last executing test programs: 13.518313721s ago: executing program 4 (id=15292): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r4, 0x4004743c, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 13.454021923s ago: executing program 4 (id=15293): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) r3 = socket$unix(0x1, 0xfd24954cf2668304, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x3e, 0x7}}) 2.970676417s ago: executing program 3 (id=15424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x20241f3a8aa49c29, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008825}, 0x4000850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r8, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYRES64=r6], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcc, &(0x7f0000000300)=""/204, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) 2.313197639s ago: executing program 2 (id=15432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) 2.179044305s ago: executing program 2 (id=15435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003", @ANYRESHEX=r0], 0x68}}, 0x20015) pipe(&(0x7f0000000000)) 2.024426608s ago: executing program 2 (id=15438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg$alg(r7, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002000010000000000ffffffff0a144000000000070000000014000200fc0200000000007400000000000000009400010020010000000000000000000000000001080017004e214e22"], 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x5c}}, 0x0) 1.970215565s ago: executing program 1 (id=15439): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000cc0)=0x2580, 0x4) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x18, &(0x7f0000001880)=[{&(0x7f0000000200)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7", 0x2a}], 0x1}, 0x20008060) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4080) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.936171164s ago: executing program 3 (id=15440): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1802}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1, 0x0, 0x9) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x7, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @remote, @multicast2, @random="f013a65b44ed", @dev={0xac, 0x14, 0x14, 0x27}}}}}, &(0x7f0000000140)={0x0, 0x1, [0x414, 0x7d1, 0x7f2, 0x917]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f000000a240)=0x40000) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.651304505s ago: executing program 1 (id=15442): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) 1.590579002s ago: executing program 1 (id=15443): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x44, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_MARK={0x8, 0x10, 0xd}]}, 0x44}}, 0x4000) 1.342646948s ago: executing program 2 (id=15444): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 1.30740835s ago: executing program 2 (id=15445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095", @ANYRES16=r3, @ANYBLOB="9afaa10e244bb4e6c752687d28eaf9a102bfb98179867aa1884895abf23fa46a882f50fde35f9583cd74be714e11397d333f7238a2688653bc0d4792390039573007d3ac4ebb0072dddcd50e8565", @ANYRES64=r1, @ANYBLOB="f325616b32e4f214f3ea328f297c34a8f8a4b9266f078557a98b3557015b79ccc4d71b5709cadf4a09f9d12fad3824b410dffc519f20", @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.249290124s ago: executing program 0 (id=15446): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r2, r0, 0x4}, 0x5) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) (async) bind$qrtr(r3, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) 1.192238225s ago: executing program 1 (id=15447): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) recvmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000200)=@caif=@rfm, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000500)=""/216, 0xd8}], 0x2, &(0x7f0000000640)=""/171, 0xab}, 0x40002002) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 1.186852404s ago: executing program 3 (id=15448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) 1.142476672s ago: executing program 2 (id=15449): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'macvtap0\x00', {0x2, 0x0, @remote}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3e", 0x75}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000080), 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000040)={'wlan0\x00', @ifru_names='netpci0\x00'}) 1.036962086s ago: executing program 0 (id=15450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x22c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x400880c) r3 = accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000300)=0x80, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5bb571224113085efd26bd7000fcdbdf250100410b63d8e98a3c51080008007f0020"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x90) 1.031043203s ago: executing program 3 (id=15451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) (async) 1.017794466s ago: executing program 4 (id=15298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x1c000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0008002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 961.061284ms ago: executing program 1 (id=15452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 955.169281ms ago: executing program 0 (id=15453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050057df74000008000352", @ANYRES32=r4, @ANYBLOB="08000500040000000500530000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 832.668573ms ago: executing program 3 (id=15454): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00002005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r5, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6(0xa, 0x5, 0x8) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000000c0)={r12, 0x5}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x8, 0x8, 0x7, {{0x12, 0x4, 0x2, 0xf, 0x48, 0x68, 0x0, 0x6e, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x14}, {[@noop, @rr={0x7, 0xf, 0x81, [@broadcast, @broadcast, @broadcast]}, @rr={0x7, 0xb, 0xe1, [@private=0xa010102, @local]}, @noop, @noop, @noop, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x2, [{@rand_addr=0x64010102, 0x7fffffff}, {@broadcast, 0x2889}]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x4c}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000240)={r12, @in={{0x2, 0x4e24, @empty}}, 0xb2d1, 0x1}, &(0x7f0000000300)=0x90) 772.455817ms ago: executing program 1 (id=15455): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0) 688.440462ms ago: executing program 0 (id=15456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r2, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r3, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="1ba200fdc172d1b1e0d97bee5b642e010001a000001c0012800900010069706970000000000c178680080003007f000001"], 0x3c}}, 0xc004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000400)=0x1, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r7) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x4044) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) 687.378376ms ago: executing program 4 (id=15457): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 493.082657ms ago: executing program 3 (id=15458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x3c}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff7f, 0x5, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) close(r3) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x5, 0x6, 0x0, 0x0, [{{r0}}, {{r0}, 0x10}, {{r0}, 0x9}, {{r0}, 0x3}, {{r0}, 0x800}, {{r1}, 0xfffffffffffffffb}]}) syz_emit_ethernet(0x5e, &(0x7f0000000cc0)={@link_local, @random="28cefbaa2229", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "22ff80", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @empty}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 328.500772ms ago: executing program 4 (id=15459): socket$rds(0x15, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, r5, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x890) listen(r2, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r8, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x10007, 0x5c}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) 228.452499ms ago: executing program 0 (id=15461): r0 = socket$inet(0xa, 0xa, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\x00\x00_\x00', "005002000000e7010000000000000013", 'i}oz', "96083e3263ae7725"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) (async) recvfrom(r2, 0x0, 0x0, 0x50, 0x0, 0x0) (async) close(r1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x2d, 0xff, 0x36}, 0x2c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) 132.248899ms ago: executing program 4 (id=15462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x10) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6d}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xecab}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) listen(r2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close(r11) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES8=r11, @ANYRES32=r10, @ANYRES32=0x0], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="6684e27a87c9", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa32fa762e36fd999, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x16, 0x7, 0x1, 0x0, "257be471aa319e06dc9a6d369f1c6bb836c4"}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 0 (id=15463): socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): mand 0x0405 tx timeout [ 1414.888056][T24037] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1415.081163][T24044] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 1415.526516][T24074] ip6tnl1: entered allmulticast mode [ 1415.567794][T24076] 0ªX¹¦Dö»: left allmulticast mode [ 1415.622168][T24076] sit0: left promiscuous mode [ 1415.896613][T24076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.903840][T24076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.911458][T24076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.918644][T24076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.968370][T24076] net_ratelimit: 7 callbacks suppressed [ 1415.968390][T24076] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1416.055095][T12399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.063955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.073777][T20632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.082424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.229231][T24110] macsec1: entered promiscuous mode [ 1416.413566][T24121] __nla_validate_parse: 6 callbacks suppressed [ 1416.413585][T24121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13492'. [ 1416.454884][ T6258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.506371][T24129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13496'. [ 1416.537376][T24132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13494'. [ 1416.563799][T24130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13494'. [ 1416.867730][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13501'. [ 1417.009799][T24164] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13505'. [ 1417.036181][T24167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13505'. [ 1417.095483][T12399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.104317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.269090][T24180] syzkaller0: entered promiscuous mode [ 1417.284474][T24180] syzkaller0: entered allmulticast mode [ 1417.314727][T24184] netlink: 11 bytes leftover after parsing attributes in process `syz.3.13507'. [ 1417.325651][T24184] netlink: 11 bytes leftover after parsing attributes in process `syz.3.13507'. [ 1417.402514][T24180] tipc: Enabled bearer , priority 0 [ 1417.490672][T24180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13508'. [ 1417.597184][T24177] tipc: Resetting bearer [ 1417.653875][T24177] tipc: Disabling bearer [ 1417.688188][T24202] validate_nla: 7 callbacks suppressed [ 1417.688205][T24202] netlink: 'syz.2.13511': attribute type 10 has an invalid length. [ 1417.713419][T24202] team0: Port device geneve1 added [ 1417.981030][T24207] can: request_module (can-proto-5) failed. [ 1418.005374][T24215] netlink: 'syz.0.13515': attribute type 1 has an invalid length. [ 1418.079216][T24215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1418.135516][T12399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.144391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.232273][T24228] netlink: 'syz.3.13520': attribute type 1 has an invalid length. [ 1418.330692][T24239] netlink: 'syz.2.13522': attribute type 28 has an invalid length. [ 1418.357660][T24239] netlink: 'syz.2.13522': attribute type 3 has an invalid length. [ 1418.480127][T24243] syzkaller0: entered promiscuous mode [ 1418.493679][T24243] syzkaller0: entered allmulticast mode [ 1418.606307][T24255] netlink: 'syz.4.13526': attribute type 3 has an invalid length. [ 1418.700032][T24260] netlink: 'syz.0.13530': attribute type 1 has an invalid length. [ 1418.806424][T24260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1418.977163][T24286] xt_cgroup: invalid path, errno=-2 [ 1419.247615][T24295] veth5: entered allmulticast mode [ 1419.346537][T24305] netlink: 'syz.1.13545': attribute type 4 has an invalid length. [ 1419.380551][T24304] netlink: 'syz.1.13545': attribute type 2 has an invalid length. [ 1419.399681][T24304] netlink: 'syz.1.13545': attribute type 13 has an invalid length. [ 1419.621884][T24328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1419.629179][T24328] IPv6: NLM_F_CREATE should be set when creating new route [ 1419.918525][T24354] vlan3: entered promiscuous mode [ 1419.924935][T24354] bridge0: entered promiscuous mode [ 1419.979300][T24355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.008287][T24355] team0: Cannot enslave team device to itself [ 1421.174902][T20289] net_ratelimit: 18 callbacks suppressed [ 1421.174923][T20289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.189156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.254375][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.263236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.537565][T24356] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1421.612124][T24412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1421.656418][T26306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.985775][T24434] __nla_validate_parse: 22 callbacks suppressed [ 1421.985793][T24434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13584'. [ 1422.294867][T25459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.303762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.031029][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1423.332733][T24456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13588'. [ 1423.350507][T20628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.306255][T24458] bond3: entered promiscuous mode [ 1425.336189][T24458] bond3: entered allmulticast mode [ 1425.350159][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13589'. [ 1425.359529][T24464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13589'. [ 1425.403042][T24462] syzkaller0: entered promiscuous mode [ 1425.421805][T24462] syzkaller0: entered allmulticast mode [ 1425.486612][T24462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13590'. [ 1425.543200][T24476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13593'. [ 1425.785493][T24492] validate_nla: 9 callbacks suppressed [ 1425.785510][T24492] netlink: 'syz.3.13599': attribute type 39 has an invalid length. [ 1425.785789][T24488] geneve3: entered promiscuous mode [ 1425.820947][T24492] hsr_slave_0: left promiscuous mode [ 1425.828934][T24492] hsr_slave_1: left promiscuous mode [ 1425.874841][T24496] syzkaller1: entered promiscuous mode [ 1425.883516][T24496] syzkaller1: entered allmulticast mode [ 1425.912163][T24496] syzkaller1: left promiscuous mode [ 1425.926549][T24496] syzkaller1: left allmulticast mode [ 1426.050029][T24512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13603'. [ 1426.112217][T24513] netlink: 'syz.0.13603': attribute type 16 has an invalid length. [ 1426.159266][T24513] netlink: 'syz.0.13603': attribute type 17 has an invalid length. [ 1426.211925][T24513] lo: left promiscuous mode [ 1426.250452][T24513] gre0: left promiscuous mode [ 1426.260518][T24513] gre0: left allmulticast mode [ 1426.289987][T24513] erspan0: left promiscuous mode [ 1426.358485][T24513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.371683][T24513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.440713][T24513] batman_adv: batadv0: Interface activated: dummy0 [ 1426.486001][T24513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.534862][T24513] wireguard: wg0: Could not create IPv4 socket [ 1426.573014][T24513] net_ratelimit: 1 callbacks suppressed [ 1426.573031][T24513] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1426.701927][T24508] lo speed is unknown, defaulting to 1000 [ 1426.730308][T24538] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13611'. [ 1426.860076][T20637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.868561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.899866][T24538] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 1426.948245][T24538] bond1 (unregistering): Released all slaves [ 1427.186949][T24563] netlink: 'syz.1.13617': attribute type 1 has an invalid length. [ 1427.290503][T24569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.300510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.313841][T24569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.322189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.331421][T24569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.340211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.349550][T24569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.519175][T24582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13622'. [ 1427.745751][T24590] syzkaller1: entered promiscuous mode [ 1427.751316][T24590] syzkaller1: entered allmulticast mode [ 1430.167004][T24563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1430.304785][T24593] netlink: 'syz.4.13626': attribute type 3 has an invalid length. [ 1430.376263][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13628'. [ 1430.401318][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13627'. [ 1430.466752][T24605] pimreg: entered allmulticast mode [ 1430.567725][T24616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13634'. [ 1430.578506][T24611] syzkaller1: entered promiscuous mode [ 1430.586172][T24611] syzkaller1: entered allmulticast mode [ 1430.677190][T24623] tunl0: Caught tx_queue_len zero misconfig [ 1430.722444][T24630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13638'. [ 1430.743064][T24633] veth1_to_bond: entered allmulticast mode [ 1430.765618][T24633] veth1_to_bond: entered promiscuous mode [ 1430.791939][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13636'. [ 1430.830157][T24633] veth1_to_bond (unregistering): left allmulticast mode [ 1430.841314][T24633] veth1_to_bond (unregistering): left promiscuous mode [ 1430.866340][T24633] bond0: (slave bond_slave_1): Releasing backup interface [ 1430.878464][T24633] bond_slave_1 (unregistering): left promiscuous mode [ 1430.951459][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13642'. [ 1431.012301][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13642'. [ 1431.110367][T24660] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13647'. [ 1431.111920][T24658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.120708][T24660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13647'. [ 1431.162517][T24658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.685848][T24693] bridge4: entered promiscuous mode [ 1431.700011][T24693] bridge4: entered allmulticast mode [ 1431.730633][T24698] netlink: 'syz.2.13660': attribute type 12 has an invalid length. [ 1431.831844][T24705] net_ratelimit: 35 callbacks suppressed [ 1431.831863][T24705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.918520][T24710] pim6reg: entered allmulticast mode [ 1431.962902][T24719] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1432.390482][T24752] syzkaller0: entered promiscuous mode [ 1432.401493][T24752] syzkaller0: entered allmulticast mode [ 1432.613579][T24775] __nla_validate_parse: 8 callbacks suppressed [ 1432.613598][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13682'. [ 1432.631952][T24776] netlink: 'syz.2.13681': attribute type 4 has an invalid length. [ 1432.645873][T20628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.654325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.664710][T24776] netlink: 240 bytes leftover after parsing attributes in process `syz.2.13681'. [ 1432.677990][T24775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13682'. [ 1432.942133][T24795] netlink: 'syz.4.13688': attribute type 1 has an invalid length. [ 1432.981822][T24798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13689'. [ 1433.003294][T24798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13689'. [ 1433.101280][T24807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1433.309130][T24825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13697'. [ 1433.361869][T24830] macvtap0: entered allmulticast mode [ 1433.376073][T24830] veth0_macvtap: entered allmulticast mode [ 1433.384971][T24825] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1433.386568][T24833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1433.424529][T24833] IPVS: set_ctl: invalid protocol: 119 172.20.20.56:20002 [ 1433.521450][T24841] netlink: 684 bytes leftover after parsing attributes in process `syz.3.13700'. [ 1433.558043][T24848] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13703'. [ 1433.652049][T24853] netlink: 'syz.3.13704': attribute type 1 has an invalid length. [ 1433.662460][T24853] netlink: 'syz.3.13704': attribute type 2 has an invalid length. [ 1433.672753][T24853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13704'. [ 1433.723258][T24853] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1433.814798][T20290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.829003][ T6258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.895177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.906380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.914856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.923276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.942587][T24867] veth1_macvtap: renamed from vlan0 [ 1433.949925][T24872] netlink: 'syz.1.13706': attribute type 16 has an invalid length. [ 1433.968579][T24872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13706'. [ 1433.984680][T21389] Bluetooth: hci3: command 0x0406 tx timeout [ 1434.016483][T24870] veth7: entered promiscuous mode [ 1434.022496][T24870] veth7: entered allmulticast mode [ 1434.249618][T24883] Unsupported ieee802154 address type: 0 [ 1434.307607][T24887] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» (while UP) [ 1434.338544][T24887] 0ªî{X¹¦: entered allmulticast mode [ 1434.642325][T24910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.785112][T24915] bond5: Removing last arp target with arp_interval on [ 1435.549576][T24955] C: renamed from lo (while UP) [ 1435.909420][T24981] lo: Caught tx_queue_len zero misconfig [ 1436.003856][T24981] syzkaller0: entered promiscuous mode [ 1436.019173][T24981] syzkaller0: entered allmulticast mode [ 1436.162459][T24999] netlink: 'syz.2.13736': attribute type 2 has an invalid length. [ 1436.175063][T24999] netlink: 'syz.2.13736': attribute type 2 has an invalid length. [ 1436.273571][T25005] syzkaller0: entered promiscuous mode [ 1436.281001][T25005] syzkaller0: entered allmulticast mode [ 1436.855765][T12403] net_ratelimit: 7 callbacks suppressed [ 1436.855778][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.254229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.262636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.271018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.279300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.287680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.295952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.737593][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.746647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.522377][T24955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1438.778169][ T6282] IPVS: starting estimator thread 0... [ 1438.896743][T25030] IPVS: using max 39 ests per chain, 93600 per kthread [ 1438.995038][T25044] xt_connbytes: Forcing CT accounting to be enabled [ 1439.014726][T25044] xt_bpf: check failed: parse error [ 1439.051040][T25047] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1439.081628][T25049] __nla_validate_parse: 11 callbacks suppressed [ 1439.081646][T25049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13751'. [ 1439.640319][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13761'. [ 1439.649352][T25085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13762'. [ 1439.672623][T20637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.737472][T25089] gretap3: entered promiscuous mode [ 1439.743640][T25089] batman_adv: batadv0: Adding interface: gretap3 [ 1439.750599][T25089] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 1439.773366][T25089] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1439.832152][T25093] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13766'. [ 1439.852690][T25093] 0·: renamed from hsr0 [ 1439.870497][T25093] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1439.885996][T25093] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1439.899230][T25093] 0·: left promiscuous mode [ 1439.903841][T25093] 0·: entered allmulticast mode [ 1439.912793][T25099] netlink: 'syz.2.13769': attribute type 1 has an invalid length. [ 1439.925247][T25093] hsr_slave_0: entered allmulticast mode [ 1439.931025][T25093] hsr_slave_1: entered allmulticast mode [ 1440.037381][T25099] bond3: entered promiscuous mode [ 1440.042972][T25099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1440.050645][T12403] lo speed is unknown, defaulting to 1000 [ 1440.412502][T25143] netlink: 'syz.0.13781': attribute type 12 has an invalid length. [ 1440.662434][T25163] netlink: 11 bytes leftover after parsing attributes in process `syz.0.13786'. [ 1440.672750][T25160] vcan1: entered promiscuous mode [ 1440.687103][T25160] vcan1: entered allmulticast mode [ 1440.780169][T25167] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1441.009309][T25178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13794'. [ 1441.028184][T25178] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13794'. [ 1441.103577][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13795'. [ 1441.326523][T25191] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1441.519663][T25200] gre0: left allmulticast mode [ 1441.577420][T25200] bridge0: left allmulticast mode [ 1441.607552][T25210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13802'. [ 1441.723070][T25200] macvtap1: left allmulticast mode [ 1441.729618][T25200] veth1_vlan: left allmulticast mode [ 1441.749734][T25200] ip6tnl1: left allmulticast mode [ 1441.759377][T25200] bond3: left allmulticast mode [ 1441.765546][T25200] bridge4: left allmulticast mode [ 1441.896908][T20637] net_ratelimit: 13 callbacks suppressed [ 1441.896929][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1441.965163][T25230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13811'. [ 1442.010923][T25234] IPv6: NLM_F_CREATE should be specified when creating new route [ 1442.078044][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1442.137927][T25249] mac80211_hwsim hwsim95 wlan0: entered promiscuous mode [ 1442.324128][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1442.368490][T25257] sit0: Caught tx_queue_len zero misconfig [ 1442.514196][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1442.655331][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1442.830454][T25283] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1442.858439][T25281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1442.914375][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1443.034820][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1443.165347][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1443.248507][T25267] lo speed is unknown, defaulting to 1000 [ 1443.577194][T25309] vlan0: entered allmulticast mode [ 1443.690615][T25274] lo speed is unknown, defaulting to 1000 [ 1444.082904][T25324] syzkaller0: entered promiscuous mode [ 1444.088628][T25324] syzkaller0: entered allmulticast mode [ 1444.438979][T25335] vlan3: entered allmulticast mode [ 1444.785728][T25352] __nla_validate_parse: 3 callbacks suppressed [ 1444.785746][T25352] netlink: 304 bytes leftover after parsing attributes in process `syz.4.13849'. [ 1444.900965][T25355] netlink: 'syz.2.13851': attribute type 1 has an invalid length. [ 1445.328904][T25375] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1445.357800][T25379] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20002 [ 1445.374817][T25375] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20002 [ 1445.559633][T25388] vcan0: tx address claim with different name [ 1446.071987][T25422] syzkaller0: entered promiscuous mode [ 1446.085666][T25422] syzkaller0: entered allmulticast mode [ 1446.236050][T25435] xt_hashlimit: size too large, truncated to 1048576 [ 1446.285965][T25436] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13877'. [ 1446.397533][T25441] bond5: option lp_interval: invalid value (0) [ 1446.403852][T25441] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1446.415029][T25441] bond5 (unregistering): Released all slaves [ 1447.018252][T25467] syzkaller0: entered promiscuous mode [ 1447.034030][T25467] syzkaller0: entered allmulticast mode [ 1447.046493][T20632] net_ratelimit: 33 callbacks suppressed [ 1447.046516][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1447.128303][T25476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13889'. [ 1447.197744][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1447.226237][T25467] tipc: Started in network mode [ 1447.235437][T25467] tipc: Node identity 2a7dfe4a4957, cluster identity 4711 [ 1447.253170][T25467] tipc: Enabled bearer , priority 0 [ 1447.269696][T25479] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1447.280188][T25466] tipc: Resetting bearer [ 1447.312513][T25466] tipc: Disabling bearer [ 1447.334308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.342743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.351106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.359493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.367900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.376308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.384654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.447468][T25490] netlink: 'syz.3.13893': attribute type 4 has an invalid length. [ 1447.498798][T25491] netlink: 'syz.3.13893': attribute type 4 has an invalid length. [ 1447.570150][T25489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13893'. [ 1447.605147][T25489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13893'. [ 1447.657029][T25496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13894'. [ 1447.692854][T25497] netlink: 'syz.4.13895': attribute type 4 has an invalid length. [ 1447.710470][T25497] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13895'. [ 1447.850724][T25511] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.13896'. [ 1448.019242][T25522] bond0: left promiscuous mode [ 1448.064984][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13900'. [ 1448.083231][T25522] bond_slave_0: left promiscuous mode [ 1448.118077][T25522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.185475][T25522] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13900'. [ 1448.225050][T25522] netlink: 'syz.1.13900': attribute type 1 has an invalid length. [ 1448.251162][T25533] syzkaller1: entered promiscuous mode [ 1448.270885][T25533] syzkaller1: entered allmulticast mode [ 1448.478265][T25548] netlink: 'syz.1.13905': attribute type 1 has an invalid length. [ 1448.528971][T25542] netlink: 'syz.0.13904': attribute type 1 has an invalid length. [ 1448.554997][T25542] netlink: 'syz.0.13904': attribute type 2 has an invalid length. [ 1448.563754][T25542] netlink: 'syz.0.13904': attribute type 1 has an invalid length. [ 1448.572110][T25542] netlink: 'syz.0.13904': attribute type 2 has an invalid length. [ 1448.582492][T25542] netlink: 'syz.0.13904': attribute type 1 has an invalid length. [ 1448.628989][T25548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1448.653465][T25558] tipc: Failed to remove unknown binding: 66,0,0/0:1498626225/1498626226 [ 1448.673736][T25558] tipc: Failed to remove unknown binding: 66,0,0/0:1498626225/1498626226 [ 1449.145291][T25586] pim6reg: entered allmulticast mode [ 1449.290262][T25586] pim6reg: left allmulticast mode [ 1450.164591][T25647] x_tables: duplicate entry at hook 2 [ 1450.297491][T25653] geneve4: entered promiscuous mode [ 1450.560551][T25664] syzkaller0: entered promiscuous mode [ 1450.581303][T25664] syzkaller0: entered allmulticast mode [ 1450.798638][T25681] Cannot find add_set index 0 as target [ 1450.980136][T25691] __nla_validate_parse: 5 callbacks suppressed [ 1450.980156][T25691] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13941'. [ 1451.010543][T25691] .`: renamed from bond0 (while UP) [ 1451.196459][T25702] ip6tnl0: Caught tx_queue_len zero misconfig [ 1451.641728][T25713] IPVS: set_ctl: invalid protocol: 181 224.0.0.1:20003 [ 1452.055253][T20628] net_ratelimit: 38 callbacks suppressed [ 1452.055275][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.174961][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.285200][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.395064][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.505134][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.615001][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.724200][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.834229][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1452.944080][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1453.054092][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1453.691058][T25675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1453.773042][T25715] validate_nla: 9 callbacks suppressed [ 1453.773059][T25715] netlink: 'syz.1.13948': attribute type 7 has an invalid length. [ 1454.553062][T25765] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13963'. [ 1454.830426][T25783] bond1: option all_slaves_active: invalid value (222) [ 1454.843000][T25783] bond1 (unregistering): Released all slaves [ 1454.936405][T25786] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1455.164385][T25791] bond4: entered promiscuous mode [ 1455.260635][T25806] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13976'. [ 1455.297445][T25805] lo: entered promiscuous mode [ 1455.316348][T25805] tunl0: entered promiscuous mode [ 1455.331161][T25805] gre0: entered promiscuous mode [ 1455.345612][T25805] gretap0: entered promiscuous mode [ 1455.356949][T25807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13976'. [ 1455.375744][T25805] erspan0: entered promiscuous mode [ 1455.385616][T25805] ip_vti0: entered promiscuous mode [ 1455.521528][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13979'. [ 1455.564088][T25824] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1455.596506][T25824] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13979'. [ 1455.633756][T25831] ip6gre1: entered allmulticast mode [ 1455.727112][T25835] netlink: 'syz.4.13982': attribute type 21 has an invalid length. [ 1455.772633][T25836] netlink: 'syz.4.13982': attribute type 1 has an invalid length. [ 1455.786081][T25835] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1455.799095][T25835] bond1 (unregistering): Released all slaves [ 1455.807938][T25836] netlink: 500 bytes leftover after parsing attributes in process `syz.4.13982'. [ 1456.258673][T25863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13989'. [ 1457.084098][T20289] net_ratelimit: 38 callbacks suppressed [ 1457.084120][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1457.215902][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1457.263349][T25907] lo speed is unknown, defaulting to 1000 [ 1457.283527][T25907] lo speed is unknown, defaulting to 1000 [ 1457.300032][T25907] lo speed is unknown, defaulting to 1000 [ 1457.414232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.422716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.431179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.439582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.448021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.456447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.578676][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1457.601575][T25928] netlink: 'syz.0.14005': attribute type 3 has an invalid length. [ 1457.724519][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1457.748523][T25937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14010'. [ 1457.988967][T25947] pimreg: left allmulticast mode [ 1457.995186][T25907] infiniband sz1: set down [ 1457.999896][T25907] infiniband sz1: added lo [ 1458.005455][ T29] audit: type=1804 audit(1782694783.003:28): pid=25952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.14015" name="/newroot/359/cgroup.controllers" dev="tmpfs" ino=1843 res=1 errno=0 [ 1458.037083][ T29] audit: type=1800 audit(1782694783.003:29): pid=25952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14015" name="cgroup.controllers" dev="tmpfs" ino=1843 res=0 errno=0 [ 1458.061267][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14015'. [ 1458.082073][T25907] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1458.099705][T25463] lo speed is unknown, defaulting to 1000 [ 1458.106330][T25907] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1458.125849][T25907] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1458.264671][T25907] RDS/IB: sz1: added [ 1458.281555][T25907] smc: adding ib device sz1 with port count 1 [ 1458.304081][T25907] smc: ib device sz1 port 1 has no pnetid [ 1458.326037][T25459] lo speed is unknown, defaulting to 1000 [ 1458.333149][T25907] lo speed is unknown, defaulting to 1000 [ 1458.347532][T25961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14018'. [ 1458.925194][T25907] lo speed is unknown, defaulting to 1000 [ 1459.168036][T25993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14026'. [ 1459.491488][T26003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14029'. [ 1459.539002][T25907] lo speed is unknown, defaulting to 1000 [ 1459.861013][ T6282] IPVS: starting estimator thread 0... [ 1459.995715][T26029] IPVS: using max 31 ests per chain, 74400 per kthread [ 1460.141145][T26037] debugfs: '1ùà^!' already exists in 'ieee80211' [ 1460.191136][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14041'. [ 1460.202958][T26045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14043'. [ 1460.237769][T25907] lo speed is unknown, defaulting to 1000 [ 1460.257429][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14041'. [ 1460.297986][T26040] vlan0: entered promiscuous mode [ 1460.862020][T25907] lo speed is unknown, defaulting to 1000 [ 1461.049771][T26095] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14060'. [ 1461.247271][T26096] bond1: Removing last arp target with arp_interval on [ 1461.476493][T25907] lo speed is unknown, defaulting to 1000 [ 1461.499149][T26110] __nla_validate_parse: 2 callbacks suppressed [ 1461.499167][T26110] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14065'. [ 1461.532173][T26113] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 1461.550781][T26112] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 1461.775199][T26121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.782834][T26121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.813133][T26125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14070'. [ 1462.002431][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14072'. [ 1462.002995][T26137] netlink: 276 bytes leftover after parsing attributes in process `syz.0.14071'. [ 1462.088907][T25907] lo speed is unknown, defaulting to 1000 [ 1462.156322][T26143] netlink: 'syz.4.14073': attribute type 10 has an invalid length. [ 1462.175861][T26129] syzkaller0: entered promiscuous mode [ 1462.181754][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14072'. [ 1462.191754][T26143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14073'. [ 1462.210994][T26129] syzkaller0: entered allmulticast mode [ 1462.219250][T26143] team0: entered allmulticast mode [ 1462.246581][T26143] team_slave_0: entered allmulticast mode [ 1462.269559][T26143] team_slave_1: entered allmulticast mode [ 1462.277593][T26145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14074'. [ 1462.291600][T26143] bond0: (slave team0): Releasing backup interface [ 1462.320560][T26143] bridge0: port 3(team0) entered blocking state [ 1462.335148][T26143] bridge0: port 3(team0) entered disabled state [ 1462.345607][T26143] team0: entered promiscuous mode [ 1462.365612][T26143] team_slave_0: entered promiscuous mode [ 1462.371518][T26143] team_slave_1: entered promiscuous mode [ 1462.397750][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14072'. [ 1462.406932][T20632] net_ratelimit: 41 callbacks suppressed [ 1462.406949][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1462.462319][T26148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14074'. [ 1462.506594][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14072'. [ 1462.519519][T25907] lo speed is unknown, defaulting to 1000 [ 1462.578240][T26145] macsec3: entered promiscuous mode [ 1462.685948][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1462.822897][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1462.938821][T25907] lo speed is unknown, defaulting to 1000 [ 1462.946611][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1463.064212][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1463.194487][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1463.324081][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1463.366494][T26185] netlink: 'syz.2.14086': attribute type 4 has an invalid length. [ 1464.016307][T25907] lo speed is unknown, defaulting to 1000 [ 1464.134292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.142750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.151177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.368497][T26205] netlink: 'syz.3.14092': attribute type 11 has an invalid length. [ 1464.633485][T25907] lo speed is unknown, defaulting to 1000 [ 1465.004418][T26228] gre2: entered promiscuous mode [ 1465.022791][T26228] gre2: entered allmulticast mode [ 1465.121789][T25907] lo speed is unknown, defaulting to 1000 [ 1465.588944][T25907] lo speed is unknown, defaulting to 1000 [ 1465.614709][T26248] sctp: [Deprecated]: syz.4.14107 (pid 26248) Use of int in max_burst socket option. [ 1465.614709][T26248] Use struct sctp_assoc_value instead [ 1465.763062][T26249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1465.953312][T26258] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1466.193160][T26278] netlink: 'syz.3.14119': attribute type 12 has an invalid length. [ 1466.210442][T26278] netlink: 'syz.3.14119': attribute type 11 has an invalid length. [ 1466.676205][T26313] __nla_validate_parse: 72 callbacks suppressed [ 1466.676226][T26313] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.14129'. [ 1466.690446][T26315] netlink: 'syz.0.14130': attribute type 1 has an invalid length. [ 1466.702634][T26315] netlink: 'syz.0.14130': attribute type 3 has an invalid length. [ 1466.720292][T26315] netlink: 'syz.0.14130': attribute type 7 has an invalid length. [ 1466.735442][T26315] netlink: 'syz.0.14130': attribute type 8 has an invalid length. [ 1466.748255][T26315] netlink: 184 bytes leftover after parsing attributes in process `syz.0.14130'. [ 1466.760884][T26315] NCSI netlink: No device for ifindex 131092 [ 1467.029461][T26328] netlink: 240 bytes leftover after parsing attributes in process `syz.4.14134'. [ 1467.209472][T26340] netlink: 'syz.1.14138': attribute type 10 has an invalid length. [ 1467.235759][T26342] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1467.738964][T26340] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1467.766821][T20288] net_ratelimit: 32 callbacks suppressed [ 1467.766839][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1467.898769][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.028372][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.125996][T26382] sch_tbf: burst 9 is lower than device lo mtu (11337746) ! [ 1468.183583][T26382] IPv6: NLM_F_CREATE should be specified when creating new route [ 1468.201869][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.223648][T26382] netlink: 'syz.3.14149': attribute type 1 has an invalid length. [ 1468.231407][T26386] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14152'. [ 1468.326254][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.390786][T26391] netlink: 'syz.0.14153': attribute type 1 has an invalid length. [ 1468.464055][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.477844][T26397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.585941][T26409] netlink: 21 bytes leftover after parsing attributes in process `syz.0.14157'. [ 1468.594231][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.734768][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.854664][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1468.927396][T26427] netlink: 'syz.2.14163': attribute type 32 has an invalid length. [ 1469.111246][T26436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14166'. [ 1469.143759][T26437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14167'. [ 1469.188698][T26437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14167'. [ 1469.225822][T26437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14167'. [ 1469.287899][T26437] team_slave_1: entered allmulticast mode [ 1469.469769][T26454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14174'. [ 1469.488152][T26424] lo speed is unknown, defaulting to 1000 [ 1469.496850][T26424] lo speed is unknown, defaulting to 1000 [ 1469.757026][T26469] netlink: 'syz.1.14177': attribute type 11 has an invalid length. [ 1470.765159][T26521] vlan0: entered allmulticast mode [ 1470.780189][T26521] bond0: entered allmulticast mode [ 1470.808298][T26521] bridge1: entered allmulticast mode [ 1470.996430][T26528] SET target dimension over the limit! [ 1471.353583][T26539] bridge4: entered allmulticast mode [ 1471.549330][T26553] tipc: New replicast peer: 255.255.255.255 [ 1471.569364][T26553] tipc: Enabled bearer , priority 10 [ 1471.778766][T26567] netlink: 'syz.4.14204': attribute type 11 has an invalid length. [ 1471.800236][T26567] __nla_validate_parse: 2 callbacks suppressed [ 1471.800252][T26567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14204'. [ 1471.832930][T26564] can: request_module (can-proto-0) failed. [ 1471.873391][T26571] netlink: 'syz.4.14204': attribute type 11 has an invalid length. [ 1471.884098][T26571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14204'. [ 1472.011756][T26582] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14207'. [ 1472.046106][T26588] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20002 [ 1472.063411][T26582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14207'. [ 1472.196178][T26594] Bluetooth: MGMT ver 1.23 [ 1472.280125][T26600] netlink: 'syz.4.14216': attribute type 2 has an invalid length. [ 1472.371080][T26605] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1472.391524][T26605] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1472.421627][T26605] gretap1: entered promiscuous mode [ 1472.429416][T26605] gretap1: entered allmulticast mode [ 1472.454996][T26607] bridge0: port 3(ipvlan2) entered blocking state [ 1472.471867][T26607] bridge0: port 3(ipvlan2) entered disabled state [ 1472.487069][T26607] ipvlan2: entered allmulticast mode [ 1472.498217][T26607] bridge0: entered allmulticast mode [ 1472.528567][T26607] ipvlan2: left allmulticast mode [ 1472.566349][T26607] bridge0: left allmulticast mode [ 1472.611054][T26623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14225'. [ 1472.619715][T26624] syzkaller1: entered promiscuous mode [ 1472.628680][T26624] syzkaller1: entered allmulticast mode [ 1472.867696][T20628] net_ratelimit: 26 callbacks suppressed [ 1472.867710][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.035008][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.227446][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.322487][T26651] netlink: 'syz.0.14230': attribute type 10 has an invalid length. [ 1473.346352][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.347285][T26651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14230'. [ 1473.390024][T26651] team0: entered allmulticast mode [ 1473.412662][T26651] team_slave_0: entered allmulticast mode [ 1473.433096][T26651] team_slave_1: entered allmulticast mode [ 1473.454799][T26651] bridge0: port 3(team0) entered blocking state [ 1473.467955][T26651] bridge0: port 3(team0) entered disabled state [ 1473.481977][T26651] team0: entered promiscuous mode [ 1473.488623][T26651] team_slave_0: entered promiscuous mode [ 1473.496133][T26651] team_slave_1: entered promiscuous mode [ 1473.506066][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.634984][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.756197][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.783703][T26684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.884101][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1473.943742][T26691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14240'. [ 1473.989489][T26691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14240'. [ 1474.013382][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1474.204563][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1474.222928][T26713] netlink: 'syz.2.14246': attribute type 64 has an invalid length. [ 1474.351693][T26713] netlink: 'syz.2.14246': attribute type 1 has an invalid length. [ 1474.478342][T26736] netlink: 'syz.3.14252': attribute type 2 has an invalid length. [ 1474.525753][T26729] netlink: 'syz.4.14250': attribute type 83 has an invalid length. [ 1474.578255][T26746] netlink: 'syz.0.14251': attribute type 1 has an invalid length. [ 1474.731299][T26755] netlink: 'syz.2.14256': attribute type 2 has an invalid length. [ 1474.840179][T26762] netlink: 'syz.0.14258': attribute type 2 has an invalid length. [ 1474.850604][T26762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14258'. [ 1477.421140][T26729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1477.917870][T26795] syzkaller0: entered promiscuous mode [ 1477.945542][T26795] syzkaller0: entered allmulticast mode [ 1477.949856][T26799] netlink: 'syz.0.14269': attribute type 8 has an invalid length. [ 1478.018365][T26801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14269'. [ 1478.046604][T26801] netlink: 'syz.0.14269': attribute type 7 has an invalid length. [ 1478.074270][T20305] net_ratelimit: 30 callbacks suppressed [ 1478.074290][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1478.075948][T26801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14269'. [ 1478.107281][T26803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14270'. [ 1478.153297][T26803] openvswitch: netlink: Tunnel attr 768 out of range max 16 [ 1478.177177][T26807] IPv6: sit2: Disabled Multicast RS [ 1478.234504][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1478.382872][T26811] bridge0: port 4(batadv1) entered blocking state [ 1478.398549][T26811] bridge0: port 4(batadv1) entered disabled state [ 1478.414937][T26811] batadv1: entered allmulticast mode [ 1478.430534][T26813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.460913][T26811] batadv1: entered promiscuous mode [ 1478.484096][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1478.539280][T26791] lo speed is unknown, defaulting to 1000 [ 1478.561488][T26791] lo speed is unknown, defaulting to 1000 [ 1478.604438][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1478.652234][T26817] syz_tun: entered allmulticast mode [ 1478.701242][T26817] dvmrp8: entered allmulticast mode [ 1478.740210][T26816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14275'. [ 1478.784658][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1478.797112][T26815] syz_tun: left allmulticast mode [ 1478.874574][T20637] batman_adv: batadv1: IGMP Querier appeared [ 1478.883169][T20637] batman_adv: batadv1: MLD Querier appeared [ 1478.905637][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1479.024542][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1479.269329][T26843] syz_tun: entered allmulticast mode [ 1479.288282][T26847] pim6reg: entered allmulticast mode [ 1479.339548][T26839] bond5: entered promiscuous mode [ 1479.349121][T26839] bond5: entered allmulticast mode [ 1479.355783][T26839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1479.364721][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1479.489418][T26853] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14287'. [ 1479.581766][T26855] IPVS: Unknown mcast interface: vcan0 [ 1479.627858][T26857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14288'. [ 1479.667033][T26857] netlink: 13 bytes leftover after parsing attributes in process `syz.4.14288'. [ 1479.797355][T26857] veth9: entered promiscuous mode [ 1480.195841][T26881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14296'. [ 1480.388091][T26895] netlink: 2 bytes leftover after parsing attributes in process `syz.4.14301'. [ 1480.453261][T26903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14303'. [ 1481.012597][ T29] audit: type=1804 audit(1782694806.003:30): pid=26933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.14313" name="/newroot/417/cgroup.controllers" dev="tmpfs" ino=2141 res=1 errno=0 [ 1481.046665][ T29] audit: type=1800 audit(1782694806.003:31): pid=26933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14313" name="cgroup.controllers" dev="tmpfs" ino=2141 res=0 errno=0 [ 1481.373862][T26967] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1481.911667][T27001] syzkaller0: entered allmulticast mode [ 1482.183316][T26978] lo speed is unknown, defaulting to 1000 [ 1482.209740][T26978] lo speed is unknown, defaulting to 1000 [ 1482.502540][T27026] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1483.284715][T20291] net_ratelimit: 29 callbacks suppressed [ 1483.284735][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1483.477023][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1483.582641][T27089] syzkaller0: entered promiscuous mode [ 1483.593460][T27089] syzkaller0: entered allmulticast mode [ 1483.729837][T27104] __nla_validate_parse: 7 callbacks suppressed [ 1483.729855][T27104] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14357'. [ 1483.933784][T27115] netlink: 'syz.4.14359': attribute type 64 has an invalid length. [ 1484.027285][T27100] bond0: (slave sit0): Device is not bonding slave [ 1484.041471][T27100] bond0: option active_slave: invalid value (sit0) [ 1484.053171][T27100] bond0 (unregistering): Released all slaves [ 1484.147412][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1484.197037][T27106] syzkaller0: entered promiscuous mode [ 1484.202868][T27106] syzkaller0: entered allmulticast mode [ 1484.228690][ T6258] lo speed is unknown, defaulting to 1000 [ 1484.252292][ T6258] syz2: Port: 1 Link DOWN [ 1484.355329][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1484.376488][T27128] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1484.422682][T27125] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1484.466780][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1484.485008][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1484.506775][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1484.535116][T27134] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14363'. [ 1484.560552][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1484.587642][T27125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1484.616384][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1484.735819][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1484.760420][T27147] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1484.851194][T27157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14369'. [ 1484.879930][T27153] syzkaller0: entered promiscuous mode [ 1484.918864][T27153] syzkaller0: entered allmulticast mode [ 1484.978199][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1485.245518][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1485.525716][T27196] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1485.623039][T27203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14386'. [ 1485.657016][T27201] syzkaller0: entered promiscuous mode [ 1485.669118][T27201] syzkaller0: entered allmulticast mode [ 1485.800137][T27212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14389'. [ 1485.993000][T27220] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1486.015605][T27220] vxcan1: entered promiscuous mode [ 1486.027469][T27220] vxcan1: entered allmulticast mode [ 1486.130949][T27228] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1486.393803][T27243] bridge_slave_1: left allmulticast mode [ 1486.405069][T27243] bridge_slave_1: left promiscuous mode [ 1486.411725][T27243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.428530][T27243] bridge_slave_0: left allmulticast mode [ 1486.435260][T27243] bridge_slave_0: left promiscuous mode [ 1486.441049][T27243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.629396][T27252] bond0: (slave bond_slave_1): Releasing backup interface [ 1488.384440][T20637] net_ratelimit: 23 callbacks suppressed [ 1488.384463][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1488.504188][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1488.614573][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1488.725071][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1488.834462][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1488.944069][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1489.054138][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1489.164021][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1489.265513][T27235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1489.275434][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1489.416199][T27293] __nla_validate_parse: 10 callbacks suppressed [ 1489.416220][T27293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14412'. [ 1489.448180][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1489.526584][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14414'. [ 1489.527356][T27301] netlink: 468 bytes leftover after parsing attributes in process `syz.4.14416'. [ 1489.548119][T27297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14414'. [ 1489.593407][T27299] syzkaller0: entered promiscuous mode [ 1489.601140][T27299] syzkaller0: entered allmulticast mode [ 1489.769400][T27311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14419'. [ 1489.872617][T27316] netlink: 'syz.0.14420': attribute type 11 has an invalid length. [ 1490.149525][T27334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14426'. [ 1490.159824][T27334] netlink: 'syz.1.14426': attribute type 1 has an invalid length. [ 1490.169819][T27334] netlink: 'syz.1.14426': attribute type 1 has an invalid length. [ 1490.187699][T27334] netlink: 'syz.1.14426': attribute type 2 has an invalid length. [ 1490.206559][T27334] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14426'. [ 1490.543714][T27349] syzkaller0: entered promiscuous mode [ 1490.582655][T27349] syzkaller0: entered allmulticast mode [ 1490.730953][T27368] netlink: 'syz.4.14433': attribute type 1 has an invalid length. [ 1490.912789][T27368] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1491.149191][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14438'. [ 1491.281236][T27385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14440'. [ 1491.287804][T27388] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1491.350010][T27385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14440'. [ 1493.023107][T27495] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1493.047858][T27496] netlink: 'syz.2.14471': attribute type 6 has an invalid length. [ 1493.062385][T27496] netlink: 'syz.2.14471': attribute type 5 has an invalid length. [ 1493.162041][T27494] sit1: entered promiscuous mode [ 1493.167223][T27494] sit1: entered allmulticast mode [ 1493.466610][T27520] netlink: 'syz.2.14479': attribute type 1 has an invalid length. [ 1493.501011][T27520] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1493.512864][T27520] x_tables: unsorted underflow at hook 3 [ 1493.565783][T20289] net_ratelimit: 24 callbacks suppressed [ 1493.565802][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1493.744136][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1493.859528][T27534] xt_hashlimit: size too large, truncated to 1048576 [ 1493.875777][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1494.014793][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1494.081895][T27544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1494.156121][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1494.274706][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1494.404815][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1494.538120][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1494.572889][T27563] __nla_validate_parse: 82 callbacks suppressed [ 1494.572909][T27563] netlink: 196 bytes leftover after parsing attributes in process `syz.2.14493'. [ 1494.664900][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1494.771557][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14496'. [ 1494.782014][T27571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14496'. [ 1494.791946][T20628] 0ªX¹¦Dö»: left allmulticast mode [ 1494.797945][T20628] 0ªX¹¦Dö»: left promiscuous mode [ 1494.813607][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14496'. [ 1494.817597][T20628] bridge0: port 3(00ªX¹¦Dö») entered disabled state [ 1494.871022][T20628] bridge_slave_1: left allmulticast mode [ 1494.881471][T20628] bridge_slave_1: left promiscuous mode [ 1494.892393][T20628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.921281][T20628] bridge_slave_0: left allmulticast mode [ 1494.929451][T20628] bridge_slave_0: left promiscuous mode [ 1494.943014][T20628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.006878][T20628] veth0_to_bond: left allmulticast mode [ 1495.012546][T20628] veth0_to_bond: left promiscuous mode [ 1495.022820][T20628] bridge11: port 2(veth0_to_bond) entered disabled state [ 1495.043320][T20628] veth5: left allmulticast mode [ 1495.054157][T20628] veth5: left promiscuous mode [ 1495.064268][T20628] bridge11: port 1(veth5) entered disabled state [ 1495.263251][T20628] bond5 (unregistering): (slave gretap2): Releasing active interface [ 1495.328110][T20628] team0: Port device geneve1 removed [ 1495.371481][T20628] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1495.407659][T20628] bond6 (unregistering): (slave bridge7): Releasing active interface [ 1495.453754][T20628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.464333][T20628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.475638][T20628] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1495.485332][T20628] bond0 (unregistering): Released all slaves [ 1495.503664][T20628] bond1 (unregistering): Released all slaves [ 1495.520798][T20628] bond2 (unregistering): Released all slaves [ 1495.540637][T20628] bond3 (unregistering): Released all slaves [ 1495.555751][T20628] bond4 (unregistering): Released all slaves [ 1495.571908][T20628] bond5 (unregistering): Released all slaves [ 1495.592557][T20628] bond6 (unregistering): Released all slaves [ 1495.609551][T20628] bond7 (unregistering): Released all slaves [ 1495.623865][T20628] bond8 (unregistering): Released all slaves [ 1495.651690][T20628] bond9 (unregistering): Released all slaves [ 1495.667244][T20628] bond10 (unregistering): Released all slaves [ 1495.681280][T20628] bond11 (unregistering): Released all slaves [ 1495.697924][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14496'. [ 1495.707790][T27571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14496'. [ 1495.719515][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14496'. [ 1495.743759][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14501'. [ 1495.775872][T27591] netlink: 'syz.3.14498': attribute type 12 has an invalid length. [ 1495.794704][T27591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14498'. [ 1495.812174][T27594] netlink: 'syz.2.14500': attribute type 21 has an invalid length. [ 1495.835398][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14500'. [ 1496.039587][T20628] tipc: Left network mode [ 1496.949204][T27643] sctp: [Deprecated]: syz.4.14519 (pid 27643) Use of int in max_burst socket option deprecated. [ 1496.949204][T27643] Use struct sctp_assoc_value instead [ 1496.960979][T27651] syzkaller0: entered promiscuous mode [ 1496.988805][T27656] netlink: 'syz.2.14522': attribute type 29 has an invalid length. [ 1496.995014][T27651] syzkaller0: entered allmulticast mode [ 1497.024509][T27643] netlink: 'syz.4.14519': attribute type 4 has an invalid length. [ 1497.057147][T27656] netlink: 'syz.2.14522': attribute type 29 has an invalid length. [ 1497.142453][T27661] xt_HMARK: spi-set and port-set can't be combined [ 1497.496484][T20628] hsr_slave_0: left promiscuous mode [ 1497.518597][T20628] hsr_slave_1: left promiscuous mode [ 1497.537125][T20628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.701608][T20628] team0 (unregistering): Port device team_slave_1 removed [ 1498.722188][T20628] team0 (unregistering): Port device team_slave_0 removed [ 1498.830843][T27689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.838205][T27689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.890713][T27694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.897936][T27694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.905507][T27694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.912697][T27694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.958248][T27694] bridge0: entered promiscuous mode [ 1498.971324][T27694] bridge0: entered allmulticast mode [ 1499.004516][T20632] net_ratelimit: 9 callbacks suppressed [ 1499.004534][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1499.251560][T27734] netlink: 'syz.4.14540': attribute type 4 has an invalid length. [ 1499.269820][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1499.329886][T27734] .`: renamed from bond0 (while UP) [ 1499.418124][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1499.466963][T20628] IPVS: stop unused estimator thread 0... [ 1499.586783][T27744] bond7: option fail_over_mac: invalid value (16) [ 1499.626122][T27744] bond7 (unregistering): Released all slaves [ 1499.906662][T27767] bond7 (unregistering): Released all slaves [ 1499.927712][T27779] __nla_validate_parse: 14 callbacks suppressed [ 1499.927731][T27779] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14550'. [ 1500.012522][T27781] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14551'. [ 1500.074664][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1500.180369][T27790] Cannot find set identified by id 1 to match [ 1500.216207][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1500.359087][T27797] syzkaller1: entered promiscuous mode [ 1500.378375][T27797] syzkaller1: entered allmulticast mode [ 1500.424927][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1500.543482][T27809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14559'. [ 1500.605149][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1500.746113][T20628] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1500.893110][T27831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14565'. [ 1500.906717][T27833] x_tables: duplicate underflow at hook 3 [ 1501.137660][T27824] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1501.192084][T27824] syzkaller0: entered promiscuous mode [ 1501.205792][T27824] syzkaller0: entered allmulticast mode [ 1501.252678][T27831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.271364][T27840] gre0: Caught tx_queue_len zero misconfig [ 1501.355367][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1501.451933][T27865] erspan0: entered allmulticast mode [ 1501.592252][T27874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1501.618542][T27880] netlink: 'syz.3.14570': attribute type 11 has an invalid length. [ 1501.646771][T27871] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1501.700639][T27871] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1501.739233][T27871] gretap1: entered promiscuous mode [ 1501.756179][T27871] gretap1: entered allmulticast mode [ 1501.784225][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1501.858489][T27893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14575'. [ 1501.920186][T27895] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 1501.952338][T27895] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 1502.779078][T27953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14587'. [ 1503.241657][T27981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14593'. [ 1503.535097][T28000] netlink: 'syz.0.14597': attribute type 4 has an invalid length. [ 1503.563098][T28000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14597'. [ 1503.625489][T28000] .`: renamed from bond0 (while UP) [ 1503.689923][T28003] syzkaller0: entered promiscuous mode [ 1503.704625][T28003] syzkaller0: entered allmulticast mode [ 1503.717757][T28009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14600'. [ 1503.726376][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14601'. [ 1503.740686][T28000] atomic_op ffff888061288998 conn xmit_atomic 0000000000000000 [ 1504.066413][T20291] net_ratelimit: 17 callbacks suppressed [ 1504.066432][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1504.104516][T28024] netlink: 'syz.3.14604': attribute type 3 has an invalid length. [ 1504.140434][T28027] vlan3: entered promiscuous mode [ 1504.148899][T28027] hsr0: entered promiscuous mode [ 1504.169392][T28027] vlan3: entered allmulticast mode [ 1504.195609][T28027] hsr0: entered allmulticast mode [ 1504.219962][T28027] hsr_slave_0: entered allmulticast mode [ 1504.243529][T28027] hsr_slave_1: entered allmulticast mode [ 1504.356963][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1504.484049][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1504.660756][T28000] lo speed is unknown, defaulting to 1000 [ 1504.669797][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1504.767600][T28000] lo speed is unknown, defaulting to 1000 [ 1504.796014][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1504.916099][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1504.947844][T28071] __nla_validate_parse: 4 callbacks suppressed [ 1504.947862][T28071] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14617'. [ 1505.036995][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1505.102071][T28080] lo: left promiscuous mode [ 1505.117336][T28080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1505.186159][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1505.186483][T28080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14620'. [ 1505.307593][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1505.321548][T28087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1505.356465][T28093] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1505.404349][T28092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1505.833240][T28126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.267125][T28145] xt_hashlimit: size too large, truncated to 1048576 [ 1506.384539][T28152] netlink: 'syz.4.14638': attribute type 1 has an invalid length. [ 1507.121490][T28186] netlink: 'syz.2.14643': attribute type 1 has an invalid length. [ 1509.074274][T20288] net_ratelimit: 26 callbacks suppressed [ 1509.074296][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.194237][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.304501][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.417694][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.534488][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.644711][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.754654][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.865153][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1509.945227][T28171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1509.976773][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1510.057278][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1510.114993][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1510.200020][T28213] netlink: 'syz.1.14654': attribute type 30 has an invalid length. [ 1510.255016][T28215] xt_cgroup: xt_cgroup: no path or classid specified [ 1510.301278][T28215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14655'. [ 1510.669829][T28241] netlink: 'syz.1.14662': attribute type 1 has an invalid length. [ 1510.679555][T28241] netlink: 756 bytes leftover after parsing attributes in process `syz.1.14662'. [ 1510.783637][T28251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14667'. [ 1510.822721][T28255] netlink: 'syz.1.14668': attribute type 3 has an invalid length. [ 1510.847707][T28255] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14668'. [ 1510.906695][T28261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14669'. [ 1510.939469][T28263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14671'. [ 1510.961435][T28259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14669'. [ 1511.351669][T28292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14679'. [ 1511.494989][T28303] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1511.497697][T28292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14679'. [ 1511.667436][T28292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14679'. [ 1511.787602][T28316] team0 (unregistering): left allmulticast mode [ 1511.803019][T28316] team_slave_0: left allmulticast mode [ 1511.808912][T28316] team_slave_1: left allmulticast mode [ 1511.817308][T28316] bridge0: port 3(team0) entered disabled state [ 1511.829519][T28316] team_slave_0: left promiscuous mode [ 1511.853839][T28316] team0 (unregistering): Port device team_slave_0 removed [ 1511.867947][T28316] team_slave_1: left promiscuous mode [ 1511.909875][T28316] team0 (unregistering): Port device team_slave_1 removed [ 1512.059022][T28331] netlink: 'syz.3.14692': attribute type 12 has an invalid length. [ 1512.094642][T28331] netlink: 'syz.3.14692': attribute type 29 has an invalid length. [ 1512.620290][T28382] gre0: entered promiscuous mode [ 1512.636403][T28382] gre0: entered allmulticast mode [ 1512.819673][T28393] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1513.042916][T28411] netlink: 'syz.0.14717': attribute type 1 has an invalid length. [ 1513.262408][T28419] tipc: Enabling of bearer rejected, failed to enable media [ 1513.436240][T28435] mac80211_hwsim hwsim89 wlan0: entered promiscuous mode [ 1513.468370][T28427] syzkaller0: entered promiscuous mode [ 1513.492687][T28427] syzkaller0: entered allmulticast mode [ 1513.999353][T28466] netlink: 'syz.4.14732': attribute type 5 has an invalid length. [ 1514.184883][T20637] net_ratelimit: 31 callbacks suppressed [ 1514.184904][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1514.334252][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1514.464979][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1514.621774][T28504] team0: entered promiscuous mode [ 1514.651379][T28504] team_slave_0: entered promiscuous mode [ 1514.675740][T28504] team_slave_1: entered promiscuous mode [ 1514.711954][T28504] debugfs: 'hsr1' already exists in 'hsr' [ 1514.747317][T28504] Cannot create hsr debugfs directory [ 1514.765784][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1514.914121][T20289] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1515.021245][T28527] syzkaller0: entered promiscuous mode [ 1515.037548][T28527] syzkaller0: entered allmulticast mode [ 1515.052664][T28532] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1515.064669][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1515.116013][T28538] netlink: 'syz.2.14750': attribute type 1 has an invalid length. [ 1515.520179][T28538] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1515.555330][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1515.719381][T28547] syzkaller0: entered promiscuous mode [ 1515.719673][T28568] netlink: 'syz.4.14758': attribute type 4 has an invalid length. [ 1515.733265][T28570] __nla_validate_parse: 24 callbacks suppressed [ 1515.733282][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14755'. [ 1515.737777][T28547] syzkaller0: entered allmulticast mode [ 1515.744155][T28570] netlink: 'syz.2.14755': attribute type 3 has an invalid length. [ 1515.785568][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1515.906326][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1515.960923][T28585] syzkaller0: entered promiscuous mode [ 1515.981672][T28585] syzkaller0: entered allmulticast mode [ 1516.209372][T28603] netlink: 'syz.4.14767': attribute type 1 has an invalid length. [ 1516.721524][T28614] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20004 [ 1517.543416][T28617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14769'. [ 1519.160411][T28595] syzkaller0: entered promiscuous mode [ 1519.166333][T28595] syzkaller0: entered allmulticast mode [ 1519.190068][T28603] bond0: entered promiscuous mode [ 1519.195764][T28603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.295028][T20290] net_ratelimit: 1 callbacks suppressed [ 1519.295047][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1519.457782][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1519.485207][T28626] netlink: 6 bytes leftover after parsing attributes in process `syz.3.14773'. [ 1519.540278][T28638] netlink: 'syz.4.14776': attribute type 1 has an invalid length. [ 1519.570883][T28638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14776'. [ 1519.585104][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1519.706716][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1519.875007][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1519.932122][T28664] mac80211_hwsim hwsim95 wlan0: Caught tx_queue_len zero misconfig [ 1520.062820][T28664] syzkaller0: entered promiscuous mode [ 1520.068863][T28664] syzkaller0: entered allmulticast mode [ 1520.098402][T28674] ip6tnl3: entered promiscuous mode [ 1520.115328][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1520.123180][T28686] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1520.208228][T28689] netlink: 'syz.3.14789': attribute type 1 has an invalid length. [ 1520.383732][T28700] netlink: 'syz.2.14794': attribute type 1 has an invalid length. [ 1520.422211][T28702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14795'. [ 1520.535765][T28707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14797'. [ 1520.547379][T28707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14797'. [ 1520.557221][T28707] netlink: 35 bytes leftover after parsing attributes in process `syz.2.14797'. [ 1520.567607][T28707] netlink: 'syz.2.14797': attribute type 5 has an invalid length. [ 1520.581607][T28707] netlink: 'syz.2.14797': attribute type 6 has an invalid length. [ 1520.589945][T28707] netlink: 35 bytes leftover after parsing attributes in process `syz.2.14797'. [ 1523.484159][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1523.613137][T28726] netlink: 'syz.0.14804': attribute type 10 has an invalid length. [ 1523.621884][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1523.644106][T28726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.667369][T28726] batman_adv: batadv0: Interface deactivated: dummy0 [ 1523.667714][T28736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14804'. [ 1523.695940][T28726] batman_adv: batadv0: Removing interface: dummy0 [ 1523.873679][T28741] bond0: (slave bond_slave_0): Releasing backup interface [ 1523.902395][T28745] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14802'. [ 1523.936845][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1524.000697][T28755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14808'. [ 1524.128412][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14811'. [ 1524.203447][T28765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1524.288712][T28775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14813'. [ 1524.307590][T20305] net_ratelimit: 2 callbacks suppressed [ 1524.307610][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1524.379336][T28784] syzkaller0: entered promiscuous mode [ 1524.387418][T28784] syzkaller0: entered allmulticast mode [ 1524.427862][T28781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14813'. [ 1524.468965][T28781] nbd: device at index 64 is going down [ 1524.484361][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1524.599487][T28788] udevd[28788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1524.626928][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1524.632708][T28788] udevd[28788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1524.817840][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1524.944823][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1524.947955][T28816] netlink: 'syz.3.14826': attribute type 11 has an invalid length. [ 1524.962853][T28820] netlink: 27 bytes leftover after parsing attributes in process `syz.0.14828'. [ 1525.028897][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14829'. [ 1525.066076][T28822] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1525.085145][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1525.111448][T28827] veth1_to_team: Caught tx_queue_len zero misconfig [ 1525.224859][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1525.355359][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1525.485050][T28847] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1525.514548][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1525.667937][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1525.832951][T28873] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1525.929208][T28877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14844'. [ 1525.983466][T28876] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1526.029253][T28876] syzkaller0: entered promiscuous mode [ 1526.059109][T28876] syzkaller0: entered allmulticast mode [ 1526.109791][T28876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14843'. [ 1526.663055][T28928] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1526.951371][T28948] syzkaller0: entered promiscuous mode [ 1526.961096][T28948] syzkaller0: entered allmulticast mode [ 1527.720868][T29001] pim6reg: entered allmulticast mode [ 1528.200183][T29033] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1528.241464][T29039] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1528.577451][T29065] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1528.597297][T29065] netlink: 'syz.1.14900': attribute type 21 has an invalid length. [ 1528.619295][T29065] netlink: 'syz.1.14900': attribute type 22 has an invalid length. [ 1528.640446][T29065] netlink: 'syz.1.14900': attribute type 23 has an invalid length. [ 1528.663165][T29065] netlink: 'syz.1.14900': attribute type 25 has an invalid length. [ 1528.700956][T29071] __nla_validate_parse: 10 callbacks suppressed [ 1528.700977][T29071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14902'. [ 1528.735863][T29071] netlink: 'syz.0.14902': attribute type 7 has an invalid length. [ 1528.756289][T29071] netlink: 'syz.0.14902': attribute type 8 has an invalid length. [ 1528.766412][T29071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14902'. [ 1529.167688][T29095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14906'. [ 1529.315193][T20291] net_ratelimit: 26 callbacks suppressed [ 1529.315213][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1529.403252][T29110] netlink: 'syz.4.14914': attribute type 33 has an invalid length. [ 1529.426323][T29110] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1529.438219][T29110] bond2 (unregistering): Released all slaves [ 1529.476146][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1529.591494][T29123] xt_hashlimit: size too large, truncated to 1048576 [ 1529.601206][T29121] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1529.606370][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1529.795133][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1529.926288][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1530.010612][T29139] tipc: Enabled bearer , priority 10 [ 1530.065507][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1530.206963][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1530.252106][T29158] netlink: 'syz.3.14928': attribute type 21 has an invalid length. [ 1530.264074][T29155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14929'. [ 1530.265649][T29158] IPv6: NLM_F_CREATE should be specified when creating new route [ 1530.287795][T29158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1530.295088][T29158] IPv6: NLM_F_CREATE should be set when creating new route [ 1530.302364][T29158] IPv6: NLM_F_CREATE should be set when creating new route [ 1530.309621][T29158] IPv6: NLM_F_CREATE should be set when creating new route [ 1530.334607][T20305] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1530.380302][T29166] netlink: 'syz.4.14930': attribute type 11 has an invalid length. [ 1530.441526][T29169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14932'. [ 1530.456088][T29172] openvswitch: netlink: Message has 12 unknown bytes. [ 1530.465851][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1530.629824][T29183] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14936'. [ 1530.648582][T29178] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14935'. [ 1530.689134][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14935'. [ 1530.710854][T29190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14934'. [ 1530.734224][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14935'. [ 1530.860199][ T29] audit: type=1804 audit(1782694855.863:32): pid=29196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.14940" name="/newroot/557/cgroup.controllers" dev="tmpfs" ino=2854 res=1 errno=0 [ 1530.941342][ T29] audit: type=1800 audit(1782694855.863:33): pid=29196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14940" name="cgroup.controllers" dev="tmpfs" ino=2854 res=0 errno=0 [ 1531.134671][T26306] tipc: Node number set to 1663761994 [ 1531.446354][T29233] IPVS: set_ctl: invalid protocol: 0 172.20.20.9:25 [ 1531.540580][T29236] netlink: 'syz.4.14950': attribute type 21 has an invalid length. [ 1531.833813][T29265] netlink: 'syz.0.14959': attribute type 10 has an invalid length. [ 1531.984531][T29272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1532.006677][T29272] : (slave netdevsim1): Enslaving as an active interface with an up link [ 1532.202222][T29293] pim6reg1: entered promiscuous mode [ 1532.211746][T29293] pim6reg1: entered allmulticast mode [ 1532.349837][T29308] macsec1: entered promiscuous mode [ 1532.555916][T20291] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1532.578678][T29332] IPVS: ip_vs_add_dest(): server weight less than zero [ 1532.586851][ T6281] IPVS: starting estimator thread 0... [ 1532.588063][T29330] 8021q: adding VLAN 0 to HW filter on device .` [ 1532.601185][T29330] wireguard: wg0: Could not create IPv4 socket [ 1532.705568][T29334] IPVS: using max 30 ests per chain, 72000 per kthread [ 1533.216210][T29310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1533.610697][T29378] vlan3: entered promiscuous mode [ 1533.761291][T29388] __nla_validate_parse: 10 callbacks suppressed [ 1533.761310][T29388] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.14995'. [ 1533.818049][T29393] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20000 [ 1534.060832][T29405] tap0: tun_chr_ioctl cmd 1074025672 [ 1534.066640][T29405] tap0: ignored: set checksum disabled [ 1534.069310][T29407] Bluetooth: MGMT ver 1.23 [ 1534.188445][T29414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15004'. [ 1534.198292][T29414] netlink: 11 bytes leftover after parsing attributes in process `syz.3.15004'. [ 1534.212551][T29414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15004'. [ 1534.356217][T20291] net_ratelimit: 34 callbacks suppressed [ 1534.356237][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1534.381305][T29426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15006'. [ 1534.450011][T29433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15008'. [ 1534.505389][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1534.621981][T29443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15010'. [ 1534.639468][T20291] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1534.719509][T29440] netlink: 80 bytes leftover after parsing attributes in process `syz.3.15010'. [ 1534.771913][T29447] .`: (slave bond_slave_0): Releasing backup interface [ 1534.866259][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1535.086841][T20637] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1535.120155][T29466] validate_nla: 3 callbacks suppressed [ 1535.120169][T29466] netlink: 'syz.3.15015': attribute type 3 has an invalid length. [ 1535.157043][T29466] netlink: 'syz.3.15015': attribute type 1 has an invalid length. [ 1535.185270][T29466] netlink: 204 bytes leftover after parsing attributes in process `syz.3.15015'. [ 1535.216411][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1535.347710][T20290] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1535.403844][T29473] syzkaller1: entered promiscuous mode [ 1535.426914][T29473] syzkaller1: entered allmulticast mode [ 1535.430271][T29481] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15020'. [ 1535.595621][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1535.725489][T20288] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1535.844605][T20632] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1536.368445][T23784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1536.390416][T23784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1536.400318][T23784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1536.410183][T23784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1536.418220][T23784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1536.634906][T29533] syzkaller0: entered promiscuous mode [ 1536.656635][T29533] syzkaller0: entered allmulticast mode [ 1537.066279][T20637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.080128][T20637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.281032][T20637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.314188][T20637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.481687][T20637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.493114][T20637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.535013][T29558] syzkaller0: entered promiscuous mode [ 1537.554378][T29558] syzkaller0: entered allmulticast mode [ 1537.630982][T20637] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.646319][T20637] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.354644][T20637] batadv1: left allmulticast mode [ 1538.361581][T29588] ip6t_REJECT: ECHOREPLY is not supported [ 1538.380008][T20637] batadv1: left promiscuous mode [ 1538.391614][T29587] ip6t_REJECT: ECHOREPLY is not supported [ 1538.410360][T20637] bridge0: port 4(batadv1) entered disabled state [ 1538.442697][T20637] team0: left allmulticast mode [ 1538.460642][T20637] team_slave_0: left allmulticast mode [ 1538.473752][T20637] team_slave_1: left allmulticast mode [ 1538.488206][T20637] bridge0: port 3(team0) entered disabled state [ 1538.507403][T20637] bridge_slave_1: left promiscuous mode [ 1538.520869][T20637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.537233][T21389] Bluetooth: hci4: command tx timeout [ 1538.576202][T20637] bridge_slave_0: left allmulticast mode [ 1538.594651][T20637] bridge_slave_0: left promiscuous mode [ 1538.621608][T20637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.732717][T20637] pim6reg: left allmulticast mode [ 1538.754959][T20637] pimreg: left allmulticast mode [ 1539.335302][T20637] bond2 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 1539.352903][T20637] bond2 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1539.667220][T20637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.679888][T20637] bond0 (unregistering): Released all slaves [ 1539.691033][T20637] bond1 (unregistering): Released all slaves [ 1539.707121][T20637] bond2 (unregistering): Released all slaves [ 1539.721731][T20637] bond3 (unregistering): Released all slaves [ 1539.742387][T20637] bond4 (unregistering): Released all slaves [ 1539.761195][T20637] bond5 (unregistering): Released all slaves [ 1539.776691][T20637] bond6 (unregistering): Released all slaves [ 1539.797653][T29525] lo speed is unknown, defaulting to 1000 [ 1539.842221][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1539.870907][T29525] lo speed is unknown, defaulting to 1000 [ 1540.593320][T29659] __nla_validate_parse: 8 callbacks suppressed [ 1540.593338][T29659] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15053'. [ 1540.615102][T21389] Bluetooth: hci4: command tx timeout [ 1540.927472][T29680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15060'. [ 1541.089690][T29693] netlink: 'syz.1.15061': attribute type 32 has an invalid length. [ 1541.103754][T29693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15061'. [ 1541.198552][T29693] bond10: Setting coupled_control to off (0) [ 1541.429752][T29707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15066'. [ 1541.498334][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1541.788742][T29722] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15069'. [ 1542.203331][T29741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15072'. [ 1542.272663][T29745] net_ratelimit: 10 callbacks suppressed [ 1542.272681][T29745] openvswitch: netlink: Message has 12 unknown bytes. [ 1542.311009][T29745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.369452][T20637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.377603][T20637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.391167][T20637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.402896][T20637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.432674][T29751] xt_hashlimit: size too large, truncated to 1048576 [ 1542.469831][T20637] veth1_macvtap: left promiscuous mode [ 1542.482634][T20637] veth0_macvtap: left promiscuous mode [ 1542.492731][T29756] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.15075'. [ 1542.528323][T29758] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15076'. [ 1542.697621][T21389] Bluetooth: hci4: command tx timeout [ 1542.935339][T20637] team_slave_1 (unregistering): left promiscuous mode [ 1542.942947][T20637] team0 (unregistering): Port device team_slave_1 removed [ 1542.958389][T20637] team_slave_0 (unregistering): left promiscuous mode [ 1542.965986][T20637] team0 (unregistering): Port device team_slave_0 removed [ 1543.148974][T29756] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1543.158957][T29756] 0ªX¹¦Dö»: entered allmulticast mode [ 1543.171216][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1543.406463][T29525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.426545][T29525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.445208][T29525] bridge_slave_0: entered allmulticast mode [ 1543.466251][T29525] bridge_slave_0: entered promiscuous mode [ 1543.561215][T29525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.582522][T29525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.601204][T29791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15083'. [ 1543.622529][T29525] bridge_slave_1: entered allmulticast mode [ 1543.651998][T29525] bridge_slave_1: entered promiscuous mode [ 1543.810563][T29525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.859281][T29801] netlink: 232 bytes leftover after parsing attributes in process `syz.1.15086'. [ 1543.885898][T29525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.120366][T29525] team0: Port device team_slave_0 added [ 1544.141765][T20637] IPVS: stop unused estimator thread 0... [ 1544.160271][T29525] team0: Port device team_slave_1 added [ 1544.351530][T29525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.362256][T29525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.419377][T29525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.432996][T29525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.440395][T29525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.470365][T29525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.615067][T29525] hsr_slave_0: entered promiscuous mode [ 1544.630376][T29525] hsr_slave_1: entered promiscuous mode [ 1544.638239][T29525] debugfs: 'hsr0' already exists in 'hsr' [ 1544.657303][T29525] Cannot create hsr debugfs directory [ 1544.676708][T29837] vlan0: entered promiscuous mode [ 1544.687480][T29837] vlan0: left allmulticast mode [ 1544.704026][T29837] bond0: left allmulticast mode [ 1544.717123][T29837] bridge1: left allmulticast mode [ 1544.740405][T29844] netlink: 'syz.0.15095': attribute type 22 has an invalid length. [ 1544.771920][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1544.783033][T21389] Bluetooth: hci4: command tx timeout [ 1544.865922][T29844] netlink: 'syz.0.15095': attribute type 22 has an invalid length. [ 1545.158857][T29866] netlink: 'syz.2.15101': attribute type 5 has an invalid length. [ 1545.521697][T29895] netlink: 'syz.1.15110': attribute type 10 has an invalid length. [ 1545.563577][T29895] geneve1: entered promiscuous mode [ 1545.596632][T29895] team0: Port device geneve1 added [ 1545.616048][T20290] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1545.651029][T20290] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1545.692490][T20290] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1545.719870][T20637] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1545.739403][T29904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1545.895732][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1545.912011][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1546.778503][T29959] netlink: 'syz.2.15122': attribute type 17 has an invalid length. [ 1546.815940][T29959] __nla_validate_parse: 7 callbacks suppressed [ 1546.815959][T29959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15122'. [ 1546.875729][T29959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15122'. [ 1547.065548][T29959] 0ªî{X¹¦: entered promiscuous mode [ 1547.088077][T29959] 0ªî{X¹¦: left promiscuous mode [ 1547.373105][T29970] macsec1: entered promiscuous mode [ 1547.493742][T29525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1547.553579][T29525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1547.577759][T29525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1547.631034][T29525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1547.666756][T29525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1547.713423][T29525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1547.742123][T29525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1547.788669][T29525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1548.166521][T29525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.294632][T29525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.313780][T20290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.320970][T20290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1548.333643][T30030] netlink: 'syz.2.15136': attribute type 3 has an invalid length. [ 1548.343769][T20290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.350945][T20290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.468437][T30034] tipc: New replicast peer: 255.255.255.255 [ 1548.497646][T30034] tipc: Enabled bearer , priority 10 [ 1548.557551][T30036] macvlan2: entered promiscuous mode [ 1548.574458][T30036] macvlan2: entered allmulticast mode [ 1548.582823][T30036] gretap0: entered allmulticast mode [ 1548.632220][T30036] team0: Port device macvlan2 added [ 1548.855976][T30058] syzkaller0: entered promiscuous mode [ 1548.881368][T30058] syzkaller0: entered allmulticast mode [ 1548.888064][T30066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15144'. [ 1548.992849][T30069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1549.301471][T30078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15145'. [ 1549.996170][T30119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15150'. [ 1550.030545][T30119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15150'. [ 1550.168624][T29525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.185447][T30130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15153'. [ 1550.338241][T29525] veth0_vlan: entered promiscuous mode [ 1550.407649][T29525] veth1_vlan: entered promiscuous mode [ 1550.487900][T29525] veth0_macvtap: entered promiscuous mode [ 1550.528889][T29525] veth1_macvtap: entered promiscuous mode [ 1550.563447][T29525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.604697][T29525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1550.646575][T20288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.666311][T20288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.688912][T20288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.720442][T20288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.310645][T20637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.356559][T20637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.357691][T30181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15164'. [ 1551.568031][T20291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.605414][T20291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.950355][T30219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15172'. [ 1552.003618][T30225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15172'. [ 1552.031664][T30227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15173'. [ 1552.231810][T30247] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1552.280222][T30247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15178'. [ 1552.327229][T30247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15178'. [ 1552.553597][T30259] netlink: 'syz.1.15181': attribute type 8 has an invalid length. [ 1552.666674][T23784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1552.688349][T23784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1552.697070][T23784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1552.705666][T23784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1552.715695][T23784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1552.774439][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15184'. [ 1552.800950][T30266] sctp: [Deprecated]: syz.4.15183 (pid 30266) Use of int in max_burst socket option deprecated. [ 1552.800950][T30266] Use struct sctp_assoc_value instead [ 1552.870875][T30274] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1553.227565][T30293] Cannot find set identified by id 65534 to match [ 1553.252942][T30294] tipc: Started in network mode [ 1553.270924][T30294] tipc: Node identity 5ee36565b2cf, cluster identity 4711 [ 1553.299523][T30294] tipc: Enabled bearer , priority 0 [ 1553.339021][T30293] tipc: Enabling of bearer rejected, already enabled [ 1553.480760][T30294] syzkaller0: entered promiscuous mode [ 1553.510672][T30294] syzkaller0: entered allmulticast mode [ 1553.548562][T30307] netlink: 108 bytes leftover after parsing attributes in process `syz.1.15192'. [ 1553.628012][T30307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15192'. [ 1553.690934][T30294] tipc: Resetting bearer [ 1553.780868][T30294] tipc: Disabling bearer [ 1554.777152][T23784] Bluetooth: hci2: command tx timeout [ 1554.785221][T30378] netlink: 'syz.1.15205': attribute type 2 has an invalid length. [ 1554.981539][T30263] lo speed is unknown, defaulting to 1000 [ 1554.995976][T30263] lo speed is unknown, defaulting to 1000 [ 1555.029237][T30379] syzkaller1: entered promiscuous mode [ 1555.041085][T30379] syzkaller1: entered allmulticast mode [ 1555.702385][T30418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15216'. [ 1555.878703][T30432] netlink: 'syz.3.15220': attribute type 1 has an invalid length. [ 1555.891903][T30429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15218'. [ 1556.076331][T30263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.083776][T30263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.091269][T30263] bridge_slave_0: entered allmulticast mode [ 1556.099798][T30263] bridge_slave_0: entered promiscuous mode [ 1556.109831][T30263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.117317][T30263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.124757][T30263] bridge_slave_1: entered allmulticast mode [ 1556.132646][T30263] bridge_slave_1: entered promiscuous mode [ 1556.182102][T30263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.197227][T30263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.206761][T30450] xt_hashlimit: size too large, truncated to 1048576 [ 1556.242220][T30263] team0: Port device team_slave_0 added [ 1556.251326][T30263] team0: Port device team_slave_1 added [ 1556.311392][T30263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.326253][T30263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.355634][T30263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.391716][T30263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.409373][T30263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.483575][T30263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.550464][T30263] hsr_slave_0: entered promiscuous mode [ 1556.580600][T30263] hsr_slave_1: entered promiscuous mode [ 1556.588449][T30263] debugfs: 'hsr0' already exists in 'hsr' [ 1556.594685][T30263] Cannot create hsr debugfs directory [ 1556.855452][T23784] Bluetooth: hci2: command tx timeout [ 1556.959983][T30263] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1556.964817][T30483] __nla_validate_parse: 2 callbacks suppressed [ 1556.964833][T30483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15235'. [ 1556.971716][T30263] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.025229][T30488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15235'. [ 1557.148434][T30263] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.159087][T30263] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.250498][T30263] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.278085][T30263] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.392165][T30263] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.402171][T30263] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.428011][T30508] netlink: 'syz.2.15243': attribute type 24 has an invalid length. [ 1557.508860][T30512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15245'. [ 1557.913767][T30518] syzkaller0: entered promiscuous mode [ 1557.932136][T30518] syzkaller0: entered allmulticast mode [ 1558.001807][T30518] openvswitch: netlink: Missing valid actions attribute. [ 1558.011883][T30518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1558.170697][T30263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1558.183782][T23784] block nbd9: Receive control failed (result -32) [ 1558.195973][T30263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1558.257995][T30539] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15252'. [ 1558.334565][T30263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1558.347666][T30263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1558.365773][T30263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1558.405308][T30263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1558.440508][T30263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1558.461007][T30263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1558.570383][T30555] netlink: 'syz.3.15256': attribute type 64 has an invalid length. [ 1558.596358][T30555] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15256'. [ 1558.686121][T30567] syzkaller1: entered promiscuous mode [ 1558.692215][T30567] syzkaller1: entered allmulticast mode [ 1558.733367][T30567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15258'. [ 1558.757210][T30571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15260'. [ 1558.882380][T30263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.934622][T23784] Bluetooth: hci2: command tx timeout [ 1558.962622][T30263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.007142][T20288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.014323][T20288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.061132][T20637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.068331][T20637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.100701][T30589] xt_hashlimit: size too large, truncated to 1048576 [ 1559.135318][T30591] netlink: 830 bytes leftover after parsing attributes in process `syz.1.15266'. [ 1559.147147][T30590] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.15267'. [ 1559.179288][T30596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15269'. [ 1559.183814][T30590] openvswitch: netlink: Key type 31 is not supported [ 1559.478102][T30608] Cannot find add_set index 4 as target [ 1559.870682][T30640] --map-set only usable from mangle table [ 1559.928654][T30643] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1560.019855][T30263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.108464][T30263] veth0_vlan: entered promiscuous mode [ 1560.146489][T30263] veth1_vlan: entered promiscuous mode [ 1560.229002][T30263] veth0_macvtap: entered promiscuous mode [ 1560.241240][T30263] veth1_macvtap: entered promiscuous mode [ 1560.267142][T30263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1560.290651][T30263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1560.317048][T20305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.339561][T20305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.391555][T20305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.418294][T20305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.447248][T30663] netlink: 'syz.1.15287': attribute type 1 has an invalid length. [ 1560.698035][T20628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.738654][T20628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.840225][T30685] netlink: 'syz.3.15291': attribute type 1 has an invalid length. [ 1560.927075][T20305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.949691][T30694] bridge_slave_1: left promiscuous mode [ 1560.957603][T20305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.965886][T30694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.980429][T30694] bridge_slave_0: left allmulticast mode [ 1560.991957][T30694] bridge_slave_0: left promiscuous mode [ 1560.998189][T30694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.015740][T23784] Bluetooth: hci2: command tx timeout [ 1561.206974][T30698] can: request_module (can-proto-0) failed. [ 1561.414187][T30714] lo: entered allmulticast mode [ 1561.486237][T30718] netlink: 'syz.2.15301': attribute type 10 has an invalid length. [ 1561.538618][T21389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1561.549933][T21389] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1561.560482][T21389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1561.570762][T21389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1561.580763][T21389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1561.717636][T30714] bond1 (unregistering): Released all slaves [ 1562.060262][T30719] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 1562.068807][T30719] bridge1: left promiscuous mode [ 1562.080821][T30719] bond0 (unregistering): Released all slaves [ 1562.114235][T30718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1562.127869][T30718] : (slave batadv0): Enslaving as an active interface with an up link [ 1562.137084][T30723] lo: left allmulticast mode [ 1562.228371][T19179] syz_tun (unregistering): left allmulticast mode [ 1562.732302][T30770] __nla_validate_parse: 134 callbacks suppressed [ 1562.732322][T30770] netlink: 184 bytes leftover after parsing attributes in process `syz.3.15313'. [ 1562.751854][T30770] netlink: 'syz.3.15313': attribute type 1 has an invalid length. [ 1562.761400][T30770] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15313'. [ 1563.190348][T30799] netlink: 49 bytes leftover after parsing attributes in process `syz.3.15322'. [ 1563.199938][T30799] netlink: 49 bytes leftover after parsing attributes in process `syz.3.15322'. [ 1563.248319][T30799] syzkaller1: entered promiscuous mode [ 1563.264173][T30799] syzkaller1: entered allmulticast mode [ 1563.429730][T30720] lo speed is unknown, defaulting to 1000 [ 1563.458998][T30720] lo speed is unknown, defaulting to 1000 [ 1563.479579][T30807] netlink: 716 bytes leftover after parsing attributes in process `syz.1.15324'. [ 1563.636596][T30818] erspan0: entered promiscuous mode [ 1563.656847][T23784] Bluetooth: hci3: command tx timeout [ 1563.869510][T30826] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1563.954736][T30826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15331'. [ 1564.128041][T30843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15337'. [ 1564.196958][T30843] netlink: 400 bytes leftover after parsing attributes in process `syz.2.15337'. [ 1564.258803][T30851] netlink: 'syz.0.15339': attribute type 1 has an invalid length. [ 1565.002544][T30720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.025210][T30720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.042604][T30720] bridge_slave_0: entered allmulticast mode [ 1565.058723][T30720] bridge_slave_0: entered promiscuous mode [ 1565.089293][T30720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.122842][T30720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.145086][T30720] bridge_slave_1: entered allmulticast mode [ 1565.178628][T30720] bridge_slave_1: entered promiscuous mode [ 1565.328093][T30720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.340542][T30923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15353'. [ 1565.432673][T30720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.637291][T30720] team0: Port device team_slave_0 added [ 1565.660720][T30720] team0: Port device team_slave_1 added [ 1565.695613][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15356'. [ 1565.718881][T30947] sctp: [Deprecated]: syz.1.15359 (pid 30947) Use of int in max_burst socket option deprecated. [ 1565.718881][T30947] Use struct sctp_assoc_value instead [ 1565.740956][T23784] Bluetooth: hci3: command tx timeout [ 1565.766428][T30720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.778655][T30720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.830285][T30720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.875249][T30720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.876913][T30940] 0: reclassify loop, rule prio 0, protocol 700 [ 1565.890041][T30720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.890070][T30720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.997103][T30720] hsr_slave_0: entered promiscuous mode [ 1566.015365][T30720] hsr_slave_1: entered promiscuous mode [ 1566.033315][T30720] debugfs: 'hsr0' already exists in 'hsr' [ 1566.043108][T30720] Cannot create hsr debugfs directory [ 1566.101397][T30965] Unsupported ieee802154 address type: 0 [ 1566.278511][T30962] xt_hashlimit: size too large, truncated to 1048576 [ 1566.300520][T30974] batadv1: entered allmulticast mode [ 1566.394333][T30975] syz_tun: entered allmulticast mode [ 1566.546311][T30975] dvmrp8: entered allmulticast mode [ 1566.580315][T30973] syz_tun: left allmulticast mode [ 1566.919460][T30996] batman_adv: batadv0: Adding interface: wlan0 [ 1566.950618][T30996] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.979401][T30996] batman_adv: batadv0: Interface activated: wlan0 [ 1567.218782][T30720] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.258531][T31010] ip6gre0: Caught tx_queue_len zero misconfig [ 1567.267891][T31010] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1567.542464][T30720] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.579863][T31027] tipc: Enabling of bearer rejected, media not registered [ 1567.743575][T31046] __nla_validate_parse: 3 callbacks suppressed [ 1567.743594][T31046] netlink: 168 bytes leftover after parsing attributes in process `syz.3.15381'. [ 1567.744015][T30720] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.818388][T23784] Bluetooth: hci3: command tx timeout [ 1568.236121][T30720] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.537096][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15388'. [ 1568.840886][T30720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1568.886412][T31111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15393'. [ 1568.916794][T30720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1568.939816][T31115] netlink: 45 bytes leftover after parsing attributes in process `syz.2.15396'. [ 1568.952406][T30720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1568.978248][T30720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1569.001088][T30720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1569.048774][T30720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1569.080071][T30720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1569.135087][T30720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1569.434907][T31151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15400'. [ 1569.483658][T31151] netlink: 'syz.0.15400': attribute type 1 has an invalid length. [ 1569.582159][T31151] bond1: entered promiscuous mode [ 1569.588524][T31151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1569.621795][T30720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.682910][T31166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1569.698602][T31166] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1569.719120][T31166] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1569.760637][T31166] bond1: (slave ip6gre1): making interface the new active one [ 1569.786386][T31166] ip6gre1: entered promiscuous mode [ 1569.806734][T31166] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1569.872180][T30720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.896799][T23784] Bluetooth: hci3: command tx timeout [ 1569.917610][T31174] syzkaller1: entered promiscuous mode [ 1569.940349][T31174] syzkaller1: entered allmulticast mode [ 1570.011015][T31183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15409'. [ 1570.037284][T20305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.044516][T20305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.163976][T20288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.171164][T20288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.630610][T31213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15414'. [ 1570.687111][T31217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15415'. [ 1570.886935][T31217] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1571.013734][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15418'. [ 1571.154475][T31249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15420'. [ 1571.520878][T31268] block nbd3: reconnected socket [ 1571.598941][T30720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.106555][T30720] veth0_vlan: entered promiscuous mode [ 1572.120954][T30720] veth1_vlan: entered promiscuous mode [ 1572.195210][T30720] veth0_macvtap: entered promiscuous mode [ 1572.209238][T30720] veth1_macvtap: entered promiscuous mode [ 1572.243033][T30720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1572.288129][T30720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.296418][T23784] block nbd3: Receive control failed (result -32) [ 1572.309990][T20288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.335957][T20288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.375920][T20288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.422927][T20288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.438464][T31313] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1572.466830][T31313] x_tables: duplicate underflow at hook 3 [ 1572.529940][T31314] syzkaller0: entered promiscuous mode [ 1572.551373][T31314] syzkaller0: entered allmulticast mode [ 1572.894813][T31323] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1572.907581][T31323] bond3 (unregistering): Released all slaves [ 1573.047094][T20637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.079783][T20637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.161083][T20637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.172848][T20637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.247606][T31342] __nla_validate_parse: 5 callbacks suppressed [ 1573.247625][T31342] netlink: 232 bytes leftover after parsing attributes in process `syz.3.15448'. [ 1573.481864][T31359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15453'. [ 1573.538802][T31359] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1573.557666][T31363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15453'. [ 1573.763169][T31373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15456'. [ 1573.799733][T31373] ipip0: entered allmulticast mode [ 1573.973523][T31382] xt_hashlimit: size too large, truncated to 1048576 [ 1574.371687][T21389] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1574.385618][T21389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1574.398655][T21389] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1574.412144][T21389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1574.431016][T21389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1574.449938][T23784] [ 1574.452301][T23784] ====================================================== [ 1574.459391][T23784] WARNING: possible circular locking dependency detected [ 1574.466399][T23784] syzkaller #0 Not tainted [ 1574.470799][T23784] ------------------------------------------------------ [ 1574.477814][T23784] kworker/u9:3/23784 is trying to acquire lock: [ 1574.484046][T23784] ffff88801be9d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1574.494490][T23784] [ 1574.494490][T23784] but task is already holding lock: [ 1574.501841][T23784] ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1574.511229][T23784] [ 1574.511229][T23784] which lock already depends on the new lock. [ 1574.511229][T23784] [ 1574.521619][T23784] [ 1574.521619][T23784] the existing dependency chain (in reverse order) is: [ 1574.530616][T23784] [ 1574.530616][T23784] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1574.538668][T23784] down_write+0x96/0x200 [ 1574.543434][T23784] kernfs_add_one+0x41/0x5e0 [ 1574.548535][T23784] kernfs_create_dir_ns+0x1a1/0x230 [ 1574.554248][T23784] internal_create_group+0x440/0x1180 [ 1574.560144][T23784] cpuhp_invoke_callback+0x434/0x810 [ 1574.566012][T23784] cpuhp_issue_call+0x3f0/0x750 [ 1574.571378][T23784] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1574.577962][T23784] __cpuhp_setup_state+0x3f/0x60 [ 1574.583416][T23784] do_one_initcall+0x250/0x870 [ 1574.588692][T23784] do_initcall_level+0x10a/0x1a0 [ 1574.594311][T23784] do_initcalls+0x59/0xa0 [ 1574.599150][T23784] kernel_init_freeable+0x29d/0x3e0 [ 1574.604861][T23784] kernel_init+0x1d/0x1d0 [ 1574.609701][T23784] ret_from_fork+0x514/0xb70 [ 1574.614872][T23784] ret_from_fork_asm+0x1a/0x30 [ 1574.620149][T23784] [ 1574.620149][T23784] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1574.627958][T23784] [ 1574.627958][T23784] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1574.635680][T23784] cpus_read_lock+0x42/0x160 [ 1574.640788][T23784] static_key_slow_inc+0x12/0x30 [ 1574.646239][T23784] nbd_genl_reconfigure+0x1301/0x1e80 [ 1574.652223][T23784] genl_family_rcv_msg_doit+0x233/0x340 [ 1574.658287][T23784] genl_rcv_msg+0x614/0x7a0 [ 1574.663304][T23784] netlink_rcv_skb+0x226/0x4a0 [ 1574.668581][T23784] genl_rcv+0x28/0x40 [ 1574.673077][T23784] netlink_unicast+0x7bb/0x940 [ 1574.678347][T23784] netlink_sendmsg+0x813/0xb40 [ 1574.683619][T23784] sock_sendmsg_nosec+0x13a/0x180 [ 1574.689155][T23784] ____sys_sendmsg+0x54e/0x850 [ 1574.694431][T23784] ___sys_sendmsg+0x2a5/0x360 [ 1574.699716][T23784] __x64_sys_sendmsg+0x1b1/0x290 [ 1574.705168][T23784] do_syscall_64+0x174/0x580 [ 1574.710272][T23784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.716677][T23784] [ 1574.716677][T23784] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1574.724313][T23784] __mutex_lock+0x19d/0x1550 [ 1574.729411][T23784] nbd_queue_rq+0x373/0x1150 [ 1574.734510][T23784] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1574.740778][T23784] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1574.747749][T23784] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1574.754244][T23784] blk_mq_run_work_fn+0x16c/0x300 [ 1574.759797][T23784] process_scheduled_works+0xa8e/0x14e0 [ 1574.765909][T23784] worker_thread+0xa47/0xfb0 [ 1574.771013][T23784] kthread+0x388/0x470 [ 1574.775591][T23784] ret_from_fork+0x514/0xb70 [ 1574.780692][T23784] ret_from_fork_asm+0x1a/0x30 [ 1574.785968][T23784] [ 1574.785968][T23784] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1574.793167][T23784] __mutex_lock+0x19d/0x1550 [ 1574.798266][T23784] nbd_queue_rq+0xc1/0x1150 [ 1574.803277][T23784] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1574.809355][T23784] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1574.816210][T23784] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1574.822710][T23784] blk_mq_run_work_fn+0x16c/0x300 [ 1574.828256][T23784] process_scheduled_works+0xa8e/0x14e0 [ 1574.834320][T23784] worker_thread+0xa47/0xfb0 [ 1574.839427][T23784] kthread+0x388/0x470 [ 1574.844012][T23784] ret_from_fork+0x514/0xb70 [ 1574.849123][T23784] ret_from_fork_asm+0x1a/0x30 [ 1574.854405][T23784] [ 1574.854405][T23784] -> #4 (set->srcu){.+.+}-{0:0}: [ 1574.861580][T23784] __synchronize_srcu+0xc9/0x2f0 [ 1574.867067][T23784] elevator_switch+0x1e8/0x7b0 [ 1574.872414][T23784] elevator_change+0x2fa/0x480 [ 1574.877702][T23784] elevator_set_default+0x375/0x440 [ 1574.883422][T23784] blk_register_queue+0x3f3/0x4e0 [ 1574.889016][T23784] __add_disk+0x6cb/0xe30 [ 1574.893877][T23784] add_disk_fwnode+0xfb/0x4b0 [ 1574.899068][T23784] nbd_dev_add+0x733/0xb60 [ 1574.903996][T23784] nbd_init+0x15f/0x1e0 [ 1574.908763][T23784] do_one_initcall+0x250/0x870 [ 1574.914047][T23784] do_initcall_level+0x10a/0x1a0 [ 1574.919502][T23784] do_initcalls+0x59/0xa0 [ 1574.924345][T23784] kernel_init_freeable+0x29d/0x3e0 [ 1574.930054][T23784] kernel_init+0x1d/0x1d0 [ 1574.934896][T23784] ret_from_fork+0x514/0xb70 [ 1574.940001][T23784] ret_from_fork_asm+0x1a/0x30 [ 1574.945279][T23784] [ 1574.945279][T23784] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1574.953092][T23784] __mutex_lock+0x19d/0x1550 [ 1574.958203][T23784] elevator_change+0x1af/0x480 [ 1574.963498][T23784] elevator_set_none+0xb5/0x140 [ 1574.968882][T23784] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1574.975208][T23784] nbd_start_device+0x189/0xb30 [ 1574.980587][T23784] nbd_genl_connect+0x1597/0x1c10 [ 1574.986123][T23784] genl_family_rcv_msg_doit+0x233/0x340 [ 1574.992189][T23784] genl_rcv_msg+0x614/0x7a0 [ 1574.997206][T23784] netlink_rcv_skb+0x226/0x4a0 [ 1575.002483][T23784] genl_rcv+0x28/0x40 [ 1575.006998][T23784] netlink_unicast+0x7bb/0x940 [ 1575.012269][T23784] netlink_sendmsg+0x813/0xb40 [ 1575.017546][T23784] sock_sendmsg_nosec+0x13a/0x180 [ 1575.023088][T23784] ____sys_sendmsg+0x54e/0x850 [ 1575.028363][T23784] ___sys_sendmsg+0x2a5/0x360 [ 1575.033552][T23784] __x64_sys_sendmsg+0x1b1/0x290 [ 1575.039000][T23784] do_syscall_64+0x174/0x580 [ 1575.044103][T23784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.050506][T23784] [ 1575.050506][T23784] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1575.059106][T23784] blk_alloc_queue+0x544/0x690 [ 1575.064404][T23784] __blk_mq_alloc_disk+0x194/0x390 [ 1575.070024][T23784] nbd_dev_add+0x494/0xb60 [ 1575.074951][T23784] nbd_init+0x15f/0x1e0 [ 1575.079628][T23784] do_one_initcall+0x250/0x870 [ 1575.084906][T23784] do_initcall_level+0x10a/0x1a0 [ 1575.090356][T23784] do_initcalls+0x59/0xa0 [ 1575.095203][T23784] kernel_init_freeable+0x29d/0x3e0 [ 1575.100917][T23784] kernel_init+0x1d/0x1d0 [ 1575.105759][T23784] ret_from_fork+0x514/0xb70 [ 1575.110860][T23784] ret_from_fork_asm+0x1a/0x30 [ 1575.116137][T23784] [ 1575.116137][T23784] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1575.123340][T23784] fs_reclaim_acquire+0x71/0x100 [ 1575.128848][T23784] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1575.134732][T23784] __kernfs_iattrs+0xdd/0x380 [ 1575.139919][T23784] kernfs_iop_setattr+0xe6/0x3f0 [ 1575.145366][T23784] notify_change+0xbba/0xea0 [ 1575.150470][T23784] do_truncate+0x1c2/0x250 [ 1575.155458][T23784] path_openat+0x2fed/0x3830 [ 1575.160564][T23784] do_file_open+0x23e/0x4a0 [ 1575.165578][T23784] do_sys_openat2+0x115/0x200 [ 1575.170765][T23784] __x64_sys_openat+0x138/0x170 [ 1575.176124][T23784] do_syscall_64+0x174/0x580 [ 1575.181223][T23784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.187623][T23784] [ 1575.187623][T23784] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1575.196126][T23784] __lock_acquire+0x1520/0x2cf0 [ 1575.201487][T23784] lock_acquire+0x106/0x350 [ 1575.206499][T23784] down_write+0x96/0x200 [ 1575.211248][T23784] kernfs_link_sibling+0x4c7/0x5a0 [ 1575.216869][T23784] kernfs_add_one+0x1d2/0x5e0 [ 1575.222058][T23784] kernfs_create_dir_ns+0x1a1/0x230 [ 1575.227763][T23784] sysfs_create_dir_ns+0x12f/0x2a0 [ 1575.233393][T23784] kobject_add_internal+0x622/0xcd0 [ 1575.239165][T23784] kobject_add+0x163/0x240 [ 1575.244092][T23784] device_add+0x3fa/0xb80 [ 1575.248933][T23784] hci_conn_add_sysfs+0xd5/0x210 [ 1575.254542][T23784] hci_conn_complete_evt+0x8a8/0x1350 [ 1575.260480][T23784] hci_event_packet+0x6cd/0xf10 [ 1575.265841][T23784] hci_rx_work+0x3ee/0x1020 [ 1575.270851][T23784] process_scheduled_works+0xa8e/0x14e0 [ 1575.276911][T23784] worker_thread+0xa47/0xfb0 [ 1575.282017][T23784] kthread+0x388/0x470 [ 1575.286593][T23784] ret_from_fork+0x514/0xb70 [ 1575.291692][T23784] ret_from_fork_asm+0x1a/0x30 [ 1575.296971][T23784] [ 1575.296971][T23784] other info that might help us debug this: [ 1575.296971][T23784] [ 1575.307182][T23784] Chain exists of: [ 1575.307182][T23784] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1575.307182][T23784] [ 1575.321596][T23784] Possible unsafe locking scenario: [ 1575.321596][T23784] [ 1575.329028][T23784] CPU0 CPU1 [ 1575.334380][T23784] ---- ---- [ 1575.339740][T23784] lock(&root->kernfs_rwsem); [ 1575.344500][T23784] lock(cpuhp_state_mutex); [ 1575.351606][T23784] lock(&root->kernfs_rwsem); [ 1575.358885][T23784] lock(&root->kernfs_iattr_rwsem); [ 1575.364158][T23784] [ 1575.364158][T23784] *** DEADLOCK *** [ 1575.364158][T23784] [ 1575.372284][T23784] 4 locks held by kworker/u9:3/23784: [ 1575.377636][T23784] #0: ffff88807f367140 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1575.388604][T23784] #1: ffffc90003d5fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1575.400602][T23784] #2: ffff8880860000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1575.410431][T23784] #3: ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1575.420258][T23784] [ 1575.420258][T23784] stack backtrace: [ 1575.426134][T23784] CPU: 1 UID: 0 PID: 23784 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1575.426153][T23784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1575.426164][T23784] Workqueue: hci5 hci_rx_work [ 1575.426184][T23784] Call Trace: [ 1575.426190][T23784] [ 1575.426197][T23784] dump_stack_lvl+0xe8/0x150 [ 1575.426216][T23784] print_circular_bug+0x2e1/0x300 [ 1575.426238][T23784] check_noncircular+0x12e/0x150 [ 1575.426259][T23784] __lock_acquire+0x1520/0x2cf0 [ 1575.426278][T23784] ? __lock_acquire+0x683/0x2cf0 [ 1575.426298][T23784] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1575.426314][T23784] lock_acquire+0x106/0x350 [ 1575.426329][T23784] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1575.426350][T23784] down_write+0x96/0x200 [ 1575.426366][T23784] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1575.426382][T23784] ? __pfx_down_write+0x10/0x10 [ 1575.426396][T23784] ? kernfs_root+0x1c/0x230 [ 1575.426411][T23784] ? kernfs_root+0x1c/0x230 [ 1575.426424][T23784] ? kernfs_root+0x1c/0x230 [ 1575.426439][T23784] ? kernfs_root+0x1ea/0x230 [ 1575.426454][T23784] kernfs_link_sibling+0x4c7/0x5a0 [ 1575.426474][T23784] kernfs_add_one+0x1d2/0x5e0 [ 1575.426492][T23784] kernfs_create_dir_ns+0x1a1/0x230 [ 1575.426511][T23784] sysfs_create_dir_ns+0x12f/0x2a0 [ 1575.426535][T23784] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1575.426559][T23784] ? do_raw_spin_unlock+0xf5/0x210 [ 1575.426581][T23784] kobject_add_internal+0x622/0xcd0 [ 1575.426602][T23784] kobject_add+0x163/0x240 [ 1575.426620][T23784] ? __pfx_kobject_add+0x10/0x10 [ 1575.426638][T23784] ? get_device_parent+0x366/0x3a0 [ 1575.426658][T23784] device_add+0x3fa/0xb80 [ 1575.426675][T23784] hci_conn_add_sysfs+0xd5/0x210 [ 1575.426700][T23784] hci_conn_complete_evt+0x8a8/0x1350 [ 1575.426717][T23784] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1575.426740][T23784] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1575.426757][T23784] ? skb_pull_data+0xf0/0x200 [ 1575.426853][T23784] hci_event_packet+0x6cd/0xf10 [ 1575.426870][T23784] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1575.426886][T23784] ? __pfx_hci_event_packet+0x10/0x10 [ 1575.426903][T23784] ? audit_trim_trees+0x280/0x7e0 [ 1575.426924][T23784] ? hci_send_to_monitor+0xe2/0x590 [ 1575.426952][T23784] hci_rx_work+0x3ee/0x1020 [ 1575.426970][T23784] ? process_scheduled_works+0xa20/0x14e0 [ 1575.426992][T23784] process_scheduled_works+0xa8e/0x14e0 [ 1575.427022][T23784] ? __pfx_process_scheduled_works+0x10/0x10 [ 1575.427045][T23784] ? assign_work+0x3cf/0x5d0 [ 1575.427066][T23784] worker_thread+0xa47/0xfb0 [ 1575.427092][T23784] ? __kthread_parkme+0x71/0x1f0 [ 1575.427117][T23784] kthread+0x388/0x470 [ 1575.427133][T23784] ? __pfx_worker_thread+0x10/0x10 [ 1575.427153][T23784] ? __pfx_kthread+0x10/0x10 [ 1575.427169][T23784] ret_from_fork+0x514/0xb70 [ 1575.427187][T23784] ? __pfx_ret_from_fork+0x10/0x10 [ 1575.427203][T23784] ? __switch_to+0xc89/0x1420 [ 1575.427226][T23784] ? __pfx_kthread+0x10/0x10 [ 1575.427242][T23784] ret_from_fork_asm+0x1a/0x30 [ 1575.427266][T23784] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1575.801463][T31395] bridge0: port 3(syz_tun) entered blocking state [ 1575.808037][T31395] bridge0: port 3(syz_tun) entered disabled state [ 1575.814793][T31395] syz_tun: entered allmulticast mode [ 1575.821251][T31395] syz_tun: entered promiscuous mode [ 1575.863399][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15463'. [ 1576.046092][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15463'. [ 1576.059401][T20305] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.108679][T20305] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.144111][T20305] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.193288][T20305] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.429343][T20995] syz_tun (unregistering): left allmulticast mode [ 1576.489507][T30720] syz_tun (unregistering): left allmulticast mode [ 1576.501641][T30720] syz_tun (unregistering): left promiscuous mode [ 1576.508639][T30720] bridge0: port 3(syz_tun) entered disabled state [ 1576.572104][T20291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.648125][T20291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.698557][T20291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.749098][T20291] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.826759][T20291] bridge_slave_1: left allmulticast mode [ 1576.832570][T20291] bridge_slave_1: left promiscuous mode [ 1576.838607][T20291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.847434][T20291] bridge_slave_0: left allmulticast mode [ 1576.853100][T20291] bridge_slave_0: left promiscuous mode [ 1576.860433][T20291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.912690][T20291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1576.923722][T20291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.936156][T20291] bond0 (unregistering): Released all slaves [ 1577.222121][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1577.299753][T20291] hsr_slave_0: left promiscuous mode [ 1577.305990][T20291] hsr_slave_1: left promiscuous mode [ 1577.311810][T20291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.330541][T20291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.338479][T20291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.347141][T20291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.359619][T20291] veth1_macvtap: left promiscuous mode [ 1577.365328][T20291] veth0_macvtap: left promiscuous mode [ 1577.370882][T20291] veth1_vlan: left promiscuous mode [ 1577.377338][T20291] veth0_vlan: left promiscuous mode [ 1577.559901][T20291] team0 (unregistering): Port device team_slave_1 removed [ 1577.573700][T20291] team0 (unregistering): Port device team_slave_0 removed [ 1577.641825][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1577.933802][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1577.950609][T20291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1577.961105][T20291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.011431][T20291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.025083][T20291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.091747][T20291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.102222][T20291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.132251][T20291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.143207][T20291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.226116][T20291] bridge_slave_1: left allmulticast mode [ 1578.233863][T20291] bridge_slave_1: left promiscuous mode [ 1578.242993][T20291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.252123][T20291] bridge_slave_0: left allmulticast mode [ 1578.259657][T20291] bridge_slave_0: left promiscuous mode [ 1578.268378][T20291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.278356][T20291] dvmrp8: left allmulticast mode [ 1578.318384][T20291] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1578.328010][T20291] ip6gre1 (unregistering): left promiscuous mode [ 1578.358896][T20291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.369508][T20291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.381678][T20291] bond0 (unregistering): Released all slaves [ 1578.391032][T20291] bond1 (unregistering): Released all slaves [ 1578.400107][T20291] bond2 (unregistering): Released all slaves [ 1578.409839][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1578.587912][T20291] batman_adv: batadv0: Interface deactivated: wlan0 [ 1578.600788][T20291] batman_adv: batadv0: Removing interface: wlan0 [ 1578.658675][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1578.886586][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1579.100050][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1579.324954][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1580.246628][T20291] hsr_slave_0: left promiscuous mode [ 1580.252447][T20291] hsr_slave_1: left promiscuous mode [ 1580.259952][T20291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.267670][T20291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.275894][T20291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.283277][T20291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.296911][T20291] veth1_macvtap: left promiscuous mode [ 1580.302479][T20291] veth0_macvtap: left promiscuous mode [ 1580.308166][T20291] veth1_vlan: left promiscuous mode [ 1580.313414][T20291] veth0_vlan: left promiscuous mode [ 1580.420756][T20291] team0 (unregistering): Port device team_slave_1 removed [ 1580.432579][T20291] team0 (unregistering): Port device team_slave_0 removed