 361.085497][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'. [ 361.117362][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.117385][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.187151][ T767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.187288][ T767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.187305][ T767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.200283][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.209956][ T1172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.213709][ T6180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.262443][T17944] netlink: 'syz.3.3159': attribute type 2 has an invalid length. [ 361.773295][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3165'. [ 361.834733][T17967] bond1: entered promiscuous mode [ 361.835286][T17967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.931214][T17967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3165'. [ 362.217343][T17983] syzkaller1: entered allmulticast mode [ 362.220965][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.241595][ T5650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.243856][ T5650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.245502][ T5650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.268160][ T5650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.286309][T17990] ip_tables: iptables: counters copy to user failed while replacing table [ 362.510936][T18000] netlink: 'syz.2.3173': attribute type 3 has an invalid length. [ 362.528894][T18001] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 362.529178][T18001] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 362.529403][T18001] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 362.529627][T18001] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 362.529850][T18001] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 362.530071][T18001] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 362.530292][T18001] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 362.594775][T18000] raw_sendmsg: syz.2.3173 forgot to set AF_INET. Fix it! [ 362.714099][ T6180] smc: removing ib device syz1 [ 362.750205][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 362.769909][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 362.786747][ T193] infiniband syz1: ib_query_port failed (-19) [ 362.833999][ T6180] smbdirect: ib_dev[syz1] removed [ 363.031783][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3177'. [ 363.454460][T17984] rxe_eth0 speed is unknown, defaulting to 1000 [ 363.707818][T18038] can: request_module (can-proto-4) failed. [ 363.849347][T18048] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.850132][T18048] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.114168][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 364.117255][T18049] 8021q: adding VLAN 0 to HW filter on device bond16 [ 364.342453][ T5644] Bluetooth: hci3: command tx timeout [ 364.538447][T18069] bond0: (slave bridge0): Releasing backup interface [ 364.539848][T18069] bridge0: left promiscuous mode [ 364.540448][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.541211][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.621610][T18069] bond0: (slave team0): Releasing backup interface [ 364.623657][T18069] team0: left promiscuous mode [ 364.623683][T18069] team_slave_0: left promiscuous mode [ 364.623924][T18069] team_slave_1: left promiscuous mode [ 364.687360][T18069] bridge_slave_0: left allmulticast mode [ 364.687395][T18069] bridge_slave_0: left promiscuous mode [ 364.687655][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.743290][T18069] bridge_slave_1: left allmulticast mode [ 364.743324][T18069] bridge_slave_1: left promiscuous mode [ 364.760806][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.795267][T18069] bond0: (slave bond_slave_0): Releasing backup interface [ 364.818988][T18069] bond_slave_0: left promiscuous mode [ 364.857759][T18069] team0: Port device team_slave_0 removed [ 364.898847][T18069] team0: Port device team_slave_1 removed [ 364.899690][T18069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.904062][T18069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.955074][T18069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.955366][T18073] batadv0: Caught tx_queue_len zero misconfig [ 365.064121][T17984] lo speed is unknown, defaulting to 1000 [ 365.233325][T18086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'. [ 365.316181][T18090] validate_nla: 61 callbacks suppressed [ 365.316202][T18090] netlink: 'syz.2.3196': attribute type 10 has an invalid length. [ 365.321033][T18086] xfrm1: entered promiscuous mode [ 365.321058][T18086] xfrm1: entered allmulticast mode [ 365.322903][T18087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3193'. [ 365.394653][T18090] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 365.419155][T18090] team0: Port device wlan0 added [ 365.547575][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 365.568026][T18095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.969702][T18113] netlink: 'syz.4.3201': attribute type 1 has an invalid length. [ 366.416612][ T5644] Bluetooth: hci3: command tx timeout [ 366.533434][T18129] netlink: 'syz.0.3199': attribute type 4 has an invalid length. [ 366.655556][T17984] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.659651][T17984] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.659824][T17984] bridge_slave_0: entered allmulticast mode [ 366.702482][T17984] bridge_slave_0: entered promiscuous mode [ 366.721834][T17984] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.721952][T17984] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.722119][T17984] bridge_slave_1: entered allmulticast mode [ 366.724429][ T1357] IPVS: starting estimator thread 0... [ 366.765139][T18138] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 366.771899][T17984] bridge_slave_1: entered promiscuous mode [ 366.821836][T18143] IPVS: using max 24 ests per chain, 57600 per kthread [ 366.995647][T18145] team0: Device ipvlan0 failed to register rx_handler [ 367.027613][T17984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.073882][T17984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.104520][T18149] __nla_validate_parse: 1 callbacks suppressed [ 367.104543][T18149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3211'. [ 367.230400][T17984] team0: Port device team_slave_0 added [ 367.258383][T17984] team0: Port device team_slave_1 added [ 367.589833][T18159] wlan0: mtu greater than device maximum [ 367.589856][T18159] team0: Device wlan0 failed to change mtu [ 367.591014][T17984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.591031][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.591055][T17984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.661193][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'. [ 367.675605][T17984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.675625][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.675655][T17984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.793751][T17984] hsr_slave_0: entered promiscuous mode [ 367.798076][T17984] hsr_slave_1: entered promiscuous mode [ 367.810706][T17984] debugfs: 'hsr0' already exists in 'hsr' [ 367.810730][T17984] Cannot create hsr debugfs directory [ 368.303100][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3220'. [ 368.303808][T18192] netlink: 'syz.0.3220': attribute type 21 has an invalid length. [ 368.303828][T18192] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3220'. [ 368.350897][T17984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.350937][T17984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.499268][ T5644] Bluetooth: hci3: command tx timeout [ 368.508379][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 368.595456][T17984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.595498][T17984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.666470][T18198] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 368.693234][T18198] bond1: (slave lo): Enslaving as an active interface with an up link [ 368.695630][T18198] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 368.725246][T18204] netlink: 'syz.0.3224': attribute type 3 has an invalid length. [ 368.797196][T17984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.797237][T17984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.872019][T18220] netlink: 'syz.0.3228': attribute type 1 has an invalid length. [ 368.931341][T18218] team0 (unregistering): Port device wlan0 removed [ 368.951676][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3226'. [ 369.029502][T18220] 8021q: adding VLAN 0 to HW filter on device bond17 [ 369.030694][T18222] lo: Caught tx_queue_len zero misconfig [ 369.104160][T17984] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.104200][T17984] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.396973][T17984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.421381][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.424659][T17984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.457694][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.461385][T17984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.492441][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.493212][T17984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.529679][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.569714][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 369.573710][T18236] bridge0: port 3(gretap0) entered blocking state [ 369.573986][T18236] bridge0: port 3(gretap0) entered disabled state [ 369.574172][T18236] gretap0: entered allmulticast mode [ 369.581669][T18236] gretap0: entered promiscuous mode [ 369.585241][T18236] bridge0: port 3(gretap0) entered blocking state [ 369.585522][T18236] bridge0: port 3(gretap0) entered forwarding state [ 369.963615][T18263] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3236'. [ 370.002265][ T6155] IPVS: starting estimator thread 0... [ 370.017132][T17984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.069707][T17984] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.098186][T18266] IPVS: using max 26 ests per chain, 62400 per kthread [ 370.123785][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.123899][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.173746][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.173885][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.410232][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'. [ 370.522980][T18283] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 370.576562][ T5644] Bluetooth: hci3: command tx timeout [ 370.620393][T18293] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3241'. [ 370.830112][T18302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.501076][T18336] netlink: 'syz.2.3252': attribute type 11 has an invalid length. [ 371.679697][T17984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.904414][T17984] veth0_vlan: entered promiscuous mode [ 371.944513][T17984] veth1_vlan: entered promiscuous mode [ 372.020804][T17984] veth0_macvtap: entered promiscuous mode [ 372.042665][T17984] veth1_macvtap: entered promiscuous mode [ 372.083237][T17984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.111767][T17984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.211247][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.211300][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.211339][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.654547][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.658154][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.763476][T18392] __nla_validate_parse: 10 callbacks suppressed [ 372.763496][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3265'. [ 372.771844][T18390] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 372.874578][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.874602][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.889647][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.966574][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 373.089421][T18402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3269'. [ 373.089451][T18402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3269'. [ 373.089469][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 373.179222][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3270'. [ 373.315265][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'. [ 373.584535][T18421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.773318][ T5650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.798017][ T5650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.804956][ T5650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.823644][ T5650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.825384][ T5650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.888596][T18421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.006480][T18438] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3277'. [ 374.006537][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 374.007685][T18438] netlink: 'syz.0.3277': attribute type 10 has an invalid length. [ 374.007937][T18438] dummy0: left promiscuous mode [ 374.054362][T18438] team0: Port device dummy0 added [ 374.179232][T18421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.382118][T18421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.466647][ T1357] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.466687][ T1357] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.584230][T18458] openvswitch: netlink: Multiple metadata blocks provided [ 374.630693][T18464] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 374.796675][ T1357] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.796717][ T1357] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.967080][ T1357] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.967119][ T1357] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.043527][T18433] rxe_eth0 speed is unknown, defaulting to 1000 [ 375.161216][ T1357] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.161257][ T1357] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.257607][ T767] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.510203][T18455] syzkaller0: entered promiscuous mode [ 375.515032][T18455] syzkaller0: entered allmulticast mode [ 375.622741][ T63] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.937392][ T5650] Bluetooth: hci1: command tx timeout [ 376.818577][ T5650] Bluetooth: hci5: command tx timeout [ 377.897497][T18433] lo speed is unknown, defaulting to 1000 [ 377.977246][ T6155] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.015973][ T5650] Bluetooth: hci1: command tx timeout [ 378.339906][T18533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3291'. [ 378.508001][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.688135][T18543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.754128][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.839794][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 378.906234][ T5650] Bluetooth: hci5: command tx timeout [ 378.938094][ T1357] pim6reg: left allmulticast mode [ 378.942194][ T1357] batman_adv: batadv0: Interface deactivated: gretap1 [ 378.942289][T18549] sctp: [Deprecated]: syz.3.3295 (pid 18549) Use of int in maxseg socket option. [ 378.942289][T18549] Use struct sctp_assoc_value instead [ 379.212708][T18553] netlink: 'syz.3.3296': attribute type 21 has an invalid length. [ 379.212735][T18553] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3296'. [ 379.514501][ T1357] batman_adv: batadv0: Removing interface: gretap1 [ 379.642474][ T1357] bond9 (unregistering): (slave geneve3): Releasing active interface [ 379.665446][ T1357] bond5 (unregistering): (slave geneve2): Releasing active interface [ 379.725193][ T1357] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 379.743219][ T1357] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 379.743249][ T1357] bridge2 (unregistering): left promiscuous mode [ 379.971685][ T1357] bond6 (unregistering): (slave bridge38): Releasing active interface [ 379.971716][ T1357] bond6 (unregistering): (slave bridge38): the permanent HWaddr of slave - 2e:79:89:d3:7f:61 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 380.013173][ T1357] bond6 (unregistering): (slave bridge39): Releasing active interface [ 380.033618][ T1357] bond8 (unregistering): (slave bridge41): Releasing backup interface [ 380.033647][ T1357] bridge41 (unregistering): left promiscuous mode [ 380.064739][ T1357] bond10 (unregistering): (slave bridge42): Releasing backup interface [ 380.064767][ T1357] bond10 (unregistering): (slave bridge42): the permanent HWaddr of slave - 72:9b:8a:ed:78:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 380.064803][ T1357] bond10 (unregistering): (slave bridge43): making interface the new active one [ 380.103885][ T5650] Bluetooth: hci1: command tx timeout [ 380.111301][ T1357] bond10 (unregistering): (slave bridge43): Releasing backup interface [ 380.125013][ T1357] bond14 (unregistering): (slave bridge44): Releasing active interface [ 380.170467][ T1357] bond0 (unregistering): Released all slaves [ 380.189955][ T1357] bond1 (unregistering): Released all slaves [ 380.207940][ T1357] bond2 (unregistering): Released all slaves [ 380.225565][ T1357] bond3 (unregistering): Released all slaves [ 380.251578][ T1357] bond4 (unregistering): Released all slaves [ 380.270547][ T1357] bond5 (unregistering): Released all slaves [ 380.290784][ T1357] bond6 (unregistering): Released all slaves [ 380.321894][ T1357] bond7 (unregistering): Released all slaves [ 380.340310][ T1357] bond8 (unregistering): Released all slaves [ 380.370722][ T1357] bond9 (unregistering): Released all slaves [ 380.391935][ T1357] bond10 (unregistering): Released all slaves [ 380.412021][ T1357] bond11 (unregistering): Released all slaves [ 380.434871][ T1357] bond12 (unregistering): Released all slaves [ 380.451590][ T1357] bond13 (unregistering): Released all slaves [ 380.469150][ T1357] bond14 (unregistering): Released all slaves [ 380.507763][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 380.510852][T18553] netlink: 'syz.3.3296': attribute type 5 has an invalid length. [ 380.510875][T18553] netlink: 'syz.3.3296': attribute type 6 has an invalid length. [ 380.510889][T18553] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3296'. [ 380.697888][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 380.873423][ T1357] ovs-dp0: left promiscuous mode [ 380.923946][T18584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3302'. [ 380.981989][ T5650] Bluetooth: hci5: command tx timeout [ 381.000758][T18590] Bluetooth: MGMT ver 1.23 [ 381.056998][T18596] ip_tables: iptables: counters copy to user failed while replacing table [ 381.178019][T18585] bond1: option lp_interval: invalid value (0) [ 381.178047][T18585] bond1: option lp_interval: allowed values 1 - 2147483647 [ 381.184417][T18585] bond1 (unregistering): Released all slaves [ 381.344850][ T1357] tipc: Disabling bearer [ 381.345134][ T1357] tipc: Left network mode [ 381.584420][T18613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3308'. [ 381.647983][T18616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.651150][T18620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3309'. [ 381.684047][T18623] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 2, id = 0 [ 381.892254][ T5299] 8021q: adding VLAN 0 to HW filter on device eth1 [ 381.953533][T18433] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.953649][T18433] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.953818][T18433] bridge_slave_0: entered allmulticast mode [ 381.981915][T18433] bridge_slave_0: entered promiscuous mode [ 381.998592][T18433] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.998705][T18433] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.998864][T18433] bridge_slave_1: entered allmulticast mode [ 382.021226][T18433] bridge_slave_1: entered promiscuous mode [ 382.105392][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 382.176835][ T5650] Bluetooth: hci1: command tx timeout [ 382.177862][T18433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.304443][T18433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.521891][T18640] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 382.633464][T18433] team0: Port device team_slave_0 added [ 382.644187][T18643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.663178][T18433] team0: Port device team_slave_1 added [ 382.709158][T18650] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 382.798951][T18433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.798972][T18433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.799000][T18433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.835258][T18433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.838587][T18433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.838674][T18433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.306785][ T1357] hsr_slave_0: left promiscuous mode [ 383.314542][ T1357] hsr_slave_1: left promiscuous mode [ 383.892107][T18695] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 383.892136][T18695] netlink: 'syz.1.3326': attribute type 2 has an invalid length. [ 384.101471][T18703] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20004 [ 384.318257][ T5299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 384.365964][T18433] hsr_slave_0: entered promiscuous mode [ 384.378616][T18433] hsr_slave_1: entered promiscuous mode [ 384.379407][T18433] debugfs: 'hsr0' already exists in 'hsr' [ 384.379428][T18433] Cannot create hsr debugfs directory [ 384.548838][T18715] __nla_validate_parse: 4 callbacks suppressed [ 384.548860][T18715] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3333'. [ 384.574424][T18717] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3333'. [ 384.586608][T18716] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3331'. [ 384.857143][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 384.894466][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 384.894501][T18726] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3335'. [ 384.941520][T18726] geneve2: entered promiscuous mode [ 384.941538][T18726] geneve2: entered allmulticast mode [ 385.299196][ T1357] IPVS: stop unused estimator thread 0... [ 385.387508][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3341'. [ 385.406163][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3338'. [ 385.560028][T18754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.560440][T18755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.577354][T18748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3339'. [ 386.232501][T18433] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.280739][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.284965][T18433] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 386.318630][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.321340][T18433] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.370017][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.375391][T18433] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.449871][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.477332][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3347'. [ 386.501482][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.531987][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.545350][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.546417][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.583528][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.583988][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.622858][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.623321][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.623713][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.624096][T18781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.681686][T18777] netlink: 'syz.4.3346': attribute type 4 has an invalid length. [ 386.758850][T18433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.805761][T18433] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.831933][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.832048][ T6179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.869037][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.869185][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.271570][T18819] tc_dump_action: action bad kind [ 387.380491][T18818] gretap0: entered promiscuous mode [ 387.399176][T18818] 0ªî{X¹¦: renamed from gretap0 [ 387.412780][T18818] 0ªî{X¹¦: left promiscuous mode [ 387.412805][T18818] 0ªî{X¹¦: entered allmulticast mode [ 387.427492][T18818] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 387.925023][T18845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.389740][T18433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.534687][T18433] veth0_vlan: entered promiscuous mode [ 388.573080][T18433] veth1_vlan: entered promiscuous mode [ 388.683493][T18433] veth0_macvtap: entered promiscuous mode [ 388.719449][T18433] veth1_macvtap: entered promiscuous mode [ 388.797303][T18433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.834665][T18433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.887022][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.887217][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.939318][T18895] syzkaller0: left promiscuous mode [ 388.939344][T18895] syzkaller0: left allmulticast mode [ 389.062560][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.067986][ T6179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.291355][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.291380][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.422558][T18909] xt_hashlimit: size too large, truncated to 1048576 [ 389.483660][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.483692][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.507583][T18917] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 389.558304][T18918] __nla_validate_parse: 8 callbacks suppressed [ 389.558329][T18918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3372'. [ 390.001138][T18933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3375'. [ 390.033844][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'. [ 390.034236][T18933] netlink: 'syz.3.3375': attribute type 2 has an invalid length. [ 390.290318][T18948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3274'. [ 390.366662][T18948] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3274'. [ 390.475207][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.494379][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.495250][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.522506][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.524478][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.762974][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3381'. [ 390.763032][T18965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3381'. [ 391.341720][T18953] rxe_eth0 speed is unknown, defaulting to 1000 [ 391.499972][T18953] lo speed is unknown, defaulting to 1000 [ 391.729707][T18953] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.729902][T18953] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.730003][T18953] bridge_slave_0: entered allmulticast mode [ 391.731251][T18953] bridge_slave_0: entered promiscuous mode [ 391.739847][T18953] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.739948][T18953] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.740068][T18953] bridge_slave_1: entered allmulticast mode [ 391.743985][T18953] bridge_slave_1: entered promiscuous mode [ 391.809698][T18953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.813778][T18953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.853452][T18953] team0: Port device team_slave_0 added [ 391.861798][T18953] team0: Port device team_slave_1 added [ 391.889949][T18953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.889968][T18953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.889999][T18953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.891526][T18953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.891540][T18953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.891572][T18953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.006858][T18953] hsr_slave_0: entered promiscuous mode [ 392.007912][T18953] hsr_slave_1: entered promiscuous mode [ 392.008446][T18953] debugfs: 'hsr0' already exists in 'hsr' [ 392.008467][T18953] Cannot create hsr debugfs directory [ 392.140449][T18953] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.140478][T18953] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.207337][T18953] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.207383][T18953] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.254335][T18953] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.254373][T18953] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.310729][T18953] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.310760][T18953] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.436931][T18953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.439935][T18953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.440984][T18953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.453199][T18953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.458982][T18953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.482762][T18953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.484485][T18953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.491554][T18953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.579585][T18953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.599485][T18953] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.604716][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.604823][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.632942][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.633039][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.659417][ T5644] Bluetooth: hci4: command tx timeout [ 393.034366][T18953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.081762][T18953] veth0_vlan: entered promiscuous mode [ 393.090278][T18953] veth1_vlan: entered promiscuous mode [ 393.126850][T18953] veth0_macvtap: entered promiscuous mode [ 393.131223][T18953] veth1_macvtap: entered promiscuous mode [ 393.156685][T18953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.164979][T18953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.271161][ T6179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.271184][ T6179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.276810][ T6179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.277198][ T6179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.277358][ T6179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.277452][ T6179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.353155][ T6179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.353179][ T6179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.736575][ T5644] Bluetooth: hci4: command tx timeout [ 396.816076][ T5644] Bluetooth: hci4: command tx timeout [ 398.896071][ T5644] Bluetooth: hci4: command tx timeout [ 414.366012][ T5004] udevd[5004]: worker [17481] /devices/virtual/block/nbd0 is taking a long time [ 453.033547][T19031] ip_tables: iptables: counters copy to user failed while replacing table [ 453.250912][T19040] tbf_change: 23 callbacks suppressed [ 453.250933][T19040] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 453.300251][T19045] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 453.303540][T19046] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 453.931560][T19069] tipc: Failed to remove unknown binding: 66,0,2/0:1131578458/1131578459 [ 453.932078][T19069] tipc: Failed to remove unknown binding: 66,0,2/0:1131578458/1131578459 [ 453.933863][T19069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'. [ 453.964030][T19072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 454.137131][T19076] Cannot find add_set index 65532 as target [ 454.140959][T19077] Cannot find add_set index 65532 as target [ 454.182520][T19079] tipc: Started in network mode [ 454.182590][T19079] tipc: Node identity ac1414aa, cluster identity 4711 [ 454.182869][T19079] tipc: New replicast peer: 172.20.20.187 [ 454.183305][T19079] tipc: Enabled bearer , priority 10 [ 454.635726][T19107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3405'. [ 454.656210][ T5644] Bluetooth: hci4: link tx timeout [ 454.656231][ T5644] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.663486][ T5650] Bluetooth: hci4: link tx timeout [ 454.663506][ T5650] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.822018][T19114] erspan0: entered promiscuous mode [ 454.822226][T19114] vlan2: entered promiscuous mode [ 454.949972][T19124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3410'. [ 454.950000][T19124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3410'. [ 455.018340][T19128] sctp: [Deprecated]: syz.0.3409 (pid 19128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.018340][T19128] Use struct sctp_sack_info instead [ 455.048707][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 455.048736][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 455.175772][T13704] tipc: Node number set to 2886997162 [ 455.227366][T19136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 455.530634][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3413'. [ 455.587626][T19149] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.587751][T19149] netlink: 'syz.3.3415': attribute type 1 has an invalid length. [ 455.647982][T19154] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 455.648009][T19154] netlink: 'syz.4.3416': attribute type 2 has an invalid length. [ 455.648024][T19154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3416'. [ 455.761229][T19156] ip6t_REJECT: ECHOREPLY is not supported [ 455.781773][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3417'. [ 456.196778][T19175] netlink: 'syz.3.3423': attribute type 6 has an invalid length. [ 456.285222][T19179] syzkaller1: entered promiscuous mode [ 456.285250][T19179] syzkaller1: entered allmulticast mode [ 456.553325][T19201] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 456.736107][ T5650] Bluetooth: hci4: command 0x0406 tx timeout [ 457.128644][T19240] netlink: 'syz.3.3441': attribute type 1 has an invalid length. [ 457.204252][T19243] vlan2: entered promiscuous mode [ 457.204279][T19243] bridge0: entered promiscuous mode [ 457.204444][T19243] vlan2: entered allmulticast mode [ 457.204459][T19243] bridge0: entered allmulticast mode [ 457.582387][T19262] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 457.582412][T19262] syzkaller1: group set to 0 [ 457.583864][T19264] netlink: 'syz.3.3450': attribute type 1 has an invalid length. [ 458.639417][T19313] TCP: TCP_TX_DELAY enabled [ 458.842823][T19316] Cannot find del_set index 4 as target [ 459.878155][T19326] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 459.878968][T19327] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 459.910717][T19326] bond2: entered promiscuous mode [ 459.911084][T19326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.931562][T19326] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 459.931582][T19326] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 459.931594][T19326] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 460.068474][T19331] netlink: 'syz.4.3469': attribute type 32 has an invalid length. [ 460.664767][T19268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.828593][ T5644] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 460.828672][ T5644] Bluetooth: hci1: Injecting HCI hardware error event [ 460.830254][ T5644] Bluetooth: hci1: hardware error 0x00 [ 461.287465][T19372] netlink: 'syz.1.3482': attribute type 2 has an invalid length. [ 461.287490][T19372] __nla_validate_parse: 12 callbacks suppressed [ 461.287504][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 462.063949][T19426] netlink: 'syz.4.3493': attribute type 4 has an invalid length. [ 462.275136][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 462.275172][T19433] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 462.321246][T19438] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 462.331644][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3497'. [ 462.404637][T19435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.692487][T19457] ip_tables: iptables: counters copy to user failed while replacing table [ 462.815636][T19461] netlink: set zone limit has 4 unknown bytes [ 462.838373][T19463] batman_adv: batadv0: Adding interface: syzkaller0 [ 462.838393][T19463] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.838427][T19463] batman_adv: batadv0: Interface activated: syzkaller0 [ 462.841845][T19460] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 462.908768][T19460] batman_adv: batadv0: Removing interface: syzkaller0 [ 462.931953][ T30] audit: type=1800 audit(1793638313.730:39): pid=19468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3503" name=0A dev="tmpfs" ino=568 res=0 errno=-22 [ 462.977351][ T5644] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 463.127503][T19474] netlink: 'syz.3.3508': attribute type 6 has an invalid length. [ 463.157260][T19474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3508'. [ 463.157356][T19474] tipc: Enabling of bearer rejected, failed to enable media [ 463.188957][T19479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3506'. [ 463.604015][T19505] Set syz0 is full, maxelem 2 reached [ 463.719015][T19501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.778572][T19501] bond2 (unregistering): Released all slaves [ 464.000855][T19525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3517'. [ 464.643160][T19513] syzkaller0: entered promiscuous mode [ 464.643190][T19513] syzkaller0: entered allmulticast mode [ 464.783387][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3518'. [ 464.783421][T19528] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3518'. [ 464.783440][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 464.934842][T19534] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 464.974988][T19534] Cannot find add_set index 65532 as target [ 464.990030][T19534] bridge0: port 3(veth1_to_bridge) entered blocking state [ 464.990194][T19534] bridge0: port 3(veth1_to_bridge) entered disabled state [ 464.990377][T19534] veth1_to_bridge: entered allmulticast mode [ 464.992159][T19534] veth1_to_bridge: entered promiscuous mode [ 464.992415][T19534] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 464.993037][T19534] bridge0: port 3(veth1_to_bridge) entered blocking state [ 464.993135][T19534] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 465.089788][T19539] netlink: 'syz.4.3523': attribute type 4 has an invalid length. [ 465.299634][T19554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3526'. [ 465.339937][T13706] hid-generic 0005:04F3:4955.0001: unknown main item tag 0x0 [ 465.362336][T13706] hid-generic 0005:04F3:4955.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 465.782543][T19574] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 465.880305][T19574] bond1: entered promiscuous mode [ 465.881943][T19574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.833070][T19604] __nla_validate_parse: 2 callbacks suppressed [ 466.833095][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 466.916335][T19607] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3541'. [ 466.938906][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3540'. [ 466.938932][T19608] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3540'. [ 466.938978][T19608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3540'. [ 467.029908][T19609] ip_tables: iptables: counters copy to user failed while replacing table [ 467.167559][T19613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3540'. [ 468.981123][T19589] 8021q: VLANs not supported on syzkaller1 [ 469.098682][T19616] netlink: 'syz.4.3542': attribute type 12 has an invalid length. [ 469.228210][T19616] Failed to decode metaid 5 dlen 4 err -22 [ 469.351968][T19625] xt_hashlimit: size too large, truncated to 1048576 [ 469.548408][T19628] netlink: 'syz.1.3544': attribute type 1 has an invalid length. [ 469.548432][T19628] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3544'. [ 469.817184][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 470.273945][T19664] Bluetooth: MGMT ver 1.23 [ 470.523088][T19686] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3557'. [ 471.119238][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 471.214933][T19715] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.318359][T19715] netlink: 'syz.3.3565': attribute type 32 has an invalid length. [ 471.450892][T19715] bond2: option coupled_control: invalid value (2) [ 471.472580][T19715] bond2 (unregistering): Released all slaves [ 472.017430][T19734] __nla_validate_parse: 4 callbacks suppressed [ 472.017453][T19734] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3570'. [ 472.136411][T19764] netlink: 'syz.0.3573': attribute type 64 has an invalid length. [ 472.136437][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'. [ 472.335911][ T5644] Bluetooth: hci3: command tx timeout [ 472.734846][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3577'. [ 472.772977][T19778] can: request_module (can-proto-0) failed. [ 472.873979][T18537] udevd[18537]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 472.902288][T18537] udevd[18537]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 472.924996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.925406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.925861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.926340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.927299][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.928442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.929357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.930201][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.931044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.088049][T19799] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ƒÄ&;ßC§ÂЊ¨—,_÷•QÇ丹¨Sö [_Ö [ 473.524642][T19810] netlink: 'syz.0.3583': attribute type 1 has an invalid length. [ 474.259715][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 474.988623][T19853] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 475.490917][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3603'. [ 475.708023][T19882] sctp: [Deprecated]: syz.3.3604 (pid 19882) Use of int in max_burst socket option deprecated. [ 475.708023][T19882] Use struct sctp_assoc_value instead [ 475.838769][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'. [ 475.915280][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3604'. [ 476.116136][T19893] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.116899][T19893] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.215930][ C0] net_ratelimit: 9310 callbacks suppressed [ 476.215954][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.216265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.216562][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.216859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.217200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.217496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.217847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.218163][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.218456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.218741][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.397924][T19904] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3607'. [ 476.515421][T19893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.531289][T19893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.714781][T19904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3607'. [ 478.266184][ T5650] Bluetooth: hci5: command 0x0406 tx timeout [ 481.225761][ C0] net_ratelimit: 17907 callbacks suppressed [ 481.225787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.226014][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.226218][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.226420][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.226700][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.226902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.227110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.227349][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.227592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.227796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.406008][ T1446] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.406062][ T1446] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.406101][ T1446] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.406139][ T1446] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.737969][T19936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3613'. [ 482.738014][T19936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3613'. [ 482.978453][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3616'. [ 483.211666][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3618'. [ 483.211709][T19945] netlink: 'syz.0.3618': attribute type 7 has an invalid length. [ 483.211724][T19945] netlink: 'syz.0.3618': attribute type 8 has an invalid length. [ 483.211737][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3618'. [ 483.283949][T19945] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 483.309275][T19945] geneve1: entered promiscuous mode [ 483.324114][T19945] erspan0: entered promiscuous mode [ 483.336918][T19945] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 483.336946][T19945] hsr1: Slave B (geneve1) is not up; please bring it up to get a fully working HSR network [ 483.336965][T19945] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 484.063182][T19971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3625'. [ 484.964759][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 485.048405][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3631'. [ 485.083064][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 485.117491][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 486.236003][ C0] net_ratelimit: 15252 callbacks suppressed [ 486.236029][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.236389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.236767][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.237140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.237510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.237885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.238324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.238757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.239114][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.239494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.590551][T20043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.356924][T20076] __nla_validate_parse: 21 callbacks suppressed [ 488.356946][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 488.433263][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 488.690807][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3643'. [ 488.808700][T20087] vlan2: entered promiscuous mode [ 488.808725][T20087] hsr0: entered promiscuous mode [ 488.898217][T20082] hsr_slave_0: left promiscuous mode [ 488.972033][T20082] hsr_slave_1: left promiscuous mode [ 489.024117][T20100] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3647'. [ 489.169944][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 489.262982][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 489.413111][T20115] x_tables: duplicate underflow at hook 3 [ 490.040043][T20131] gre1: entered promiscuous mode [ 490.310392][T20140] erspan0: entered promiscuous mode [ 490.311823][T20143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3657'. [ 490.384497][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3659'. [ 490.472860][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3657'. [ 490.743887][T20163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3660'. [ 490.776249][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3660'. [ 490.923417][T20162] ip6gre1: entered allmulticast mode [ 491.035257][T20175] netlink: 'syz.4.3665': attribute type 2 has an invalid length. [ 491.245840][ C0] net_ratelimit: 13359 callbacks suppressed [ 491.245865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.246181][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.246499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.246821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.247195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.247503][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.247821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.248133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.248494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.249268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.673302][T20184] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 492.092107][T20203] netlink: 'syz.2.3670': attribute type 1 has an invalid length. [ 492.542815][T20212] netlink: 'syz.3.3675': attribute type 7 has an invalid length. [ 492.542839][T20212] netlink: 'syz.3.3675': attribute type 8 has an invalid length. [ 493.054054][T20222] netlink: 'syz.1.3679': attribute type 1 has an invalid length. [ 493.244436][T20222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.410478][T20238] __nla_validate_parse: 7 callbacks suppressed [ 493.410500][T20238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3683'. [ 493.574395][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'. [ 493.784064][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3685'. [ 493.854742][T20248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3687'. [ 493.927355][T20243] xfrm1: entered promiscuous mode [ 493.927380][T20243] xfrm1: entered allmulticast mode [ 494.008903][T20248] bond1: entered promiscuous mode [ 494.009566][T20248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.088707][T20255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.089177][T20255] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 494.089968][T20255] bond1: (slave sit1): Error -95 calling set_mac_address [ 494.200740][T20260] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3690'. [ 494.289839][T20268] netlink: 'syz.1.3688': attribute type 29 has an invalid length. [ 494.309424][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3689'. [ 494.390061][T20261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3688'. [ 494.544461][T20261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3688'. [ 495.097868][T20287] batman_adv: batadv0: Adding interface: veth0 [ 495.097889][T20287] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.097923][T20287] batman_adv: batadv0: Interface activated: veth0 [ 495.098806][T20289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.098827][T20289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.185249][T20289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.185276][T20289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.262058][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 495.279473][T20289] batman_adv: batadv0: Interface deactivated: veth0 [ 495.279500][T20289] batman_adv: batadv0: Removing interface: veth0 [ 495.481428][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 496.255779][ C0] net_ratelimit: 10875 callbacks suppressed [ 496.255801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.256233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.257196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.257644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.258080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.258506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.258939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.259422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.259843][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.260304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 496.623500][T20326] xt_TCPMSS: Only works on TCP SYN packets [ 496.635494][T20328] xt_TCPMSS: Only works on TCP SYN packets [ 496.651911][T20327] xt_TPROXY: Can be used only with -p tcp or -p udp [ 498.081916][T20360] bond3 (unregistering): Released all slaves [ 498.883911][T20397] netlink: 'syz.3.3720': attribute type 5 has an invalid length. [ 498.883934][T20397] netlink: 'syz.3.3720': attribute type 9 has an invalid length. [ 498.883949][T20397] __nla_validate_parse: 7 callbacks suppressed [ 498.883961][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 498.955510][T20403] netlink: 'syz.3.3720': attribute type 5 has an invalid length. [ 498.955533][T20403] netlink: 'syz.3.3720': attribute type 9 has an invalid length. [ 498.955548][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 499.298900][T20399] bond3: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 499.470142][T20399] bond3 (unregistering): Released all slaves [ 499.576556][T20421] netlink: 'syz.0.3724': attribute type 4 has an invalid length. [ 499.576582][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3724'. [ 499.917091][T20416] netlink: 'syz.4.3719': attribute type 3 has an invalid length. [ 500.079322][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 501.029045][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 501.130347][T20458] netlink: 'syz.0.3731': attribute type 28 has an invalid length. [ 501.130371][T20458] netlink: 'syz.0.3731': attribute type 3 has an invalid length. [ 501.130386][T20458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3731'. [ 501.181774][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'. [ 501.181798][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 501.265898][ C0] net_ratelimit: 10817 callbacks suppressed [ 501.265925][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.266316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.266694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.267085][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.267461][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.267837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.268275][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.268652][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.269038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.269416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 501.655293][T20454] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.656083][T20454] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.218101][T20467] tipc: Failed to remove unknown binding: 66,0,0/0:1878157435/1878157436 [ 502.220261][T20467] tipc: Failed to remove unknown binding: 66,0,0/0:1878157435/1878157436 [ 502.716018][ T1446] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.716075][ T1446] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.716117][ T1446] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.716157][ T1446] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.915851][T20469] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 502.947403][T20471] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3735'. [ 503.741175][T20504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3742'. [ 504.422314][T20525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3745'. [ 505.331871][T20547] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3750'. [ 505.331897][T20547] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3750'. [ 505.331919][T20547] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3750'. [ 505.386063][T20550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3755'. [ 505.510477][T20554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3754'. [ 505.565452][T20562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3757'. [ 505.642045][T20566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3757'. [ 506.275842][ C0] net_ratelimit: 11468 callbacks suppressed [ 506.275868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.276330][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.276776][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.277200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.277632][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.278049][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.278474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.278909][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.279336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.279774][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 506.707288][T20587] syzkaller1: entered promiscuous mode [ 506.707323][T20587] syzkaller1: entered allmulticast mode [ 506.990792][T20596] x_tables: duplicate underflow at hook 1 [ 507.914688][T20623] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3776'. [ 507.914942][T20625] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3776'. [ 508.292517][T20633] rxe_eth0 speed is unknown, defaulting to 1000 [ 509.597984][T20633] lo speed is unknown, defaulting to 1000 [ 510.232623][T20676] __nla_validate_parse: 4 callbacks suppressed [ 510.232647][T20676] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3790'. [ 510.910331][T20689] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 510.951117][T20689] bond2 (unregistering): Released all slaves [ 511.084491][T20693] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 511.143728][T20693] bond2 (unregistering): Released all slaves [ 511.285969][ C0] net_ratelimit: 7329 callbacks suppressed [ 511.285992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.287302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 511.287746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 511.288134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.288526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.289771][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 511.290154][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:e8:66:47:b2:b4, vlan:0) [ 511.290586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.290969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.292226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 511.868312][ T33] INFO: task kworker/0:1H:1739 blocked for more than 143 seconds. [ 511.868341][ T33] Not tainted syzkaller #0 [ 511.868353][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.868364][ T33] task:kworker/0:1H state:D stack:26984 pid:1739 tgid:1739 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 511.868437][ T33] Workqueue: kblockd blk_mq_run_work_fn [ 511.868499][ T33] Call Trace: [ 511.868507][ T33] [ 511.868523][ T33] __schedule+0x17dd/0x5830 [ 511.868582][ T33] ? __pfx___schedule+0x10/0x10 [ 511.868619][ T33] ? schedule+0x90/0x2b0 [ 511.868646][ T33] schedule+0x164/0x2b0 [ 511.868673][ T33] schedule_timeout+0x152/0x2c0 [ 511.868707][ T33] ? __pfx_schedule_timeout+0x10/0x10 [ 511.868742][ T33] ? __pfx_process_timeout+0x10/0x10 [ 511.868785][ T33] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 511.884819][ T33] ? prepare_to_wait_event+0x3e4/0x4d0 [ 511.884854][ T33] ? prepare_to_wait_event+0x440/0x4d0 [ 511.884888][ T33] nbd_queue_rq+0x96a/0xff0 [ 511.884928][ T33] ? __pfx_nbd_queue_rq+0x10/0x10 [ 511.884954][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 511.885004][ T33] blk_mq_dispatch_rq_list+0x499/0x1990 [ 511.885058][ T33] ? sbitmap_get+0x229/0x390 [ 511.885096][ T33] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 511.885134][ T33] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 511.885180][ T33] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 511.885230][ T33] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 511.885265][ T33] ? lock_acquire+0x115/0x350 [ 511.885301][ T33] ? process_scheduled_works+0x97a/0x1630 [ 511.885339][ T33] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 511.885368][ T33] ? blk_mq_run_work_fn+0x13f/0x2f0 [ 511.885396][ T33] blk_mq_run_work_fn+0x167/0x2f0 [ 511.885425][ T33] ? process_scheduled_works+0x97a/0x1630 [ 511.885460][ T33] process_scheduled_works+0xc3d/0x1630 [ 511.885532][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.885575][ T33] ? assign_work+0x3cf/0x5d0 [ 512.145822][ T33] worker_thread+0xa47/0xfb0 [ 512.145890][ T33] ? __kthread_parkme+0x71/0x1f0 [ 512.145928][ T33] kthread+0x38b/0x480 [ 512.145956][ T33] ? __pfx_worker_thread+0x10/0x10 [ 512.145988][ T33] ? __pfx_kthread+0x10/0x10 [ 512.146017][ T33] ret_from_fork+0x514/0xb70 [ 512.146048][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 512.146074][ T33] ? __switch_to+0xc78/0x1410 [ 512.146113][ T33] ? __pfx_kthread+0x10/0x10 [ 512.146142][ T33] ret_from_fork_asm+0x1a/0x30 [ 512.146187][ T33] [ 512.146392][ T33] [ 512.146392][ T33] Showing all locks held in the system: [ 512.146405][ T33] locks held by kworker/0:0/9: 3, last CPU#0: [ 512.146422][ T33] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.146500][ T33] #1: ffffc900000e7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.146566][ T33] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 512.146631][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 512.146648][ T33] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 512.146714][ T33] locks held by kworker/0:1H/1739: 4, on CPU#0: [ 512.146731][ T33] #0: ffff8880216a8948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.146820][ T33] #1: ffffc9000656fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.146889][ T33] #2: ffff888027fbf518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0 [ 512.146950][ T33] #3: ffff888088cb51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 512.147015][ T33] locks held by getty/5393: 2, on CPU#0: [ 512.147031][ T33] #0: ffff888036a950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 512.147091][ T33] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 512.147163][ T33] locks held by kworker/u8:18/6163: 7, last CPU#0: [ 512.147180][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.147245][ T33] #1: ffffc90005cffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 512.147314][ T33] #2: ffff888036066258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 512.147487][ T33] #3: ffff888084a50ce0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x19e/0xb30 [ 512.147550][ T33] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 512.147616][ T33] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 512.147679][ T33] #6: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: ip6_rcv_core+0xa1/0x1870 [ 512.147761][ T33] locks held by udevd/17481: 1, on CPU#0: [ 512.147778][ T33] #0: ffff88802698c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 512.147850][ T33] locks held by syz.2.3778/20633: 4, last CPU#1: [ 512.147866][ T33] #0: ffffffff9147d5e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 512.147930][ T33] #1: ffff88801cec4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 512.147990][ T33] #2: ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 512.148048][ T33] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 512.148115][ T33] locks held by syz.3.3794/20698: 2, last CPU#1: [ 512.148131][ T33] #0: ffff888055600dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 512.148198][ T33] #1: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 512.148254][ T33] locks held by syz.0.3793/20703: 2, last CPU#1: [ 512.148271][ T33] #0: ffff88807caba800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 512.148325][ T33] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 512.148391][ T33] locks held by syz.4.3796/20711: 2, last CPU#1: [ 512.148407][ T33] #0: ffff88807cabf180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 512.148459][ T33] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 512.148528][ T33] [ 512.148534][ T33] ============================================= [ 512.148534][ T33] [ 512.148553][ T33] NMI backtrace for cpu 1 [ 512.148573][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.148597][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 512.148610][ T33] Call Trace: [ 512.148619][ T33] [ 512.148628][ T33] dump_stack_lvl+0xe8/0x150 [ 512.148666][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 512.148703][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.148732][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 512.148779][ T33] sys_info+0x135/0x170 [ 512.148809][ T33] watchdog+0x1073/0x10f0 [ 512.148849][ T33] ? watchdog+0x209/0x10f0 [ 512.148888][ T33] kthread+0x38b/0x480 [ 512.148914][ T33] ? __pfx_watchdog+0x10/0x10 [ 512.148942][ T33] ? __pfx_kthread+0x10/0x10 [ 512.148974][ T33] ret_from_fork+0x514/0xb70 [ 512.149003][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 512.149029][ T33] ? __switch_to+0xc78/0x1410 [ 512.149067][ T33] ? __pfx_kthread+0x10/0x10 [ 512.149095][ T33] ret_from_fork_asm+0x1a/0x30 [ 512.149138][ T33] [ 512.149166][ T33] Sending NMI from CPU 1 to CPUs 0: [ 512.149199][ C0] NMI backtrace for cpu 0 [ 512.149213][ C0] CPU: 0 UID: 0 PID: 6163 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 512.149235][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 512.149254][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 512.149286][ C0] RIP: 0010:rcu_is_watching+0x8/0xb0 [ 512.149316][ C0] Code: f9 7d 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <53> 65 48 ff 05 2f 9c 12 13 e8 2a 60 55 0a 89 c3 83 f8 08 73 66 49 [ 512.149333][ C0] RSP: 0018:ffffc90000006e08 EFLAGS: 00000202 [ 512.149349][ C0] RAX: 0000000000000001 RBX: ffffc90000006ed8 RCX: ffff88807bdf5dc0 [ 512.149363][ C0] RDX: ffffc90000006f01 RSI: dffffc0000000000 RDI: ffffc90000006ed0 [ 512.149378][ C0] RBP: 1ffffffff259fa01 R08: ffffc900000079f0 R09: 0000000000000000 [ 512.149392][ C0] R10: ffffc90000006f18 R11: fffff52000000de5 R12: ffffc90000000000 [ 512.149407][ C0] R13: ffffffff817879cf R14: ffffc90000006ec8 R15: ffffc90000007a00 [ 512.149422][ C0] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 512.149438][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.149451][ C0] CR2: 00007f0380249ff8 CR3: 000000000fd48000 CR4: 00000000003526f0 [ 512.149469][ C0] Call Trace: [ 512.149475][ C0] [ 512.149484][ C0] unwind_next_frame+0x1b66/0x2550 [ 512.149514][ C0] ? br_handle_frame+0x1329/0x1600 [ 512.149533][ C0] ? unwind_next_frame+0x8f/0x2550 [ 512.149561][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.149587][ C0] arch_stack_walk+0x11b/0x150 [ 512.149615][ C0] ? __netif_receive_skb_core+0x989/0x30f0 [ 512.149646][ C0] stack_trace_save+0xa9/0x100 [ 512.149669][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 512.149695][ C0] ? stack_depot_save_flags+0x33/0x810 [ 512.149719][ C0] ? dsa_user_change_conduit+0x5d1/0x600 [ 512.149753][ C0] kasan_save_track+0x3e/0x80 [ 512.149778][ C0] ? kasan_save_track+0x3e/0x80 [ 512.149801][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 512.149825][ C0] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 512.149847][ C0] ? __alloc_skb+0x27a/0x7a0 [ 512.149875][ C0] ? fdb_notify+0xa6/0x160 [ 512.149898][ C0] ? br_fdb_update+0x5f7/0x870 [ 512.149927][ C0] ? br_handle_frame_finish+0x5e2/0x1ae0 [ 512.149945][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 512.149964][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 512.149986][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 512.150007][ C0] ? br_handle_frame+0x1329/0x1600 [ 512.150053][ C0] __kasan_slab_alloc+0x6c/0x80 [ 512.150080][ C0] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 512.150103][ C0] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 512.150124][ C0] ? __alloc_skb+0x27a/0x7a0 [ 512.150151][ C0] ? __alloc_skb+0x27a/0x7a0 [ 512.150183][ C0] __alloc_skb+0x27a/0x7a0 [ 512.150214][ C0] fdb_notify+0xa6/0x160 [ 512.150246][ C0] br_fdb_update+0x5f7/0x870 [ 512.150275][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 512.150300][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 512.150326][ C0] br_handle_frame_finish+0x5e2/0x1ae0 [ 512.150353][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 512.150373][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 512.150398][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 512.150422][ C0] ? nf_hook_slow+0x176/0x220 [ 512.150442][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 512.150462][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 512.150481][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 512.150503][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 512.150524][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 512.150544][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 512.150574][ C0] ? lock_acquire+0x115/0x350 [ 512.150602][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 512.150624][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 512.150651][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 512.150674][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 512.150696][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 512.150720][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 512.150742][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 512.150767][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 512.150787][ C0] br_handle_frame+0x1329/0x1600 [ 512.150814][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 512.150834][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 512.150852][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 512.150876][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 512.150900][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 512.150919][ C0] __netif_receive_skb_core+0x989/0x30f0 [ 512.150958][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 512.150994][ C0] ? ip6_rcv_finish+0x265/0x280 [ 512.151023][ C0] ? NF_HOOK+0x336/0x3c0 [ 512.151062][ C0] ? process_backlog+0x3de/0x18b0 [ 512.151089][ C0] ? process_backlog+0x3de/0x18b0 [ 512.151120][ C0] process_backlog+0x727/0x18b0 [ 512.151151][ C0] ? process_backlog+0x3de/0x18b0 [ 512.151188][ C0] __napi_poll+0xaa/0x330 [ 512.151217][ C0] net_rx_action+0x61d/0xf50 [ 512.151258][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 512.151305][ C0] handle_softirqs+0x265/0x8d0 [ 512.151338][ C0] ? nsim_dev_trap_report_work+0x7a4/0xb30 [ 512.151360][ C0] do_softirq+0x77/0xd0 [ 512.151385][ C0] [ 512.151391][ C0] [ 512.151398][ C0] __local_bh_enable_ip+0x100/0x140 [ 512.151424][ C0] nsim_dev_trap_report_work+0x7a4/0xb30 [ 512.151456][ C0] ? process_scheduled_works+0x97a/0x1630 [ 512.151485][ C0] process_scheduled_works+0xc3d/0x1630 [ 512.151532][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.151564][ C0] ? assign_work+0x3cf/0x5d0 [ 512.151595][ C0] worker_thread+0xa47/0xfb0 [ 512.151641][ C0] kthread+0x38b/0x480 [ 512.151662][ C0] ? __pfx_worker_thread+0x10/0x10 [ 512.151689][ C0] ? __pfx_kthread+0x10/0x10 [ 512.151711][ C0] ret_from_fork+0x514/0xb70 [ 512.151734][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 512.151756][ C0] ? __switch_to+0xc78/0x1410 [ 512.151787][ C0] ? __pfx_kthread+0x10/0x10 [ 512.151809][ C0] ret_from_fork_asm+0x1a/0x30 [ 512.151839][ C0] [ 512.152810][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 513.281594][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 513.290747][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 513.300956][ T33] Call Trace: [ 513.304284][ T33] [ 513.307245][ T33] vpanic+0x26f/0x710 [ 513.311279][ T33] panic+0xc5/0xd0 [ 513.315038][ T33] ? __pfx_panic+0x10/0x10 [ 513.319523][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 513.325113][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 513.330532][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 513.336739][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 513.342951][ T33] watchdog+0x10e7/0x10f0 [ 513.347344][ T33] ? watchdog+0x209/0x10f0 [ 513.351811][ T33] kthread+0x38b/0x480 [ 513.355926][ T33] ? __pfx_watchdog+0x10/0x10 [ 513.360648][ T33] ? __pfx_kthread+0x10/0x10 [ 513.365280][ T33] ret_from_fork+0x514/0xb70 [ 513.369915][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 513.375087][ T33] ? __switch_to+0xc78/0x1410 [ 513.379827][ T33] ? __pfx_kthread+0x10/0x10 [ 513.384459][ T33] ret_from_fork_asm+0x1a/0x30 [ 513.389278][ T33] [ 513.392928][ T33] Kernel Offset: disabled [ 513.397303][ T33] Rebooting in 86400 seconds..