last executing test programs: 4.10437101s ago: executing program 1 (id=7374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x200}) r1 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 3.470126399s ago: executing program 1 (id=7381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="18000000000008000000000000000000711091000000000095000000000000005c93f137ac4d85c1e0e9f5be87de782bca89f2b430979b3efcc9e777f31afbdb67ac16b2997a9ebede6e822656967d96900f7b6a3af42f3160619982c320dc7cc0540a9601aea200aec5e5971ca784a456af0485a5a4d2b7a5df3be7368f8c5bb24b2eef568718886532bc9ee1cc6d02665b12f8dc57a5fba2f36e58f1f56a32edf61e1e350eda8aed67799dfe2dc1f50bd78b56f2d6e48ab27ded68053fd0a96b4a2a8909b14d5ca59a9126"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000000806b8aff02400"/20], 0x14}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001240)={{r0, &(0x7f0000000000)='\x00', 0x800, &(0x7f0000000080)={@align=0x1, {0x5, 0x80, 0xf, 0x5}}, 0x7ff, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x3}, {[0x0, 0x4000000, 0x4000, 0x8]}, 0x8, 0x1000, &(0x7f0000000240)=""/4096}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000001380)=0x3ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001340)={'rose0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001300)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001980)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="540202803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004009b5d00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="4000010024000100717565756533697c0000000000000000000000000000000000000000000000000500030003fbff00080004000500000008800600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x10}, 0x10000804) 3.064088408s ago: executing program 2 (id=7386): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) r1 = socket(0x1e, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) shutdown(r0, 0x2) 2.99242861s ago: executing program 1 (id=7387): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xf, 0x10}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x20000005, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 2.820384921s ago: executing program 2 (id=7389): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x60}, 0x48010) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 2.667644404s ago: executing program 4 (id=7390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e1e, 0x5, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x13}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4044815) 2.605440259s ago: executing program 0 (id=7391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000b80)=[{&(0x7f0000000140)=""/10, 0xa}, {0x0, 0x61}], 0x2, 0x7, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x100, 0x4, 0x10000, 0xfffffff7}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x581d}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x4, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) socket$netlink(0x10, 0x3, 0x0) (async) preadv(r0, &(0x7f0000000b80)=[{&(0x7f0000000140)=""/10, 0xa}, {0x0, 0x61}], 0x2, 0x7, 0x8000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x100, 0x4, 0x10000, 0xfffffff7}, &(0x7f00000000c0)=0x14) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x581d}, 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x4, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.514569555s ago: executing program 2 (id=7392): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a015f99cae6db01fdfeffffff00000000020000000900d601ac1414aa"], 0x18) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000300)={{r0, &(0x7f0000000000)='/8]\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0xbbce, 0x9]}, {0xfffb, 0xe7, 0x100, 0x8}}, 0x28000000, &(0x7f00000001c0), &(0x7f0000000200)=0x10}, 0x1, &(0x7f00000002c0)=[{0x1, 0x4, &(0x7f0000000240)='\b\x00', &(0x7f0000000280)="f55feba368e5250a7ecf5834c8742dd0e567c0bf298aeee6e00d5361636e493afcc57dad08b506c0d29a28de221521fe647fedc970d858f201885b", 0x3b, 0x32}]}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32=r15, @ANYBLOB="09000000060701955edf4fcc12a5e96ea28ae3b52a3af8b70ade2b5fa9b986fb6037e95295d30fef032dd683846a86171f551020cc28bc2054d35c21157398ee483a229a13b845ee8c1baae3906b9c2928b8d8445b2eb2abf6ab56a6dea4c08897a04d1bd004450b18c56d66ae7b75748ddb13c1c0c22618c6ccc71bb38a5c67275660342880f54cf3d4a89177fea2d1819f29538fbfefb50c98f4b535513c5bae08f1f5ad810e66e6975637611a288e2664dcf1319eec517bfa534ca858d902df16cedb3668f49a2c97ccc605ea00000000000000000000000000000084a08b70cb9745acab4a23f361b80c92cfa73a2e7dc7e32fd25ff5e86dcdfc8d4918dedd53c8a1f318d6dd6ce6ef510024f185eacd0e9850a0ed6b8ecc2cc37fdf2dc9920567c11a79317be873464bda3577a7fc4a738851ff3a7f3b23b014ee31b4138c4ca4a9cb4be1e5c256743fc8f854dd30f5008dfef51f1bb74192793c43d599e4f7d530ecd8f762f07e9150907cbe58063097f74cb2c0b44d31c81e709f15f2920d71e0fc67a9fd82f22435959712003db4247945cd139f614f4f378b0f48d1f12b01afab4d6da92de9a71f1db5c127da76303154e84b910721dae4474492462cbd4675e67df3af"]) close(0x3) close(0x4) 2.290303833s ago: executing program 1 (id=7394): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x4, 0x12) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0) 2.155702939s ago: executing program 3 (id=7395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008c813f28000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.069098632s ago: executing program 4 (id=7396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000002000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b7f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093c0b077000200000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000316b"], 0x134}}, 0x0) 2.052077629s ago: executing program 4 (id=7397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@delchain={0x24, 0x26, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x3}], 0x2, 0x40002320, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, 0x0, 0x20000004) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmmsg$alg(r6, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8d4}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0xef}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x4d, "5dccb17b87c84599456612b460d620dfcc9fc90f8d800efa3e786173a047aeebe5a50184a204100d22442eee48dbf78b6b5512c8a00cae12965b0d40e66b881f10055feff99ab652e7bace0e95"}], 0xb0, 0x80d4}, {0x0, 0x0, &(0x7f0000002b40), 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000003f80)=[{0x0}], 0x1, &(0x7f0000003fc0)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0xc1}], 0x4, 0x4000010) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, 0x0, 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x8930, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 1.965482076s ago: executing program 3 (id=7398): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', r1, 0x9, r0, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) 1.84514196s ago: executing program 0 (id=7399): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41041, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.735463782s ago: executing program 3 (id=7400): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2}}, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdc, @local, 0x1}, 0x1b, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff11"], 0x28, 0x7ffffff7}}], 0x1, 0x4040) 1.712673036s ago: executing program 0 (id=7401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRESDEC=r2, @ANYRESOCT=r0], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 1.681083287s ago: executing program 1 (id=7402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) connect$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x1}, 0x10) (async) connect$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000b40)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r5}, {0x4}}]}, 0x2c}}, 0x4000040) 1.439399266s ago: executing program 0 (id=7403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1401000036000100000000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="8ba98766577d", @void, {@llc={0x4, {@llc={0x42, 0x42, "bf", "80"}}}}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000040a030000000000000000000100001d08000540fffffffd"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.43897072s ago: executing program 3 (id=7404): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='*\x00', 0x2) 1.184768024s ago: executing program 2 (id=7405): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket(0x2b, 0x80801, 0x1) r5 = epoll_create(0x10000e9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000}) bind$bt_sco(r4, &(0x7f0000000180), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 1.079723672s ago: executing program 3 (id=7406): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) 1.001832276s ago: executing program 4 (id=7407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000ffffc900"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b7f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093c0b077000200000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000316b"], 0x134}}, 0x0) 855.753862ms ago: executing program 0 (id=7408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000a00050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) 854.414931ms ago: executing program 2 (id=7409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) 732.510171ms ago: executing program 3 (id=7410): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x3b, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x50, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x50}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r4], 0xfdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_SET_PMK(r11, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xbc, r9, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5e9a, 0x5a}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "db3591c1fc4c5be844a918b673f84b93"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e384f1569f6a2cc4ca529ba79e79b3b1"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "56c57cf9391c402b2df36ffa1eeb618e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "548c880e27ab135994d74eb32db19512"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "305a46432fcb89a4b7547f20fdfa51fc"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "96334f5192eff209d6a09f78f48ebfe8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc081}, 0x4008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xc4, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x1c}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0xc4}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xb5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40040c4) 702.16572ms ago: executing program 4 (id=7411): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendfile(r0, r1, &(0x7f0000000000)=0x8000000000000000, 0x8000000000000000) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000040)={0xfffffffa, 0x4, 0xfffffffffffffffa, 0x0, 0x7}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=@newpolicy={0x354, 0x13, 0x100, 0x70bd2a, 0x25dfdbfe, {{@in6=@local, @in=@empty, 0x4e22, 0x7, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x0, r3, r5}, {0x3fffc00000000, 0x7, 0x0, 0x800, 0x6, 0x8, 0x9, 0x8}, {0x8, 0x8d9, 0x8, 0x2}, 0xffffffd2, 0x0, 0x1, 0x1, 0x3, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}, @algo_auth_trunc={0xdb, 0x14, {{'blake2s-160-x86\x00'}, 0x478, 0x100, "34c35ea836c311c2ad0adb6b5946f82b691cbb972264473df01b2a51daeacc633eb7050795c70e26fe75f522c1cfc01602ac61490ec948a223f17d547e0a624fadc859395dcf1003a93b95b0ef0776b1afcee2fe3b91813764da36c9ff6bf8745b2cd74e774caffc28fdbf83f4809546bf65cc0a061f64c47d9b816f13805d50430f4329b09dfba96f8bfb40f836ee"}}, @algo_crypt={0x115, 0x2, {{'ecb-serpent-avx\x00'}, 0x668, "ce05f29c2c6c4ad51a49224deda8410ff339508c1417041088c2518c323132d2f680ff057f2223ce283ce116194313fa5dcf875ddb5487c89e6e7bbd264f6f92b9f1152176389946edab6938356f9e6cabe306d1d3f54a21b9c72805f143ded76a25c17b33b21c80a8e3551b2eb3da586528e65fb820e60d8bc9fbf68431ef166f382d693934726d9bfb499d728263455c43edff89240bb9520dfb4256beff37dc60c14f3d0bf8c1ab22cd931db84cd507662d456d2cbf7136b28ef58b00c032cea45125823f9b6400f17894d7"}}, @lastused={0xc, 0xf, 0x100000000}, @mark={0xc, 0x15, {0x350759, 0x4}}, @algo_crypt={0x53, 0x2, {{'ctr-twofish-avx\x00'}, 0x58, "43303de8efed7fb9b0dc6d"}}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@empty, 0x2, 0x8, 0x1}}]}, 0x354}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000680)={&(0x7f0000000640)=[{0x4, 0x2, 0x0, {0x0, 0xed, 0x2}}, {0x4, 0x1, 0x0, {0xe, 0x3db, 0x1}}], 0x2, 0x20, 0x100, 0x4}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x20800, 0x0) write$ppp(r6, &(0x7f0000000700)="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", 0xfa) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000940)={r6, &(0x7f0000000840)='#[-%\x00', 0x543800, &(0x7f0000000880)={@_ha_fsid={[0x8]}, {0x6, 0x1, 0x1, 0x69}}, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x7fff}) splice(r2, &(0x7f0000000800)=0x4, r7, &(0x7f0000000980)=0xe2, 0x6, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r7, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000a80), 0x3) write$cgroup_devices(r7, &(0x7f0000000ac0)={'c', ' *:* ', 'rwm\x00'}, 0xa) openat$cgroup_procs(r7, &(0x7f0000000b00)='cgroup.procs\x00', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0xa) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r11) sendmsg$ETHTOOL_MSG_EEE_GET(r9, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r12, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044811}, 0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r11, 0xc4089434, &(0x7f0000000cc0)={0x0, 0x617, 0x0, [0x9, 0xfffffffffffffffb, 0xa1, 0x9, 0x1], [0x6, 0x7, 0x3, 0x1000, 0x6f, 0x8, 0x9c50, 0x7f, 0x5, 0x4, 0x9, 0x3, 0x9, 0xaf4, 0x5dea, 0xffffffffffffffff, 0x10, 0x0, 0x9, 0x6, 0x7f800000000, 0x18d0, 0xed, 0x101, 0x9, 0x1, 0x785, 0x2, 0x2, 0x2, 0xfffffffffffffeff, 0x5, 0x0, 0xe, 0x4, 0x1, 0x4, 0x6ec, 0x7, 0x7, 0xfffffffffffffff9, 0x1, 0x2, 0x6, 0x8, 0xfffffffffffffffb, 0x0, 0x7fffffffffffffff, 0x6f1, 0x0, 0x3, 0x2, 0x10001, 0x0, 0x5, 0x2, 0x6, 0x2, 0xffffffff00000001, 0x7fffffffffffffff, 0x7fffffff, 0x7, 0x33d, 0x8, 0x9, 0x4b, 0x6, 0x0, 0xf, 0x5, 0x10000, 0x19, 0x101, 0x4, 0x5, 0x7, 0x2, 0x4, 0x5, 0x9, 0x10, 0x9, 0x80000001, 0x7, 0x9, 0xb9, 0x90a, 0x5, 0x1, 0xd, 0x280, 0x0, 0x6, 0x9a9, 0x6, 0x9, 0x8, 0x10000, 0x1b, 0xe0, 0xb16, 0x2a, 0x10000, 0xd, 0x400, 0x5, 0x1, 0x7, 0xab1, 0x6, 0x4, 0x2, 0x8000000000000000, 0x5f8, 0x1, 0x100000000, 0x8, 0x7fffffffffffffff, 0x2, 0x5, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000001100)={0x0, 0x6, 0x9}) ioctl$BTRFS_IOC_BALANCE_V2(r13, 0xc4009420, &(0x7f0000001500)={0x10, 0x1, {0x9, @usage=0x7, 0x0, 0x6, 0x9, 0xf1e6, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x2, @usage=0x4, 0x0, 0x8000, [0x7, 0x3, 0x3, 0x101, 0xd, 0xfff]}, {0x361, @struct={0x10001, 0x7}, r14, 0x2, 0x6, 0x7ff, 0x6a2c, 0x3, 0x15, @struct={0x6, 0xffff0905}, 0x9, 0x190a01f7, [0x152, 0x7, 0xffffffffffffffff, 0x4, 0x8, 0x800000000000000]}, {0x1, @struct={0x9, 0x3}, r15, 0x9, 0x8c5, 0x1, 0x8000000000000001, 0x7f, 0x494, @struct={0x0, 0xf}, 0x9, 0x7, [0x80000000, 0x6, 0x8, 0x5, 0x2, 0x4]}, {0x3, 0xa, 0x8}}) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000001b00)={&(0x7f0000001900), 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x144, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xf0, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc94f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc133}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x58}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004}, 0x20048800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001c00)={'ip6gre0\x00', &(0x7f0000001b80)={'ip6gre0\x00', r8, 0x2f, 0xff, 0x0, 0x7, 0x22, @remote, @mcast2, 0x8, 0x40, 0x377, 0xc0}}) 534.496668ms ago: executing program 0 (id=7412): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r1}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 256.917122ms ago: executing program 1 (id=7413): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r3, &(0x7f0000003040)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) pipe(0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_generic(r4, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f00000004c0)={0x10e8, 0x34, 0x200, 0x70bd26, 0x25dfdbfe, {0x10}, [@generic="0eb69c521696302c39f306f1cde84bc439d60f52f809dfb78d46841eb11d214da48f984c43ad6e5e83ae95bd4f", @generic="dcc0ad92e58989650c061300c384b464100bbfe7d8b39433e29f09c5a0af0ead9c84560c070d42c052e25f0205e4e44b0681f172c4641c174b948071", @nested={0x1067, 0x100, 0x0, 0x1, [@generic="93dc2182998dc6c447cf99d8031d4167a71ee540b7996e94cd5120eae9f2cc5ad413ef347a77722da2cdb6", @generic="35ff90e10deee46614ddd9ef7e3af34ec3947a1e3ead3dabf9897ae6fe019460427d2003d330890323145288697fb5ba", @generic="77747ebbfa53967b75f624ff5be87c0e79737ff57fecc69850e2ccae4cd10703b49b06cb0a75600a94e20120008acace048066ccf3d66ffec64a1827633c4193afb6441603f06bd41d4ba429c9e0116915b83fdaa696919692ea2d57a88e88579fd7b89307541a1f56a132139cc7a9243e6785ed8ce372fdcc1e8503ba2b55abf5f4578b8cd03f94ea1bfdd20974954847948feb2a861478e1adbfbc71b3f747c0d66ab507316c2ccd864597399dffadb5d6a048692c726d70c7a64d86f5c1cbf6b9b590042b42fdc761b5eb45885acb72b2f5dfd4ef4cc1e55aabdff19090b4173de09ec36c306a15d361ba868e5a8f765d3b862a81fe822337927c8a9fc596759a8bddc7c709ce3b9ec3a6ff7df1e494637d3ab861dc412f06bf268973b1603d2d2dc2007d7ba94562f6c28d44689006e94e94a50b6dac15853494f5e58f3aff10eebc548b885fcfb57ee320cbafff89662c263f305451c922f8ef21a0b1ff2dd2f422b4a2aeb033a7ae24c2816b18872b6fa2f670322ce6831fbef0d1263c326021617e821081b369719c9aea578e9efbe62573d894796bf96ef6dce82c238ecbb340094bd3b80779fa0269df127af55693baac0e6e49ed7b182b20c3030bb3c8d664cc1d9183782fae7e001a28a36aff7f563f13d9df811d6dbcf98748acadd2b5fac3b83b5343d6cd6f440da7db4997aec52cb6e2ce0bb2bf77b3b12236b0f9f7c94defc8cd1bfb3bafbdf146e47bb651254c5c955bee2688b573595105d3c9ddf5ace503a9f723d8ef5c8803926e2c1193d6de576b288055448622bf87cfb427f98d2f8653ab161a95d67306930e309af2df69dd11c84e6a38e3c7ad27730722277ad5abc947ed2154d89eae2a72acc7730e7a3afe920056fbf6c9851fb38df77917567ac70fe7a32048bb9f2bbd992c1537ee80d6cccb91d5d8db7e0745e311e916deacb2c40f2237d6ee5241dbcea559d79be266a235d1a391f137b151aee99a0fc62ec5ea1f8eb4f3cae8417339b563473e1b5ea1fd3369aa56c51d98c18a0c277fa7c3fa7ff076318ecf90403dbddf80d8311c0003923e233b5568b2b44db6f799e3b0545149f915b25fd80c514160f5c05c3995c148c1a57fbc3d9e314656508e595cbca411cd3dcd24c4b8c9a9b2e4f8a7e904a203ca7fec3d1acf4fcad50006496d3e893adcd3e0b135e50b3a527a8cb1a98b3e93a4349c097c2e990d62bae83718b08bf46ab6d5ab428af141db885716dbcf0713aac789ffec57a06fc8f18a247f6189c2e43f5f5a8b0901219c858403904d447c9906d8f69e3cac5581a1c04d4f8c4aaeb1a088db076e710a51196a3075d5bdff44d887ee7f14d0f05afb854b150e51599324fc09bedcc050df0b41f314480add7f8619071aa1959a34e658c0cec81399cd5402e464197ee7fde4bbf812bc6975cd5f5eb25e5bf37ec62b54903896fb05fc1e35b64bbe456efac566e2d02c6d7c6abc18bd13a0e3b50d7e8743d469434049dbcd22273c1d878669296edb7a29610a55867ad2966dc36c6a1f4beabfd21248d727c886b17e15f78be2d5551ffe01ee8df616622fdcd48841435acda4c6ee50957b8084337fbe5abe5043263e384167c308da7f0b68e6eec08c010effa8f66f32cb1c6d18693346a649f54c00b6cd4806fee6293f31fbafcb0cd8afa667d9530c0c6c04cfd69e35ea7ed1169ef78392794eaf4f0f90998426c5347863f712d8e387b2612cdb44ffd43584dd15644c505da91cbd4cd33a6836860903fceb2a263b2545c4b3ceabd222672f8c9a59e872a9d20a2a482b68fddc916ebd22dfa14cbbb1a08e2c014d55610eba336d679e97ed56e607f9a7e07ec0f32bccf0bb226f35a55a314c5647fd4c99e5e5d29cadeb9fa1ebbbe9c629ae0510ed685a6ba093992416ba10544d43459c3c4ced521135832c8f7a3bff340c906f9329a668f717a0ecce23b3713dca489e7def8fed8893d052b81eb579d50fe917ad00cb50067f35e8cc9348b41acbe6687505b10272765c70e5ebbce33f344df0b634d63b92a129b834cb357a83763c7db563ed390b0def15899a9edc39591e229781a29261396725903940516b21db3da0047f77a1da61e2730a019ba33689f8b5e566d8498cafb73525bf6e70bfed3a165647798430ff31c48171094f4c9270b6bbd7490b89fa84da789c527c81670d07447b222479d3a931b45e1d5b49daad23c984c7fbc393f714c3c84a86ecbfb40873d6ce3aa8893dbffcc6e68b2d550c68adf86b6a02ed8406053ad0c40e6afd23aad2d03800f14b8271ae8e1b7998d5d4d348f34e2f6a39774dc0aaf9f9737240bf9723d3b4305eff6f06697fbc518b73e633cf366361f279f43c3d003e3957f327292c5b5b05afbb63000c2185eb325235d8c34b4a9e25f7976ad2dacb162245d532d72920973f1a64a80902c5b9964a5a29db8aa188709abc195d37f7a96249d6bae3fa244142a59ca2263f2caedc4b9fac76e7d4a57d508c7435e24a7f7f45b69b34214f8b96e17556ba1e3ccbc5e9bdbe21cc913d6b369358103f3acb648654b25adb84d7aad3ea0935d6a3469b856a3b8dfa0700850a5e8fa21c307f5e8a392ed117596db0b4619602b2bd72c9b8055f01f576cece0173ca71b8ae9484990207e1de13d5f8ae4e31a2cda1a0d9bb458a731cf3b291d9af73fbe37c875308423ae68a3c85514171f5a028baed9e3f307ab99309598a8f4cc54e66cb5637704583e0bbd5054dae62bb66eb054f26c04d93cabff5801c69cbb74e4f6621277f4087e9f9ce762da032969ede6a3aaa4bec3e29efc90d6563ced5e5d44a633786d948b16e5af3408f5036ef6c200f57621427c1622f0c0ed5ed50bcf2269423e2fca21fed43448b690d6fb3692f3b35b31bf12ed64a07bf6116f0da305ab98128d7f7c92ebca7c605d57091695d5c62e528e7139443aa67e4133b7457b2e0e69f05e1dc685bea74900bfa33d9a6293443f112775dc710a2d674cf07c29ff7891f007ee431f4a79250737d1abd4b1e4b3f714b126ad898af704aa1ae2335afa71d3667aeecef9de34538cdcf44be29ab1c8d0a36aa1e349a1409bb7c8de86ff61216ffb5611c4619865632517cbbd8bee568b1ede3a9590b52e8337f74560372d0921ecbcab141038d1859d3c7e83cf5fac734d6196408ee7b60dc909851dd7a69e20f12de1f280dd5693754a125d5d71db9a97e15d04d6d35cb8d362ea578027f8c41821c68dfc772d6fa7241dd59e759bac0ed698b693b23d3df497e7f51810be5f31b4f6e8a22230920f29feaf103dc52b2826ab72c41831f32a78913bfa539a00ce238d6854f04863a7ba1058f2c864c7bc8b10ed93a000440dc7e58256eebdf2633c6e85df1182d2eee438e64e047dd214a756e5fde25a883bc5488afa4a0f2cc279742826c9a798078516ad0351158c462b6ed75a741d5dbeaffc31db4e54a5f228f17cee9fcab0c6d3900b127fb7117f42b30eb488c51c7ebff114072c1ec4a8f00b8a1085a848a0021142fbfb85a063abf7c421bb201143d4f4f3b453835aebf129fb5495f7001044a86f01cabe49ca31b37a9b7599ab89e20f75d461ca09a64541b1dfcd0f032793c7ecc3850125600789d8449932a244ad96205d928e0a3babce0b9096eba72beb4b8299c6d4a0fe2e45dd4edf1f9eff43d032178dd240421dd5ef8bc91b90f9fc8986a21ba60616f1245e45b3d54422ca235297128296c690cf69943476fb7a90bb98ed88adc0efd7dcea8bf0808075f49fc108db73ea750061c3465b3953aec19b0eb95cd8806606a41a9677fd6eed72a3251703af3352dbda06105b33b09b49028f861a6f7c1bde9a0baa45dcbb2ce0c318ad028795648e9d3c23cbb096b85371d5c80e40cffb56898671152fb32ae35d0bc4df52009f22a5c60885380d058fb79fb58d2436c58dd4639c9531aed8eedb97c0233ab99febf6151300d8cec345af9b643afce8d7d0dae2770e40370a7d03ff19dca6edd21b1b9a01261ecfdec32155800a05cb6bc1ec4cf35694b4a0a109133937f7d5ced010d6ba957284e901a13da3f3186a31af12acc2d881fef3d45409beaaefbe37ed7f10c563137c78309fb1d822be916d6f47532bc1726b935295c3a99be7ef75e6b08f1ccc928fba64a3b00ede06ac11207335eb785e53cc300d9562436d96a3e37ef90aeedba518fdcb95ed7bdb6bce63b97db610af418870cb597e341cd2b88a64792d2d28bbaf65d7111d1ae4ac4ccb649b1e7e53ec6bf0ee6c2fc72b03496f7eb04018bd37383180605cea5ba82c0e0a004a25e2e6acf1c192ee1a23265fb6fac2f35755f87268e9ee177744aa0c42eaba9de81d578eb459a6c7730f95d8e35aeb682f46f0391bcfffea9f7d1a89d9ef4d45313752a4d3c6d5a91354f1bc95bd40d2ea66a50959100aedf771b207725abc4c4440fc76f887759f7e0ccebf8360f279d1dba982cbb1178ebfc04fc5b1b5c3aa0815681a0e50fd54563cfa3d2b7ae7ea07789e46dee53f9a8e4cd61dcbb3ff6e2c5b81c39aa6cb3dd12e58c9e71ffeff0719485055c6bfb108598487c831b4bce032fe7f4c5052a8700291fc8ddd5db22d1c19d23419b8e22c04fcba9574e069adbd9eb03f26dffc910559acbe8ebae657d1f2bdf70f97c908579119ed7a15284d779aa9eb5697640c1dae7406141a6b7de67e3faf8157ad5d864ef4e9c29518c01272e9457186f0af1ca938998f0e764e8ed5baf09a21b50842fafc5269dc0097e261d3962784df4c901c4d3f9fe7d27d3e4ce26c738c52dd4a2a7f910959e604893f93d4f0d03e18a101ae0d977dcd251304421693eba09c56d49f8a65e7f0ba08d61686bacae435ada26ae14bc6f9b8d7e42b3b63e0f75a21a8cc19686e3e8ebc194f4ff21e7792540bb63e926e84d0b1449374c84ace464b5007dc93d2d770f61d2ca45f755a90c6816206e90727c05cab2f1efe288567017ff143e0f92f2498af6c77f7b354ca0b8ae36b1481acfc3d780353ef25ae034d168a2fe47a3344bbae22bb9c71eb269efb7488e684f3f3f29088657144133f67ec123d83ca3b0abf6eff0b090f9bba303ed95962efc2318bb1d8b0669ea1e54b69649d24ad8cca3aead6995cb9e8e01b8c5a6b12b9f4bdcf1aa353f6746f2ae4cc1a473fda0db563db4ea3ff5196860399e17a63fcb13c0d0ba88db3085782c2ad5488c83555da8c91b89bcd5b6ea0222fb7fa75de0747aa41e1d686a56a6140277c4a2e80f8311b7cb7f2111cf44c5bee3e896a4b489533b5625f5ae015e9545b8e10eaeeb2d5dd283d1aea67b8cb04fad368df0da4a32a78d8edbbde252ad08c4327ca830f4d2866b9800c428eb2614e9b6c3bdb0097c2ef8e51b7923191a02946a76a72be088e0102aa2f1d06cc5c06fd9a2ee3714c9d0bf3e96b4d8a44ab26c3a64d937526e261dce8c829b415d16469ef8b35f74714919308b3fb2b90b6eac44e49cc9d7fd03bf10f90633fa74ee817f3581af55ecce8e1e63125c240713569d4703b077c486905f9fb5a708cd968c23e519b57f433938ad00b9cbf1cd4f883a41f7cccc3aee6511a14b3b7742bfb46e3873e83d4b0378252bd7263a1ab2e8221d67665e9a98dd8096b55e20a7d8d671c32010e367dfdd92b7e73ea3e66cb8f37e3405fd1c4d79a633f88f8b6faf269258ea813d5da1f3ed1069af40f9fa4854940cfb7bd79310f83b8a013c2cd4b6d8eeec44bd72153a21d70f3acb05b2d6803da6a59ccb1023f70602f2495ad5657e915ff436f4d1", @nested={0x4, 0x162}, @nested={0x4, 0xfe}]}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x10}, 0x880) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) 200.853951ms ago: executing program 4 (id=7414): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="065b83a69fdbc9de4f56d1a2ff63d53c7ab75e2feaad7c811cf7a7868369bba70e5d9414933f85751be274676f62ca65e60923a23ced485ff163ddbbd6a3f6fd19df2105f9f9a838525d12", 0x4b, 0x8000, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x6400c846}, 0xc0088d1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x29c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8c4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x8, 0x3, 0x348}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x7, 0x5, 0x6, 0x9}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0x0, 0x3, 0x1, 0x100}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000041}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x80}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000) sendto$inet6(r3, &(0x7f00000007c0)="4cdd7aa2ee76ef8d10e0c9e5f77a46eb57004f07495835aff42bc0e9f518b6a1ddb3d24204151a9df4a1e30333a35f3e2a1ac70eec1164df9682f4cb8d0a6dd9332b04db5cd1db2171308531c3b56f55d060e2545a10db81bb525d8234313c62784f71a6fc98c222cda3a274306ea65981d35885e99c18074a4186329a99db7dbf4d06f33da086cfb5281fb690248fe16f64ea0504fddc8329dc460aa1cd3eefc82c495c367ab5eab9a40ce7b155ae99009a20f7150eb4", 0xb7, 0x80, &(0x7f0000000880)={0xa, 0x4e22, 0x2, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x100010, r0, 0x4fb48000) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000008c0)={'icmp6\x00'}, &(0x7f0000000900)=0x1e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r0) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9a13c64372f7bc8239768ddf188bb6fa5147d4ba807dfd31f7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x80) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r5) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000b40)={r5, 0x5, 0x3, 0x7fffffff}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000b80)={0x41, 0x2}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000010c0)={{r0, &(0x7f0000000bc0)='TIPCv2\x00', 0x84000, &(0x7f0000000c00)={@align=0x9, {0x4, 0x3, 0x4, 0x1}}, 0x601, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x7}, 0x4, &(0x7f0000001040)=[{0x0, 0x4, &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)="5119c20d73145632c1d856ba05abd3f5b2f5fa810f60701845437a524e02ab34a7356650313f9514e1122b4ffdc784659bce23d4bb6e87c04b7e41b4b0bae556fbef2699b5b7fae099a30bb6266b3d74488a3b642c6d2e7c8b45fe5f581aefe7325d0be33a5e877d0dd9da1549bb94d750cc12955488d518d9321aeaefdffd783201c889fa868efc9c49ee396ed7ca3d4d0e232f2747e2f16d5976b32dab002ac1ffedb91455ae26650742b4b277", 0xae, 0x10}, {0x3, 0x5, &(0x7f0000000dc0)='\x00', &(0x7f0000000e00)="9b4f977387c46cb873b4c387da41dbe20a5b35c350c902f53e3912d919817d3b78b6ebebe14fb7da377a2f2dd3981fd9afc502a98e79311de08aa82503e9feb55ea039de4d86373f60e068e824896b48911751fc09016f255d818b51448f1405fb6f07bd7d0454fce2adbd63912a652ef16b8dc84f5248138da8f30c1a6214d8e2d0184439a7578f93e0a903526b0c2c8a2c5b8aeda1", 0x96, 0x8}, {0x3, 0x9, &(0x7f0000000ec0)='devlink\x00', &(0x7f0000000f00)="c3dc2dd33ca3f378ff38514f2728ad6eee6d6de16ee5a36943914e447345e02e62d7b9fb6c7855681211", 0x2a, 0x20}, {0x1, 0x2, &(0x7f0000000f40)='gcm(aes)\x00', &(0x7f0000000f80)="0e2df09fcf42f62b45172f45e9b68b97287dd2b9fce8412317dcb3d20c9b57f3aed4d9e5d344fc6cdefb6495856a9f45afe026f560eb16441d48e1abb121c2f24bef2526e728da821182ab5f2105c9cd37a2eaac93bc46d7b1df43d6b44d37070635f7446f852e4e4b0cbef46609da736299b623433d60d8e11d43ad3b3eeee6442a625d7269de6f0171fa101d3bbe01008e2acbc70a75b9a041b6d1ce53b379dd6887a18ae2e7db57546c2d19a09f", 0xaf, 0x18}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@cgroup=r8, 0x8, 0x1, 0x1fbb, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x6c, 0x2, 0x3, 0x100, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x21}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x21}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x20004010) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f00000013c0)={'veth1_virt_wifi\x00'}) getpeername$packet(r8, &(0x7f0000001440)={0x11, 0x0, 0x0}, &(0x7f0000001480)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xbc, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000800}, 0x40080) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x29}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc084}, 0x8010) 0s ago: executing program 2 (id=7415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e24, @multicast1}}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff010000005000110000000000000000000000000000000000fe8000000000000000000000000000bbe00000020000000000000000000000000000000000000000000000000000000000000000ff34000002000a00"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): v_slave_0 [ 924.387123][T25281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.410996][T25281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.433493][T25281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.486461][T25281] team0: Port device geneve1 removed [ 924.518861][T25281] bond2: (slave geneve2): Releasing active interface [ 924.571907][T25281] bond4: (slave veth3): Releasing active interface [ 924.606592][T25281] bond5: (slave geneve3): Releasing active interface [ 924.641426][T25281] bond8: (slave bridge2): Releasing backup interface [ 924.660254][T25281] bond12: (slave gretap1): Releasing active interface [ 924.672966][T25281] bond0: (slave vti0): Releasing backup interface [ 924.680407][T25281] vti0: left promiscuous mode [ 924.713855][T25282] team0: Port device xfrm0 added [ 924.723745][T25289] tipc: Enabled bearer , priority 0 [ 924.776742][T20114] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 924.831451][T20114] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 924.931629][T20114] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 924.972844][T20114] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 925.014290][T25318] bond0: entered allmulticast mode [ 925.036164][T25318] bond_slave_1: entered allmulticast mode [ 925.089916][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5545'. [ 925.294592][T25329] net_ratelimit: 11 callbacks suppressed [ 925.294626][T25329] openvswitch: netlink: IP tunnel dst address not specified [ 925.362353][T25329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.520495][T25337] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 926.089534][T25361] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 926.190899][T25361] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 926.246326][T25361] gretap2: entered promiscuous mode [ 926.259523][T25361] gretap2: entered allmulticast mode [ 926.574653][T25387] openvswitch: netlink: Missing valid actions attribute. [ 926.592207][T25387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.851961][T25400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5570'. [ 926.882987][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5570'. [ 927.038888][T25418] bond14: entered promiscuous mode [ 927.065792][T25418] bond14: entered allmulticast mode [ 927.631388][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.673376][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.723652][T25445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.726980][T25444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.829643][T25456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.026404][T25463] netlink: 'syz.4.5589': attribute type 11 has an invalid length. [ 928.062177][T25463] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5589'. [ 928.366971][T25484] tipc: Enabled bearer , priority 10 [ 928.428274][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5597'. [ 928.722785][T25498] netlink: 'syz.4.5601': attribute type 1 has an invalid length. [ 928.959551][T25498] 8021q: adding VLAN 0 to HW filter on device bond7 [ 929.049187][T25510] 8021q: adding VLAN 0 to HW filter on device bond8 [ 929.059955][T25510] bond7: (slave bond8): Enslaving as an active interface with a down link [ 929.450697][T25527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5608'. [ 929.466906][T25528] netlink: 'syz.3.5607': attribute type 12 has an invalid length. [ 929.508081][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 929.570502][T25528] bond6: option primary_reselect: invalid value (255) [ 929.593025][T25528] bond6 (unregistering): Released all slaves [ 929.711562][T25532] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 930.001673][T25552] netlink: 'syz.4.5615': attribute type 1 has an invalid length. [ 930.018753][T25552] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5615'. [ 930.089249][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5616'. [ 930.698299][T25575] netlink: 'syz.2.5625': attribute type 2 has an invalid length. [ 930.837078][T25579] netlink: 'syz.3.5626': attribute type 1 has an invalid length. [ 930.925793][T25579] 8021q: adding VLAN 0 to HW filter on device bond6 [ 930.992125][T25581] vlan1: entered promiscuous mode [ 931.037777][T25581] bond6: entered promiscuous mode [ 931.066773][T25581] vlan1: entered allmulticast mode [ 931.098080][T25581] bond6: entered allmulticast mode [ 931.213135][T25579] bond6: (slave bridge6): making interface the new active one [ 931.221451][T25579] bridge6: entered promiscuous mode [ 931.227975][T25579] bridge6: entered allmulticast mode [ 931.251892][T25579] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 931.558747][T25600] netlink: 'syz.0.5630': attribute type 2 has an invalid length. [ 931.703024][T25608] syzkaller0: entered promiscuous mode [ 931.709468][T25608] syzkaller0: entered allmulticast mode [ 931.774017][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5633'. [ 931.789168][T25616] netlink: 'syz.3.5633': attribute type 1 has an invalid length. [ 931.800191][T25616] netlink: 'syz.3.5633': attribute type 2 has an invalid length. [ 931.845838][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5636'. [ 936.047185][T25642] sock: sock_timestamping_bind_phc: sock not bind to device [ 936.079195][T25647] x9: renamed from bridge_slave_0 (while UP) [ 936.402688][T25672] netlink: 'syz.4.5647': attribute type 1 has an invalid length. [ 936.447864][T25660] syzkaller0: entered promiscuous mode [ 936.454617][T25660] syzkaller0: entered allmulticast mode [ 936.483312][T25663] tipc: Enabled bearer , priority 0 [ 936.506582][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 936.525786][T25660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5647'. [ 940.217954][T25676] tipc: Disabling bearer [ 945.155468][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.795692][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 987.306762][T25702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5656'. [ 987.356395][T25702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 987.363729][T25702] IPv6: NLM_F_CREATE should be set when creating new route [ 987.663427][T25727] xt_hashlimit: size too large, truncated to 1048576 [ 987.723719][T25732] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 987.733530][T25730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5665'. [ 988.142004][T25743] netlink: 'syz.3.5669': attribute type 61 has an invalid length. [ 988.540354][T25756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5672'. [ 988.603275][T25756] netlink: 'syz.1.5672': attribute type 10 has an invalid length. [ 988.615294][T25756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5672'. [ 988.645979][T25756] team0: entered allmulticast mode [ 988.671960][T25756] xfrm0: entered allmulticast mode [ 988.708127][T25756] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 988.946190][T25772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5674'. [ 989.496721][T25787] netlink: 'syz.4.5678': attribute type 29 has an invalid length. [ 989.539901][T25786] tipc: Enabled bearer , priority 0 [ 989.588598][T25786] syzkaller0: entered promiscuous mode [ 989.605074][T25786] syzkaller0: entered allmulticast mode [ 989.751050][T25796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5681'. [ 989.770278][T25786] tipc: Resetting bearer [ 989.813518][T25786] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 989.864745][T25785] tipc: Resetting bearer [ 989.971699][T25785] tipc: Disabling bearer [ 989.996065][T25804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5684'. [ 990.017299][T25805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5685'. [ 990.606389][T25834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1014.655281][T25848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5697'. [ 1014.832745][T25855] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1015.113510][T25873] netlink: 'syz.4.5704': attribute type 1 has an invalid length. [ 1015.177172][T25868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1015.238364][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1015.239281][T25879] netlink: 'syz.2.5702': attribute type 11 has an invalid length. [ 1015.282684][T25878] netlink: 'syz.1.5706': attribute type 30 has an invalid length. [ 1015.326351][T25879] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1015.351582][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1015.383222][T25883] netlink: 'syz.1.5706': attribute type 30 has an invalid length. [ 1015.517534][T25885] vlan2: entered allmulticast mode [ 1015.522729][T25885] bond0: entered allmulticast mode [ 1015.529159][T25885] bond_slave_0: entered allmulticast mode [ 1015.535345][T25885] team0: entered allmulticast mode [ 1015.540660][T25885] team_slave_0: entered allmulticast mode [ 1015.547052][T25885] team_slave_1: entered allmulticast mode [ 1015.610472][T25887] sit1: entered promiscuous mode [ 1015.620969][T25887] sit1: entered allmulticast mode [ 1015.683784][T25885] netlink: 'syz.0.5707': attribute type 23 has an invalid length. [ 1015.864805][T25891] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1015.967438][T25891] bond4 (unregistering): Released all slaves [ 1016.609583][T25935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1016.912047][T25943] netlink: 'syz.4.5723': attribute type 1 has an invalid length. [ 1016.922617][T25940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1016.943120][T25943] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5723'. [ 1017.173306][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5725'. [ 1017.657862][T25977] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5729'. [ 1018.106528][T25995] sctp: [Deprecated]: syz.4.5736 (pid 25995) Use of int in max_burst socket option deprecated. [ 1018.106528][T25995] Use struct sctp_assoc_value instead [ 1018.197335][T26004] sit0: entered promiscuous mode [ 1018.233061][T26004] netlink: 'syz.0.5737': attribute type 1 has an invalid length. [ 1018.444460][T26013] netlink: 'syz.2.5741': attribute type 5 has an invalid length. [ 1018.575215][T26021] vlan3: entered promiscuous mode [ 1018.585203][T26021] gretap0: entered promiscuous mode [ 1018.756467][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1018.790094][T26031] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 1018.896680][T26035] lo speed is unknown, defaulting to 1000 [ 1018.932204][T26035] lo speed is unknown, defaulting to 1000 [ 1018.948320][T26035] lo speed is unknown, defaulting to 1000 [ 1019.246056][T26012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.400696][T26052] netlink: 'syz.1.5754': attribute type 1 has an invalid length. [ 1019.634217][T26035] infiniband sz1: set down [ 1019.643259][ T8073] lo speed is unknown, defaulting to 1000 [ 1019.653458][T26035] infiniband sz1: added lo [ 1019.708352][T26035] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1019.725820][T26035] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1019.803262][T26035] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1019.885229][T26035] RDS/IB: sz1: added [ 1019.893388][T26035] smc: adding ib device sz1 with port count 1 [ 1019.917617][T26035] smc: ib device sz1 port 1 has no pnetid [ 1019.938828][ T8073] lo speed is unknown, defaulting to 1000 [ 1019.958819][T26035] lo speed is unknown, defaulting to 1000 [ 1019.977983][T26075] __nla_validate_parse: 7 callbacks suppressed [ 1019.978005][T26075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5760'. [ 1020.021270][T26075] netlink: 'syz.1.5760': attribute type 4 has an invalid length. [ 1020.757253][T26101] syzkaller0: entered promiscuous mode [ 1020.784983][T26101] syzkaller0: entered allmulticast mode [ 1020.818039][T26101] netlink: 'syz.3.5770': attribute type 3 has an invalid length. [ 1021.013826][T26035] lo speed is unknown, defaulting to 1000 [ 1022.000752][T26145] bond9: Removing last arp target with arp_interval on [ 1022.014177][T26148] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1022.042143][T26035] lo speed is unknown, defaulting to 1000 [ 1022.232838][T26159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1022.491666][T26163] syzkaller1: entered promiscuous mode [ 1022.516900][T26163] syzkaller1: entered allmulticast mode [ 1022.653868][T26035] lo speed is unknown, defaulting to 1000 [ 1022.660696][T26167] syzkaller0: entered promiscuous mode [ 1022.671861][T26167] syzkaller0: entered allmulticast mode [ 1023.039051][T26194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1023.063905][T26196] netlink: 'syz.1.5799': attribute type 1 has an invalid length. [ 1023.414727][T26208] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5803'. [ 1023.474046][T26208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5803'. [ 1023.689091][T26035] lo speed is unknown, defaulting to 1000 [ 1023.902759][T26228] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1023.944368][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5810'. [ 1023.977389][T26232] netlink: 'syz.4.5810': attribute type 1 has an invalid length. [ 1024.010155][T26232] netlink: 'syz.4.5810': attribute type 2 has an invalid length. [ 1024.354408][T26035] lo speed is unknown, defaulting to 1000 [ 1024.449924][T26250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1024.768717][T26262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1024.802272][T26262] tipc: Resetting bearer [ 1024.853224][T26262] bond0: (slave team0): Releasing backup interface [ 1024.911846][T26262] tipc: Resetting bearer [ 1024.936347][T26262] bond0: Destroying bond [ 1025.005844][T26262] bond0 (unregistering): Released all slaves [ 1025.034723][T26262] tipc: Disabling bearer [ 1025.058202][T26262] team0 (unregistering): Port device xfrm0 removed [ 1025.093188][T26267] lo speed is unknown, defaulting to 1000 [ 1025.102278][T26267] lo speed is unknown, defaulting to 1000 [ 1025.122436][T26267] lo speed is unknown, defaulting to 1000 [ 1025.157464][T26267] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1025.174829][T26267] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1025.213886][T26267] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1025.257444][T26267] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 1025.358599][T26267] lo speed is unknown, defaulting to 1000 [ 1025.366576][T26267] lo speed is unknown, defaulting to 1000 [ 1025.374399][T26267] lo speed is unknown, defaulting to 1000 [ 1025.387014][T26267] lo speed is unknown, defaulting to 1000 [ 1025.394773][T26267] lo speed is unknown, defaulting to 1000 [ 1025.403153][T26267] lo speed is unknown, defaulting to 1000 [ 1026.110608][T26296] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1027.098024][T26237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1027.629082][T26324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5838'. [ 1027.639009][T26328] netlink: 'syz.0.5839': attribute type 1 has an invalid length. [ 1027.650936][T26328] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5839'. [ 1027.903910][T26338] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 1027.944513][T26342] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1027.954326][T26344] netlink: 'syz.1.5844': attribute type 1 has an invalid length. [ 1027.979006][T26344] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5844'. [ 1028.017248][T26338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5842'. [ 1028.377676][T26364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5848'. [ 1029.431057][T26405] sit0: entered promiscuous mode [ 1029.437392][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5859'. [ 1029.457109][T26406] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1029.517240][T26405] netlink: 'syz.3.5860': attribute type 1 has an invalid length. [ 1029.544260][T26405] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1029.756361][T26413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1029.810879][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1030.711200][T26460] netlink: 'syz.2.5873': attribute type 1 has an invalid length. [ 1031.238537][T24841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1031.269494][T24841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1031.280563][T24841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1031.292248][T24841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1031.302142][T24841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1032.704441][T26538] netlink: 'syz.4.5892': attribute type 1 has an invalid length. [ 1032.713616][T26538] __nla_validate_parse: 3 callbacks suppressed [ 1032.713638][T26538] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5892'. [ 1032.750425][T26476] xfrm0 speed is unknown, defaulting to 1000 [ 1032.943993][T26541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1033.107833][T26547] 8021q: VLANs not supported on ip_vti0 [ 1033.402666][T24841] Bluetooth: hci2: command tx timeout [ 1033.492871][T26558] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1033.545546][T26558] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1033.566806][T26558] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1033.586654][T26558] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1033.606337][T26558] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1033.640301][T26558] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1033.663675][T26564] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5902'. [ 1033.692268][T26565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5904'. [ 1033.911632][T26567] netlink: 'syz.4.5905': attribute type 1 has an invalid length. [ 1033.953221][T26476] xfrm0 speed is unknown, defaulting to 1000 [ 1033.982951][T26476] lo speed is unknown, defaulting to 1000 [ 1034.345596][T26588] bond4: entered promiscuous mode [ 1034.456937][T26593] macvlan3: entered promiscuous mode [ 1034.488963][T26593] macvlan3: entered allmulticast mode [ 1034.527820][T26593] bond4: (slave macvlan3): Opening slave failed [ 1034.647635][T26476] lo speed is unknown, defaulting to 1000 [ 1034.971265][T26615] tipc: New replicast peer: 255.255.255.255 [ 1034.991302][T26615] tipc: Enabled bearer , priority 10 [ 1035.021849][T26614] tipc: Enabling of bearer rejected, already enabled [ 1035.378223][T26630] IPVS: set_ctl: invalid protocol: 0 172.20.20.67:20003 [ 1035.404508][T26628] netlink: 'syz.2.5918': attribute type 1 has an invalid length. [ 1035.476372][T24841] Bluetooth: hci2: command tx timeout [ 1035.613256][T26642] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1035.670226][T26643] netlink: 'syz.2.5921': attribute type 21 has an invalid length. [ 1035.792680][T26646] netlink: 'syz.0.5923': attribute type 1 has an invalid length. [ 1035.822146][T26647] netlink: 'syz.0.5923': attribute type 1 has an invalid length. [ 1035.892225][T26646] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1035.928501][T26648] ip_vti0: entered promiscuous mode [ 1035.939348][T26646] netlink: 'syz.0.5923': attribute type 1 has an invalid length. [ 1036.027744][T26646] bond5: (slave veth0_to_bond): Releasing active interface [ 1036.081557][T26476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.088898][T26476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.096721][T26476] bridge_slave_0: entered allmulticast mode [ 1036.105458][T26476] bridge_slave_0: entered promiscuous mode [ 1036.118606][T26476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.126007][T26476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.133333][T26476] bridge_slave_1: entered allmulticast mode [ 1036.141899][T26476] bridge_slave_1: entered promiscuous mode [ 1036.222394][T26576] tipc: Node number set to 2915204777 [ 1036.450974][T26476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.490160][T26476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.506071][T26671] netlink: 'syz.4.5930': attribute type 1 has an invalid length. [ 1036.746936][T26476] team0: Port device team_slave_0 added [ 1036.801601][T26476] team0: Port device team_slave_1 added [ 1036.833143][T26680] ip_vti0: left promiscuous mode [ 1036.866989][T26680] sit0: left promiscuous mode [ 1036.879652][T26680] syz_tun: left promiscuous mode [ 1036.900612][T26680] syz_tun: left allmulticast mode [ 1037.565511][T24841] Bluetooth: hci2: command tx timeout [ 1037.581060][T26680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.608660][T26680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.637316][T26680] bond11: left promiscuous mode [ 1038.652813][T26680] gretap2: left promiscuous mode [ 1038.670779][T26680] gretap2: left allmulticast mode [ 1038.731260][T26680] vlan2: left allmulticast mode [ 1038.744970][T26680] bond0: left allmulticast mode [ 1038.767790][T26680] bond_slave_0: left allmulticast mode [ 1038.787405][T26680] team0: left allmulticast mode [ 1038.800257][T26680] team_slave_0: left allmulticast mode [ 1038.815568][T26680] team_slave_1: left allmulticast mode [ 1038.852209][T26687] netlink: 'syz.4.5933': attribute type 4 has an invalid length. [ 1038.985065][T22986] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.019139][T22986] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.067814][T22986] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.113940][T22986] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.191586][T22986] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.204273][T22986] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.271406][T22986] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.321900][T22986] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.370218][T26722] __nla_validate_parse: 38 callbacks suppressed [ 1039.370238][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1039.550981][T26476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.597885][T26476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.651070][T24841] Bluetooth: hci2: command tx timeout [ 1039.699196][T26476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.733593][T26476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.743610][T26476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.770920][T26476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.802793][T26721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1039.951748][T26476] hsr_slave_0: entered promiscuous mode [ 1039.979777][T26476] hsr_slave_1: entered promiscuous mode [ 1040.002724][T26476] debugfs: 'hsr0' already exists in 'hsr' [ 1040.033582][T26476] Cannot create hsr debugfs directory [ 1040.442487][T26762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5947'. [ 1041.117519][T26476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.170356][T26476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.393068][T26779] netlink: 'syz.2.5950': attribute type 12 has an invalid length. [ 1041.608909][T26476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.642812][T26476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.689976][T26792] bond0: Master is either lo or non-ether device [ 1041.833056][T26476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.851875][T26476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.909889][T26797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1042.047219][T26804] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5955'. [ 1042.444611][T26476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.469042][T26476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.521449][T26814] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1042.742457][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1042.765333][T26820] netlink: 'syz.1.5959': attribute type 6 has an invalid length. [ 1042.802162][T26820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1042.860727][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1042.883609][T26820] netlink: 'syz.1.5959': attribute type 6 has an invalid length. [ 1042.892333][T26820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1044.858927][T26797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.892655][T26476] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1044.940066][T26476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.020183][T26476] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1045.074514][T26476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1045.137484][T26476] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1045.149380][T26476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1045.159515][T26476] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1045.181370][T26476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.249219][T26847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.299876][T26858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1047.940508][T26841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1047.954175][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'. [ 1047.965761][T26852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'. [ 1048.113684][T26870] xt_ipcomp: unknown flags 1D [ 1048.350248][T26882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5974'. [ 1048.609768][T26476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.635621][T26894] netlink: 'syz.1.5977': attribute type 1 has an invalid length. [ 1048.656866][T26476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.781754][T26894] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1048.803251][T26901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1048.892007][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.899277][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.954608][T26910] netlink: 'syz.2.5979': attribute type 1 has an invalid length. [ 1048.998927][T26910] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5979'. [ 1049.047045][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.054267][ T7606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.472831][T26921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.502215][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5985'. [ 1049.552739][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5985'. [ 1049.663929][T26927] syzkaller0: entered promiscuous mode [ 1049.695671][T26927] syzkaller0: entered allmulticast mode [ 1049.836489][T26931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.858290][T26932] netlink: 'syz.4.5986': attribute type 1 has an invalid length. [ 1049.888380][T26932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.898331][T26934] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 1051.001397][T26476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.039667][T26983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1051.088375][T26984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5997'. [ 1051.108775][T26983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1051.215823][T26988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 1051.247331][T26983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1051.282338][T26983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1051.332554][T26476] veth0_vlan: entered promiscuous mode [ 1051.494055][T26476] veth1_vlan: entered promiscuous mode [ 1051.734732][T26476] veth0_macvtap: entered promiscuous mode [ 1051.773233][T26476] veth1_macvtap: entered promiscuous mode [ 1051.850582][T26476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.932925][T26476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.963523][T22983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.976961][T27015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1051.989285][T22983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.014445][T22983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.057711][T22983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.274514][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6009'. [ 1052.411397][T27028] openvswitch: netlink: nsh attr 11 is out of range max 3 [ 1052.421810][T27028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.474585][T27031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6013'. [ 1052.486521][T27031] openvswitch: netlink: Flow actions attr not present in new flow. [ 1052.504166][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.528105][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.594010][T27031] netlink: 'syz.2.6013': attribute type 11 has an invalid length. [ 1052.636936][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.686058][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.027591][T27047] xt_hashlimit: overflow, rate too high: 0 [ 1053.499368][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1053.514641][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1053.528502][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1053.539887][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1053.548352][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1054.374309][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6031'. [ 1054.957650][T27062] xfrm0 speed is unknown, defaulting to 1000 [ 1055.193995][T27122] syzkaller0: entered promiscuous mode [ 1055.209252][T27122] syzkaller0: entered allmulticast mode [ 1055.635147][T24841] Bluetooth: hci5: command tx timeout [ 1055.786348][T27062] xfrm0 speed is unknown, defaulting to 1000 [ 1055.839294][T27062] lo speed is unknown, defaulting to 1000 [ 1056.151697][T27161] __nla_validate_parse: 3 callbacks suppressed [ 1056.151728][T27161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1056.350100][T27168] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1056.393666][T27171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6051'. [ 1056.409873][T26571] IPVS: starting estimator thread 0... [ 1056.415556][T27171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6051'. [ 1056.422555][T27172] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6053'. [ 1056.525089][T27173] IPVS: using max 24 ests per chain, 57600 per kthread [ 1056.619768][T27062] lo speed is unknown, defaulting to 1000 [ 1057.352468][T27206] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6063'. [ 1057.673842][T27062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.690132][T27062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.698593][T27062] bridge_slave_0: entered allmulticast mode [ 1057.707157][T27062] bridge_slave_0: entered promiscuous mode [ 1057.715679][T24841] Bluetooth: hci5: command tx timeout [ 1057.734531][T27227] sit0: entered promiscuous mode [ 1057.760771][T27227] netlink: 'syz.3.6067': attribute type 1 has an invalid length. [ 1057.789892][T27227] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6067'. [ 1057.803442][T27062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.822369][T27062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.838735][T27062] bridge_slave_1: entered allmulticast mode [ 1057.857464][T27062] bridge_slave_1: entered promiscuous mode [ 1057.951488][T27062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.982600][T27062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.264796][T27062] team0: Port device team_slave_0 added [ 1058.333355][T27062] team0: Port device team_slave_1 added [ 1058.376519][T27062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.383758][T27062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.411098][T27062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.424034][T27062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.431417][T27062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.463439][T27062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.547143][T27062] hsr_slave_0: entered promiscuous mode [ 1058.566012][T27062] hsr_slave_1: entered promiscuous mode [ 1058.572511][T27062] debugfs: 'hsr0' already exists in 'hsr' [ 1058.585294][T27062] Cannot create hsr debugfs directory [ 1058.877490][T27062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.889415][T27062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.036812][T27062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.048620][T27062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.082284][T27260] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6076'. [ 1059.229456][T27062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.249516][T27062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.357991][T27062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.369156][T27062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.795363][T24841] Bluetooth: hci5: command tx timeout [ 1060.309828][T27207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.421472][T27062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1060.533570][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1060.574691][T27062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1060.658009][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1060.724265][T27062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1060.764104][T27277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1060.842051][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1060.877225][T27062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1060.902361][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1060.928853][T27272] vti0: entered allmulticast mode [ 1060.935779][T27279] netlink: 'syz.3.6083': attribute type 1 has an invalid length. [ 1060.943819][T27279] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6083'. [ 1061.008308][T27282] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1061.250193][T27291] tipc: Started in network mode [ 1061.270383][T27291] tipc: Node identity ffffffffffffff7f0a, cluster identity 4711 [ 1061.467453][T27062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.623132][T27062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.685171][T22978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.692428][T22978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.877004][T24841] Bluetooth: hci5: command tx timeout [ 1061.944980][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.952133][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.087700][T27314] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1062.575537][T22982] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.604433][T22982] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.614550][T22982] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.645763][T22982] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.389575][T27359] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 1063.424121][T27361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1063.623446][T27374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6108'. [ 1063.699689][T27062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.763045][T27062] veth0_vlan: entered promiscuous mode [ 1063.779345][T27062] veth1_vlan: entered promiscuous mode [ 1063.837037][T27062] veth0_macvtap: entered promiscuous mode [ 1063.848008][T27062] veth1_macvtap: entered promiscuous mode [ 1063.885923][T27062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.924486][T27062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.943951][ T7606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.953973][ T7606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.967033][ T7606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.977798][ T7606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.343846][T27358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1066.576587][T22986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.637352][T22986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.782469][T22982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.820555][T22982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.312142][T27409] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6120'. [ 1067.350696][T27409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6120'. [ 1067.416909][T27402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1067.558913][T27418] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6121'. [ 1067.603611][T27414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6120'. [ 1067.901990][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1067.931241][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1067.945702][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1067.966935][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1067.975721][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1067.985325][T27407] xfrm0 speed is unknown, defaulting to 1000 [ 1068.166131][T27437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6123'. [ 1069.194604][T27457] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1069.306033][T27407] xfrm0 speed is unknown, defaulting to 1000 [ 1069.394427][T27407] lo speed is unknown, defaulting to 1000 [ 1069.473984][T27460] netlink: 'syz.2.6129': attribute type 1 has an invalid length. [ 1069.525641][T27460] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6129'. [ 1069.653445][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1069.739341][T27424] xfrm0 speed is unknown, defaulting to 1000 [ 1069.911838][T27475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6134'. [ 1070.036078][ T50] Bluetooth: hci4: command tx timeout [ 1070.420590][T27485] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1070.726759][T27407] lo speed is unknown, defaulting to 1000 [ 1070.861608][T27424] xfrm0 speed is unknown, defaulting to 1000 [ 1070.898252][T27494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6140'. [ 1070.903533][T27424] lo speed is unknown, defaulting to 1000 [ 1071.258292][T27503] rdma_op ffff88804ea6a9f0 conn xmit_rdma 0000000000000000 [ 1071.267656][T27498] netlink: 'syz.0.6141': attribute type 6 has an invalid length. [ 1071.722596][T27513] Cannot find del_set index 4 as target [ 1071.952775][T27424] lo speed is unknown, defaulting to 1000 [ 1072.116087][ T50] Bluetooth: hci4: command tx timeout [ 1072.368872][T27523] netlink: 'syz.0.6148': attribute type 1 has an invalid length. [ 1072.459871][T27531] __nla_validate_parse: 7 callbacks suppressed [ 1072.459891][T27531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1072.964495][T27541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.015583][T27543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1073.078697][T27543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1073.257991][T27541] xt_cgroup: xt_cgroup: no path or classid specified [ 1074.058324][T27424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.068725][T27424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.078458][T27424] bridge_slave_0: entered allmulticast mode [ 1074.088940][T27424] bridge_slave_0: entered promiscuous mode [ 1074.174579][T27424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.206627][ T50] Bluetooth: hci4: command tx timeout [ 1074.222116][T27424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.237762][T27424] bridge_slave_1: entered allmulticast mode [ 1074.257813][T27424] bridge_slave_1: entered promiscuous mode [ 1074.304700][T27424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.359744][T27424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.529551][T27424] team0: Port device team_slave_0 added [ 1074.565132][T27577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6164'. [ 1074.580742][T27424] team0: Port device team_slave_1 added [ 1074.662398][T27424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.670562][T27424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.707191][T27424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.721357][T27424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.767264][T27424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.831533][T27586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6168'. [ 1074.855426][T27587] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6166'. [ 1074.859930][T27424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.949285][T27590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1075.121971][T27595] netlink: 'syz.1.6171': attribute type 11 has an invalid length. [ 1075.171235][T27424] hsr_slave_0: entered promiscuous mode [ 1075.182653][T27595] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6171'. [ 1075.215392][T27424] hsr_slave_1: entered promiscuous mode [ 1075.222511][T27424] debugfs: 'hsr0' already exists in 'hsr' [ 1075.255596][T27424] Cannot create hsr debugfs directory [ 1075.261134][T27596] netlink: 'syz.2.6169': attribute type 1 has an invalid length. [ 1075.278996][T27597] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6171'. [ 1075.860276][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6177'. [ 1076.230539][T27424] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.246499][T27424] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.275733][ T50] Bluetooth: hci4: command tx timeout [ 1076.655677][T27424] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.698417][T27424] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.957689][T27424] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.992934][T27424] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.068479][T27424] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.090186][T27424] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.519480][T27666] __nla_validate_parse: 3 callbacks suppressed [ 1077.519506][T27666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6193'. [ 1078.414485][T27424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1078.450466][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.467975][T27683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6198'. [ 1078.477820][T27424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1078.510364][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.591653][T27424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1078.604093][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.618502][T27424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1078.666630][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.864575][T27696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1078.992318][T27424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.133999][T27424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.201551][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.208848][ T7606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.273570][T22986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.280864][T22986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.610215][T27715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6206'. [ 1079.630591][T27714] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6207'. [ 1079.893413][T27721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6210'. [ 1079.929296][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6212'. [ 1079.947416][T27721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6210'. [ 1079.963339][T27728] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6209'. [ 1080.267910][T27735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6215'. [ 1081.284415][T27765] syzkaller0: entered promiscuous mode [ 1081.290809][T27765] syzkaller0: entered allmulticast mode [ 1081.948909][T27801] netlink: 'syz.1.6233': attribute type 1 has an invalid length. [ 1086.476289][T27813] __nla_validate_parse: 3 callbacks suppressed [ 1086.476305][T27813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6235'. [ 1086.509998][T27424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.835253][T27820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1086.893004][T27827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1087.024040][T27830] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1087.791142][T27424] veth0_vlan: entered promiscuous mode [ 1087.887833][T27823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6238'. [ 1087.899647][T27424] veth1_vlan: entered promiscuous mode [ 1087.963341][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6247'. [ 1087.991938][T27424] veth0_macvtap: entered promiscuous mode [ 1088.062526][T27424] veth1_macvtap: entered promiscuous mode [ 1088.147017][T27424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.228935][T27862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6249'. [ 1088.255011][T27424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.302163][ T7611] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.341223][ T7611] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.393815][ T7611] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.530142][T22986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.938849][T22986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.007852][T22986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.123206][T27867] syzkaller1: entered promiscuous mode [ 1089.174430][T27867] syzkaller1: entered allmulticast mode [ 1089.528730][T19775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.581835][T19775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.507159][T27918] netlink: 'syz.1.6260': attribute type 1 has an invalid length. [ 1090.526046][T27919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1090.548854][T27918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1090.595389][T27918] netlink: zone id is out of range [ 1090.643086][T27918] netlink: zone id is out of range [ 1090.705917][T27918] netlink: zone id is out of range [ 1090.735328][T27918] netlink: zone id is out of range [ 1090.775129][T27918] netlink: zone id is out of range [ 1090.808350][T27918] netlink: zone id is out of range [ 1090.849120][T27918] netlink: zone id is out of range [ 1090.871540][T27918] netlink: zone id is out of range [ 1090.901743][T27918] netlink: zone id is out of range [ 1091.481568][T24841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1091.497219][T24841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1091.508750][T24841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1091.527120][T24841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1091.536955][T24841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1091.737691][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1092.011725][T27960] Unsupported ieee802154 address type: 0 [ 1093.069911][T27994] netlink: 'syz.2.6285': attribute type 1 has an invalid length. [ 1093.103122][T27994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1093.131437][T27939] xfrm0 speed is unknown, defaulting to 1000 [ 1093.206727][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6286'. [ 1093.435954][T28002] team1: entered promiscuous mode [ 1093.497338][T28002] team1: entered allmulticast mode [ 1093.636943][T24841] Bluetooth: hci0: command tx timeout [ 1094.013278][T28018] syzkaller0: entered promiscuous mode [ 1094.031845][T28018] syzkaller0: entered allmulticast mode [ 1094.063855][T27939] xfrm0 speed is unknown, defaulting to 1000 [ 1094.097757][T27939] lo speed is unknown, defaulting to 1000 [ 1094.493154][T27939] lo speed is unknown, defaulting to 1000 [ 1095.716021][T24841] Bluetooth: hci0: command tx timeout [ 1096.454990][T28009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1096.758484][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6296'. [ 1097.797910][T24841] Bluetooth: hci0: command tx timeout [ 1099.752364][T28042] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1099.877946][T24841] Bluetooth: hci0: command tx timeout [ 1100.583559][T27939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.591152][T27939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.599204][T27939] bridge_slave_0: entered allmulticast mode [ 1100.610638][T27939] bridge_slave_0: entered promiscuous mode [ 1100.643258][T27939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.690459][T27939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.720478][T27939] bridge_slave_1: entered allmulticast mode [ 1100.751187][T27939] bridge_slave_1: entered promiscuous mode [ 1100.959817][T27939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.003112][T28093] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6309'. [ 1101.038410][T27939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.069952][T28092] netlink: 'syz.3.6308': attribute type 1 has an invalid length. [ 1101.081095][T28092] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6308'. [ 1101.092227][T28096] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 1101.272813][T27939] team0: Port device team_slave_0 added [ 1101.299846][T27939] team0: Port device team_slave_1 added [ 1101.462699][T27939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.473696][T27939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.501755][T27939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.650277][T27939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.687502][T27939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.787641][T27939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.009190][T28121] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1102.146542][T27939] hsr_slave_0: entered promiscuous mode [ 1102.161947][T27939] hsr_slave_1: entered promiscuous mode [ 1102.184577][T27939] debugfs: 'hsr0' already exists in 'hsr' [ 1102.199616][T27939] Cannot create hsr debugfs directory [ 1103.697436][T28183] x_tables: duplicate underflow at hook 1 [ 1103.951945][T28191] sctp: [Deprecated]: syz.4.6341 (pid 28191) Use of int in max_burst socket option. [ 1103.951945][T28191] Use struct sctp_assoc_value instead [ 1104.540347][T28185] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1104.580990][T27939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1104.645952][T27939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.682348][T27939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1104.714642][T27939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.736785][T27939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1104.762410][T27939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.774012][T27939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1104.797849][T27939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.891903][T28219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6347'. [ 1104.948488][T28219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6347'. [ 1105.120347][T28224] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6350'. [ 1105.140802][T27939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.184533][T27939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.242842][T22983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.250134][T22983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.306271][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.313539][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.639313][T28238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6354'. [ 1105.799343][T24841] Bluetooth: hci0: command 0x0401 tx timeout [ 1106.092193][T28255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6361'. [ 1106.176855][T28246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.631168][T28271] netlink: 'syz.1.6363': attribute type 3 has an invalid length. [ 1106.656151][T28271] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6363'. [ 1106.857290][T28281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6365'. [ 1106.965471][T28288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6369'. [ 1107.312193][T28297] netlink: 'syz.2.6370': attribute type 1 has an invalid length. [ 1107.379738][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6372'. [ 1107.402264][T28297] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1107.495085][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6372'. [ 1107.612213][T28305] bond5: (slave geneve3): making interface the new active one [ 1107.663063][T28305] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1107.787922][T27939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.219389][T27939] veth0_vlan: entered promiscuous mode [ 1108.279481][T27939] veth1_vlan: entered promiscuous mode [ 1108.300565][T28326] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6380'. [ 1108.311849][T28326] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6380'. [ 1108.382687][T27939] veth0_macvtap: entered promiscuous mode [ 1108.433068][T27939] veth1_macvtap: entered promiscuous mode [ 1108.530600][T27939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.612564][T27939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.730279][T22986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.761638][T22986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.781779][T22986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.812337][T22986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.149285][T22982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.182418][T22982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.374508][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.401555][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.465436][T28347] tipc: Enabling of bearer rejected, media not registered [ 1109.804023][T28358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6390'. [ 1110.138593][T28380] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6395'. [ 1110.755701][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 1110.835043][T28396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6401'. [ 1111.017114][T24841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1111.033798][T24841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1111.043743][T24841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1111.054738][T24841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1111.063721][T24841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1111.201794][T28406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1112.367919][T28400] xfrm0 speed is unknown, defaulting to 1000 [ 1112.549063][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6408'. [ 1112.703745][T28400] xfrm0 speed is unknown, defaulting to 1000 [ 1112.712290][T28400] lo speed is unknown, defaulting to 1000 [ 1112.786686][T28362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1113.132428][T28439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1113.141122][T28442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6410'. [ 1113.165352][T24841] Bluetooth: hci3: command tx timeout [ 1113.190497][T28439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1113.208618][T28442] syz_tun: entered allmulticast mode [ 1113.305767][T28442] pimreg: entered allmulticast mode [ 1113.311824][T28400] lo speed is unknown, defaulting to 1000 [ 1113.349919][T28438] syz_tun: left allmulticast mode [ 1113.601256][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1113.651685][T28458] net_ratelimit: 1 callbacks suppressed [ 1113.664598][T28458] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 1114.251079][T28477] bond0: (slave bond_slave_1): Releasing backup interface [ 1114.338772][T28482] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.539804][T28489] bond1: entered promiscuous mode [ 1114.545166][T28489] bond1: entered allmulticast mode [ 1114.550833][T28489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.649341][T28400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.657061][T28400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.664730][T28400] bridge_slave_0: entered allmulticast mode [ 1114.700406][T28400] bridge_slave_0: entered promiscuous mode [ 1114.734010][T28400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.773881][T28400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.794500][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6425'. [ 1114.812990][T28400] bridge_slave_1: entered allmulticast mode [ 1114.824566][T28400] bridge_slave_1: entered promiscuous mode [ 1114.964740][T28400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.014016][T28400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.245561][T24841] Bluetooth: hci3: command tx timeout [ 1115.310242][T28400] team0: Port device team_slave_0 added [ 1115.406719][T28400] team0: Port device team_slave_1 added [ 1115.634417][T28400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.681631][T28400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.816723][T28400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.930792][T28400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.946063][T28400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.013223][T28539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6435'. [ 1116.031380][T28400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.135865][T28539] vlan2: entered promiscuous mode [ 1116.172817][T28539] gretap0: entered promiscuous mode [ 1116.428208][T28547] netlink: 'syz.1.6438': attribute type 1 has an invalid length. [ 1116.461823][T28400] hsr_slave_0: entered promiscuous mode [ 1116.469209][T28547] netlink: 'syz.1.6438': attribute type 3 has an invalid length. [ 1116.477284][T28400] hsr_slave_1: entered promiscuous mode [ 1116.478765][T28400] debugfs: 'hsr0' already exists in 'hsr' [ 1116.493856][T28400] Cannot create hsr debugfs directory [ 1116.499773][T28547] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6438'. [ 1116.553416][T28549] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6438'. [ 1116.657112][T28557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6441'. [ 1116.823227][T28557] team1: entered promiscuous mode [ 1116.829222][T28557] team1: entered allmulticast mode [ 1117.293527][T28579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.326346][T24841] Bluetooth: hci3: command tx timeout [ 1117.373958][T28579] bridge_slave_0 (unregistering): left allmulticast mode [ 1117.433518][T28579] bridge_slave_0 (unregistering): left promiscuous mode [ 1117.463694][T28579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.222282][T28400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.257120][T28400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.533197][T28613] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1118.584912][T28613] netlink: 'syz.4.6453': attribute type 1 has an invalid length. [ 1118.781736][T28607] batadv0: entered promiscuous mode [ 1118.823083][T28607] macsec1: entered promiscuous mode [ 1118.854391][T28607] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1118.895286][T28607] batadv0: left promiscuous mode [ 1119.060553][T28623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6456'. [ 1119.153248][T28623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6456'. [ 1119.225065][T28400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.240041][T28400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.397930][T24841] Bluetooth: hci3: command tx timeout [ 1119.590565][T28400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.652879][T28400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.737827][T28639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1120.114492][T28400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.127923][T28400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.284760][T28660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6463'. [ 1120.417918][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6465'. [ 1120.573171][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6466'. [ 1120.816552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.035496][T28679] pim6reg1: entered promiscuous mode [ 1121.056466][T28679] pim6reg1: entered allmulticast mode [ 1121.083949][T28686] netlink: 'syz.0.6468': attribute type 1 has an invalid length. [ 1121.153746][T28686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6468'. [ 1121.415208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.790405][T28709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6476'. [ 1122.156627][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1122.185425][T22986] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.185762][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1122.199563][T22986] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.239381][T22986] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.260818][T22986] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.360568][T28665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1123.378731][T28400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1123.449795][T28400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1123.513651][T28400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1123.624437][T28400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1123.671134][T28400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1123.742772][T28400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1123.754186][T28727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6483'. [ 1123.780481][T28400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1123.783975][T28727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6483'. [ 1123.842104][T28733] Bluetooth: MGMT ver 1.23 [ 1123.854470][T28400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1123.939582][T28735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.951413][T28735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.003738][T28735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.027529][T28735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.169583][T28734] syzkaller0: entered promiscuous mode [ 1124.175932][T28734] syzkaller0: entered allmulticast mode [ 1129.241952][T28767] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1129.272689][T28767] syzkaller0: entered promiscuous mode [ 1129.292291][T28767] syzkaller0: entered allmulticast mode [ 1129.356097][T28767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6494'. [ 1129.424935][T28773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6497'. [ 1129.450387][T28771] set match dimension is over the limit! [ 1129.619896][T28400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.684547][T28400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.738967][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.746225][ T7602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.796374][T22982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.803628][T22982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.100362][T28792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1130.136394][T28792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1130.352053][T28797] netlink: 'syz.4.6504': attribute type 21 has an invalid length. [ 1130.528763][T28800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6505'. [ 1131.433827][T28826] xt_hashlimit: size too large, truncated to 1048576 [ 1131.687408][T28827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1131.749439][T28830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1132.448868][T28400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.743986][T28400] veth0_vlan: entered promiscuous mode [ 1132.867884][T28400] veth1_vlan: entered promiscuous mode [ 1133.009208][T28868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.054769][T28400] veth0_macvtap: entered promiscuous mode [ 1133.082977][T28400] veth1_macvtap: entered promiscuous mode [ 1133.117080][T28867] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6523'. [ 1133.194789][T28400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.222725][T28400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.402191][T28867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.455588][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6526'. [ 1133.481602][T22983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.500959][T28876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6526'. [ 1133.539694][T22982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.571535][T22982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.610906][T22982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.843054][T28867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.933347][T28888] xt_hashlimit: size too large, truncated to 1048576 [ 1134.287306][T28867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.413509][T28897] netlink: 'syz.3.6531': attribute type 1 has an invalid length. [ 1134.458858][T28897] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6531'. [ 1134.497985][T28867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.660411][T22978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.705697][T22978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.867169][T13453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.912995][T13453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.117023][T28914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6536'. [ 1135.421659][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.663651][T22986] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.860109][T22986] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.968682][T13453] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.186665][T28946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.316591][T28952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1136.364689][ T29] audit: type=1107 audit(1781542402.069:16): pid=28951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1136.450417][T28952] bridge3: entered promiscuous mode [ 1136.482788][T28952] bridge3: entered allmulticast mode [ 1136.559080][T28955] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1136.669546][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6547'. [ 1136.858494][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1136.908778][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1137.347717][T28983] openvswitch: netlink: Key type 30 is not supported [ 1137.557353][T28977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1137.601994][T28977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1137.635539][T28977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1137.652245][T28993] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6559'. [ 1138.586904][T29026] syzkaller0: entered promiscuous mode [ 1138.597663][T29026] syzkaller0: entered allmulticast mode [ 1139.606524][T29055] gtp1: entered promiscuous mode [ 1139.633273][T29055] gtp1: entered allmulticast mode [ 1139.769263][T29063] __nla_validate_parse: 3 callbacks suppressed [ 1139.769284][T29063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1140.719189][T29105] netlink: 'syz.0.6592': attribute type 1 has an invalid length. [ 1140.731358][T29105] netlink: 'syz.0.6592': attribute type 1 has an invalid length. [ 1140.739568][T29105] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.6592'. [ 1140.770983][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6592'. [ 1140.801017][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6592'. [ 1140.833837][T29105] netlink: 'syz.0.6592': attribute type 1 has an invalid length. [ 1141.119915][T29117] netlink: 'syz.0.6596': attribute type 1 has an invalid length. [ 1141.202039][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1141.312906][T20114] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1141.387306][T29135] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1141.452046][T29122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1141.658023][T29142] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6603'. [ 1141.783468][T29146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6605'. [ 1141.899010][T29146] geneve2: entered promiscuous mode [ 1141.931127][T29152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6604'. [ 1141.940806][T29153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6608'. [ 1142.126229][T29157] rdma_rxe: rxe_newlink: failed to add lo [ 1142.239439][T29162] netlink: 'syz.2.6610': attribute type 3 has an invalid length. [ 1142.270814][T29162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6610'. [ 1143.267404][T29199] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1143.617579][T29213] Cannot find add_set index 65532 as target [ 1143.938934][T29208] macvtap1: entered promiscuous mode [ 1143.961799][T29208] vlan0: entered promiscuous mode [ 1143.985537][T29208] macvtap1: entered allmulticast mode [ 1144.004681][T29208] vlan0: entered allmulticast mode [ 1144.027283][T29208] veth0_vlan: entered allmulticast mode [ 1144.090429][T29227] netlink: 'syz.3.6634': attribute type 7 has an invalid length. [ 1144.176697][T29219] sit0: entered promiscuous mode [ 1144.203604][T29219] netlink: 'syz.1.6632': attribute type 1 has an invalid length. [ 1145.029941][T29269] sit0: entered promiscuous mode [ 1145.061042][T29269] netlink: 'syz.2.6650': attribute type 1 has an invalid length. [ 1145.110037][T29269] __nla_validate_parse: 8 callbacks suppressed [ 1145.110058][T29269] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1145.394198][T29283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6652'. [ 1145.659890][T29296] tipc: Started in network mode [ 1145.678050][T29296] tipc: Node identity e0000001, cluster identity 4711 [ 1145.703189][T29296] tipc: Enabling of bearer rejected, failed to enable media [ 1145.721989][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1146.099106][T29319] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6663'. [ 1146.314423][T29320] macsec1: entered promiscuous mode [ 1146.341756][T29320] bond0: entered promiscuous mode [ 1146.361038][T29320] bond_slave_0: entered promiscuous mode [ 1146.371687][T29320] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1146.407144][T29320] bond0: left promiscuous mode [ 1146.577402][ T5831] bond_slave_0: left promiscuous mode [ 1146.623079][T29325] pim6reg: entered allmulticast mode [ 1146.873993][T29342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6668'. [ 1147.407786][T29358] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1147.499418][T29358] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1147.532206][T29358] gretap1: entered promiscuous mode [ 1147.541863][T29366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1147.568416][T29358] gretap1: entered allmulticast mode [ 1147.823663][T16694] IPVS: starting estimator thread 0... [ 1147.852820][T29360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1147.876086][T29360] nbd: device at index 64 is going down [ 1147.925097][T29386] IPVS: using max 26 ests per chain, 62400 per kthread [ 1148.262678][T28905] udevd[28905]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1148.664481][T29408] netlink: 'syz.4.6684': attribute type 49 has an invalid length. [ 1148.981530][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1148.995490][T29421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1149.018963][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1149.034162][T29408] ip6gretap0: entered promiscuous mode [ 1149.055070][T29408] ip6gretap0: entered allmulticast mode [ 1149.112652][T29419] netlink: 'syz.3.6690': attribute type 1 has an invalid length. [ 1149.228791][T29424] veth0_macvtap: entered allmulticast mode [ 1149.251976][T29424] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1150.098931][T29466] netlink: 'syz.1.6700': attribute type 33 has an invalid length. [ 1150.228354][T29468] __nla_validate_parse: 5 callbacks suppressed [ 1150.228374][T29468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1150.588017][T29482] IPv6: NLM_F_CREATE should be specified when creating new route [ 1150.625305][T29483] netlink: 'syz.3.6704': attribute type 3 has an invalid length. [ 1150.640188][T29482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1150.647542][T29482] IPv6: NLM_F_CREATE should be set when creating new route [ 1150.667082][T29483] netlink: 'syz.3.6704': attribute type 1 has an invalid length. [ 1150.712509][T29483] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6704'. [ 1150.798259][T29487] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6706'. [ 1151.301305][T29506] netlink: 5284 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1151.551194][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6713'. [ 1151.646388][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6713'. [ 1151.759788][T29527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6715'. [ 1152.199917][T29540] netlink: 'syz.4.6717': attribute type 2 has an invalid length. [ 1152.253751][T29540] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6717'. [ 1152.437981][T29545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6719'. [ 1153.053562][T29560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1153.172483][T29575] netlink: 'syz.0.6724': attribute type 1 has an invalid length. [ 1153.837913][T29593] netlink: 'syz.0.6732': attribute type 21 has an invalid length. [ 1153.879401][T29593] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6732'. [ 1153.936488][T29593] netlink: 'syz.0.6732': attribute type 4 has an invalid length. [ 1153.947568][T29599] netlink: 'syz.0.6732': attribute type 21 has an invalid length. [ 1153.952113][T29593] netlink: 'syz.0.6732': attribute type 5 has an invalid length. [ 1153.962785][T24841] Bluetooth: hci2: command 0x0406 tx timeout [ 1153.990525][T29599] netlink: 'syz.0.6732': attribute type 4 has an invalid length. [ 1153.999342][T29599] netlink: 'syz.0.6732': attribute type 5 has an invalid length. [ 1154.327681][T29593] xt_ecn: cannot match TCP bits for non-tcp packets [ 1154.393354][T29601] erspan0: entered promiscuous mode [ 1154.759714][T29613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.783098][T29612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.185178][T29629] netlink: 'syz.1.6743': attribute type 4 has an invalid length. [ 1155.308925][T29637] netlink: 'syz.2.6745': attribute type 1 has an invalid length. [ 1155.378053][T29639] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1155.852325][T29653] __nla_validate_parse: 5 callbacks suppressed [ 1155.852345][T29653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1155.873180][T29653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1155.925836][T29655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1155.971353][T29658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1156.139656][T29653] batadv0: entered promiscuous mode [ 1156.156587][T29653] ip6gretap0: entered promiscuous mode [ 1156.194661][T29653] hsr1: entered promiscuous mode [ 1156.219968][T29670] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1156.278439][T29670] netlink: 'syz.1.6752': attribute type 3 has an invalid length. [ 1156.312370][T29672] netlink: 'syz.3.6755': attribute type 1 has an invalid length. [ 1156.328943][T29670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1156.350928][T29672] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1156.397869][T29670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1157.070602][T29689] tipc: Enabled bearer , priority 0 [ 1157.141008][T29695] syzkaller0: entered promiscuous mode [ 1157.184184][T29695] syzkaller0: entered allmulticast mode [ 1157.283594][T29695] tipc: Resetting bearer [ 1157.367915][T29695] tipc: Disabling bearer [ 1157.645649][T29716] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6767'. [ 1157.677314][T29711] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6767'. [ 1157.759829][T29711] SET target dimension over the limit! [ 1157.773206][ T7602] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1158.045889][T29731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1158.072929][T29733] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1160.572273][T29709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1160.822326][T29751] Bluetooth: MGMT ver 1.23 [ 1161.087201][T29767] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1161.154183][T29767] __nla_validate_parse: 2 callbacks suppressed [ 1161.154204][T29767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1162.116098][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1162.982734][T29840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1163.379855][T29858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6808'. [ 1163.398467][T29856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6809'. [ 1163.433807][T29858] IPv6: NLM_F_CREATE should be specified when creating new route [ 1164.452148][T29892] validate_nla: 1 callbacks suppressed [ 1164.452171][T29892] netlink: 'syz.2.6819': attribute type 4 has an invalid length. [ 1164.547726][T29892] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1164.605646][T29892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1164.631930][T29898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6822'. [ 1164.706821][T29898] lo: entered allmulticast mode [ 1164.768396][T29895] netlink: 'syz.3.6821': attribute type 1 has an invalid length. [ 1164.813352][T29901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1164.814697][T29895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1164.904633][T29895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.937430][T29895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.944738][T29895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.597416][T29930] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 1165.850218][T29942] tipc: Enabling of bearer rejected, failed to enable media [ 1165.862180][T29937] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1165.862203][T29942] openvswitch: netlink: VLAN attribute unexpected. [ 1166.394228][T29966] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1166.669426][T29974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6841'. [ 1166.700359][T29973] netlink: 'syz.1.6842': attribute type 1 has an invalid length. [ 1166.740998][T29974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6841'. [ 1166.758051][T29973] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6842'. [ 1167.149570][T29991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1167.311423][T29996] openvswitch: netlink: Duplicate key (type 2). [ 1167.411314][T29994] netlink: 'syz.1.6849': attribute type 8 has an invalid length. [ 1167.575474][T30001] syzkaller0: entered promiscuous mode [ 1167.598985][T30001] syzkaller0: entered allmulticast mode [ 1167.660122][T30001] 0: reclassify loop, rule prio 0, protocol 800 [ 1168.194961][T24841] Bluetooth: hci3: command 0x0405 tx timeout [ 1168.989236][T30054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.069249][T30054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.106985][T30054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.118792][T30054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.668629][T30042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1171.991395][T30099] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6879'. [ 1172.850306][T30134] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1172.871996][T30134] netlink: 'syz.3.6890': attribute type 2 has an invalid length. [ 1175.879487][T30136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1175.903166][T30153] netlink: 'syz.2.6895': attribute type 11 has an invalid length. [ 1175.928150][T30153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6895'. [ 1176.569026][T30196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1176.669156][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6909'. [ 1176.744783][T30199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6909'. [ 1176.935970][T30208] netlink: 'syz.0.6913': attribute type 1 has an invalid length. [ 1176.963389][T30208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.026683][T30208] lo: entered allmulticast mode [ 1177.037170][T30216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1177.067636][T30208] tunl0: entered allmulticast mode [ 1177.153151][T30208] gre0: entered allmulticast mode [ 1177.221207][T30208] gretap0: entered allmulticast mode [ 1177.244631][T30208] erspan0: entered allmulticast mode [ 1177.285487][T30208] ip_vti0: entered allmulticast mode [ 1177.480078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1177.504623][T30208] ip6_vti0: entered allmulticast mode [ 1177.547152][T30208] sit0: entered allmulticast mode [ 1177.566638][T30208] ip6tnl0: entered allmulticast mode [ 1177.604520][T30208] ip6gre0: entered allmulticast mode [ 1177.678801][T30208] syz_tun: entered allmulticast mode [ 1178.140806][T30236] netlink: 'syz.2.6922': attribute type 10 has an invalid length. [ 1178.199289][T30236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.277218][T30236] bond0: (slave team0): Enslaving as an active interface with an up link [ 1178.663324][T30262] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6927'. [ 1178.668790][T30257] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6927'. [ 1179.200260][T30289] netlink: 'syz.3.6937': attribute type 1 has an invalid length. [ 1179.208506][T30289] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6937'. [ 1179.555391][T24841] Bluetooth: hci5: command 0x0406 tx timeout [ 1179.589033][T30305] netlink: 'syz.2.6942': attribute type 1 has an invalid length. [ 1179.681361][T30305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1179.721673][T30307] bond2: (slave ip6erspan0): making interface the new active one [ 1179.733107][T30307] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1180.016225][T30321] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6947'. [ 1180.033477][T30320] vlan2: entered promiscuous mode [ 1180.040958][T30320] bridge0: entered promiscuous mode [ 1180.091999][T30322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6947'. [ 1181.918964][T30269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1182.247050][T30331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1182.711096][T30358] ip6t_rpfilter: unknown options [ 1182.762430][T30358] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 1183.202544][T30381] netlink: 428 bytes leftover after parsing attributes in process `syz.4.6963'. [ 1183.330444][T30383] netlink: 'syz.4.6965': attribute type 5 has an invalid length. [ 1183.551285][T30395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6967'. [ 1183.585808][T30394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6966'. [ 1183.620052][T30393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6967'. [ 1183.701256][T30402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6969'. [ 1183.843815][T30408] netlink: 'syz.1.6969': attribute type 1 has an invalid length. [ 1185.221227][T30430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1185.858902][T30454] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1185.889825][T30454] syzkaller0: entered promiscuous mode [ 1185.896112][T30454] syzkaller0: entered allmulticast mode [ 1185.978163][T30372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1187.636615][T30518] netlink: 'syz.3.7003': attribute type 13 has an invalid length. [ 1187.665071][T30518] netlink: 'syz.3.7003': attribute type 58 has an invalid length. [ 1187.684308][T30521] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1187.728250][T30518] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7003'. [ 1188.036231][T30540] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7010'. [ 1188.142096][T30545] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7010'. [ 1188.235843][T30550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7012'. [ 1189.976618][T30497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1190.771547][T30580] batadv0: entered promiscuous mode [ 1190.813485][T30580] macsec1: entered promiscuous mode [ 1190.836139][T30580] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1190.857299][T30580] batadv0: left promiscuous mode [ 1191.387315][T30606] bridge: RTM_NEWNEIGH with invalid ether address [ 1191.654272][T30625] syzkaller0: entered promiscuous mode [ 1191.664122][T30625] syzkaller0: entered allmulticast mode [ 1191.709362][T30620] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1194.172465][T30596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1194.475195][T30653] syzkaller0: entered promiscuous mode [ 1194.523685][T30653] syzkaller0: entered allmulticast mode [ 1194.553219][T30658] tipc: Started in network mode [ 1194.571908][T30658] tipc: Node identity a61cda2316cb, cluster identity 4711 [ 1194.628463][T30658] tipc: Enabled bearer , priority 0 [ 1194.737212][T30652] tipc: Resetting bearer [ 1194.770905][T30665] netlink: 'syz.0.7044': attribute type 21 has an invalid length. [ 1194.807865][T30665] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7044'. [ 1194.841366][T26709] IPVS: starting estimator thread 0... [ 1194.871162][T30652] tipc: Disabling bearer [ 1194.890855][T30667] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1194.915378][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 1194.947144][T30668] IPVS: using max 26 ests per chain, 62400 per kthread [ 1195.312825][T30684] vlan2: entered allmulticast mode [ 1195.346815][T30684] bond0: entered allmulticast mode [ 1195.370688][T30684] bond_slave_0: entered allmulticast mode [ 1195.388990][T30684] bond_slave_1: entered allmulticast mode [ 1195.580926][T30689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7051'. [ 1196.336672][T30718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7059'. [ 1196.486324][T30718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.493772][T30718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.680580][T30733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1197.070424][T30751] netlink: 'syz.3.7067': attribute type 2 has an invalid length. [ 1197.096782][T30723] syzkaller0: entered promiscuous mode [ 1197.111811][T30753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7068'. [ 1197.120993][T30723] syzkaller0: entered allmulticast mode [ 1197.141718][T30751] tipc: Enabling of bearer rejected, failed to enable media [ 1202.771814][T30767] kthread_run failed with err -4 [ 1202.963575][T30792] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20001 [ 1203.299418][T30809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7080'. [ 1203.778212][T30829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1203.853010][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1204.413821][T30857] netlink: 'syz.0.7096': attribute type 1 has an invalid length. [ 1204.550382][T30857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1204.653925][T30855] bond3: (slave veth0_to_bond): making interface the new active one [ 1204.727024][T30855] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1204.807980][T30856] bond3: entered promiscuous mode [ 1204.815289][T30856] veth0_to_bond: entered promiscuous mode [ 1204.823035][T30856] bond3: entered allmulticast mode [ 1204.846867][T30856] veth0_to_bond: entered allmulticast mode [ 1204.946926][T30863] nbd3: detected capacity change from 0 to 63 [ 1204.949481][T30872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7098'. [ 1204.977437][T30871] block nbd3: NBD_DISCONNECT [ 1205.118025][T30871] block nbd3: Disconnected due to user request. [ 1205.129500][T30871] block nbd3: shutting down sockets [ 1205.146953][ C0] blk_print_req_error: 138 callbacks suppressed [ 1205.146978][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.162455][ C0] buffer_io_error: 138 callbacks suppressed [ 1205.162474][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1205.178565][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.187740][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1205.208614][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.217887][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1205.226309][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.235461][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1205.244367][T30794] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.281290][T30794] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1205.312254][T30794] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.360728][T30794] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1205.387537][T30794] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.428511][T30794] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1205.450740][T30794] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.510993][T30794] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1205.583829][T30794] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.605780][T30894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7105'. [ 1205.616324][T30896] hsr0: entered promiscuous mode [ 1205.653958][T30794] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1205.703621][T30794] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1205.748120][T30794] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1205.793119][T30794] ldm_validate_partition_table(): Disk read failed. [ 1205.833945][T30794] Dev nbd3: unable to read RDB block 0 [ 1205.886281][T30794] nbd3: unable to read partition table [ 1205.954708][T30794] ldm_validate_partition_table(): Disk read failed. [ 1205.964524][T30794] Dev nbd3: unable to read RDB block 0 [ 1205.973170][T30794] nbd3: unable to read partition table [ 1206.721774][T30931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7117'. [ 1206.804687][T30934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7118'. [ 1207.365300][T30954] netlink: 'syz.4.7125': attribute type 1 has an invalid length. [ 1207.411617][T30960] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1207.435255][T30960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1207.467741][T30960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1207.792345][T30973] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1207.898620][T30983] FAULT_INJECTION: forcing a failure. [ 1207.898620][T30983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.922233][T30983] CPU: 0 UID: 0 PID: 30983 Comm: syz.2.7135 Not tainted syzkaller #0 PREEMPT(full) [ 1207.922261][T30983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1207.922273][T30983] Call Trace: [ 1207.922281][T30983] [ 1207.922290][T30983] dump_stack_lvl+0xe8/0x150 [ 1207.922318][T30983] should_fail_ex+0x40c/0x560 [ 1207.922341][T30983] _copy_to_user+0x31/0xb0 [ 1207.922367][T30983] simple_read_from_buffer+0xe1/0x170 [ 1207.922395][T30983] proc_fail_nth_read+0x1bb/0x230 [ 1207.922422][T30983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1207.922449][T30983] ? rw_verify_area+0x24a/0x4c0 [ 1207.922474][T30983] ? tun_chr_write_iter+0x18a/0x200 [ 1207.922505][T30983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1207.922527][T30983] vfs_read+0x213/0xa80 [ 1207.922557][T30983] ? __pfx___mutex_lock+0x10/0x10 [ 1207.922578][T30983] ? __pfx_vfs_read+0x10/0x10 [ 1207.922604][T30983] ? __fget_files+0x2a/0x420 [ 1207.922629][T30983] ? __fget_files+0x3a2/0x420 [ 1207.922661][T30983] ? __fget_files+0x2a/0x420 [ 1207.922692][T30983] ksys_read+0x150/0x270 [ 1207.922720][T30983] ? __pfx_ksys_read+0x10/0x10 [ 1207.922760][T30983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.922785][T30983] do_syscall_64+0x174/0x580 [ 1207.922807][T30983] ? trace_irq_disable+0x3b/0x140 [ 1207.922841][T30983] ? clear_bhb_loop+0x40/0x90 [ 1207.922869][T30983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.922892][T30983] RIP: 0033:0x7fb30d55d68e [ 1207.922913][T30983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1207.922932][T30983] RSP: 002b:00007fb30e434fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1207.922955][T30983] RAX: ffffffffffffffda RBX: 00007fb30e4356c0 RCX: 00007fb30d55d68e [ 1207.922972][T30983] RDX: 000000000000000f RSI: 00007fb30e4350a0 RDI: 0000000000000004 [ 1207.922987][T30983] RBP: 00007fb30e435090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.923001][T30983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.923015][T30983] R13: 00007fb30d816038 R14: 00007fb30d815fa0 R15: 00007ffcf2e90078 [ 1207.923053][T30983] [ 1208.475265][T30990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7137'. [ 1208.530755][T30989] xt_hashlimit: size too large, truncated to 1048576 [ 1213.974289][T31012] netlink: 'syz.1.7140': attribute type 2 has an invalid length. [ 1214.148388][T31015] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7144'. [ 1214.405988][T31027] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7148'. [ 1214.498917][T31027] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7148'. [ 1214.696972][T31021] syzkaller0: entered promiscuous mode [ 1214.723584][T31021] syzkaller0: entered allmulticast mode [ 1214.982189][T31048] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1215.128081][T31053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1220.573578][T31093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1220.908395][T31068] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1220.969932][T31068] syzkaller0: entered promiscuous mode [ 1220.983278][T31068] syzkaller0: entered allmulticast mode [ 1221.153885][T31087] netlink: 296 bytes leftover after parsing attributes in process `syz.2.7158'. [ 1221.764176][ T47] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1221.861285][T31140] lo: entered promiscuous mode [ 1221.877144][T31140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1221.928952][T31138] gretap2: entered promiscuous mode [ 1221.946735][T31138] batman_adv: batadv0: Adding interface: gretap2 [ 1221.953368][T31138] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.986058][T31138] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1223.646699][T31097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1223.668718][T31131] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7169'. [ 1224.517208][T31193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7185'. [ 1224.876087][T31201] netlink: 'syz.3.7188': attribute type 3 has an invalid length. [ 1225.121548][ C0] vcan0: j1939_tp_rxtimer: 0xffff888090b28400: rx timeout, send abort [ 1225.557622][T31227] macvlan2: entered promiscuous mode [ 1225.605584][T31227] macvlan2: entered allmulticast mode [ 1225.621685][ C0] vcan0: j1939_tp_rxtimer: 0xffff888090b28c00: rx timeout, send abort [ 1225.630172][ C0] vcan0: j1939_tp_rxtimer: 0xffff888090b28400: abort rx timeout. Force session deactivation [ 1225.647283][T31227] veth0_to_batadv: entered promiscuous mode [ 1225.680502][T31227] veth0_to_batadv: entered allmulticast mode [ 1225.689857][T31237] netlink: 'syz.3.7197': attribute type 3 has an invalid length. [ 1225.756569][T31227] team0: Port device macvlan2 added [ 1225.782023][T31239] netlink: 'syz.3.7197': attribute type 21 has an invalid length. [ 1226.079892][T31239] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1226.130037][ C0] vcan0: j1939_tp_rxtimer: 0xffff888090b28c00: abort rx timeout. Force session deactivation [ 1226.157559][T31239] bond1 (unregistering): Released all slaves [ 1226.367660][T31254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7204'. [ 1226.563338][T31260] veth3: entered promiscuous mode [ 1226.583460][T31260] veth3: entered allmulticast mode [ 1226.785220][T31262] bond2: (slave gre0): Device is not bonding slave [ 1226.809208][T31262] bond2: option active_slave: invalid value (gre0) [ 1226.826806][T31262] bond2 (unregistering): Released all slaves [ 1227.052338][T31283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7212'. [ 1227.621146][T31312] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1227.711649][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1227.722988][T31317] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7222'. [ 1227.782581][T31319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7222'. [ 1227.842777][T31321] tipc: Enabled bearer , priority 0 [ 1228.033389][T31321] syzkaller0: entered promiscuous mode [ 1228.040812][T31321] syzkaller0: entered allmulticast mode [ 1228.062710][T31321] tipc: Resetting bearer [ 1228.105310][T31322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7223'. [ 1228.127490][T31318] tipc: Resetting bearer [ 1228.612324][T31339] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7226'. [ 1232.743257][T31318] tipc: Disabling bearer [ 1232.779647][T31339] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1232.790042][T22986] bridge_slave_1: left allmulticast mode [ 1232.838286][T22986] bridge_slave_1: left promiscuous mode [ 1232.871065][T22986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.924081][T22986] x9: left allmulticast mode [ 1232.935235][T31353] netlink: 'syz.2.7228': attribute type 5 has an invalid length. [ 1232.945527][T31353] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7228'. [ 1232.948863][T22986] x9: left promiscuous mode [ 1232.975627][T22986] bridge0: port 1(1x9) entered disabled state [ 1233.030509][T22986] pimreg: left allmulticast mode [ 1233.120825][T31364] Bluetooth: MGMT ver 1.23 [ 1233.215825][T31364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7231'. [ 1233.250960][T22986] bond9 (unregistering): (slave ip6gre2): Releasing backup interface [ 1233.303577][T31367] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1233.440497][T22986] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1233.977632][T22986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.988529][T22986] bond0 (unregistering): (slave team0): Releasing backup interface [ 1233.998038][T22986] bond0 (unregistering): Released all slaves [ 1234.013681][T22986] bond1 (unregistering): Released all slaves [ 1234.044043][T22986] bond2 (unregistering): Released all slaves [ 1234.069866][T22986] bond3 (unregistering): Released all slaves [ 1234.086608][T22986] bond4 (unregistering): Released all slaves [ 1234.110875][T22986] bond5 (unregistering): Released all slaves [ 1234.141480][T22986] bond6 (unregistering): (slave veth9): Releasing backup interface [ 1234.151082][T22986] bond6 (unregistering): Released all slaves [ 1234.184417][T22986] bond7 (unregistering): Released all slaves [ 1234.203150][T22986] bond8 (unregistering): Released all slaves [ 1234.225524][T22986] bond9 (unregistering): Released all slaves [ 1234.241613][T22986] bond10 (unregistering): Released all slaves [ 1234.258502][T22986] bond11 (unregistering): Released all slaves [ 1234.276499][T22986] bond12 (unregistering): Released all slaves [ 1234.305270][T26571] tipc: Node number set to 167772288 [ 1234.317578][T31359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7230'. [ 1234.493373][T31372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7235'. [ 1234.644749][T22986] : left promiscuous mode [ 1235.034188][T22986] tipc: Left network mode [ 1235.510456][T31406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7243'. [ 1235.606853][T31401] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7242'. [ 1235.813615][T31409] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1235.914654][T31379] netlink: 'syz.4.7237': attribute type 2 has an invalid length. [ 1235.947043][T31412] netlink: 556 bytes leftover after parsing attributes in process `syz.0.7245'. [ 1236.101095][T31415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1236.211390][T31403] syzkaller0: entered promiscuous mode [ 1236.233550][T31403] syzkaller0: entered allmulticast mode [ 1236.398112][T22986] IPVS: stopping backup sync thread 23967 ... [ 1240.855029][T31379] netlink: 'syz.4.7237': attribute type 7 has an invalid length. [ 1240.882874][T31415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1240.907822][T31419] netlink: 'syz.1.7247': attribute type 1 has an invalid length. [ 1240.929921][T31419] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1241.222854][T31434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1241.512420][T31434] bond3: entered promiscuous mode [ 1241.548073][T31434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1241.702666][T31424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1241.736648][T31424] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 1241.794605][T31424] bond3: (slave sit1): Error -95 calling set_mac_address [ 1241.835289][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7251'. [ 1241.922721][T31448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7251'. [ 1242.349856][T31467] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1242.378258][T31471] netlink: 556 bytes leftover after parsing attributes in process `syz.2.7258'. [ 1242.856212][T31492] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1243.188211][T31507] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1243.387171][T31519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7270'. [ 1243.476243][T31522] netlink: 'syz.2.7270': attribute type 2 has an invalid length. [ 1243.512742][T31522] netlink: 'syz.2.7270': attribute type 8 has an invalid length. [ 1243.541304][T31522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7270'. [ 1243.553759][T31527] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1243.763019][T31519] netlink: 'syz.2.7270': attribute type 10 has an invalid length. [ 1243.816351][T31533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7273'. [ 1243.973684][T31536] netlink: 556 bytes leftover after parsing attributes in process `syz.3.7274'. [ 1244.114411][T31539] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1244.184170][T31539] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1244.207109][T31539] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1244.285726][T22986] hsr_slave_0: left promiscuous mode [ 1244.309084][T22986] hsr_slave_1: left promiscuous mode [ 1244.334629][T22986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.373076][T22986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.468668][T31560] netlink: 'syz.2.7280': attribute type 21 has an invalid length. [ 1245.052994][T22986] team0 (unregistering): Port device team_slave_1 removed [ 1245.089602][T22986] team0 (unregistering): Port device team_slave_0 removed [ 1245.232971][T22986] vcan0 (unregistering): left allmulticast mode [ 1245.266830][ T47] smc: removing ib device sz1 [ 1245.299132][ T47] smbdirect: ib_dev[sz1] removed [ 1245.308205][T31551] lo: entered allmulticast mode [ 1245.319958][T31551] lo: left allmulticast mode [ 1245.661365][T31574] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1246.100393][T31591] netlink: 'syz.2.7290': attribute type 1 has an invalid length. [ 1246.271063][T31583] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 1246.295442][T31598] __nla_validate_parse: 2 callbacks suppressed [ 1246.295463][T31598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7290'. [ 1246.349917][T31583] bond4 (unregistering): Released all slaves [ 1247.008745][T31619] netlink: 'syz.3.7296': attribute type 1 has an invalid length. [ 1247.184738][T31623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7296'. [ 1247.644054][T31634] TCP: TCP_TX_DELAY enabled [ 1247.722417][T31621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7295'. [ 1247.736035][T31624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7295'. [ 1247.989283][T31637] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1248.110151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.357214][T31640] syzkaller1: entered promiscuous mode [ 1248.390452][T31640] syzkaller1: entered allmulticast mode [ 1248.823034][T31648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1249.189885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1249.226337][T31680] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1249.497612][T31688] xt_TCPMSS: Only works on TCP SYN packets [ 1250.514003][T31722] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1250.820874][T31737] xt_hashlimit: size too large, truncated to 1048576 [ 1251.294147][T31761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7333'. [ 1251.508882][T31756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.818855][T31774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7335'. [ 1251.939324][T31778] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1251.962186][T31774] block nbd0: reconnected socket [ 1252.023543][T31781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7339'. [ 1252.213930][T31788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7341'. [ 1252.424279][ T5644] block nbd0: Receive control failed (result -32) [ 1252.653389][T31802] netlink: 'syz.3.7345': attribute type 4 has an invalid length. [ 1253.011966][T31815] netlink: 'syz.3.7349': attribute type 1 has an invalid length. [ 1253.060463][T31817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7350'. [ 1253.083863][T31817] netlink: 'syz.2.7350': attribute type 1 has an invalid length. [ 1253.099396][T31817] netlink: 'syz.2.7350': attribute type 1 has an invalid length. [ 1253.147356][T31821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7349'. [ 1253.149007][T31817] netlink: 'syz.2.7350': attribute type 2 has an invalid length. [ 1253.171778][T31817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7350'. [ 1253.199438][T31822] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1253.353497][T31815] bond1: entered promiscuous mode [ 1253.409298][T31815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1253.450727][T31821] bond1: entered allmulticast mode [ 1253.578257][T31830] bond1: (slave bridge4): making interface the new active one [ 1253.606512][T31830] bridge4: entered promiscuous mode [ 1253.626963][T31830] bridge4: entered allmulticast mode [ 1253.650214][T31830] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 1254.130859][T31842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7357'. [ 1254.183717][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7357'. [ 1254.200104][T22986] IPVS: stop unused estimator thread 0... [ 1254.260334][T31847] netlink: 'syz.1.7359': attribute type 21 has an invalid length. [ 1254.302646][T31847] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7359'. [ 1254.357475][T31847] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7359'. [ 1255.328017][T22986] xfrm0 (unregistering): left allmulticast mode [ 1255.364306][T22986] team0: Port device xfrm0 removed [ 1256.000456][T22986] bond1 (unregistering): Released all slaves [ 1256.017828][T22986] bond2 (unregistering): Released all slaves [ 1256.042131][T22986] bond3 (unregistering): Released all slaves [ 1256.106686][T22986] bond4 (unregistering): Released all slaves [ 1256.159650][T22986] bond5 (unregistering): Released all slaves [ 1256.183052][T22986] bond6 (unregistering): Released all slaves [ 1256.212334][T22986] bond7 (unregistering): Released all slaves [ 1256.232152][T22986] bond8 (unregistering): Released all slaves [ 1256.251992][T22986] bond9 (unregistering): Released all slaves [ 1256.282705][T22986] bond10 (unregistering): Released all slaves [ 1256.299654][T22986] bond11 (unregistering): Released all slaves [ 1256.316908][T22986] bond12 (unregistering): Released all slaves [ 1256.343271][T22986] bond0 (unregistering): Released all slaves [ 1256.386152][T22986] bond13 (unregistering): Released all slaves [ 1256.402111][T22986] bond14 (unregistering): Released all slaves [ 1256.424145][T22986] bond15 (unregistering): Released all slaves [ 1256.583214][T31861] team0 (unregistering): Port device team_slave_0 removed [ 1256.613088][T31861] team0 (unregistering): Port device team_slave_1 removed [ 1256.631609][T31861] veth0_to_batadv: left allmulticast mode [ 1256.642224][T31861] veth0_to_batadv: left promiscuous mode [ 1256.687889][T31861] team0 (unregistering): Port device macvlan2 removed [ 1256.757669][T31858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1256.880801][T22986] tipc: Disabling bearer [ 1256.911447][T22986] tipc: Left network mode [ 1257.456076][T31895] __nla_validate_parse: 2 callbacks suppressed [ 1257.456097][T31895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7372'. [ 1257.644600][T31901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7376'. [ 1257.654318][T31903] netlink: 'syz.2.7375': attribute type 11 has an invalid length. [ 1257.668797][T31901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7376'. [ 1257.708945][T22986] IPVS: stopping backup sync thread 24793 ... [ 1258.333522][T31920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1258.515886][T31926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7383'. [ 1258.554176][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7383'. [ 1258.577715][T31926] netlink: 'syz.4.7383': attribute type 15 has an invalid length. [ 1258.765397][T31936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7387'. [ 1258.780811][T20114] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1258.816732][ T7606] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1258.859169][T31933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7387'. [ 1259.141940][T31952] netlink: 'syz.4.7390': attribute type 1 has an invalid length. [ 1259.176680][ T7606] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1259.310130][ T7606] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1259.613946][T31983] blkio.reset_stats is deprecated [ 1260.008091][T31999] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1260.163147][T31956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1260.231733][T32005] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7402'. [ 1260.409653][T32009] netlink: 'syz.0.7403': attribute type 20 has an invalid length. [ 1260.482115][T32009] netlink: 'syz.0.7403': attribute type 20 has an invalid length. [ 1260.539784][T22978] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1260.578158][T22978] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1260.621515][T22978] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1260.689970][T22978] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.577393][T32044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1261.595870][T22986] [ 1261.606350][T22986] ====================================================== [ 1261.613399][T22986] WARNING: possible circular locking dependency detected [ 1261.620451][T22986] syzkaller #0 Not tainted [ 1261.624879][T22986] ------------------------------------------------------ [ 1261.631896][T22986] kworker/u8:44/22986 is trying to acquire lock: [ 1261.638236][T22986] ffff88801be85210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170 [ 1261.648810][T22986] [ 1261.648810][T22986] but task is already holding lock: [ 1261.656208][T22986] ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1261.665851][T22986] [ 1261.665851][T22986] which lock already depends on the new lock. [ 1261.665851][T22986] [ 1261.676282][T22986] [ 1261.676282][T22986] the existing dependency chain (in reverse order) is: [ 1261.685319][T22986] [ 1261.685319][T22986] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1261.693337][T22986] down_write+0x96/0x200 [ 1261.698129][T22986] kernfs_add_one+0x41/0x5d0 [ 1261.703275][T22986] kernfs_create_dir_ns+0xde/0x130 [ 1261.708950][T22986] internal_create_group+0x440/0x1180 [ 1261.714879][T22986] cpuhp_invoke_callback+0x448/0x860 [ 1261.720711][T22986] cpuhp_issue_call+0x3f0/0x750 [ 1261.726112][T22986] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1261.732729][T22986] __cpuhp_setup_state+0x3f/0x60 [ 1261.738244][T22986] do_one_initcall+0x250/0x870 [ 1261.743551][T22986] do_initcall_level+0x10a/0x1a0 [ 1261.749024][T22986] do_initcalls+0x59/0xa0 [ 1261.753894][T22986] kernel_init_freeable+0x29d/0x3e0 [ 1261.759636][T22986] kernel_init+0x1d/0x1d0 [ 1261.764531][T22986] ret_from_fork+0x514/0xb70 [ 1261.769668][T22986] ret_from_fork_asm+0x1a/0x30 [ 1261.774994][T22986] [ 1261.774994][T22986] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1261.782840][T22986] [ 1261.782840][T22986] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1261.790594][T22986] cpus_read_lock+0x42/0x160 [ 1261.795739][T22986] static_key_slow_inc+0x12/0x30 [ 1261.801217][T22986] nbd_genl_reconfigure+0x1301/0x1e80 [ 1261.807214][T22986] genl_family_rcv_msg_doit+0x233/0x340 [ 1261.813316][T22986] genl_rcv_msg+0x614/0x7a0 [ 1261.818373][T22986] netlink_rcv_skb+0x226/0x4a0 [ 1261.823691][T22986] genl_rcv+0x28/0x40 [ 1261.828215][T22986] netlink_unicast+0x7bb/0x940 [ 1261.833520][T22986] netlink_sendmsg+0x813/0xb40 [ 1261.838829][T22986] ____sys_sendmsg+0x9b9/0xa20 [ 1261.844143][T22986] ___sys_sendmsg+0x2a5/0x360 [ 1261.849369][T22986] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1261.854863][T22986] do_syscall_64+0x174/0x580 [ 1261.859998][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.866436][T22986] [ 1261.866436][T22986] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1261.874111][T22986] __mutex_lock+0x19d/0x1590 [ 1261.879255][T22986] nbd_queue_rq+0x373/0x1150 [ 1261.884394][T22986] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1261.890575][T22986] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1261.897489][T22986] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1261.904011][T22986] blk_mq_run_hw_queue+0x348/0x4f0 [ 1261.909668][T22986] blk_mq_dispatch_list+0xd11/0xe10 [ 1261.915459][T22986] blk_mq_flush_plug_list+0x45f/0x540 [ 1261.921377][T22986] __blk_flush_plug+0x3ed/0x4d0 [ 1261.926859][T22986] __submit_bio+0x465/0x560 [ 1261.931907][T22986] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1261.938081][T22986] block_read_full_folio+0x599/0x830 [ 1261.943938][T22986] filemap_read_folio+0x12c/0x3a0 [ 1261.949506][T22986] do_read_cache_folio+0x354/0x590 [ 1261.955171][T22986] read_part_sector+0xb6/0x2b0 [ 1261.960547][T22986] adfspart_check_ICS+0xb1/0x960 [ 1261.966039][T22986] bdev_disk_changed+0x82b/0x1780 [ 1261.971614][T22986] blkdev_get_whole+0x372/0x510 [ 1261.977077][T22986] bdev_open+0x324/0xd70 [ 1261.981902][T22986] blkdev_open+0x461/0x600 [ 1261.986867][T22986] do_dentry_open+0x816/0x1380 [ 1261.992176][T22986] vfs_open+0x3b/0x340 [ 1261.996788][T22986] path_openat+0x2e3b/0x3890 [ 1262.001928][T22986] do_file_open+0x23e/0x4a0 [ 1262.006984][T22986] do_sys_openat2+0x113/0x200 [ 1262.012202][T22986] __x64_sys_openat+0x138/0x170 [ 1262.017593][T22986] do_syscall_64+0x174/0x580 [ 1262.022720][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.029174][T22986] [ 1262.029174][T22986] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1262.036407][T22986] __mutex_lock+0x19d/0x1590 [ 1262.041535][T22986] nbd_queue_rq+0xc1/0x1150 [ 1262.046585][T22986] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1262.052678][T22986] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1262.059549][T22986] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1262.066076][T22986] blk_mq_run_hw_queue+0x348/0x4f0 [ 1262.071741][T22986] blk_mq_dispatch_list+0xd11/0xe10 [ 1262.077488][T22986] blk_mq_flush_plug_list+0x45f/0x540 [ 1262.083404][T22986] __blk_flush_plug+0x3ed/0x4d0 [ 1262.088795][T22986] __submit_bio+0x465/0x560 [ 1262.093845][T22986] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1262.100173][T22986] block_read_full_folio+0x599/0x830 [ 1262.106014][T22986] filemap_read_folio+0x12c/0x3a0 [ 1262.111600][T22986] do_read_cache_folio+0x354/0x590 [ 1262.117265][T22986] read_part_sector+0xb6/0x2b0 [ 1262.122574][T22986] adfspart_check_ICS+0xb1/0x960 [ 1262.128056][T22986] bdev_disk_changed+0x82b/0x1780 [ 1262.133621][T22986] blkdev_get_whole+0x372/0x510 [ 1262.139021][T22986] bdev_open+0x324/0xd70 [ 1262.143810][T22986] blkdev_open+0x461/0x600 [ 1262.148776][T22986] do_dentry_open+0x816/0x1380 [ 1262.154083][T22986] vfs_open+0x3b/0x340 [ 1262.158701][T22986] path_openat+0x2e3b/0x3890 [ 1262.163842][T22986] do_file_open+0x23e/0x4a0 [ 1262.168892][T22986] do_sys_openat2+0x113/0x200 [ 1262.174112][T22986] __x64_sys_openat+0x138/0x170 [ 1262.179686][T22986] do_syscall_64+0x174/0x580 [ 1262.184815][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.191249][T22986] [ 1262.191249][T22986] -> #4 (set->srcu){.+.+}-{0:0}: [ 1262.198404][T22986] __synchronize_srcu+0xc9/0x2f0 [ 1262.203880][T22986] elevator_switch+0x1e8/0x7b0 [ 1262.209273][T22986] elevator_change+0x2fa/0x480 [ 1262.214587][T22986] elevator_set_default+0x375/0x440 [ 1262.220326][T22986] blk_register_queue+0x3f3/0x4e0 [ 1262.225904][T22986] __add_disk+0x6cb/0xe30 [ 1262.230795][T22986] add_disk_fwnode+0xfb/0x4b0 [ 1262.236024][T22986] nbd_dev_add+0x733/0xb60 [ 1262.240993][T22986] nbd_init+0x15f/0x1e0 [ 1262.245695][T22986] do_one_initcall+0x250/0x870 [ 1262.251002][T22986] do_initcall_level+0x10a/0x1a0 [ 1262.256482][T22986] do_initcalls+0x59/0xa0 [ 1262.261352][T22986] kernel_init_freeable+0x29d/0x3e0 [ 1262.267084][T22986] kernel_init+0x1d/0x1d0 [ 1262.271965][T22986] ret_from_fork+0x514/0xb70 [ 1262.277107][T22986] ret_from_fork_asm+0x1a/0x30 [ 1262.282423][T22986] [ 1262.282423][T22986] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1262.290270][T22986] __mutex_lock+0x19d/0x1590 [ 1262.295398][T22986] elevator_change+0x1af/0x480 [ 1262.300701][T22986] elevator_set_none+0xb5/0x140 [ 1262.306092][T22986] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1262.312457][T22986] nbd_start_device+0x189/0xb30 [ 1262.317860][T22986] nbd_genl_connect+0x1597/0x1c10 [ 1262.323432][T22986] genl_family_rcv_msg_doit+0x233/0x340 [ 1262.329520][T22986] genl_rcv_msg+0x614/0x7a0 [ 1262.334560][T22986] netlink_rcv_skb+0x226/0x4a0 [ 1262.339871][T22986] genl_rcv+0x28/0x40 [ 1262.344393][T22986] netlink_unicast+0x7bb/0x940 [ 1262.349721][T22986] netlink_sendmsg+0x813/0xb40 [ 1262.355036][T22986] ____sys_sendmsg+0x9b9/0xa20 [ 1262.360370][T22986] ___sys_sendmsg+0x2a5/0x360 [ 1262.365599][T22986] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1262.371095][T22986] do_syscall_64+0x174/0x580 [ 1262.376233][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.382668][T22986] [ 1262.382668][T22986] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1262.391303][T22986] blk_alloc_queue+0x544/0x690 [ 1262.396612][T22986] __blk_mq_alloc_disk+0x194/0x390 [ 1262.402269][T22986] nbd_dev_add+0x494/0xb60 [ 1262.407231][T22986] nbd_init+0x15f/0x1e0 [ 1262.411928][T22986] do_one_initcall+0x250/0x870 [ 1262.417230][T22986] do_initcall_level+0x10a/0x1a0 [ 1262.422744][T22986] do_initcalls+0x59/0xa0 [ 1262.427614][T22986] kernel_init_freeable+0x29d/0x3e0 [ 1262.433353][T22986] kernel_init+0x1d/0x1d0 [ 1262.438228][T22986] ret_from_fork+0x514/0xb70 [ 1262.443357][T22986] ret_from_fork_asm+0x1a/0x30 [ 1262.448670][T22986] [ 1262.448670][T22986] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1262.455938][T22986] fs_reclaim_acquire+0x71/0x100 [ 1262.461425][T22986] kmem_cache_alloc_noprof+0x40/0x650 [ 1262.467344][T22986] __kernfs_iattrs+0xdd/0x340 [ 1262.472591][T22986] kernfs_iop_setattr+0xe6/0x3f0 [ 1262.478076][T22986] notify_change+0xbba/0xea0 [ 1262.483213][T22986] do_truncate+0x1c2/0x250 [ 1262.488175][T22986] path_openat+0x2fbd/0x3890 [ 1262.493316][T22986] do_file_open+0x23e/0x4a0 [ 1262.498363][T22986] do_sys_openat2+0x113/0x200 [ 1262.503589][T22986] __x64_sys_openat+0x138/0x170 [ 1262.508986][T22986] do_syscall_64+0x174/0x580 [ 1262.514131][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.520564][T22986] [ 1262.520564][T22986] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1262.529110][T22986] __lock_acquire+0x1520/0x2cd0 [ 1262.534508][T22986] lock_acquire+0x106/0x350 [ 1262.539551][T22986] down_write+0x96/0x200 [ 1262.544334][T22986] kernfs_unlink_sibling+0x6d/0x170 [ 1262.550076][T22986] kernfs_rename_ns+0x48e/0x800 [ 1262.555486][T22986] sysfs_rename_link_ns+0x16e/0x1b0 [ 1262.561238][T22986] device_rename+0x110/0x210 [ 1262.566441][T22986] __dev_change_net_namespace+0x1519/0x1fb0 [ 1262.572880][T22986] cfg802154_switch_netns+0xbd/0x3d0 [ 1262.579017][T22986] cfg802154_pernet_exit+0x75/0xe0 [ 1262.584692][T22986] ops_undo_list+0x43d/0x8d0 [ 1262.589832][T22986] cleanup_net+0x572/0x810 [ 1262.594798][T22986] process_scheduled_works+0xa8e/0x14e0 [ 1262.600888][T22986] worker_thread+0xa47/0xfb0 [ 1262.606017][T22986] kthread+0x389/0x470 [ 1262.610668][T22986] ret_from_fork+0x514/0xb70 [ 1262.615800][T22986] ret_from_fork_asm+0x1a/0x30 [ 1262.621111][T22986] [ 1262.621111][T22986] other info that might help us debug this: [ 1262.621111][T22986] [ 1262.631351][T22986] Chain exists of: [ 1262.631351][T22986] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1262.631351][T22986] [ 1262.645800][T22986] Possible unsafe locking scenario: [ 1262.645800][T22986] [ 1262.653264][T22986] CPU0 CPU1 [ 1262.658646][T22986] ---- ---- [ 1262.664027][T22986] lock(&root->kernfs_rwsem); [ 1262.668833][T22986] lock(cpuhp_state_mutex); [ 1262.675960][T22986] lock(&root->kernfs_rwsem); [ 1262.683268][T22986] lock(&root->kernfs_iattr_rwsem); [ 1262.688576][T22986] [ 1262.688576][T22986] *** DEADLOCK *** [ 1262.688576][T22986] [ 1262.696740][T22986] 5 locks held by kworker/u8:44/22986: [ 1262.702211][T22986] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1262.713118][T22986] #1: ffffc90005ae7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1262.723672][T22986] #2: ffffffff8fdb19a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1262.733014][T22986] #3: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1262.742736][T22986] #4: ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1262.753036][T22986] [ 1262.753036][T22986] stack backtrace: [ 1262.758948][T22986] CPU: 1 UID: 0 PID: 22986 Comm: kworker/u8:44 Not tainted syzkaller #0 PREEMPT(full) [ 1262.758970][T22986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1262.758983][T22986] Workqueue: netns cleanup_net [ 1262.759009][T22986] Call Trace: [ 1262.759018][T22986] [ 1262.759028][T22986] dump_stack_lvl+0xe8/0x150 [ 1262.759048][T22986] print_circular_bug+0x2e1/0x300 [ 1262.759079][T22986] check_noncircular+0x12e/0x150 [ 1262.759105][T22986] __lock_acquire+0x1520/0x2cd0 [ 1262.759127][T22986] ? __lock_acquire+0x683/0x2cd0 [ 1262.759146][T22986] ? __lock_acquire+0x683/0x2cd0 [ 1262.759168][T22986] ? kernfs_unlink_sibling+0x6d/0x170 [ 1262.759194][T22986] lock_acquire+0x106/0x350 [ 1262.759211][T22986] ? kernfs_unlink_sibling+0x6d/0x170 [ 1262.759245][T22986] down_write+0x96/0x200 [ 1262.759264][T22986] ? kernfs_unlink_sibling+0x6d/0x170 [ 1262.759291][T22986] ? __pfx_down_write+0x10/0x10 [ 1262.759309][T22986] ? kernfs_root+0x1c/0x230 [ 1262.759331][T22986] ? kernfs_root+0x1c/0x230 [ 1262.759351][T22986] ? kernfs_root+0x1c/0x230 [ 1262.759374][T22986] ? kernfs_root+0x1ea/0x230 [ 1262.759396][T22986] kernfs_unlink_sibling+0x6d/0x170 [ 1262.759425][T22986] kernfs_rename_ns+0x48e/0x800 [ 1262.759455][T22986] sysfs_rename_link_ns+0x16e/0x1b0 [ 1262.759480][T22986] device_rename+0x110/0x210 [ 1262.759499][T22986] __dev_change_net_namespace+0x1519/0x1fb0 [ 1262.759530][T22986] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 1262.759550][T22986] ? __lock_acquire+0x683/0x2cd0 [ 1262.759574][T22986] ? __lock_acquire+0x683/0x2cd0 [ 1262.759598][T22986] ? __mutex_trylock_common+0x15f/0x270 [ 1262.759622][T22986] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1262.759646][T22986] ? rcu_is_watching+0x15/0xb0 [ 1262.759666][T22986] ? trace_contention_end+0x3d/0x140 [ 1262.759690][T22986] ? __mutex_lock+0x30f/0x1590 [ 1262.759711][T22986] ? do_raw_spin_unlock+0xf5/0x210 [ 1262.759738][T22986] ? __pfx___mutex_lock+0x10/0x10 [ 1262.759758][T22986] ? rdma_dev_exit_net+0x2b2/0x340 [ 1262.759858][T22986] cfg802154_switch_netns+0xbd/0x3d0 [ 1262.759884][T22986] cfg802154_pernet_exit+0x75/0xe0 [ 1262.759908][T22986] ops_undo_list+0x43d/0x8d0 [ 1262.759936][T22986] ? __pfx_ops_undo_list+0x10/0x10 [ 1262.759961][T22986] ? idr_destroy+0x218/0x290 [ 1262.760013][T22986] ? do_raw_spin_unlock+0xf5/0x210 [ 1262.760040][T22986] cleanup_net+0x572/0x810 [ 1262.760065][T22986] ? __pfx_cleanup_net+0x10/0x10 [ 1262.760099][T22986] ? rcu_is_watching+0x15/0xb0 [ 1262.760120][T22986] ? process_scheduled_works+0xa20/0x14e0 [ 1262.760137][T22986] process_scheduled_works+0xa8e/0x14e0 [ 1262.760168][T22986] ? __pfx_process_scheduled_works+0x10/0x10 [ 1262.760199][T22986] ? assign_work+0x3cf/0x5d0 [ 1262.760230][T22986] worker_thread+0xa47/0xfb0 [ 1262.760260][T22986] kthread+0x389/0x470 [ 1262.760283][T22986] ? __pfx_worker_thread+0x10/0x10 [ 1262.760300][T22986] ? __pfx_kthread+0x10/0x10 [ 1262.760322][T22986] ret_from_fork+0x514/0xb70 [ 1262.760342][T22986] ? __pfx_ret_from_fork+0x10/0x10 [ 1262.760359][T22986] ? __switch_to+0xc89/0x1420 [ 1262.760386][T22986] ? __pfx_kthread+0x10/0x10 [ 1262.760408][T22986] ret_from_fork_asm+0x1a/0x30 [ 1262.760437][T22986] [ 1263.174404][T32049] __nla_validate_parse: 6 callbacks suppressed [ 1263.174432][T32049] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7415'. [ 1263.253187][T22986] veth1_vlan: left allmulticast mode [ 1263.278609][T22986] veth1_macvtap: left promiscuous mode [ 1263.284236][T22986] veth1_vlan: left promiscuous mode [ 1263.289818][T22986] veth0_vlan: left promiscuous mode [ 1263.850418][T22986] IPVS: stop unused estimator thread 0...