last executing test programs: 10.321500013s ago: executing program 1 (id=2846): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000180)="fff58e6d95aa117a6d4e44260f6beeb1a4710859c2c7f8a29a9f147ed9d1f1fd7db63c9f0204bdaa874377a67562726368d4ed7ad75831f5526c65059465f593a5af7b9b88f2d3c9d3477f83e156b168d8ccc81942a6e0cf8bca5793bc27de0a9bfd3958155278ecba16a1fbafb459797e40ea934a9b6c6ffb02003c236e56a69a74a364eb3e5bb2a4d57837887faf207e10bc9228c5b9188dd55cd1a9a835ea71f0b850c584b4885f4ce258d10e19a1e6719ff377be50a2f033", 0xba) 10.063726018s ago: executing program 1 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x40200, 0x412}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000180)) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r4, 0x100000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000050) pread64(r3, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 8.919126373s ago: executing program 1 (id=2862): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x3, 0x401, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x7, 0x47, [@local]}, @rr={0x7, 0x1f, 0x8a, [@private=0xa010100, @rand_addr=0x64010102, @multicast1, @remote, @multicast1, @broadcast, @multicast2]}, @end, @lsrr={0x83, 0x1f, 0xc3, [@local, @rand_addr=0x64010101, @remote, @empty, @loopback, @local, @local]}, @cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@local, @empty, @private0, 0x9, 0x7, 0xff, 0x0, 0x5, 0x200000, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.690041352s ago: executing program 1 (id=2865): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), &(0x7f0000000580)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) socket$kcm(0xa, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0x1, 0x1, {0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}}}, 0x80, 0x0}, 0x20020830) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="60d6b068fc45"}) 8.455684598s ago: executing program 1 (id=2868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000871183e000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x40, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r1, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ef, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0xb2a5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.612033572s ago: executing program 1 (id=2874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="fb", 0x1) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) recvmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003780)=""/4099, 0x1003}, {&(0x7f0000000080)=""/72, 0x48}, {&(0x7f0000000200)=""/205, 0xfde9}], 0x3}}], 0x1, 0x10100, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x4a7, 0x4, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002800000000000690780a010102ac1414aafffe4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1079ce0de577b211946041000090780001"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x1c, r9, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) 3.516146184s ago: executing program 3 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x209, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) 3.436946444s ago: executing program 3 (id=2893): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0ce6aa", 0x60}, {&(0x7f0000000600)="6cb9b5ed91ee06e31b329aaaa4a64f8fa6270166d3d080904b759c88abab7238eaa063fa30bb668dce79bcf9fb8a890b00f98b1f7b0aa2d8dbd95626cecf55e25bae5de7881f4104e5decd17d3f114552b1823c193aba621e46d3f4517296b8ab5e26a0fe8046927b9833816d92dbefb90d76f9f7fea0391b305c1cb1ee06648ef3830ed26ddc6344d3cc2b7dfc939afef93447e99e2d747cf37513d087578a3dae42244248a398db533031d3112", 0xae}, {&(0x7f00000006c0)="92933ae6adb1fbe9f93f904b11157cbe3d27e7dbdc7f9cccef5f06a85d3511526419362ad07778698bcebc880c5e77b2b383be1189b36200bce422d231acbfe6a476aebf0e18d3b7bff6d94f364d70bf82c296bb5e8c6c8d0686", 0x5a}, {&(0x7f0000000880)="e7563d3bb5ebdd5911d6455ec077369c67edc049c04cedaa94a80fda6648457f7a33c1a416dc225c16532da98fe761fae7f3af41b44ad74fc305a1bc7e36fb0775781c4cd5fd363237d965eeae4dd235564063f2661696ef27e44c9ad566d32ab793bf8f1207a834189e7953188fa1", 0x6f}], 0x4}}], 0x1, 0x4080) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000790200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 2.475150546s ago: executing program 3 (id=2902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000071105d00000000009500000000000039f8f5e51e"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES8=r2], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0xf8bd, 0xff, 0x4, 0xe17}) r4 = socket(0x10, 0x803, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) close(r6) syz_genetlink_get_family_id$mptcp(0x0, r5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c01bcd0b0c54c452b0000", @ANYRES16=r9, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c000200ffff0000000000000c0004000200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, r11, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x15}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x7}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4040880) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 2.140469295s ago: executing program 4 (id=2904): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) close(r4) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x20000001) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x40045) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x2, 0x1, 0xffffffffffffffff, 0x400}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r8}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 1.939517103s ago: executing program 2 (id=2906): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0xbab8) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x16, &(0x7f00000004c0)=@raw=[@generic={0xff, 0x1, 0x8, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000580)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[r0, r4, r2, r0, r0], &(0x7f00000006c0)=[{0x1, 0x1, 0xf, 0x8}, {0x0, 0x1, 0xf, 0x7}, {0x2, 0x5, 0x0, 0xa}, {0x4, 0x5, 0x4, 0x5b366a607103e9a9}, {0x2, 0x2, 0x1, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.888813458s ago: executing program 3 (id=2907): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003940), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003980)={0x20, r2, 0x701, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800c094}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x4c0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x490, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffd1, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x4c0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fb"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 1.639470178s ago: executing program 2 (id=2909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d00000000ea010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.397952159s ago: executing program 0 (id=2911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x4000890) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004080}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x24, r7, 0x0, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x80) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async) connect$inet(r12, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r12, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e657665300000000050a2000000140000001100010000000000000000000000000a"], 0x70}}, 0x24040884) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1.267479217s ago: executing program 2 (id=2912): r0 = socket(0x1, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="a5477120517fea7b15b7d8018ff3bac0cbd73831bf8bd36df2b89fa5d79cde9771d619638220f6cef0b33c6ee8a574fc0196d446ac0738a8e784889ac586f95443030f6743af414016167d79e700a04e7cc1812e41b40c33b8842cd9e405444ce95d11408394e5e866275181a6fe5ee70752c790365f099e5616069bcdd28ad649a1aba71a3dae25ae4398e144692d9f7a03370ac39f82bf1a7e11c45ef8db353e953a248a93cb274625af2e78c9faecd4409354a4039d885fc9114ee159c448884ccd2b852a166323282c51536a5ba88058078f0dab", @ANYBLOB="bf6a3515c9f77cdcd32d7ac2b9fc71b8755b53d1f2fbfacf85795759114662b8c40d06612e416c34c43c047a1b885c616c41b8ba11bc0f0917c9674a8984322362273aac5a6ff12f70eb0d1d3da24063a231e2944410b21471682aff9d213c6a3449db452389be9dac712910a3a84be3d99539258be06f603f89e9fd9b4b0fe67cd67261fd34b477de2097a18cbbfec8ba45195da9694b9d8706c637a1a542465b16cf4f17b17c9a70fcbe23f7a4b4f68d9d281b1a68f1ea616ebb0a1bc043551e955b126a458f1b6d1ff5", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x37a6bc78a27d296f}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.247965346s ago: executing program 0 (id=2913): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x404c019}, 0xc080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) ioctl(r7, 0x7434, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) 1.204976409s ago: executing program 2 (id=2914): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r5, 0x2b, "3b9ee9ee8a0679a028146639a4a0aefdd98ca196748233c0ff72436c991b1f9a540573859cf837d866ae65"}, &(0x7f0000000340)=0x33) r6 = socket$unix(0x1, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x4, @empty, 0x800d473}, 0x4, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xff, 0x8, 0x10, 0x2}]}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x5c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0x5, 0x0, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xe, 0x0, 0x7}}]}}]}, 0x5c}}, 0x80) 1.047556942s ago: executing program 4 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) splice(r0, &(0x7f0000000000)=0x3, r0, &(0x7f00000000c0)=0x8, 0x10000, 0x9) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x15c}}, 0x24008050) 979.487665ms ago: executing program 4 (id=2916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f000000c700)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)="e2", 0x1}], 0x1}}], 0x1, 0x4000041) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0xfa}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r3, 0x74, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xfffeffff, @local, 0x9a4}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x7fff, @private0, 0xa0}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000140)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r4, &(0x7f000000c700)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)="e2", 0x1}], 0x1}}], 0x1, 0x4000041) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0xfa}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r3, 0x74, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xfffeffff, @local, 0x9a4}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x7fff, @private0, 0xa0}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000140)=0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 857.610226ms ago: executing program 0 (id=2917): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080004000600000000000000140000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f00000012c0)=""/165}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) close(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$sock(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x18}}], 0x1, 0x40c1) 788.188859ms ago: executing program 4 (id=2918): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) close(0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) 730.934839ms ago: executing program 3 (id=2919): syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x80}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x37, {{0x2, 0x4e23, @loopback}}}, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket(0x2, 0xa, 0xbfffffe6) socket$nl_netfilter(0x10, 0x3, 0xc) 614.952873ms ago: executing program 0 (id=2920): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000007d0800054000000004080003400000009008000240000000010800d680000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x4000) 524.172696ms ago: executing program 4 (id=2921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000030000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 504.399588ms ago: executing program 0 (id=2922): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f00000034c0)=""/118, 0x76}], 0x2}, 0x6e58}], 0x1, 0x42, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="04002dbd7000ffdbdf254b00000008000300020080000e00a80066697273746e616d600000000f00a9007365636f6e646e616d650000080001007063690011000200303030303a30303a31302e30000000800000000066697273746e616d650000000c00a70096650000000000000e00a9006669f273746e616d650000000c00a600fcffffffffffffff"], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x815) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x61800, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 491.885721ms ago: executing program 2 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000015}) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd602}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}]}], {0x14, 0x10}}, 0x140}}, 0x0) (async, rerun: 32) r3 = socket$igmp6(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e23, 0x7, @dev, 0x400000}, 0xffffffffffffffff, {[0x0, 0x10000, 0x0, 0xfffffffc, 0xfffffffe, 0x3, 0x0, 0x200]}}, 0x5c) 231.408796ms ago: executing program 0 (id=2924): close(0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000)) socket(0x1d, 0x2, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r6, 0xf5f) accept(r6, 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[], 0xb8}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) 190.174097ms ago: executing program 2 (id=2925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xf}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) (async) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x9) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0xfffffffa, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x809, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x4, 0x4, 0x10, @struct={0x800, 0xfffffffb}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x4, 0xe, 0xffff, 0x92, @usage=0xcb, 0x1, 0x800, [0x8000000000000001, 0x6, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd70000100001401000000140001"], 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002380)={{r3}, r9, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r10}) (async, rerun: 64) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (rerun: 64) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x3ff, 0xc511}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={r1}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000400)={r14, 0x8}, 0x8) (async, rerun: 64) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES64=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 69.460012ms ago: executing program 3 (id=2926): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={0x0}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d000000000300000001000000000000000100000004000000030000000000000000000005000000000000002e", @ANYRES32], 0x0, 0x5e, 0x0, 0x1}, 0x28) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000008021100000108021100000008021100000020000100000001003b9b9caa010882848b960c121824"], 0x28) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc044) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000300)=""/148, 0x94, 0x1) 0s ago: executing program 4 (id=2927): socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="5c9af1c5267216f56945f75666867fec2f38aa07f63c2934eda4d3852446e46f8e5b42444867f915042d0d53a5067832008485befd368145670f8a8f586f6c36fa4be5c21515eaed7369cf93428eaee7830ccf850d629e2beb8130f6b6d8a1615690d36973a5433268308033931a09e3ecba7e7f6f92a4c34ea72092211916e7068d32970392a325cbf52e76a47b6660f3d5bd1b2fa4e7177b33f6783585cc1bdbdc8af9335cff66dee2361a7e458cf209e0d3eb32cd9bc3541eb5ca34ba323612092711751f7928bbd01cc37864ce689cd3", 0xd2}, {&(0x7f0000000600)="51254f547e450d009763bc2a7066ad1ce4bb1292710ff3ef25adf52b929614caa26e0cf8cd1abb16b7b72bae6aab10fc24b4a7e4fa04d00a10c6c2e2a1fd9e40d52e78a0c362f11cd489ab4b311a7f5e44f0e98d7c69b0130060d7038c56817b64ac340cc5e0ec9cf00e3834cee1d99cc712766e753e86ab10e9b8df2318481249dc43060129072e4d665bd6cd5513197cdfe9b02822bc2e239a52f62b64498eb319c3bd5814859b9e26e8827166252cecf9cc816150d0db7c10d804f19f4437f005939f9f9f7c", 0xc7}, {&(0x7f0000000700)="bd", 0x1}, {&(0x7f0000000740)="cb71ce647bd88f31d85e168bea659313918b99e223390c11b72b05e5d178748da7b5d87a9b88cb6404903c00cdb94a3322a8cbdbc013711744affdc094a093557dcf528ad603cc75da86182e4fc8e9c8f0c4a6ac8474dbe137bf096baf00e37b", 0x60}, {&(0x7f00000007c0)="722f6687e59c6f1dbf14fd8a5170c6cebe32cbc7b0832546c2bc02353426526a9fe19636c2a94aeabd1a5de5a27c21fbad4c7af84632cb148baa", 0x3a}, {&(0x7f0000000800)="9c2ffcd1b70715b81b9860d004ba017f04a7dbf97bcea72b3d83cde34552d1e93fbb283e4588fd578f8ead3a969380d54c4f42b1cc8e84ad4603129329ae3870acb187c91ef0caacba8b13d1266c072f645cad3260dc0bf0a84048b20a24eab3b45921dd78fd6e32e20a3d5f84caa88e6d2d0ff94ffc0986e7b1ff78e27a39fc8636cecb4b54ba40a5d134e9", 0x8c}], 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000001000000170100000200000039000000599bc943a85d861da623075aebe237b54cf0a7b642e7bcc0165db46a5eae8522b76a050af945aa5f5334092c52e3fc4cc30c8b67abf5607d4b0000001800000000000000170100000400000000010000000000001800000000000000170100000300000000000000000000001800000000000000170100000400000005000000000000001800000097c01146aedd00000000170100000200"/182], 0xb0, 0x8000}, 0x40000) (async) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x22020600) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.3.1771'. [ 282.284139][T13624] ipvlan2: entered promiscuous mode [ 282.284564][T13624] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 282.284635][T13624] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 282.284938][T13624] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 282.465102][T13630] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1774'. [ 282.776478][T13599] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 282.776549][T13599] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 282.776609][T13599] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 282.849684][T13599] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 282.904507][T13599] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 282.966268][T13657] tipc: Enabled bearer , priority 10 [ 283.374704][T13664] xfrm0 speed is unknown, defaulting to 1000 [ 283.657719][T13688] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 283.666276][T13688] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 284.252485][T13661] xfrm0 speed is unknown, defaulting to 1000 [ 284.300234][T13714] bridge_slave_0: left allmulticast mode [ 284.306289][T13714] bridge_slave_0: left promiscuous mode [ 284.312354][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.337591][T13714] bridge_slave_1: left allmulticast mode [ 284.337625][T13714] bridge_slave_1: left promiscuous mode [ 284.351600][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.392895][T13714] team0: Port device team_slave_0 removed [ 284.403230][T13714] team0: Port device team_slave_1 removed [ 284.405439][T13714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.443075][T13714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.456517][T13714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.485123][T13718] syzkaller0: left promiscuous mode [ 284.485153][T13718] syzkaller0: left allmulticast mode [ 284.649791][T13721] bond10: entered allmulticast mode [ 284.942352][T13675] xfrm0 speed is unknown, defaulting to 1000 [ 285.704234][T13758] __nla_validate_parse: 3 callbacks suppressed [ 285.710805][T13758] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1798'. [ 285.720928][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1798'. [ 285.789510][T13759] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 285.789562][T13759] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 286.557695][T13766] syzkaller0: entered promiscuous mode [ 286.557735][T13766] syzkaller0: entered allmulticast mode [ 286.636381][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 286.645548][T13769] netlink: 'syz.4.1801': attribute type 11 has an invalid length. [ 286.664117][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 286.664166][T13769] netlink: 'syz.4.1801': attribute type 11 has an invalid length. [ 286.927267][T13777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1802'. [ 286.946474][T13777] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1802'. [ 287.521654][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 287.740804][T13820] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 287.768539][T13823] netlink: 'syz.3.1817': attribute type 16 has an invalid length. [ 287.776582][T13823] netlink: 'syz.3.1817': attribute type 17 has an invalid length. [ 287.784998][T13823] lo: left promiscuous mode [ 287.790698][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 287.801238][T13823] tunl0: left promiscuous mode [ 287.807583][T13823] gre0: left promiscuous mode [ 287.817079][T13823] gretap0: left promiscuous mode [ 287.829554][T13823] erspan0: left promiscuous mode [ 287.835375][T13825] netlink: 'syz.3.1817': attribute type 16 has an invalid length. [ 287.835419][T13825] netlink: 'syz.3.1817': attribute type 17 has an invalid length. [ 287.875288][T13823] ip_vti0: left promiscuous mode [ 287.883045][T13823] ip6_vti0: left promiscuous mode [ 287.894480][T13823] sit0: left promiscuous mode [ 287.932361][T13823] ip6tnl0: left promiscuous mode [ 287.938951][T13823] ip6gre0: left promiscuous mode [ 287.947032][T13823] syz_tun: left promiscuous mode [ 287.959289][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.968427][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.977465][T13823] batadv0: left allmulticast mode [ 288.018321][ T278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.018743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.036504][ T278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.037770][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.040036][ T8152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.044611][ T7713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.118275][T13823] batadv_slave_1: entered promiscuous mode [ 288.141707][T13823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.161939][T13823] veth1_vlan: left promiscuous mode [ 288.168164][T13823] veth0_vlan: left promiscuous mode [ 288.174510][T13823] veth0_vlan: entered promiscuous mode [ 288.185133][T13823] veth1_vlan: entered promiscuous mode [ 288.185667][T13823] macvlan0: left promiscuous mode [ 288.198908][T13823] veth1_macvtap: left promiscuous mode [ 288.205194][T13823] veth1_macvtap: entered promiscuous mode [ 288.244522][T13823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.255739][T13823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.275564][T13823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.333842][T13823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.346743][T13823] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 288.355551][T13823] bond5: left promiscuous mode [ 288.355571][T13823] bond5: left allmulticast mode [ 288.356681][T13823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.367495][T13823] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.370564][T13823] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.383816][T13823] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.400704][T13823] 8021q: adding VLAN 0 to HW filter on device bond9 [ 288.440870][T13823] syzkaller0: left promiscuous mode [ 288.440915][T13823] syzkaller0: left allmulticast mode [ 288.446489][T13823] geneve2: left promiscuous mode [ 288.446507][T13823] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 288.490517][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 288.523225][T13825] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 288.677329][T13856] netlink: 'syz.2.1822': attribute type 1 has an invalid length. [ 288.677370][T13856] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1822'. [ 288.686881][ T1437] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.687909][ T1437] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 288.688096][ T1437] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 288.723919][ T1437] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.815173][ T278] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.826020][ T7735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.851501][ T136] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.643046][ T136] net_ratelimit: 1 callbacks suppressed [ 289.643093][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.702310][T13912] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 289.843024][T13917] veth9: entered allmulticast mode [ 289.889926][T13912] bond15: (slave veth0_to_bond): Releasing active interface [ 289.889975][T13912] veth0_to_bond: left promiscuous mode [ 289.919222][T13912] bond18: (slave veth0_to_bond): making interface the new active one [ 289.936901][T13912] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 289.992135][T13920] macvlan2: entered promiscuous mode [ 289.992180][T13920] macvlan2: entered allmulticast mode [ 289.997494][T13920] bond18: entered promiscuous mode [ 289.997524][T13920] veth0_to_bond: entered promiscuous mode [ 290.005198][T13920] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.010166][T13920] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 290.010442][T13920] bond18: left promiscuous mode [ 290.010523][T13920] veth0_to_bond: left promiscuous mode [ 290.233249][T13929] ip_tables: iptables: counters copy to user failed while replacing table [ 290.920199][T13956] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 290.979658][T13948] xt_hashlimit: size too large, truncated to 1048576 [ 290.989449][T13950] syzkaller0: entered promiscuous mode [ 290.989512][T13950] syzkaller0: entered allmulticast mode [ 291.128383][T13956] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 291.128436][T13956] __nla_validate_parse: 9 callbacks suppressed [ 291.128475][T13956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1849'. [ 291.249701][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 291.278693][T13958] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.333194][T13958] bridge_slave_0 (unregistering): left allmulticast mode [ 291.333285][T13958] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.384639][T13955] dummy0: left promiscuous mode [ 291.387541][T13956] dummy0: entered promiscuous mode [ 291.828889][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1852'. [ 292.010839][T13996] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 292.401759][T13997] veth19: entered allmulticast mode [ 292.478062][T13998] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 292.495061][T13995] macvlan2: entered promiscuous mode [ 292.495108][T13995] macvlan2: entered allmulticast mode [ 292.500471][T13995] bond14: entered promiscuous mode [ 292.506023][T13995] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 292.510269][T13995] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 292.543779][T13995] bond14: left promiscuous mode [ 292.645694][T14005] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 292.675680][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 292.760226][T14019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1862'. [ 292.783011][T14020] syzkaller0: entered promiscuous mode [ 292.788662][T14020] syzkaller0: entered allmulticast mode [ 292.867741][T14025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1864'. [ 294.782590][T14043] tipc: Enabling of bearer rejected, already enabled [ 294.794395][T14049] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 294.949459][T14059] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 295.004541][T14059] bond19: option mode: invalid value (9) [ 295.030855][T14067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1871'. [ 295.153724][T14073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.179581][T14059] bond19 (unregistering): Released all slaves [ 295.285113][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1871'. [ 295.286207][T14077] netlink: 'syz.0.1871': attribute type 13 has an invalid length. [ 295.567328][T14063] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 295.584630][T14057] team0: left promiscuous mode [ 295.658062][T14067] IPVS: Error connecting to the multicast addr [ 295.970722][T14090] xt_NETMAP: bad MAP_IPS. [ 295.997169][T14092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1876'. [ 296.007526][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 296.122163][T14095] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 296.254559][T14097] veth0_to_bridge: entered promiscuous mode [ 296.260860][T14097] macvtap1: entered allmulticast mode [ 296.266522][T14097] veth0_to_bridge: entered allmulticast mode [ 296.287342][T14097] veth0_to_bridge: left allmulticast mode [ 296.294889][T14097] veth0_to_bridge: left promiscuous mode [ 296.437141][T14105] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 296.555309][T14108] veth9: entered allmulticast mode [ 296.585679][T14105] bond18: (slave veth0_to_bond): Releasing active interface [ 296.610548][T14105] bond19: (slave veth0_to_bond): making interface the new active one [ 296.618802][T14105] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 296.638681][T14105] macvlan2: entered promiscuous mode [ 296.638717][T14105] macvlan2: entered allmulticast mode [ 296.652135][T14105] bond19: entered promiscuous mode [ 296.652168][T14105] veth0_to_bond: entered promiscuous mode [ 296.655898][T14105] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.658728][T14105] bond19: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 296.658949][T14105] bond19: left promiscuous mode [ 296.659206][T14105] veth0_to_bond: left promiscuous mode [ 297.006529][T14125] netlink: 'syz.3.1887': attribute type 7 has an invalid length. [ 297.017429][T14125] netlink: 'syz.3.1887': attribute type 8 has an invalid length. [ 297.017450][T14125] netlink: 'syz.3.1887': attribute type 12 has an invalid length. [ 297.270811][T14138] __nla_validate_parse: 1 callbacks suppressed [ 297.279598][T14138] netlink: 8568 bytes leftover after parsing attributes in process `syz.2.1890'. [ 297.279639][T14138] openvswitch: netlink: Flow key attr not present in new flow. [ 297.430346][T14146] netlink: 'syz.3.1891': attribute type 3 has an invalid length. [ 297.493089][T14141] netlink: 'syz.3.1891': attribute type 4 has an invalid length. [ 297.493135][T14141] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1891'. [ 297.634225][T14141] xt_CT: No such helper "snmp_trap" [ 297.988497][T14166] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 298.028011][T14178] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 298.097401][T14181] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 298.313228][T14191] veth9: entered allmulticast mode [ 298.412809][T14181] bond19: (slave veth0_to_bond): Releasing active interface [ 298.488403][T14181] bond20: (slave veth0_to_bond): making interface the new active one [ 298.501061][T14181] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 298.562879][T14198] macvlan2: entered promiscuous mode [ 298.562924][T14198] macvlan2: entered allmulticast mode [ 298.570243][T14198] bond20: entered promiscuous mode [ 298.570297][T14198] veth0_to_bond: entered promiscuous mode [ 298.584457][T14198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.589375][T14198] bond20: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 298.589608][T14198] bond20: left promiscuous mode [ 298.589647][T14198] veth0_to_bond: left promiscuous mode [ 299.022857][T14229] syzkaller0: entered promiscuous mode [ 299.022902][T14229] syzkaller0: entered allmulticast mode [ 299.160506][T14235] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1909'. [ 299.378117][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'. [ 299.394832][T14247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1914'. [ 299.455783][T14245] netlink: 'syz.3.1915': attribute type 21 has an invalid length. [ 299.455950][T14245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1915'. [ 299.841720][T14264] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1917'. [ 299.889413][T14268] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 300.085650][T14265] veth9: entered allmulticast mode [ 300.144588][T14281] xt_hashlimit: size too large, truncated to 1048576 [ 300.211046][T14268] bond20: (slave veth0_to_bond): Releasing active interface [ 300.240061][T14268] bond21: (slave veth0_to_bond): making interface the new active one [ 300.260735][T14268] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 300.314485][T14275] macvlan2: entered promiscuous mode [ 300.314542][T14275] macvlan2: entered allmulticast mode [ 300.320042][T14275] bond21: entered promiscuous mode [ 300.320067][T14275] veth0_to_bond: entered promiscuous mode [ 300.320925][T14275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.356211][T14275] bond21: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 300.356587][T14275] bond21: left promiscuous mode [ 300.356643][T14275] veth0_to_bond: left promiscuous mode [ 300.784006][T14273] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 300.847596][T14306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1925'. [ 300.847636][T14306] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1925'. [ 300.932286][T14306] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 300.943545][T14306] bridge8: entered promiscuous mode [ 301.000644][T14313] netlink: 'syz.4.1926': attribute type 3 has an invalid length. [ 301.000690][T14313] netlink: 646 bytes leftover after parsing attributes in process `syz.4.1926'. [ 301.028768][T14311] sit0: left promiscuous mode [ 301.046186][T14317] lo: left promiscuous mode [ 301.377742][T14317] tunl0: left promiscuous mode [ 301.436408][T14317] gre0: left promiscuous mode [ 301.504318][T14317] gretap0: left promiscuous mode [ 301.649641][T14317] erspan0: left promiscuous mode [ 301.727608][T14317] ip_vti0: left promiscuous mode [ 301.774346][T14317] ip6_vti0: left promiscuous mode [ 301.822107][T14317] ip6gre0: left promiscuous mode [ 301.859547][T14317] ip6gretap0: left promiscuous mode [ 301.905246][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.935180][T14317] vcan0: left promiscuous mode [ 301.954992][T14317] bond0: left promiscuous mode [ 301.961945][T14317] bridge0: left promiscuous mode [ 301.990096][T14317] nlmon0: left promiscuous mode [ 302.038702][T14317] veth0: left promiscuous mode [ 302.103504][T14317] veth1: left promiscuous mode [ 302.186252][T14317] wg0: left promiscuous mode [ 302.239424][T14317] wg1: left promiscuous mode [ 302.255152][T14317] wg2: left promiscuous mode [ 302.270735][T14317] veth1_to_bridge: left promiscuous mode [ 302.328644][T14317] bond_slave_0: left promiscuous mode [ 302.344435][T14317] veth1_to_bond: left promiscuous mode [ 302.358718][T14317] bond_slave_1: left promiscuous mode [ 302.384746][T14317] veth0_to_team: left promiscuous mode [ 302.400077][T14317] team_slave_0: left promiscuous mode [ 302.425333][T14317] veth1_to_team: left promiscuous mode [ 302.449746][T14317] team_slave_1: left promiscuous mode [ 302.474862][T14317] veth0_to_batadv: left promiscuous mode [ 302.498509][T14317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.498606][T14317] batadv_slave_0: left promiscuous mode [ 302.516738][T14317] veth1_to_batadv: left promiscuous mode [ 302.549671][T14317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.549747][T14317] batadv_slave_1: left promiscuous mode [ 302.581176][T14317] xfrm0: left promiscuous mode [ 302.602603][T14317] veth0_to_hsr: left promiscuous mode [ 302.651905][T14317] veth1_to_hsr: left promiscuous mode [ 302.691899][T14317] hsr0: left promiscuous mode [ 302.727650][T14317] vlan0: left promiscuous mode [ 302.730072][T14317] vlan1: left promiscuous mode [ 302.730749][T14317] macvlan0: left promiscuous mode [ 302.736975][T14317] ipvlan0: left promiscuous mode [ 302.737419][T14317] ipvlan1: left promiscuous mode [ 302.742227][T14317] macvtap0: left promiscuous mode [ 302.742634][T14317] macsec0: left promiscuous mode [ 302.742882][T14317] geneve0: left promiscuous mode [ 302.743023][T14317] geneve1: left promiscuous mode [ 302.743390][T14317] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 302.747320][T14317] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 302.747633][T14317] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 302.747969][T14317] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 302.748150][T14317] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 302.748292][T14317] bond1: left promiscuous mode [ 302.748420][T14317] syztnl0: left promiscuous mode [ 302.750497][T14317] bond2: left promiscuous mode [ 302.750831][T14317] bond3: left promiscuous mode [ 302.751090][T14317] bond4: left promiscuous mode [ 302.753908][T14317] bond5: left promiscuous mode [ 302.754044][T14317] ip6gre1: left promiscuous mode [ 302.754060][T14317] ip6gre1: left allmulticast mode [ 302.754229][T14317] gtp0: left promiscuous mode [ 302.754566][T14317] sit1: left promiscuous mode [ 302.754866][T14317] bond6: left promiscuous mode [ 302.755179][T14317] gre1: left promiscuous mode [ 302.755455][T14317] vxlan0: left promiscuous mode [ 302.755735][T14317] bond7: left promiscuous mode [ 302.756083][T14317] gtp1: left promiscuous mode [ 302.756422][T14317] ip6tnl1: left promiscuous mode [ 302.756451][T14317] ip6tnl1: left allmulticast mode [ 302.756719][T14317] bond8: left promiscuous mode [ 302.756749][T14317] bond8: left allmulticast mode [ 302.757029][T14317] bridge1: left promiscuous mode [ 302.757370][T14317] bond9: left promiscuous mode [ 302.757664][T14317] bridge2: left promiscuous mode [ 302.757925][T14317] macvlan1.3: left promiscuous mode [ 302.757970][T14317] macvlan1: left promiscuous mode [ 302.758767][T14317] mac80211_hwsim hwsim22 wlan2: left promiscuous mode [ 302.759152][T14317] bond10: left promiscuous mode [ 302.759398][T14317] gtp2: left promiscuous mode [ 302.759777][T14317] bond11: left promiscuous mode [ 302.760293][T14317] bond13: left promiscuous mode [ 302.760571][T14317] bond14: left promiscuous mode [ 302.760818][T14317] bond15: left promiscuous mode [ 302.900847][T14369] validate_nla: 1 callbacks suppressed [ 302.900892][T14369] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 303.238773][T14357] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 303.292454][T14378] sctp: [Deprecated]: syz.4.1937 (pid 14378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.292454][T14378] Use struct sctp_sack_info instead [ 303.446058][T14370] veth7: entered allmulticast mode [ 303.468069][T14378] netlink: zone id is out of range [ 303.468097][T14378] netlink: zone id is out of range [ 303.468156][T14378] netlink: zone id is out of range [ 303.468173][T14378] netlink: zone id is out of range [ 303.468183][T14378] netlink: zone id is out of range [ 303.468194][T14378] netlink: zone id is out of range [ 303.468204][T14378] netlink: zone id is out of range [ 303.468215][T14378] netlink: zone id is out of range [ 303.468226][T14378] netlink: zone id is out of range [ 303.468235][T14378] netlink: zone id is out of range [ 303.625239][T14371] bond12: (slave veth0_to_bond): making interface the new active one [ 303.637420][T14371] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 303.654222][ T278] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.654296][ T278] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.654410][ T278] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.654532][ T278] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.705484][T14372] macvlan3: entered promiscuous mode [ 303.705533][T14372] macvlan3: entered allmulticast mode [ 303.712780][T14372] bond12: entered promiscuous mode [ 303.712826][T14372] veth0_to_bond: entered promiscuous mode [ 303.725156][T14372] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 303.726100][T14372] bond12: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 303.726319][T14372] bond12: left promiscuous mode [ 303.726355][T14372] veth0_to_bond: left promiscuous mode [ 303.909128][T14401] __nla_validate_parse: 2 callbacks suppressed [ 303.915947][T14401] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1943'. [ 304.165221][T14409] x_tables: unsorted entry at hook 2 [ 304.806366][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 304.932708][T14444] syzkaller0: entered promiscuous mode [ 304.932751][T14444] syzkaller0: entered allmulticast mode [ 305.110265][T14444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1952'. [ 305.230073][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1955'. [ 305.257303][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 305.527160][T14474] xt_connbytes: Forcing CT accounting to be enabled [ 305.677678][T14483] IPVS: ip_vs_edit_dest(): server weight less than zero [ 305.878337][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'. [ 306.024277][T14507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1961'. [ 306.040003][T14507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1961'. [ 306.531038][T14525] syzkaller0: entered promiscuous mode [ 306.537991][T14525] syzkaller0: entered allmulticast mode [ 306.611666][T14529] syz.3.1965 (14529) used obsolete PPPIOCDETACH ioctl [ 306.836383][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 306.851180][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 306.947413][T14539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.976922][T14539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.984155][T14556] Bluetooth: MGMT ver 1.23 [ 307.005306][T14539] bridge0: port 3(batadv1) entered blocking state [ 307.005435][T14539] bridge0: port 3(batadv1) entered forwarding state [ 307.005773][T14539] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 307.041021][T14539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.053538][T14539] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.086563][T14539] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.099085][T14539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.112795][T14539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 307.148192][T14539] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 307.196292][T14539] 8021q: adding VLAN 0 to HW filter on device bond12 [ 307.309698][ T278] bond10: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 307.393986][T14573] Bluetooth: hci0: unsupported parameter 5161 [ 307.408505][T14573] Bluetooth: hci0: unsupported parameter 8192 [ 307.415078][T14573] Bluetooth: hci0: unsupported parameter 5161 [ 307.422165][T14573] Bluetooth: hci0: unsupported parameter 8192 [ 307.596422][T14578] dvmrp0: entered allmulticast mode [ 307.654206][T14578] dvmrp1: entered allmulticast mode [ 307.693306][T14578] dvmrp0: left allmulticast mode [ 307.693571][T14578] dvmrp1: left allmulticast mode [ 307.818366][T14582] syzkaller1: entered promiscuous mode [ 307.824346][T14582] syzkaller1: entered allmulticast mode [ 307.875485][T14593] xfrm0 speed is unknown, defaulting to 1000 [ 308.740619][T14623] bond14: (slave veth0_to_bond): Releasing active interface [ 308.766393][T14623] net_ratelimit: 20 callbacks suppressed [ 308.766431][T14623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.784993][T14624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.869453][T14629] netlink: 'syz.2.1987': attribute type 13 has an invalid length. [ 309.062042][T14637] __nla_validate_parse: 7 callbacks suppressed [ 309.068523][T14637] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1989'. [ 309.195822][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 309.471698][ T8691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.477384][ T278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.477729][ T278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.477830][ T278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.691389][T14665] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 309.895948][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1996'. [ 309.918713][T14683] netlink: 'syz.1.1999': attribute type 13 has an invalid length. [ 309.928077][T14678] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1998'. [ 309.937921][T14685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1997'. [ 310.004709][T14668] 8021q: adding VLAN 0 to HW filter on device bond13 [ 310.014130][T14668] bond12: (slave bond13): making interface the new active one [ 310.023369][T14668] bond12: (slave bond13): Enslaving as an active interface with an up link [ 310.043572][T14672] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 310.143279][T14693] ip_tables: iptables: counters copy to user failed while replacing table [ 310.237877][T14693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2000'. [ 310.266397][T14696] ipvlan3: entered promiscuous mode [ 310.266565][T14696] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.266606][T14696] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 310.266756][T14696] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 310.528566][T14716] netlink: 'syz.0.2004': attribute type 1 has an invalid length. [ 310.727175][T14716] 8021q: adding VLAN 0 to HW filter on device bond15 [ 310.735017][T14729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2005'. [ 310.848258][T14746] netlink: 'syz.4.2007': attribute type 2 has an invalid length. [ 310.869578][T14732] bond15: (slave geneve3): making interface the new active one [ 310.880491][T14732] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 310.939320][T14750] netlink: 'syz.4.2007': attribute type 2 has an invalid length. [ 310.939362][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 310.992923][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.058582][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.059785][ T27] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.059835][ T27] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.318653][T14761] tipc: Enabled bearer , priority 0 [ 311.330049][T14761] syzkaller0: entered promiscuous mode [ 311.337150][T14761] syzkaller0: entered allmulticast mode [ 311.359996][T14761] tipc: Resetting bearer [ 311.386242][T14760] tipc: Resetting bearer [ 311.499214][T14760] tipc: Disabling bearer [ 312.342531][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 312.353543][T14810] unsupported nla_type 216 [ 312.362449][T14801] xfrm0 speed is unknown, defaulting to 1000 [ 312.495399][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 313.122188][T14834] syzkaller0: left promiscuous mode [ 313.128268][T14834] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 313.223704][T14844] macvlan0: entered allmulticast mode [ 313.229609][T14844] netlink: 'syz.4.2032': attribute type 11 has an invalid length. [ 313.948842][T14868] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 314.059976][T14868] bond22: entered promiscuous mode [ 314.072207][T14868] bond22: entered allmulticast mode [ 314.100852][T14868] 8021q: adding VLAN 0 to HW filter on device bond22 [ 314.172313][T14873] __nla_validate_parse: 7 callbacks suppressed [ 314.172363][T14873] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2039'. [ 314.519687][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 314.534713][T14891] xt_hashlimit: size too large, truncated to 1048576 [ 314.684820][T14895] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 314.900430][T14895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2044'. [ 315.243810][T14900] bond16: (slave geneve4): making interface the new active one [ 315.256288][T14900] bond16: (slave geneve4): Enslaving as an active interface with an up link [ 315.302742][T14895] 8021q: adding VLAN 0 to HW filter on device bond16 [ 315.312875][ T1437] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.313654][ T8691] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.425968][T14911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2047'. [ 315.481635][ T8691] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.486470][ T8691] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.601415][T14930] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 315.661915][T14930] 8021q: adding VLAN 0 to HW filter on device bond13 [ 315.705393][T14930] bond12: (slave veth0_to_bond): Releasing active interface [ 315.766380][T14930] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 315.807147][T14935] bridge1: entered promiscuous mode [ 315.898218][T14935] bond13: (slave bridge1): Enslaving as an active interface with an up link [ 315.966572][T14941] tipc: Enabled bearer , priority 0 [ 316.031931][T14939] syzkaller0: entered promiscuous mode [ 316.031971][T14939] syzkaller0: entered allmulticast mode [ 316.032408][T14939] tipc: Resetting bearer [ 316.119089][T14939] lo: entered allmulticast mode [ 316.119167][T14939] lo: left allmulticast mode [ 316.137440][T14938] tipc: Resetting bearer [ 318.012684][T14938] tipc: Disabling bearer [ 318.127297][ T7735] tipc: Node number set to 847110629 [ 318.240473][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'. [ 318.367347][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 318.440342][T14985] openvswitch: netlink: Message has 8 unknown bytes. [ 318.536587][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'. [ 318.801581][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2064'. [ 319.267401][T15018] 8021q: VLANs not supported on wg0 [ 319.370343][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.380229][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.380354][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.380456][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.380557][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.380658][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.380758][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.380861][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.381056][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.391149][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 319.478870][T15025] sctp: [Deprecated]: syz.2.2070 (pid 15025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.478870][T15025] Use struct sctp_sack_info instead [ 319.756960][T15041] Cannot find set identified by id 65534 to match [ 320.194263][T15064] netlink: 'syz.2.2083': attribute type 178 has an invalid length. [ 320.287777][T15067] netlink: 'syz.4.2082': attribute type 10 has an invalid length. [ 320.402337][T15072] bond14: Unable to set up delay as MII monitoring is disabled [ 320.435570][T15072] bond14 (unregistering): Released all slaves [ 320.885169][T15100] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 320.885553][T15100] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 320.994198][T15100] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.199443][T15100] bond12: (slave geneve3): making interface the new active one [ 321.262680][T15100] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 321.598380][T15133] xfrm0 speed is unknown, defaulting to 1000 [ 321.701461][T15137] gre2: entered promiscuous mode [ 321.708804][T15139] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 321.913597][T15149] netlink: 'syz.1.2104': attribute type 4 has an invalid length. [ 322.556532][T15167] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 322.570207][T15167] SET target dimension over the limit! [ 322.581512][T15167] SET target dimension over the limit! [ 322.581660][T15167] SET target dimension over the limit! [ 322.581796][T15167] SET target dimension over the limit! [ 322.581955][T15167] SET target dimension over the limit! [ 322.582084][T15167] SET target dimension over the limit! [ 322.582222][T15167] SET target dimension over the limit! [ 322.582382][T15167] SET target dimension over the limit! [ 322.622919][T15167] SET target dimension over the limit! [ 322.630546][T15167] SET target dimension over the limit! [ 322.645407][T15167] netlink: 'syz.3.2110': attribute type 2 has an invalid length. [ 322.645437][T15167] netlink: 'syz.3.2110': attribute type 8 has an invalid length. [ 322.954592][T15189] netlink: 'syz.4.2114': attribute type 1 has an invalid length. [ 323.022318][T15190] netlink: 'syz.4.2114': attribute type 7 has an invalid length. [ 323.022353][T15190] netlink: 'syz.4.2114': attribute type 8 has an invalid length. [ 323.746028][T15215] openvswitch: netlink: Duplicate or invalid key (type 0). [ 323.860305][T15217] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 323.866368][T15217] syzkaller0: entered promiscuous mode [ 324.108066][T15229] netlink: 'syz.1.2123': attribute type 15 has an invalid length. [ 324.128087][T15232] vcan0: tx drop: invalid da for name 0x0000000000100000 [ 324.223144][ T136] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 324.223699][ T136] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 324.223801][ T136] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 324.224113][ T136] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 324.699813][T15258] __nla_validate_parse: 47 callbacks suppressed [ 324.709794][T15258] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2131'. [ 324.929308][T15266] netlink: Failed to add GPL helper -22 [ 324.929370][T15266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.952390][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2134'. [ 324.961703][T15271] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2134'. [ 324.972221][T15271] syzkaller0: entered promiscuous mode [ 324.978489][T15271] syzkaller0: entered allmulticast mode [ 325.077158][T15273] dummy0: left allmulticast mode [ 325.220242][T15279] netlink: 'syz.0.2136': attribute type 178 has an invalid length. [ 325.386652][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880684dd800: rx timeout, send abort [ 325.388122][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880684dd800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 325.994011][T15316] netlink: 'syz.4.2146': attribute type 322 has an invalid length. [ 326.398427][T15338] bond23: ARP target 9.0.0.0 is already present [ 326.398478][T15338] bond23: option arp_ip_target: invalid value (9) [ 326.416961][T15338] bond23 (unregistering): Released all slaves [ 326.568127][T15360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2151'. [ 326.629065][T15363] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 326.642669][T15363] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 326.706456][T15368] netlink: 'syz.4.2154': attribute type 1 has an invalid length. [ 326.813239][T15368] veth9: entered allmulticast mode [ 326.887508][T15370] bond21: (slave veth0_to_bond): Releasing active interface [ 326.930573][T15370] bond23: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 326.994800][T15368] macvlan2: entered promiscuous mode [ 327.004322][T15368] macvlan2: entered allmulticast mode [ 327.004998][T15368] bond23: entered promiscuous mode [ 327.018043][T15368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.026544][T15368] bond23: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 327.045948][T15368] bond23: left promiscuous mode [ 327.188506][T15372] netlink: 'syz.3.2156': attribute type 11 has an invalid length. [ 327.260059][T15398] batadv_slave_0: Caught tx_queue_len zero misconfig [ 327.300398][T15372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.316312][T15379] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2156'. [ 327.447718][T15398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2160'. [ 327.871501][T15418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.903708][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 327.903752][T15418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2166'. [ 328.483367][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 328.548392][T15447] netlink: 'syz.0.2173': attribute type 6 has an invalid length. [ 328.599550][T15450] netlink: 'syz.3.2174': attribute type 2 has an invalid length. [ 328.608731][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 328.710183][T15449] Cannot find del_set index 4 as target [ 329.455252][T15493] ip_tables: iptables: counters copy to user failed while replacing table [ 329.898168][T15520] netlink: 'syz.4.2192': attribute type 5 has an invalid length. [ 330.328708][T15537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2197'. [ 330.342382][T15537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2197'. [ 330.349087][ T32] audit: type=1804 audit(1788573842.380:6): pid=15533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2195" name="/newroot/439/cgroup.controllers" dev="tmpfs" ino=2280 res=1 errno=0 [ 330.349260][ T32] audit: type=1800 audit(1788573842.380:7): pid=15533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2195" name="cgroup.controllers" dev="tmpfs" ino=2280 res=0 errno=0 [ 330.528969][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 330.529007][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 330.742993][T15559] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2203'. [ 330.758210][T15559] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2203'. [ 331.077469][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 331.095870][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2207'. [ 331.141332][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 331.173498][T15583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2207'. [ 331.235685][T15583] bond13: entered promiscuous mode [ 331.235766][T15583] bond13: entered allmulticast mode [ 331.236647][T15583] 8021q: adding VLAN 0 to HW filter on device bond13 [ 331.332696][T15589] netlink: 'syz.2.2211': attribute type 2 has an invalid length. [ 331.537944][T15601] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 331.626763][T15603] bond17: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 331.639914][T15603] bond17 (unregistering): Released all slaves [ 331.683433][T15606] netlink: 'syz.0.2215': attribute type 2 has an invalid length. [ 331.836781][T15614] vlan3: entered promiscuous mode [ 331.842292][T15614] team0: entered promiscuous mode [ 332.496386][T15641] netlink: 'syz.2.2228': attribute type 25 has an invalid length. [ 332.496430][T15641] netlink: 'syz.2.2228': attribute type 3 has an invalid length. [ 332.815588][T15659] netlink: 'syz.0.2233': attribute type 4 has an invalid length. [ 332.826220][T15658] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 333.245069][ T32] audit: type=1804 audit(1788573845.280:8): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2241" name="/newroot/465/cgroup.controllers" dev="tmpfs" ino=2404 res=1 errno=0 [ 333.245144][ T32] audit: type=1800 audit(1788573845.280:9): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2241" name="cgroup.controllers" dev="tmpfs" ino=2404 res=0 errno=0 [ 333.397146][ T32] audit: type=1804 audit(1788573845.430:10): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2241" name="/newroot/465/cgroup.controllers" dev="tmpfs" ino=2404 res=1 errno=0 [ 333.426969][ T32] audit: type=1800 audit(1788573845.460:11): pid=15692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2241" name="cgroup.controllers" dev="tmpfs" ino=2404 res=0 errno=0 [ 334.190755][T15720] xfrm0 speed is unknown, defaulting to 1000 [ 334.316568][T15732] bridge0: entered allmulticast mode [ 334.481887][T15737] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 334.650846][T15745] veth9: entered allmulticast mode [ 334.694952][T15737] bond23: (slave veth0_to_bond): Releasing active interface [ 334.727590][T15737] bond24: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 334.756870][T15751] macvlan2: entered promiscuous mode [ 334.756909][T15751] macvlan2: entered allmulticast mode [ 334.760922][T15751] bond24: entered promiscuous mode [ 334.765304][T15751] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.780776][T15751] bond24: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 334.832559][T15751] bond24: left promiscuous mode [ 335.140120][T15759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.630661][T15773] __nla_validate_parse: 20 callbacks suppressed [ 335.630718][T15773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2261'. [ 335.630885][T15773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2261'. [ 335.862067][T15792] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2264'. [ 335.876568][T15760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.244868][T15798] bond0: Caught tx_queue_len zero misconfig [ 336.466086][T15809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2270'. [ 336.898760][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2271'. [ 336.898798][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 336.937028][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2272'. [ 336.947044][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2272'. [ 336.965163][T15818] geneve5: entered promiscuous mode [ 336.981032][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2273'. [ 336.990261][T15827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2273'. [ 337.028489][T15823] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 337.533586][T15857] tipc: Enabled bearer , priority 0 [ 337.543019][T15857] syzkaller0: entered promiscuous mode [ 337.543071][T15857] syzkaller0: entered allmulticast mode [ 337.610187][T15857] tipc: Resetting bearer [ 337.620457][T15855] tipc: Resetting bearer [ 337.669207][T15855] tipc: Disabling bearer [ 337.702354][T15861] netlink: 'syz.3.2283': attribute type 39 has an invalid length. [ 337.863033][T15863] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 337.872368][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.876253][T15863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 337.932224][T15863] veth19: entered allmulticast mode [ 338.082316][T15867] netlink: 'syz.0.2286': attribute type 11 has an invalid length. [ 338.641536][T15901] ipvlan3: entered promiscuous mode [ 338.935550][T15919] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 338.941040][T15331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.943124][T15331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.971861][ T7735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.075044][T15925] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 339.103098][ T7735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.178787][T15925] bond15: entered promiscuous mode [ 339.186134][T15925] 8021q: adding VLAN 0 to HW filter on device bond15 [ 339.240738][T15927] sctp: [Deprecated]: syz.4.2302 (pid 15927) Use of int in max_burst socket option deprecated. [ 339.240738][T15927] Use struct sctp_assoc_value instead [ 339.270991][T15934] 8021q: adding VLAN 0 to HW filter on device bond15 [ 339.281561][T15934] bond15: (slave ipip0): The slave device specified does not support setting the MAC address [ 339.281599][T15934] bond15: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 339.307546][T15934] bond15: (slave ipip0): making interface the new active one [ 339.316771][T15934] ipip0: entered promiscuous mode [ 339.326979][T15934] bond15: (slave ipip0): Enslaving as an active interface with an up link [ 339.492350][T15938] syzkaller0: left promiscuous mode [ 339.497848][T15938] syzkaller0: left allmulticast mode [ 339.897910][T15957] netlink: 'syz.3.2312': attribute type 15 has an invalid length. [ 339.897956][T15957] netlink: 'syz.3.2312': attribute type 7 has an invalid length. [ 339.991937][T15961] dvmrp0: entered allmulticast mode [ 340.262791][T15966] 8021q: adding VLAN 0 to HW filter on device bond14 [ 340.329322][T15973] tipc: Enabling of bearer rejected, failed to enable media [ 340.670767][T15986] dvmrp0: left allmulticast mode [ 340.723361][T15989] netlink: 'syz.4.2323': attribute type 18 has an invalid length. [ 340.771791][T15996] __nla_validate_parse: 17 callbacks suppressed [ 340.774520][T15996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2325'. [ 340.981855][T16005] syzkaller0: entered promiscuous mode [ 340.981898][T16005] syzkaller0: entered allmulticast mode [ 341.314159][T16024] netlink: 'syz.2.2330': attribute type 12 has an invalid length. [ 341.334912][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 341.369297][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 341.456581][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2332'. [ 341.634931][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 341.646697][T16034] openvswitch: netlink: Flow key attribute not present in set flow. [ 342.174330][T16043] netlink: 4416 bytes leftover after parsing attributes in process `syz.2.2337'. [ 342.176467][T16042] netlink: 4416 bytes leftover after parsing attributes in process `syz.2.2337'. [ 342.426749][T16052] netlink: 'syz.2.2340': attribute type 19 has an invalid length. [ 342.426784][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'. [ 342.698148][T16064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 342.698186][T16064] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.730554][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2343'. [ 343.006859][T16081] netlink: 'syz.4.2345': attribute type 11 has an invalid length. [ 343.016475][T16081] netlink: zone id is out of range [ 343.016520][T16081] netlink: zone id is out of range [ 343.016543][T16081] netlink: zone id is out of range [ 343.016555][T16081] netlink: zone id is out of range [ 343.016567][T16081] netlink: zone id is out of range [ 343.016579][T16081] netlink: zone id is out of range [ 343.016599][T16081] netlink: zone id is out of range [ 343.016611][T16081] netlink: zone id is out of range [ 343.274672][T16083] xfrm0 speed is unknown, defaulting to 1000 [ 344.626500][T16135] netlink: 'syz.1.2359': attribute type 1 has an invalid length. [ 344.722338][T16135] 8021q: adding VLAN 0 to HW filter on device bond14 [ 345.074966][T16150] netlink: 'syz.4.2363': attribute type 32 has an invalid length. [ 345.075290][T16150] netlink: 'syz.4.2363': attribute type 32 has an invalid length. [ 345.077404][T16150] netlink: 'syz.4.2363': attribute type 32 has an invalid length. [ 345.077670][T16150] netlink: 'syz.4.2363': attribute type 32 has an invalid length. [ 345.077917][T16150] netlink: 'syz.4.2363': attribute type 32 has an invalid length. [ 345.078197][T16150] netlink: 'syz.4.2363': attribute type 32 has an invalid length. [ 345.078441][T16150] netlink: 'syz.4.2363': attribute type 32 has an invalid length. [ 345.983412][T16183] bond16: option min_links: invalid value (18446744073709551612) [ 346.005822][T16183] bond16: option min_links: allowed values 0 - 2147483647 [ 346.059740][T16183] bond16 (unregistering): Released all slaves [ 346.972360][T16217] __nla_validate_parse: 5 callbacks suppressed [ 346.980001][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 347.005067][T16215] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.2372'. [ 347.166686][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 347.249410][T16223] xt_hashlimit: size too large, truncated to 1048576 [ 347.368784][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 347.631874][T16231] xt_hashlimit: size too large, truncated to 1048576 [ 347.654251][T16230] macsec1: entered allmulticast mode [ 347.654290][T16230] veth1_macvtap: entered allmulticast mode [ 347.701561][T16230] veth1_macvtap: left allmulticast mode [ 347.958119][T16238] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2385'. [ 348.177106][T16258] validate_nla: 58 callbacks suppressed [ 348.177165][T16258] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 348.242128][ T5617] block nbd7: Receive control failed (result -32) [ 348.242192][ T52] block nbd7: Receive control failed (result -32) [ 348.262479][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 348.358541][T16273] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2394'. [ 348.374546][T16273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2394'. [ 348.797728][T16286] net_ratelimit: 3 callbacks suppressed [ 348.797781][T16286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.985110][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 349.018467][T16286] team0: Mode changed to "loadbalance" [ 349.077910][T16300] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2403'. [ 349.674212][T16331] syzkaller1: entered promiscuous mode [ 349.681436][T16331] syzkaller1: entered allmulticast mode [ 349.821908][T16331] xfrm0 speed is unknown, defaulting to 1000 [ 350.288190][T16357] netlink: 'syz.0.2416': attribute type 2 has an invalid length. [ 350.314948][T16357] netlink: 'syz.0.2416': attribute type 2 has an invalid length. [ 350.354820][T16361] netlink: 'syz.0.2416': attribute type 2 has an invalid length. [ 350.356252][T16357] netlink: 'syz.0.2416': attribute type 2 has an invalid length. [ 350.702255][T16375] syzkaller0: entered promiscuous mode [ 350.702306][T16375] syzkaller0: entered allmulticast mode [ 350.907281][T16389] block nbd0: NBD_DISCONNECT [ 350.907336][T16389] block nbd0: Send disconnect failed -32 [ 350.907354][T16389] block nbd0: Send disconnect failed -32 [ 350.907419][T16389] block nbd0: shutting down sockets [ 351.592151][T16425] block nbd0: server does not support multiple connections per device. [ 351.595561][T16425] block nbd0: shutting down sockets [ 352.134809][T16443] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 352.168806][T16443] 8021q: adding VLAN 0 to HW filter on device bond15 [ 352.192549][T16443] syzkaller1: entered promiscuous mode [ 352.198365][T16443] syzkaller1: entered allmulticast mode [ 352.350979][T16450] __nla_validate_parse: 10 callbacks suppressed [ 352.359110][T16450] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2437'. [ 352.372936][T16443] bond13: (slave veth0_to_bond): Releasing backup interface [ 352.372976][T16443] bond13: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 352.426112][T16443] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 352.496542][T16447] bridge2: entered promiscuous mode [ 352.505972][T16447] bond15: (slave bridge2): Enslaving as an active interface with an up link [ 353.124770][T16480] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 353.141786][T16473] netlink: 'syz.3.2443': attribute type 1 has an invalid length. [ 353.154225][T16473] netlink: 'syz.3.2443': attribute type 2 has an invalid length. [ 353.186549][T16485] netlink: 'syz.3.2443': attribute type 13 has an invalid length. [ 353.186868][T16474] netlink: 'syz.3.2443': attribute type 13 has an invalid length. [ 353.205651][T16471] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2442'. [ 353.243290][T16470] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 353.243335][T16470] netlink: 'syz.1.2441': attribute type 2 has an invalid length. [ 353.244872][T16477] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 353.244920][T16477] netlink: 'syz.1.2441': attribute type 2 has an invalid length. [ 353.595207][T16500] No such timeout policy "syz1" [ 353.679174][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 353.690262][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'. [ 353.707881][T16486] xfrm0 speed is unknown, defaulting to 1000 [ 353.724734][ T52] block nbd0: Receive control failed (result -32) [ 353.815653][T16503] syzkaller0: entered promiscuous mode [ 353.821461][T16503] syzkaller0: entered allmulticast mode [ 353.923464][T16508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2449'. [ 353.932805][T16508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2449'. [ 354.206031][T16516] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2451'. [ 354.206081][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 354.275309][T16516] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2451'. [ 354.333159][T16516] syzkaller1: entered promiscuous mode [ 354.333207][T16516] syzkaller1: entered allmulticast mode [ 354.370478][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'. [ 354.614522][T16535] syzkaller0: entered promiscuous mode [ 354.614570][T16535] syzkaller0: entered allmulticast mode [ 354.691637][T16538] Cannot find del_set index 4 as target [ 354.788969][T16492] xfrm0 speed is unknown, defaulting to 1000 [ 356.280837][T16603] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 357.717330][T16651] __nla_validate_parse: 7 callbacks suppressed [ 357.718041][T16651] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2492'. [ 357.876262][T16661] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 358.114279][T16664] veth9: entered allmulticast mode [ 358.123674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.200724][T16661] bond24: (slave veth0_to_bond): Releasing active interface [ 358.227663][T16661] bond25: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 358.256939][T16674] macvlan2: entered promiscuous mode [ 358.270344][T16674] macvlan2: entered allmulticast mode [ 358.279914][T16674] bond25: entered promiscuous mode [ 358.280490][T16674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.298068][T16674] bond25: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 358.322119][T16674] bond25: left promiscuous mode [ 358.360831][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 358.368803][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 358.768860][T16730] netlink: 'syz.4.2504': attribute type 1 has an invalid length. [ 358.949514][T16740] veth9: entered allmulticast mode [ 359.032168][T16752] bond25: (slave veth0_to_bond): Releasing active interface [ 359.078615][T16775] netlink: 'syz.0.2506': attribute type 1 has an invalid length. [ 359.103540][T16752] bond26: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 359.128525][T16744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2505'. [ 359.161369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.186419][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 359.246759][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2506'. [ 359.400101][T16730] macvlan2: entered promiscuous mode [ 359.400153][T16730] macvlan2: entered allmulticast mode [ 359.417129][T16730] bond26: entered promiscuous mode [ 359.429296][T16730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 359.448676][T16730] bond26: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 359.465903][T16730] bond26: left promiscuous mode [ 359.530464][T16682] workqueue: Failed to create a rescuer kthread for wq "nfc10_nci_cmd_wq": -EINTR [ 359.745118][T16820] netlink: 'syz.0.2508': attribute type 1 has an invalid length. [ 359.766788][T16820] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2508'. [ 360.144997][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2511'. [ 360.207286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.376048][T16839] netlink: 'syz.1.2514': attribute type 1 has an invalid length. [ 360.620112][T16843] veth9: entered allmulticast mode [ 360.797969][T16848] bond15: (slave veth0_to_bond): Releasing backup interface [ 360.798014][T16848] bond15: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 360.865215][T16848] bond16: (slave veth0_to_bond): making interface the new active one [ 360.883274][T16848] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 361.007810][T16839] macvlan3: entered promiscuous mode [ 361.007851][T16839] macvlan3: entered allmulticast mode [ 361.011119][T16839] bond16: entered promiscuous mode [ 361.011144][T16839] veth0_to_bond: entered promiscuous mode [ 361.055981][T16839] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 361.065762][T16839] bond16: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 361.065985][T16839] bond16: left promiscuous mode [ 361.066040][T16839] veth0_to_bond: left promiscuous mode [ 361.246231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.493949][T16873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2519'. [ 361.657659][T16885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2522'. [ 361.885646][ T8691] wlan0: Trigger new scan to find an IBSS to join [ 362.059681][T16906] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 362.128756][T16906] bond17: entered promiscuous mode [ 362.134730][T16906] 8021q: adding VLAN 0 to HW filter on device bond17 [ 362.235140][T16906] tipc: Enabled bearer , priority 0 [ 362.241988][T16920] netlink: 'syz.2.2529': attribute type 1 has an invalid length. [ 362.281415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.358726][T16904] tipc: Disabling bearer [ 362.394033][T16923] veth9: entered allmulticast mode [ 362.484456][T16920] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 362.536440][T16928] macvlan2: entered promiscuous mode [ 362.536479][T16928] macvlan2: entered allmulticast mode [ 362.540535][T16928] bond16: entered promiscuous mode [ 362.547201][T16928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.556959][T16928] bond16: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 362.564725][T16928] bond16: left promiscuous mode [ 362.926595][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 363.028557][T16954] bond18: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 363.046013][T16954] bond18 (unregistering): Released all slaves [ 363.098023][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'. [ 363.250733][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 363.280278][T16969] dvmrp0: entered allmulticast mode [ 363.321319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.546919][T16978] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2542'. [ 363.682330][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2543'. [ 363.804106][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.891019][T16998] dvmrp8: entered allmulticast mode [ 364.242711][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.440493][T17026] netlink: 'syz.0.2557': attribute type 16 has an invalid length. [ 364.440529][T17026] netlink: 'syz.0.2557': attribute type 17 has an invalid length. [ 364.568656][T17026] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.605342][T17026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.653324][T17026] bridge_slave_1: entered promiscuous mode [ 364.701605][T17026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.701655][T17026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.710481][T17026] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 364.738646][T17043] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2562'. [ 364.749500][T17026] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.780466][T17026] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 364.800618][T17026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.809917][T17026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.820346][T17026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.831580][T17026] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 364.831632][T17026] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 364.886217][T17026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.899995][T17026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.921515][ T13] wlan0: Trigger new scan to find an IBSS to join [ 364.941716][T17026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.964519][T17026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.009717][T17026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.034198][T17026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.037332][T17026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 365.059791][T17026] 8021q: adding VLAN 0 to HW filter on device bond8 [ 365.080574][T17026] 8021q: adding VLAN 0 to HW filter on device bond9 [ 365.095127][T17026] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.179841][T17026] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 365.229827][T17054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.230456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.248732][T17054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.259406][T17054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.260916][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.267076][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.374352][ T13] bond5: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 365.389063][ T13] bond5: active interface up! [ 365.403024][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.403945][ T13] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 365.404193][ T13] bond3: (slave veth7): making interface the new active one [ 365.443766][ T13] bond3: active interface up! [ 365.457886][ T7702] xfrm0 speed is unknown, defaulting to 1000 [ 365.457940][ T7702] syz0: Port: 1 Link ACTIVE [ 365.469429][T17048] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 (while UP) [ 365.485865][T17054] tipc: Enabled bearer , priority 10 [ 365.522731][ T8691] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.541532][ T8691] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 365.564337][ T8691] bond4: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 365.584546][ T8691] bond4: (slave veth9): making interface the new active one [ 365.596447][ T8691] bond4: active interface up! [ 365.630018][ T7702] xfrm0 speed is unknown, defaulting to 1000 [ 365.701750][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.783254][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.893668][T17072] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 366.005531][T17080] syzkaller0: entered promiscuous mode [ 366.005578][T17080] syzkaller0: entered allmulticast mode [ 366.017887][T17071] xfrm0 speed is unknown, defaulting to 1000 [ 366.165895][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'. [ 366.167329][T17087] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 366.322902][T17087] 8021q: adding VLAN 0 to HW filter on device bond17 [ 366.350293][T17095] sctp: [Deprecated]: syz.1.2577 (pid 17095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.350293][T17095] Use struct sctp_sack_info instead [ 367.016359][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'. [ 367.016421][T17115] netlink: 'syz.3.2582': attribute type 1 has an invalid length. [ 367.016454][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'. [ 367.390693][T17127] macsec1: entered allmulticast mode [ 367.390732][T17127] veth1_macvtap: entered allmulticast mode [ 367.405097][T17127] veth1_macvtap: left allmulticast mode [ 367.551877][ T5617] block nbd8: Receive control failed (result -32) [ 367.553319][ T52] block nbd8: Receive control failed (result -32) [ 367.883959][T15331] wlan0: Trigger new scan to find an IBSS to join [ 367.924096][T17137] lo: entered promiscuous mode [ 367.980038][T17137] tunl0: entered promiscuous mode [ 368.034137][T17137] gre0: entered promiscuous mode [ 368.040904][T17144] nbd9: detected capacity change from 0 to 63 [ 368.116158][T17137] gretap0: entered promiscuous mode [ 368.133808][T17157] block nbd10: server does not support multiple connections per device. [ 368.143084][T17157] block nbd10: shutting down sockets [ 368.335806][T17137] erspan0: entered promiscuous mode [ 368.366340][T17137] ip_vti0: entered promiscuous mode [ 368.405893][T17168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2595'. [ 368.415996][T17137] ip6_vti0: entered promiscuous mode [ 368.442375][T17137] sit0: entered promiscuous mode [ 368.481300][T17137] ip6tnl0: entered promiscuous mode [ 368.490797][T17137] ip6gre0: entered promiscuous mode [ 368.506790][T17137] syz_tun: entered promiscuous mode [ 368.520794][T17137] vcan0: entered promiscuous mode [ 368.561920][T17137] bond0: entered promiscuous mode [ 368.569877][T17137] nlmon0: entered promiscuous mode [ 368.576989][T17137] batadv0: entered promiscuous mode [ 368.585790][T17137] veth0: entered promiscuous mode [ 368.594143][T17137] veth1: entered promiscuous mode [ 368.602459][T17137] wg0: entered promiscuous mode [ 368.609592][T17137] wg2: entered promiscuous mode [ 368.616588][T17137] veth0_to_bridge: entered promiscuous mode [ 368.626840][T17137] bridge_slave_0: entered promiscuous mode [ 368.635434][T17137] veth1_to_bridge: entered promiscuous mode [ 368.664441][T17137] bridge_slave_1: entered promiscuous mode [ 368.670658][T17137] veth0_to_bond: entered promiscuous mode [ 368.678473][T17137] ÿÿÿ: entered promiscuous mode [ 368.687555][T17137] veth1_to_bond: entered promiscuous mode [ 368.694060][T17137] bond_slave_1: entered promiscuous mode [ 368.700381][T17137] veth0_to_team: entered promiscuous mode [ 368.707809][T17137] team_slave_0: entered promiscuous mode [ 368.715185][T17137] veth1_to_team: entered promiscuous mode [ 368.723750][T17137] team_slave_1: entered promiscuous mode [ 368.729798][T17137] veth0_to_batadv: entered promiscuous mode [ 368.738280][T17137] batadv_slave_0: entered promiscuous mode [ 368.746482][T17137] veth1_to_batadv: entered promiscuous mode [ 368.757355][T17137] xfrm0: entered promiscuous mode [ 368.764031][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.774206][T17137] veth0_to_hsr: entered promiscuous mode [ 368.781656][ T52] block nbd9: Receive control failed (result -104) [ 368.793809][T17137] hsr0: entered promiscuous mode [ 368.799377][T17137] veth1_virt_wifi: entered promiscuous mode [ 368.806384][T17137] veth0_virt_wifi: entered promiscuous mode [ 368.813348][T17137] virt_wifi0: entered promiscuous mode [ 368.828783][T17137] vlan0: entered promiscuous mode [ 368.836285][T17137] vlan1: entered promiscuous mode [ 368.843907][T17137] macvlan0: entered promiscuous mode [ 368.849429][T17137] macvlan1: entered promiscuous mode [ 368.857727][T17137] ipvlan0: entered promiscuous mode [ 368.867079][T17137] ipvlan1: entered promiscuous mode [ 368.879887][T17137] macsec0: entered promiscuous mode [ 368.886842][T17137] geneve0: entered promiscuous mode [ 368.895062][T17137] geneve1: entered promiscuous mode [ 368.913225][T17137] mac80211_hwsim hwsim7 »»»»»»: entered promiscuous mode [ 368.928615][T17137] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 368.949752][T17137] mac80211_hwsim hwsim16 wlan2: entered promiscuous mode [ 368.972022][T17137] mac80211_hwsim hwsim17 wlan3: entered promiscuous mode [ 369.015476][T17137] bond1: entered promiscuous mode [ 369.026962][T17137] bond2: entered promiscuous mode [ 369.029717][T17137] veth2: entered promiscuous mode [ 369.034755][T17137] veth3: entered promiscuous mode [ 369.046598][T17137] bond3: entered promiscuous mode [ 369.064204][T17137] rose0: entered promiscuous mode [ 369.069554][T17137] bond4: entered promiscuous mode [ 369.070216][T17137] batadv1: entered promiscuous mode [ 369.080446][T17137] veth4: entered promiscuous mode [ 369.087449][T17137] veth5: entered promiscuous mode [ 369.090502][T17137] veth6: entered promiscuous mode [ 369.098801][T17137] veth7: entered promiscuous mode [ 369.114254][T17137] mac80211_hwsim hwsim19 wlan4: entered promiscuous mode [ 369.122306][T17137] bond5: entered promiscuous mode [ 369.125201][T17137] syztnl2: entered promiscuous mode [ 369.137549][T17137] bond6: entered promiscuous mode [ 369.143539][T17137] bond7: entered promiscuous mode [ 369.149910][T17137] bond8: entered promiscuous mode [ 369.163544][T17137] mac80211_hwsim hwsim23 wlan5: entered promiscuous mode [ 369.165245][T17137] xfrm1: entered promiscuous mode [ 369.176482][T17137] bond9: entered promiscuous mode [ 369.191736][T17137] mac80211_hwsim hwsim25 wlan6: entered promiscuous mode [ 369.199014][T17137] gretap1: entered promiscuous mode [ 369.209325][T17137] bridge1: entered promiscuous mode [ 369.217470][T17137] sit1: entered promiscuous mode [ 369.280369][T17137] tipc: Resetting bearer [ 369.395429][T17137] geneve2: entered promiscuous mode [ 369.395994][T17137] veth8: entered promiscuous mode [ 369.396411][T17137] veth9: entered promiscuous mode [ 369.397698][T17137] ip6tnl1: entered promiscuous mode [ 369.398019][T17137] erspan1: entered promiscuous mode [ 369.398354][T17137] netdevsim netdevsim3 eth0: entered promiscuous mode [ 369.398831][T17137] netdevsim netdevsim3 eth1: entered promiscuous mode [ 369.400800][T17137] netdevsim netdevsim3 eth2: entered promiscuous mode [ 369.401162][T17137] netdevsim netdevsim3 eth3: entered promiscuous mode [ 369.408675][T17137] macsec1: entered promiscuous mode [ 369.432843][T17137] veth10: entered promiscuous mode [ 369.433387][T17137] veth11: entered promiscuous mode [ 369.433990][T17137] syztnl1: entered promiscuous mode [ 369.434560][T17137] gtp0: entered promiscuous mode [ 369.455155][T17137] veth12: entered promiscuous mode [ 369.455627][T17137] veth13: entered promiscuous mode [ 369.456051][T17137] bond10: entered promiscuous mode [ 369.464489][T17137] gretap2: entered promiscuous mode [ 369.483961][T17137] ip6erspan0: entered promiscuous mode [ 369.484372][T17137] bond11: entered promiscuous mode [ 369.488099][T17137] vcan1: entered promiscuous mode [ 369.504189][T17137] sit2: entered promiscuous mode [ 369.544418][T17137] bond12: entered promiscuous mode [ 369.549817][T17137] geneve3: entered promiscuous mode [ 369.560016][T17137] vlan2: entered promiscuous mode [ 369.568846][T17137] bond14: entered promiscuous mode [ 369.619863][T17137] mac80211_hwsim hwsim44 wlan7: entered promiscuous mode [ 369.620283][T17137] gtp1: entered promiscuous mode [ 369.620649][T17137] ip6tnl2: entered promiscuous mode [ 369.620887][T17137] bond15: entered promiscuous mode [ 369.621426][T17137] macvlan2: entered promiscuous mode [ 369.621996][T17137] ip6tnl3: entered promiscuous mode [ 369.631475][ T136] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.631586][ T136] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.631673][ T136] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.631725][ T136] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.058184][T17188] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2601'. [ 370.058229][T17188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2601'. [ 370.058281][T17188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2601'. [ 370.185964][T17185] net_ratelimit: 2 callbacks suppressed [ 370.187050][T17185] netlink: Failed to add filter helper -22 [ 370.187113][T17185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.354849][T17201] netlink: 'syz.2.2604': attribute type 5 has an invalid length. [ 370.466861][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 371.264518][T17239] netlink: 'syz.4.2614': attribute type 1 has an invalid length. [ 371.350507][T17239] veth9: entered allmulticast mode [ 371.444507][T17246] bond26: (slave veth0_to_bond): Releasing active interface [ 371.472786][T17246] bond27: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 371.515393][T17251] macvlan2: entered promiscuous mode [ 371.515439][T17251] macvlan2: entered allmulticast mode [ 371.522217][T17251] bond27: entered promiscuous mode [ 371.529866][T17251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 371.538745][T17251] bond27: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 371.556586][T17251] bond27: left promiscuous mode [ 371.576043][T17255] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 371.657162][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 372.006810][T17277] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 372.006847][T17277] netlink: 'syz.0.2622': attribute type 3 has an invalid length. [ 372.006860][T17277] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2622'. [ 372.471173][T17302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'. [ 372.796331][T17319] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 372.941765][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'. [ 372.999664][T17319] veth21: entered allmulticast mode [ 373.089836][T17341] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2636'. [ 373.119463][T17325] bond17: (slave veth0_to_bond): making interface the new active one [ 373.131827][T17325] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 373.158902][T17335] macvlan2: entered promiscuous mode [ 373.164754][T17335] macvlan2: entered allmulticast mode [ 373.172937][T17335] bond17: entered promiscuous mode [ 373.178719][T17335] veth0_to_bond: entered promiscuous mode [ 373.185842][T17335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.193835][T17335] bond17: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 373.210201][T17335] bond17: left promiscuous mode [ 373.210218][T17335] veth0_to_bond: left promiscuous mode [ 373.270212][T17341] tipc: Enabling of bearer rejected, already enabled [ 373.422582][T17350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2638'. [ 373.738879][T17360] xfrm0 speed is unknown, defaulting to 1000 [ 373.852747][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 374.251956][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 374.262709][T17386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2652'. [ 374.279387][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 374.291412][T17386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2652'. [ 374.354913][T17386] SET target dimension over the limit! [ 374.356571][T17385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2651'. [ 374.411271][T17392] netlink: Conntrack attr has 4 unknown bytes [ 374.411312][T17392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.728147][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2657'. [ 374.733495][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 374.748891][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 374.839425][T17407] bond28: option resend_igmp: invalid value (396094) [ 374.852580][T17407] bond28: option resend_igmp: allowed values 0 - 255 [ 374.866065][T17407] bond28 (unregistering): Released all slaves [ 375.315643][T17439] netlink: 'syz.4.2663': attribute type 1 has an invalid length. [ 375.325283][T17439] netlink: 'syz.4.2663': attribute type 12 has an invalid length. [ 375.737789][T17454] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 375.761113][T17454] netlink: 'syz.0.2666': attribute type 10 has an invalid length. [ 375.790851][T17454] syz_tun: entered promiscuous mode [ 375.816318][T17454] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 375.832852][T17454] ±ÿ: renamed from lo (while UP) [ 376.422513][T17481] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 376.799025][T17485] dummy0: left promiscuous mode [ 376.907022][T17485] macvlan0: left promiscuous mode [ 376.976522][T17485] gretap2: left promiscuous mode [ 377.037423][T17485] gretap4: left promiscuous mode [ 377.077203][T17510] netlink: 'syz.0.2681': attribute type 1 has an invalid length. [ 377.134380][T17485] bridge1: left promiscuous mode [ 377.140319][T17485] gre2: left promiscuous mode [ 377.148260][T17485] ipvlan3: left promiscuous mode [ 377.161067][T17485] bridge2: left promiscuous mode [ 377.170125][T17485] 8021q: adding VLAN 0 to HW filter on device bond16 [ 377.175238][T17485] bond17: left promiscuous mode [ 377.190297][T17497] gre0: entered allmulticast mode [ 377.202446][T17497] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 377.203343][T17505] netlink: 'syz.0.2681': attribute type 1 has an invalid length. [ 377.203398][T17505] netlink: 'syz.0.2681': attribute type 2 has an invalid length. [ 377.205252][T17508] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 377.206223][T17511] dvmrp0: left allmulticast mode [ 377.208729][T17511] dvmrp8: left allmulticast mode [ 377.208941][T17511] pimreg: left allmulticast mode [ 377.557195][T17519] batadv0: left promiscuous mode [ 377.557375][T17519] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 377.600011][T17526] netlink: 'syz.4.2687': attribute type 14 has an invalid length. [ 377.693530][T17523] openvswitch: netlink: Flow actions attr not present in new flow. [ 378.050384][T17545] netlink: 'syz.1.2690': attribute type 1 has an invalid length. [ 378.143695][T17545] veth9: entered allmulticast mode [ 378.241108][T17555] bond16: (slave veth0_to_bond): Releasing active interface [ 378.277779][T17555] bond18: (slave veth0_to_bond): making interface the new active one [ 378.288626][T17555] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 378.376839][T17562] macvlan3: entered promiscuous mode [ 378.376888][T17562] macvlan3: entered allmulticast mode [ 378.378415][T17562] bond18: entered promiscuous mode [ 378.378465][T17562] veth0_to_bond: entered promiscuous mode [ 378.414991][T17562] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 378.423310][T17562] bond18: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 378.430762][T17562] bond18: left promiscuous mode [ 378.430806][T17562] veth0_to_bond: left promiscuous mode [ 378.456775][T17567] __nla_validate_parse: 18 callbacks suppressed [ 378.463709][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2693'. [ 378.814828][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2696'. [ 378.864386][T17582] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2696'. [ 378.875983][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 378.885896][T17582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'. [ 378.895667][T17582] netlink: 'syz.2.2696': attribute type 18 has an invalid length. [ 379.092544][T17597] syzkaller0: entered promiscuous mode [ 379.092586][T17597] syzkaller0: entered allmulticast mode [ 379.107232][T17594] tipc: Enabled bearer , priority 0 [ 379.119268][T17589] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 379.169301][T17594] tipc: Resetting bearer [ 379.204014][T17590] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2698'. [ 379.214826][T17603] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 379.230826][T17586] tipc: Resetting bearer [ 379.272474][T17586] tipc: Disabling bearer [ 379.811813][T17630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2707'. [ 379.812334][T17628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2707'. [ 379.852175][T17633] netlink: 'syz.4.2709': attribute type 1 has an invalid length. [ 379.988674][ T32] audit: type=1800 audit(1788573892.020:12): pid=17648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2710" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2738 res=0 errno=0 [ 380.055983][T17645] veth9: entered allmulticast mode [ 380.159293][T17633] bond27: (slave veth0_to_bond): Releasing active interface [ 380.175087][T17633] bond28: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 380.216724][T17649] macvlan2: entered promiscuous mode [ 380.216778][T17649] macvlan2: entered allmulticast mode [ 380.238750][T17649] bond28: entered promiscuous mode [ 380.254780][T17649] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.264043][T17649] bond28: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 380.285250][T17649] bond28: left promiscuous mode [ 380.565862][T17671] xt_ecn: cannot match TCP bits for non-tcp packets [ 380.600811][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 380.724736][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 381.307140][T17708] bond18: option arp_interval: invalid value (18446744073709551615) [ 381.307185][T17708] bond18: option arp_interval: allowed values 0 - 2147483647 [ 381.329601][T17708] bond18 (unregistering): Released all slaves [ 381.756269][T17731] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 381.760985][T17732] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 382.034946][T17737] veth15: entered allmulticast mode [ 382.211018][T17731] veth0_to_bond: left promiscuous mode [ 382.225338][T17731] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 382.253425][T17742] macvlan3: entered promiscuous mode [ 382.261160][T17742] macvlan3: entered allmulticast mode [ 382.264957][T17742] bond16: entered promiscuous mode [ 382.265599][T17742] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 382.285570][T17742] bond16: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 382.346330][T17742] bond16: left promiscuous mode [ 384.706498][T17770] netlink: 'syz.2.2737': attribute type 14 has an invalid length. [ 384.889534][T17784] __nla_validate_parse: 7 callbacks suppressed [ 384.889583][T17784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2741'. [ 384.943475][T17786] xt_bpf: check failed: parse error [ 385.000380][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2742'. [ 385.000440][T17792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2742'. [ 385.000476][T17792] tc_dump_action: action bad kind [ 385.176729][T17798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.224962][T17806] gtp2: entered promiscuous mode [ 385.225081][T17806] gtp2: entered allmulticast mode [ 385.236043][T17802] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 385.470696][T17816] syzkaller0: entered promiscuous mode [ 385.485618][T17816] syzkaller0: entered allmulticast mode [ 385.500075][T17819] veth0: left allmulticast mode [ 385.500125][T17819] veth0: left promiscuous mode [ 385.500790][T17819] bridge0: port 1(veth0) entered disabled state [ 385.527589][T17819] bond16: (slave veth0_to_bond): Releasing active interface [ 385.548744][T17819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.572842][T17816] tipc: Enabled bearer , priority 0 [ 385.587638][T17815] tipc: Resetting bearer [ 385.662418][T17815] tipc: Disabling bearer [ 385.677127][ T5279] veth0_macvtap: left promiscuous mode [ 385.806022][T17825] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2750'. [ 385.829164][T17825] tipc: Enabling of bearer rejected, failed to enable media [ 385.985983][T17830] netlink: 'syz.3.2749': attribute type 1 has an invalid length. [ 386.028149][T17835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.117772][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 386.215434][T17847] syzkaller0: entered promiscuous mode [ 386.215476][T17847] syzkaller0: entered allmulticast mode [ 386.255368][T17848] veth15: entered allmulticast mode [ 386.325907][T17856] bond16: (slave veth0_to_bond): Releasing active interface [ 386.365067][T17856] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 386.392010][T17830] macvlan3: entered promiscuous mode [ 386.392055][T17830] macvlan3: entered allmulticast mode [ 386.393983][T17830] bond17: entered promiscuous mode [ 386.395990][T17830] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 386.397724][T17830] bond17: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 386.403304][T17830] bond17: left promiscuous mode [ 387.213608][T17889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2755'. [ 388.614783][T17869] syzkaller1: entered promiscuous mode [ 388.614829][T17869] syzkaller1: entered allmulticast mode [ 389.006377][T17902] syzkaller0: entered promiscuous mode [ 389.006415][T17902] syzkaller0: entered allmulticast mode [ 389.027905][T17902] tipc: Enabled bearer , priority 0 [ 389.042037][T17901] tipc: Resetting bearer [ 389.131082][T17901] tipc: Disabling bearer [ 389.274803][T17913] openvswitch: netlink: Key type 288 is out of range max 32 [ 389.290368][T17913] openvswitch: netlink: Unknown key attributes 20 [ 389.340520][T17913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2764'. [ 389.435202][T17921] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 389.527534][T17921] veth21: entered allmulticast mode [ 389.581055][T17928] bond17: (slave veth0_to_bond): Releasing active interface [ 389.598109][T17928] bond18: (slave veth0_to_bond): making interface the new active one [ 389.609073][T17928] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 389.625191][T17921] macvlan2: entered promiscuous mode [ 389.630750][T17921] macvlan2: entered allmulticast mode [ 389.636786][T17921] bond18: entered promiscuous mode [ 389.636832][T17921] veth0_to_bond: entered promiscuous mode [ 389.644882][T17921] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 389.647418][T17921] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 389.647683][T17921] bond18: left promiscuous mode [ 389.647724][T17921] veth0_to_bond: left promiscuous mode [ 390.200002][T17947] xfrm0 speed is unknown, defaulting to 1000 [ 390.314865][T17952] ip_tables: iptables: counters copy to user failed while replacing table [ 390.544494][T17955] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2775'. [ 390.615137][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2775'. [ 392.324811][T17916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.557011][T17976] netlink: 'syz.3.2781': attribute type 1 has an invalid length. [ 392.760886][T17984] veth15: entered allmulticast mode [ 392.830963][T17976] bond17: (slave veth0_to_bond): Releasing active interface [ 392.859720][T17976] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 392.883293][T17997] Bluetooth: hci0: unsupported parameter 1280 [ 392.883333][T17997] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 392.903306][T17994] macvlan3: entered promiscuous mode [ 392.908848][T17994] macvlan3: entered allmulticast mode [ 392.915164][T17994] bond18: entered promiscuous mode [ 392.921173][T17994] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 392.929139][T17994] bond18: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 392.947706][T17994] bond18: left promiscuous mode [ 393.098630][T18005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2790'. [ 396.454256][T18077] netlink: 'syz.2.2800': attribute type 1 has an invalid length. [ 396.471471][T18080] openvswitch: netlink: Key type 288 is out of range max 32 [ 396.482624][T18080] openvswitch: netlink: Unknown key attributes 20 [ 396.628557][T18085] veth9: entered allmulticast mode [ 396.677233][T18080] batadv0: Caught tx_queue_len zero misconfig [ 396.677459][T18080] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2801'. [ 396.702899][T18077] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 396.718628][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2804'. [ 396.759782][T18087] macvlan2: entered promiscuous mode [ 396.759826][T18087] macvlan2: entered allmulticast mode [ 396.767812][T18087] bond18: entered promiscuous mode [ 396.799827][T18087] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.800638][T18087] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 396.825954][T18087] bond18: left promiscuous mode [ 397.304061][ T32] audit: type=1800 audit(1788573909.340:13): pid=18111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2810" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2888 res=0 errno=0 [ 397.431988][T18114] netlink: 'syz.2.2811': attribute type 29 has an invalid length. [ 397.520323][T18115] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 397.520378][T18115] netlink: 'syz.1.2812': attribute type 2 has an invalid length. [ 397.528888][T18115] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 397.528908][T18115] netlink: 'syz.1.2812': attribute type 2 has an invalid length. [ 397.828530][T18131] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 397.982548][T18140] netlink: 'syz.3.2819': attribute type 40 has an invalid length. [ 398.005997][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'. [ 398.026824][T18131] bond19: entered promiscuous mode [ 398.028042][T18131] 8021q: adding VLAN 0 to HW filter on device bond19 [ 398.053034][T18133] 8021q: adding VLAN 0 to HW filter on device bond19 [ 398.055614][T18133] bond19: (slave ipip2): The slave device specified does not support setting the MAC address [ 398.055668][T18133] bond19: (slave ipip2): Setting fail_over_mac to active for active-backup mode [ 398.082294][T18147] netlink: zone id is out of range [ 398.082409][T18147] netlink: zone id is out of range [ 398.082724][T18147] netlink: zone id is out of range [ 398.082739][T18147] netlink: zone id is out of range [ 398.082750][T18147] netlink: zone id is out of range [ 398.082761][T18147] netlink: zone id is out of range [ 398.082774][T18147] netlink: zone id is out of range [ 398.082783][T18147] netlink: zone id is out of range [ 398.094165][T18133] bond19: (slave ipip2): making interface the new active one [ 398.094186][T18133] ipip2: entered promiscuous mode [ 398.105144][T18133] bond19: (slave ipip2): Enslaving as an active interface with an up link [ 398.424284][T18159] FAULT_INJECTION: forcing a failure. [ 398.424284][T18159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.449129][T18159] CPU: 1 UID: 0 PID: 18159 Comm: syz.0.2823 Not tainted syzkaller #0 PREEMPT(full) [ 398.449153][T18159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.449166][T18159] Call Trace: [ 398.449252][T18159] [ 398.449316][T18159] dump_stack_lvl+0xe8/0x150 [ 398.449500][T18159] should_fail_ex+0x410/0x560 [ 398.449646][T18159] _copy_from_iter+0x1d3/0x1660 [ 398.449708][T18159] ? __alloc_skb+0x27a/0x7a0 [ 398.449884][T18159] ? __alloc_skb+0x27a/0x7a0 [ 398.449913][T18159] ? __alloc_skb+0x27a/0x7a0 [ 398.449947][T18159] ? __pfx__copy_from_iter+0x10/0x10 [ 398.449977][T18159] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 398.450034][T18159] ? __alloc_skb+0x27a/0x7a0 [ 398.450062][T18159] ? __alloc_skb+0x27a/0x7a0 [ 398.450095][T18159] ? netlink_sendmsg+0x650/0xb40 [ 398.450187][T18159] ? skb_put+0x112/0x210 [ 398.450206][T18159] netlink_sendmsg+0x6c0/0xb40 [ 398.450237][T18159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.450268][T18159] ? apparmor_socket_sendmsg+0x98/0x360 [ 398.450358][T18159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.450382][T18159] sock_sendmsg_nosec+0x13a/0x180 [ 398.450438][T18159] ____sys_sendmsg+0x54e/0x850 [ 398.450466][T18159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.450495][T18159] ? import_iovec+0x73/0xa0 [ 398.450544][T18159] ___sys_sendmsg+0x2a5/0x360 [ 398.450566][T18159] ? __lock_acquire+0x6df/0x2e50 [ 398.450618][T18159] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.450668][T18159] ? __fget_files+0x2a/0x420 [ 398.450705][T18159] ? __fget_files+0x3a2/0x420 [ 398.450737][T18159] __x64_sys_sendmsg+0x1b1/0x290 [ 398.450762][T18159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.450813][T18159] do_syscall_64+0x166/0x520 [ 398.450939][T18159] ? trace_irq_disable+0x3b/0x140 [ 398.450976][T18159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.451013][T18159] ? clear_bhb_loop+0x70/0xc0 [ 398.451039][T18159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.451061][T18159] RIP: 0033:0x7f4e73b9e159 [ 398.451122][T18159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.451139][T18159] RSP: 002b:00007f4e74a29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.451186][T18159] RAX: ffffffffffffffda RBX: 00007f4e73e26090 RCX: 00007f4e73b9e159 [ 398.451200][T18159] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 398.451213][T18159] RBP: 00007f4e74a29090 R08: 0000000000000000 R09: 0000000000000000 [ 398.451225][T18159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.451236][T18159] R13: 00007f4e73e26128 R14: 00007f4e73e26090 R15: 00007ffc227cbbc8 [ 398.451265][T18159] [ 398.460977][ T11] block nbd9: Possible stuck request ffff8880272e0000: control (read@0,1024B). Runtime 30 seconds [ 398.464278][ T11] block nbd9: Possible stuck request ffff8880272e01c0: control (read@1024,1024B). Runtime 30 seconds [ 398.464372][ T11] block nbd9: Possible stuck request ffff8880272e0380: control (read@2048,2048B). Runtime 30 seconds [ 398.897066][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2830'. [ 398.911727][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2830'. [ 398.935050][T18168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2830'. [ 398.950433][T18168] syzkaller0: entered promiscuous mode [ 398.950472][T18168] syzkaller0: entered allmulticast mode [ 399.048312][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 399.250466][T18188] syzkaller0: entered promiscuous mode [ 399.258269][T18188] syzkaller0: entered allmulticast mode [ 399.267897][T18188] tipc: Enabled bearer , priority 0 [ 399.278452][T18185] tipc: Resetting bearer [ 399.327147][T18185] tipc: Disabling bearer [ 399.434662][T18190] bond20: Unable to set peer notification delay as MII monitoring is disabled [ 399.435629][T18199] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2832'. [ 399.446725][T18190] bond20 (unregistering): Released all slaves [ 399.589325][T18189] syzkaller0: entered promiscuous mode [ 399.589367][T18189] syzkaller0: entered allmulticast mode [ 399.649526][T18207] netlink: 'syz.4.2837': attribute type 3 has an invalid length. [ 399.651491][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 399.694894][T18204] hsr_slave_1 (unregistering): left promiscuous mode [ 399.714390][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 399.761652][T18214] FAULT_INJECTION: forcing a failure. [ 399.761652][T18214] name failslab, interval 1, probability 0, space 0, times 0 [ 399.774860][T18214] CPU: 1 UID: 0 PID: 18214 Comm: syz.4.2838 Not tainted syzkaller #0 PREEMPT(full) [ 399.774885][T18214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.774897][T18214] Call Trace: [ 399.774906][T18214] [ 399.774914][T18214] dump_stack_lvl+0xe8/0x150 [ 399.774947][T18214] should_fail_ex+0x410/0x560 [ 399.774981][T18214] should_failslab+0xa8/0x100 [ 399.775040][T18214] ? skb_clone+0x212/0x3a0 [ 399.775062][T18214] kmem_cache_alloc_noprof+0xa1/0x600 [ 399.775093][T18214] ? skb_clone+0x212/0x3a0 [ 399.775120][T18214] skb_clone+0x212/0x3a0 [ 399.775140][T18214] ? nfnetlink_rcv+0x4b0/0x28c0 [ 399.775218][T18214] nfnetlink_rcv+0x4de/0x28c0 [ 399.775242][T18214] ? kernel_text_address+0xa5/0xe0 [ 399.775274][T18214] ? __kernel_text_address+0xd/0x30 [ 399.775296][T18214] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 399.775334][T18214] ? arch_stack_walk+0xfb/0x150 [ 399.775379][T18214] ? stack_trace_save+0xa9/0x100 [ 399.775410][T18214] ? __lock_acquire+0x6df/0x2e50 [ 399.775430][T18214] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 399.775453][T18214] ? __lock_acquire+0x6df/0x2e50 [ 399.775488][T18214] ? __lock_acquire+0x6df/0x2e50 [ 399.775518][T18214] ? __netlink_lookup+0xc6/0x8b0 [ 399.775553][T18214] ? lock_acquire+0x115/0x350 [ 399.775571][T18214] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.775601][T18214] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.775623][T18214] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.775651][T18214] netlink_unicast+0x7bd/0x940 [ 399.775682][T18214] netlink_sendmsg+0x813/0xb40 [ 399.775714][T18214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.775745][T18214] ? apparmor_socket_sendmsg+0x98/0x360 [ 399.775777][T18214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.775799][T18214] sock_sendmsg_nosec+0x13a/0x180 [ 399.775827][T18214] ____sys_sendmsg+0x54e/0x850 [ 399.775852][T18214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.775882][T18214] ? import_iovec+0x73/0xa0 [ 399.775905][T18214] ___sys_sendmsg+0x2a5/0x360 [ 399.775924][T18214] ? __lock_acquire+0x6df/0x2e50 [ 399.775946][T18214] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.776004][T18214] ? __fget_files+0x2a/0x420 [ 399.776028][T18214] ? __fget_files+0x3a2/0x420 [ 399.776061][T18214] __x64_sys_sendmsg+0x1b1/0x290 [ 399.776084][T18214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.776124][T18214] do_syscall_64+0x166/0x520 [ 399.776152][T18214] ? trace_irq_disable+0x3b/0x140 [ 399.776187][T18214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.776207][T18214] ? clear_bhb_loop+0x70/0xc0 [ 399.776231][T18214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.776251][T18214] RIP: 0033:0x7fb033d9e159 [ 399.776270][T18214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.776288][T18214] RSP: 002b:00007fb034c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.776310][T18214] RAX: ffffffffffffffda RBX: 00007fb034025fa0 RCX: 00007fb033d9e159 [ 399.776324][T18214] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 399.776337][T18214] RBP: 00007fb034c76090 R08: 0000000000000000 R09: 0000000000000000 [ 399.776350][T18214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.776362][T18214] R13: 00007fb034026038 R14: 00007fb034025fa0 R15: 00007ffdf9126c88 [ 399.776392][T18214] [ 400.430309][T18232] nbd: illegal input index 65508 [ 400.864011][T18257] FAULT_INJECTION: forcing a failure. [ 400.864011][T18257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.864066][T18257] CPU: 0 UID: 0 PID: 18257 Comm: syz.4.2853 Not tainted syzkaller #0 PREEMPT(full) [ 400.864092][T18257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.864106][T18257] Call Trace: [ 400.864115][T18257] [ 400.864124][T18257] dump_stack_lvl+0xe8/0x150 [ 400.864163][T18257] should_fail_ex+0x410/0x560 [ 400.864203][T18257] _copy_to_user+0x31/0xb0 [ 400.864309][T18257] simple_read_from_buffer+0xe1/0x170 [ 400.864347][T18257] proc_fail_nth_read+0x1bb/0x230 [ 400.864403][T18257] ? common_file_perm+0x20e/0x2b0 [ 400.864463][T18257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.864501][T18257] ? rw_verify_area+0x24a/0x4c0 [ 400.864541][T18257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.864578][T18257] vfs_read+0x213/0xa80 [ 400.864615][T18257] ? __pfx___mutex_lock+0x10/0x10 [ 400.864735][T18257] ? __pfx_vfs_read+0x10/0x10 [ 400.864767][T18257] ? __fget_files+0x2a/0x420 [ 400.864818][T18257] ? __fget_files+0x3a2/0x420 [ 400.864844][T18257] ? __fget_files+0x2a/0x420 [ 400.864878][T18257] ksys_read+0x150/0x270 [ 400.864909][T18257] ? __pfx_ksys_read+0x10/0x10 [ 400.864947][T18257] do_syscall_64+0x166/0x520 [ 400.864977][T18257] ? trace_irq_disable+0x3b/0x140 [ 400.864996][T18257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.865018][T18257] ? clear_bhb_loop+0x70/0xc0 [ 400.865043][T18257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.865063][T18257] RIP: 0033:0x7fb033d5e98e [ 400.865082][T18257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.865099][T18257] RSP: 002b:00007fb034c75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.865122][T18257] RAX: ffffffffffffffda RBX: 00007fb034c766c0 RCX: 00007fb033d5e98e [ 400.865137][T18257] RDX: 000000000000000f RSI: 00007fb034c760a0 RDI: 0000000000000005 [ 400.865150][T18257] RBP: 00007fb034c76090 R08: 0000000000000000 R09: 0000000000000000 [ 400.865163][T18257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.865175][T18257] R13: 00007fb034026038 R14: 00007fb034025fa0 R15: 00007ffdf9126c88 [ 400.865208][T18257] [ 401.005944][T15328] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.075561][T18261] FAULT_INJECTION: forcing a failure. [ 401.075561][T18261] name failslab, interval 1, probability 0, space 0, times 0 [ 401.075633][T18261] CPU: 0 UID: 0 PID: 18261 Comm: syz.0.2850 Not tainted syzkaller #0 PREEMPT(full) [ 401.075688][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.075726][T18261] Call Trace: [ 401.075752][T18261] [ 401.075771][T18261] dump_stack_lvl+0xe8/0x150 [ 401.075865][T18261] should_fail_ex+0x410/0x560 [ 401.075951][T18261] should_failslab+0xa8/0x100 [ 401.076015][T18261] ? skb_clone+0x212/0x3a0 [ 401.076073][T18261] kmem_cache_alloc_noprof+0xa1/0x600 [ 401.076156][T18261] ? skb_clone+0x212/0x3a0 [ 401.076243][T18261] skb_clone+0x212/0x3a0 [ 401.076302][T18261] ? nfnetlink_rcv+0x4b0/0x28c0 [ 401.076379][T18261] nfnetlink_rcv+0x4de/0x28c0 [ 401.076446][T18261] ? __dev_queue_xmit+0x29b/0x3820 [ 401.076601][T18261] ? __local_bh_enable_ip+0xd6/0x140 [ 401.076684][T18261] ? lockdep_hardirqs_on+0x7b/0x110 [ 401.076753][T18261] ? __dev_queue_xmit+0x29b/0x3820 [ 401.076804][T18261] ? __local_bh_enable_ip+0xd6/0x140 [ 401.076880][T18261] ? __dev_queue_xmit+0x29b/0x3820 [ 401.076939][T18261] ? __dev_queue_xmit+0x1edc/0x3820 [ 401.076996][T18261] ? do_syscall_64+0x166/0x520 [ 401.077066][T18261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.077135][T18261] ? __dev_queue_xmit+0x29b/0x3820 [ 401.077200][T18261] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 401.077275][T18261] ? ref_tracker_free+0x689/0x830 [ 401.077377][T18261] ? __pfx_ref_tracker_free+0x10/0x10 [ 401.077451][T18261] ? __skb_clone+0x449/0x6c0 [ 401.077530][T18261] ? skb_clone+0x246/0x3a0 [ 401.077606][T18261] ? __netlink_deliver_tap+0x811/0x860 [ 401.077688][T18261] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.077782][T18261] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.077849][T18261] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.077927][T18261] netlink_unicast+0x7bd/0x940 [ 401.078027][T18261] netlink_sendmsg+0x813/0xb40 [ 401.078140][T18261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.078220][T18261] ? apparmor_socket_sendmsg+0x98/0x360 [ 401.078315][T18261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.078387][T18261] sock_sendmsg_nosec+0x13a/0x180 [ 401.078477][T18261] ____sys_sendmsg+0x54e/0x850 [ 401.078544][T18261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.078622][T18261] ? import_iovec+0x73/0xa0 [ 401.078676][T18261] ___sys_sendmsg+0x2a5/0x360 [ 401.078724][T18261] ? __lock_acquire+0x6df/0x2e50 [ 401.078784][T18261] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.078933][T18261] ? __fget_files+0x2a/0x420 [ 401.078992][T18261] ? __fget_files+0x3a2/0x420 [ 401.079099][T18261] __x64_sys_sendmsg+0x1b1/0x290 [ 401.079153][T18261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.079254][T18261] do_syscall_64+0x166/0x520 [ 401.079324][T18261] ? trace_irq_disable+0x3b/0x140 [ 401.079367][T18261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.079421][T18261] ? clear_bhb_loop+0x70/0xc0 [ 401.079480][T18261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.079535][T18261] RIP: 0033:0x7f4e73b9e159 [ 401.079591][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.079638][T18261] RSP: 002b:00007f4e74a4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.079695][T18261] RAX: ffffffffffffffda RBX: 00007f4e73e25fa0 RCX: 00007f4e73b9e159 [ 401.079734][T18261] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 401.079771][T18261] RBP: 00007f4e74a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 401.079804][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.079832][T18261] R13: 00007f4e73e26038 R14: 00007f4e73e25fa0 R15: 00007ffc227cbbc8 [ 401.079918][T18261] [ 401.704772][T18275] netlink: 'syz.2.2857': attribute type 1 has an invalid length. [ 401.713099][T18275] netlink: 'syz.2.2857': attribute type 2 has an invalid length. [ 401.721755][T18275] __nla_validate_parse: 2 callbacks suppressed [ 401.728150][T18275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2857'. [ 401.796081][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 401.870776][T18279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2858'. [ 401.996850][T18273] syzkaller0: entered promiscuous mode [ 401.996899][T18273] syzkaller0: entered allmulticast mode [ 402.010213][T18282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.036113][T18279] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2858'. [ 402.036161][T18279] netlink: 239 bytes leftover after parsing attributes in process `syz.4.2858'. [ 402.187377][T18294] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 402.232431][T18293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2865'. [ 402.532160][T18311] netlink: 'syz.4.2869': attribute type 3 has an invalid length. [ 405.002039][T18294] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 405.013617][T18298] veth15: entered allmulticast mode [ 405.051633][T18304] bond18: (slave veth0_to_bond): Releasing active interface [ 405.548887][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 405.558324][T18352] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 405.567517][T18352] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 405.744087][T18360] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 406.151418][T18373] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 406.392020][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.405019][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.415207][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.426895][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.437270][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.430087][T18375] xfrm0 speed is unknown, defaulting to 1000 [ 407.715686][T18420] netlink: 'syz.4.2897': attribute type 1 has an invalid length. [ 407.854161][T18422] veth9: entered allmulticast mode [ 407.906342][T18420] bond28: (slave veth0_to_bond): Releasing active interface [ 407.931405][T18420] bond29: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 407.942724][T18430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2899'. [ 407.945966][T18430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2899'. [ 407.948287][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 407.974230][T18428] macvlan2: entered promiscuous mode [ 407.979618][T18428] macvlan2: entered allmulticast mode [ 407.987661][T18428] bond29: entered promiscuous mode [ 407.989701][T18428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.999843][T18428] bond29: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 408.003707][T18428] bond29: left promiscuous mode [ 408.126160][T18430] tc_dump_action: action bad kind [ 408.377681][T18442] netlink: 'syz.4.2903': attribute type 21 has an invalid length. [ 408.386088][T18442] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2903'. [ 408.395515][T18442] netlink: 'syz.4.2903': attribute type 4 has an invalid length. [ 408.403675][T18442] netlink: 'syz.4.2903': attribute type 5 has an invalid length. [ 408.411839][T18442] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2903'. [ 408.463241][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2901'. [ 408.522120][ T52] Bluetooth: hci5: command tx timeout [ 408.536771][T18446] bond19: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 408.550643][T18446] bond19 (unregistering): Released all slaves [ 408.599120][T18450] syzkaller0: entered promiscuous mode [ 408.599153][T18450] syzkaller0: entered allmulticast mode [ 408.801274][T18454] netlink: 'syz.4.2904': attribute type 1 has an invalid length. [ 409.034745][T18456] veth9: entered allmulticast mode [ 409.056704][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.062883][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.069313][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.075535][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.082258][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.088460][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.099858][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.120428][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.133398][T18474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2908'. [ 409.142673][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.143443][T18471] xt_hl: Unknown Hop Limit match mode: 4 [ 409.213264][T18375] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.220569][T18375] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.220754][T18375] bridge_slave_0: entered allmulticast mode [ 409.228704][T18375] bridge_slave_0: entered promiscuous mode [ 409.242848][T18375] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.242955][T18375] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.243324][T18375] bridge_slave_1: entered allmulticast mode [ 409.267740][T18375] bridge_slave_1: entered promiscuous mode [ 409.274308][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 409.282389][T18470] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2907'. [ 409.329479][T18470] pim6reg1: entered promiscuous mode [ 409.335553][T18470] pim6reg1: entered allmulticast mode [ 409.364988][T18477] syzkaller0: entered promiscuous mode [ 409.365025][T18477] syzkaller0: entered allmulticast mode [ 409.381144][T18375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.395139][T18477] tipc: Enabled bearer , priority 0 [ 409.404273][T18375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.449592][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2911'. [ 409.475325][T18481] net_ratelimit: 1694 callbacks suppressed [ 409.475365][T18481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.528655][T18375] team0: Port device team_slave_0 added [ 409.539114][T18375] team0: Port device team_slave_1 added [ 409.629413][T18375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.637020][T18375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.637053][T18375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.669955][T18375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.669972][T18375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.670002][T18375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.838489][T18375] hsr_slave_0: entered promiscuous mode [ 409.846174][T18375] hsr_slave_1: entered promiscuous mode [ 409.852817][T18375] debugfs: 'hsr0' already exists in 'hsr' [ 409.859520][T18375] Cannot create hsr debugfs directory [ 409.865907][T18490] hsr0: entered allmulticast mode [ 409.865939][T18490] hsr_slave_0: entered allmulticast mode [ 409.865968][T18490] hsr_slave_1: entered allmulticast mode [ 409.963938][T18490] hsr_slave_0: left promiscuous mode [ 409.969745][T18490] hsr_slave_1: left promiscuous mode [ 409.987121][T18490] hsr0 (unregistering): left allmulticast mode [ 410.140943][T18502] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 410.422025][T18520] netlink: NAT attribute has 1 unknown bytes [ 410.428355][T18520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.543859][T18524] syzkaller0: entered promiscuous mode [ 410.543908][T18524] syzkaller0: entered allmulticast mode [ 410.602435][ T52] Bluetooth: hci5: command tx timeout [ 410.829255][T18375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 410.842764][T18375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 410.854061][T18375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.878397][T18543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.890525][T18543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.894122][T18546] block nbd3: NBD_DISCONNECT [ 410.908434][T18375] [ 410.908868][T18546] block nbd3: Send disconnect failed -32 [ 410.909001][T18546] block nbd3: shutting down sockets [ 410.921645][T18375] ====================================================== [ 410.928722][T18375] WARNING: possible circular locking dependency detected [ 410.935890][T18375] syzkaller #0 Not tainted [ 410.940320][T18375] ------------------------------------------------------ [ 410.947401][T18375] syz-executor/18375 is trying to acquire lock: [ 410.953689][T18375] ffffffff90246900 (xps_map_mutex){+.+.}-{4:4}, at: netif_reset_xps_queues_gt+0x6f/0xc0 [ 410.963552][T18375] [ 410.963552][T18375] but task is already holding lock: [ 410.970944][T18375] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 410.981003][T18375] [ 410.981003][T18375] which lock already depends on the new lock. [ 410.981003][T18375] [ 410.991426][T18375] [ 410.991426][T18375] the existing dependency chain (in reverse order) is: [ 411.000474][T18375] [ 411.000474][T18375] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 411.008327][T18375] cpus_read_lock+0x42/0x160 [ 411.013478][T18375] static_key_slow_inc+0x12/0x30 [ 411.019022][T18375] setup_udp_tunnel_sock+0x2df/0x4f0 [ 411.024924][T18375] l2tp_tunnel_register+0xe77/0x1570 [ 411.030831][T18375] pppol2tp_connect+0x8e3/0x18b0 [ 411.036369][T18375] __sys_connect+0x316/0x450 [ 411.041555][T18375] __x64_sys_connect+0x7a/0x90 [ 411.046871][T18375] do_syscall_64+0x166/0x520 [ 411.052004][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.058462][T18375] [ 411.058462][T18375] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 411.066199][T18375] lock_sock_nested+0x41/0x100 [ 411.071507][T18375] tls_sw_sendmsg+0x15f/0x2b50 [ 411.076859][T18375] sock_sendmsg_nosec+0x90/0x180 [ 411.082369][T18375] ____sys_sendmsg+0x54e/0x850 [ 411.087676][T18375] ___sys_sendmsg+0x2a5/0x360 [ 411.092905][T18375] __x64_sys_sendmsg+0x1b1/0x290 [ 411.098385][T18375] do_syscall_64+0x166/0x520 [ 411.103524][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.109990][T18375] [ 411.109990][T18375] -> #7 (&ctx->tx_lock){+.+.}-{4:4}: [ 411.117501][T18375] __mutex_lock+0x19d/0x1550 [ 411.122649][T18375] tls_sw_sendmsg+0x13a/0x2b50 [ 411.127961][T18375] sock_sendmsg_nosec+0x90/0x180 [ 411.133454][T18375] sock_sendmsg+0x1ca/0x2d0 [ 411.138527][T18375] __sock_xmit+0x245/0x4f0 [ 411.143652][T18375] nbd_disconnect+0x3ad/0x560 [ 411.148927][T18375] nbd_disconnect_and_put+0x32/0x280 [ 411.154773][T18375] nbd_genl_disconnect+0x4af/0x590 [ 411.160437][T18375] genl_family_rcv_msg_doit+0x233/0x340 [ 411.166559][T18375] genl_rcv_msg+0x614/0x7a0 [ 411.171622][T18375] netlink_rcv_skb+0x226/0x4a0 [ 411.176943][T18375] genl_rcv+0x28/0x40 [ 411.181481][T18375] netlink_unicast+0x7bd/0x940 [ 411.186801][T18375] netlink_sendmsg+0x813/0xb40 [ 411.192154][T18375] sock_sendmsg_nosec+0x13a/0x180 [ 411.197765][T18375] ____sys_sendmsg+0x54e/0x850 [ 411.203075][T18375] ___sys_sendmsg+0x2a5/0x360 [ 411.208300][T18375] __x64_sys_sendmsg+0x1b1/0x290 [ 411.213799][T18375] do_syscall_64+0x166/0x520 [ 411.218948][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.225377][T18375] [ 411.225377][T18375] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 411.233051][T18375] __mutex_lock+0x19d/0x1550 [ 411.238238][T18375] nbd_queue_rq+0x373/0xff0 [ 411.243376][T18375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 411.249604][T18375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 411.256519][T18375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 411.263040][T18375] blk_mq_run_work_fn+0x16c/0x300 [ 411.268604][T18375] process_scheduled_works+0xc3d/0x1630 [ 411.274697][T18375] worker_thread+0xa47/0xfb0 [ 411.279843][T18375] kthread+0x38b/0x480 [ 411.284446][T18375] ret_from_fork+0x514/0xb70 [ 411.289588][T18375] ret_from_fork_asm+0x1a/0x30 [ 411.294916][T18375] [ 411.294916][T18375] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 411.302207][T18375] __mutex_lock+0x19d/0x1550 [ 411.307373][T18375] nbd_queue_rq+0xc1/0xff0 [ 411.312366][T18375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 411.318478][T18375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 411.325344][T18375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 411.331872][T18375] blk_mq_run_work_fn+0x16c/0x300 [ 411.337442][T18375] process_scheduled_works+0xc3d/0x1630 [ 411.343608][T18375] worker_thread+0xa47/0xfb0 [ 411.348789][T18375] kthread+0x38b/0x480 [ 411.353400][T18375] ret_from_fork+0x514/0xb70 [ 411.358535][T18375] ret_from_fork_asm+0x1a/0x30 [ 411.363852][T18375] [ 411.363852][T18375] -> #4 (set->srcu){.+.+}-{0:0}: [ 411.371012][T18375] __synchronize_srcu+0xc9/0x2f0 [ 411.376483][T18375] elevator_switch+0x1e8/0x7b0 [ 411.381891][T18375] elevator_change+0x2fa/0x480 [ 411.387197][T18375] elevator_set_default+0x375/0x440 [ 411.392937][T18375] blk_register_queue+0x3f3/0x4e0 [ 411.398557][T18375] __add_disk+0x6cb/0xe30 [ 411.403422][T18375] add_disk_fwnode+0x100/0x3a0 [ 411.408730][T18375] nbd_dev_add+0x733/0xb60 [ 411.413753][T18375] nbd_init+0x168/0x1f0 [ 411.418596][T18375] do_one_initcall+0x250/0x870 [ 411.423899][T18375] do_initcall_level+0x10a/0x1a0 [ 411.429460][T18375] do_initcalls+0x59/0xa0 [ 411.434350][T18375] kernel_init_freeable+0x29d/0x3e0 [ 411.440128][T18375] kernel_init+0x22/0x1d0 [ 411.445009][T18375] ret_from_fork+0x514/0xb70 [ 411.450142][T18375] ret_from_fork_asm+0x1a/0x30 [ 411.455456][T18375] [ 411.455456][T18375] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 411.463297][T18375] __mutex_lock+0x19d/0x1550 [ 411.468440][T18375] elevator_change+0x1af/0x480 [ 411.473868][T18375] elevator_set_none+0xb5/0x140 [ 411.479288][T18375] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 411.485669][T18375] nbd_start_device+0x189/0xb30 [ 411.491086][T18375] nbd_genl_connect+0x167d/0x1cd0 [ 411.496669][T18375] genl_family_rcv_msg_doit+0x233/0x340 [ 411.502773][T18375] genl_rcv_msg+0x614/0x7a0 [ 411.507824][T18375] netlink_rcv_skb+0x226/0x4a0 [ 411.513116][T18375] genl_rcv+0x28/0x40 [ 411.517636][T18375] netlink_unicast+0x7bd/0x940 [ 411.522956][T18375] netlink_sendmsg+0x813/0xb40 [ 411.528271][T18375] sock_sendmsg_nosec+0x13a/0x180 [ 411.533848][T18375] ____sys_sendmsg+0x54e/0x850 [ 411.539158][T18375] ___sys_sendmsg+0x2a5/0x360 [ 411.544379][T18375] __x64_sys_sendmsg+0x1b1/0x290 [ 411.549887][T18375] do_syscall_64+0x166/0x520 [ 411.555054][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.561478][T18375] [ 411.561478][T18375] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 411.570193][T18375] blk_alloc_queue+0x544/0x690 [ 411.575495][T18375] __blk_mq_alloc_disk+0x194/0x390 [ 411.581134][T18375] nbd_dev_add+0x494/0xb60 [ 411.586084][T18375] nbd_init+0x168/0x1f0 [ 411.590777][T18375] do_one_initcall+0x250/0x870 [ 411.596088][T18375] do_initcall_level+0x10a/0x1a0 [ 411.601566][T18375] do_initcalls+0x59/0xa0 [ 411.606432][T18375] kernel_init_freeable+0x29d/0x3e0 [ 411.612202][T18375] kernel_init+0x22/0x1d0 [ 411.617070][T18375] ret_from_fork+0x514/0xb70 [ 411.622193][T18375] ret_from_fork_asm+0x1a/0x30 [ 411.627493][T18375] [ 411.627493][T18375] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 411.634716][T18375] fs_reclaim_acquire+0x71/0x100 [ 411.640223][T18375] __kmalloc_noprof+0xbc/0x720 [ 411.645529][T18375] __netif_set_xps_queue+0x4d8/0x1e30 [ 411.651445][T18375] virtnet_set_affinity+0x586/0x6c0 [ 411.657319][T18375] init_vqs+0x1085/0x11c0 [ 411.662192][T18375] virtnet_probe+0x21f1/0x48d0 [ 411.667509][T18375] virtio_dev_probe+0xdf6/0x10c0 [ 411.673036][T18375] really_probe+0x254/0xae0 [ 411.678128][T18375] __driver_probe_device+0x1e8/0x360 [ 411.683962][T18375] driver_probe_device+0x4f/0x240 [ 411.689535][T18375] __driver_attach+0x339/0x600 [ 411.694836][T18375] bus_for_each_dev+0x23b/0x2c0 [ 411.700406][T18375] bus_add_driver+0x345/0x670 [ 411.705639][T18375] driver_register+0x23a/0x320 [ 411.710994][T18375] virtio_net_driver_init+0x71/0xa0 [ 411.716772][T18375] do_one_initcall+0x250/0x870 [ 411.722107][T18375] do_initcall_level+0x10a/0x1a0 [ 411.727601][T18375] do_initcalls+0x59/0xa0 [ 411.732480][T18375] kernel_init_freeable+0x29d/0x3e0 [ 411.738221][T18375] kernel_init+0x22/0x1d0 [ 411.743088][T18375] ret_from_fork+0x514/0xb70 [ 411.748221][T18375] ret_from_fork_asm+0x1a/0x30 [ 411.753598][T18375] [ 411.753598][T18375] -> #0 (xps_map_mutex){+.+.}-{4:4}: [ 411.761098][T18375] __lock_acquire+0x15ff/0x2e50 [ 411.766507][T18375] lock_acquire+0x115/0x350 [ 411.771538][T18375] __mutex_lock+0x19d/0x1550 [ 411.776665][T18375] netif_reset_xps_queues_gt+0x6f/0xc0 [ 411.782651][T18375] unregister_netdevice_many_notify+0x1beb/0x2140 [ 411.789764][T18375] unregister_netdevice_queue+0x2f5/0x340 [ 411.796046][T18375] nsim_destroy+0x275/0x800 [ 411.801153][T18375] __nsim_dev_port_del+0x14e/0x200 [ 411.806841][T18375] nsim_dev_reload_destroy+0x288/0x490 [ 411.812853][T18375] nsim_drv_remove+0x58/0x170 [ 411.818099][T18375] device_release_driver_internal+0x48b/0x880 [ 411.824719][T18375] bus_remove_device+0x444/0x560 [ 411.830213][T18375] device_del+0x524/0x8f0 [ 411.835146][T18375] device_unregister+0x21/0xf0 [ 411.840451][T18375] del_device_store+0x2b5/0x370 [ 411.845856][T18375] kernfs_fop_write_iter+0x3a4/0x540 [ 411.851716][T18375] vfs_write+0x612/0xba0 [ 411.856495][T18375] ksys_write+0x150/0x270 [ 411.861355][T18375] do_syscall_64+0x166/0x520 [ 411.866485][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.872922][T18375] [ 411.872922][T18375] other info that might help us debug this: [ 411.872922][T18375] [ 411.883179][T18375] Chain exists of: [ 411.883179][T18375] xps_map_mutex --> sk_lock-AF_INET6 --> cpu_hotplug_lock [ 411.883179][T18375] [ 411.896236][T18375] Possible unsafe locking scenario: [ 411.896236][T18375] [ 411.903716][T18375] CPU0 CPU1 [ 411.909098][T18375] ---- ---- [ 411.914534][T18375] rlock(cpu_hotplug_lock); [ 411.919236][T18375] lock(sk_lock-AF_INET6); [ 411.926288][T18375] lock(cpu_hotplug_lock); [ 411.933333][T18375] lock(xps_map_mutex); [ 411.937601][T18375] [ 411.937601][T18375] *** DEADLOCK *** [ 411.937601][T18375] [ 411.945835][T18375] locks held by syz-executor/18375: 8, last CPU#0: [ 411.952597][T18375] #0: ffff88803697c460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 411.961544][T18375] #1: ffff88805522d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 411.971362][T18375] #2: ffff888028e5b0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 411.981404][T18375] #3: ffffffff8fac88e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 411.991704][T18375] #4: ffff888079e78128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 412.002259][T18375] #5: ffff888079e7e258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 412.012298][T18375] #6: ffffffff90250cc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 412.021298][T18375] #7: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 412.031764][T18375] [ 412.031764][T18375] stack backtrace: [ 412.037668][T18375] CPU: 0 UID: 0 PID: 18375 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 412.047235][T18375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.057304][T18375] Call Trace: [ 412.060602][T18375] [ 412.063621][T18375] dump_stack_lvl+0xe8/0x150 [ 412.068255][T18375] print_circular_bug+0x2e2/0x300 [ 412.073301][T18375] check_noncircular+0x12f/0x150 [ 412.078277][T18375] __lock_acquire+0x15ff/0x2e50 [ 412.083146][T18375] ? __pfx___mutex_trylock_common+0x10/0x10 [ 412.089057][T18375] ? rcu_is_watching+0x16/0xb0 [ 412.093847][T18375] ? trace_contention_end+0x3d/0x140 [ 412.099280][T18375] ? __mutex_lock+0x30b/0x1550 [ 412.104079][T18375] lock_acquire+0x115/0x350 [ 412.108630][T18375] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 412.114325][T18375] __mutex_lock+0x19d/0x1550 [ 412.118949][T18375] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 412.124600][T18375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 412.130621][T18375] ? kobject_put+0x50f/0x550 [ 412.135327][T18375] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 412.141027][T18375] ? __pfx___mutex_lock+0x10/0x10 [ 412.146084][T18375] netif_reset_xps_queues_gt+0x6f/0xc0 [ 412.151647][T18375] unregister_netdevice_many_notify+0x1beb/0x2140 [ 412.158095][T18375] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 412.164883][T18375] ? __mutex_lock+0x30b/0x1550 [ 412.169699][T18375] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 412.174775][T18375] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 412.179830][T18375] ? __kfree_rcu_sheaf+0x21/0x6c0 [ 412.184893][T18375] unregister_netdevice_queue+0x2f5/0x340 [ 412.190639][T18375] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 412.196887][T18375] nsim_destroy+0x275/0x800 [ 412.201436][T18375] __nsim_dev_port_del+0x14e/0x200 [ 412.206558][T18375] nsim_dev_reload_destroy+0x288/0x490 [ 412.212114][T18375] nsim_drv_remove+0x58/0x170 [ 412.216803][T18375] ? __pfx_nsim_bus_remove+0x10/0x10 [ 412.222105][T18375] device_release_driver_internal+0x48b/0x880 [ 412.228187][T18375] bus_remove_device+0x444/0x560 [ 412.233136][T18375] ? __pfx_bus_remove_device+0x10/0x10 [ 412.238614][T18375] ? kernfs_remove_by_name_ns+0x101/0x140 [ 412.244350][T18375] device_del+0x524/0x8f0 [ 412.248704][T18375] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 412.254532][T18375] ? __pfx_device_del+0x10/0x10 [ 412.259403][T18375] ? lock_acquire+0x115/0x350 [ 412.264093][T18375] device_unregister+0x21/0xf0 [ 412.268886][T18375] del_device_store+0x2b5/0x370 [ 412.273769][T18375] ? __pfx_del_device_store+0x10/0x10 [ 412.279181][T18375] ? sysfs_file_kobj+0x1e4/0x230 [ 412.284142][T18375] ? sysfs_kf_write+0x166/0x260 [ 412.289039][T18375] ? __pfx_sysfs_kf_write+0x10/0x10 [ 412.294254][T18375] kernfs_fop_write_iter+0x3a4/0x540 [ 412.299562][T18375] vfs_write+0x612/0xba0 [ 412.303862][T18375] ? __pfx_vfs_write+0x10/0x10 [ 412.308703][T18375] ? do_sys_openat2+0x14e/0x200 [ 412.313584][T18375] ? kmem_cache_free+0x182/0x650 [ 412.318544][T18375] ksys_write+0x150/0x270 [ 412.322898][T18375] ? __pfx_ksys_write+0x10/0x10 [ 412.327762][T18375] do_syscall_64+0x166/0x520 [ 412.332368][T18375] ? trace_irq_disable+0x3b/0x140 [ 412.337403][T18375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.343493][T18375] ? clear_bhb_loop+0x70/0xc0 [ 412.348207][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.354109][T18375] RIP: 0033:0x7f8c27d5e98e [ 412.358535][T18375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.378144][T18375] RSP: 002b:00007ffe3cf17918 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.386575][T18375] RAX: ffffffffffffffda RBX: 000055555b69c500 RCX: 00007f8c27d5e98e [ 412.394566][T18375] RDX: 0000000000000001 RSI: 00007ffe3cf179a0 RDI: 0000000000000005 [ 412.402550][T18375] RBP: 00007f8c27e358a7 R08: 0000000000000000 R09: 0000000000000000 [ 412.410527][T18375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.418524][T18375] R13: 00007ffe3cf179a0 R14: 00007f8c28b54620 R15: 0000000000000003 [ 412.426522][T18375] [ 412.654506][T18375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 412.666818][T18375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 412.677173][T18375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.687544][ T5617] Bluetooth: hci5: command tx timeout [ 412.792912][T18375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 412.805323][T18375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 412.815684][T18375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.943038][T18375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 412.954147][T18375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 412.964451][T18375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.321977][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.514813][T15323] bond12 (unregistering): (slave geneve3): Releasing active interface [ 413.581426][T15323] bond0 (unregistering): Released all slaves [ 413.588158][T15323] bond1 (unregistering): Released all slaves [ 413.599934][T15323] bond2 (unregistering): Released all slaves [ 413.620045][T15323] bond3 (unregistering): Released all slaves [ 413.632692][T15323] bond4 (unregistering): (slave veth5): Releasing active interface [ 413.646772][T15323] bond4 (unregistering): (slave veth7): Releasing active interface [ 413.655838][T15323] bond4 (unregistering): (slave batadv1): Releasing active interface [ 413.664958][T15323] bond4 (unregistering): Released all slaves [ 413.677841][T15323] bond5 (unregistering): Released all slaves [ 413.689126][T15323] bond6 (unregistering): Released all slaves [ 413.700703][T15323] bond7 (unregistering): Released all slaves [ 413.714377][T15323] bond8 (unregistering): Released all slaves [ 413.734997][T15323] bond9 (unregistering): Released all slaves [ 413.746409][T15323] bond10 (unregistering): Released all slaves [ 413.757946][T15323] bond11 (unregistering): Released all slaves [ 413.777925][T15323] bond12 (unregistering): Released all slaves [ 413.789684][T15323] bond13 (unregistering): Released all slaves [ 413.798657][T15323] bond14 (unregistering): Released all slaves [ 413.806991][T15323] bond15 (unregistering): Released all slaves [ 413.816765][T15323] bond16 (unregistering): Released all slaves [ 413.825115][T15323] bond17 (unregistering): Released all slaves [ 413.835482][T15323] bond18 (unregistering): Released all slaves [ 413.843929][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 413.856734][T15328] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.856791][T15328] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.856820][T15328] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.959539][T15323] tipc: Disabling bearer [ 413.971124][T15323] tipc: Disabling bearer [ 413.974616][T15323] tipc: Left network mode [ 414.273453][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 414.569560][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 416.442016][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 416.668559][T15323] IPVS: stop unused estimator thread 0... [ 416.748074][T15323] bridge_slave_1: left allmulticast mode [ 416.748113][T15323] bridge_slave_1: left promiscuous mode [ 416.748633][T15323] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.755182][T15323] bridge_slave_0: left allmulticast mode [ 416.755244][T15323] bridge_slave_0: left promiscuous mode [ 416.755619][T15323] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.818265][T15323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.843016][T15323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.855948][T15323] bond0 (unregistering): Released all slaves [ 417.025232][T15323] hsr_slave_0: left promiscuous mode [ 417.031085][T15323] hsr_slave_1: left promiscuous mode [ 417.045755][T15323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.054560][T15323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.139447][T15323] team0 (unregistering): Port device team_slave_1 removed [ 417.166057][T15323] team0 (unregistering): Port device team_slave_0 removed