last executing test programs: 7.067181054s ago: executing program 1 (id=5194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x2}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r11, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r13], 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.901524986s ago: executing program 1 (id=5203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000001100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x4008004) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], 0x0, 0x5, 0x81, &(0x7f0000000680)=""/129, 0x0, 0x22}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x20008080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)="2705020059feff000600002f86dd", 0xe}], 0x1}, 0x894) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000140)={r3}) recvmsg(r8, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12040) 3.635939589s ago: executing program 4 (id=5207): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_vlan\x00', 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xb, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @empty=0xe0000001}, {0x4, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100, @val=0x80}}}}}}}, 0x0) 3.430377863s ago: executing program 4 (id=5210): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_getrule={0x1c, 0x22, 0xf03c1a4546902de9, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0xfa, 0x5, 0x0, 0x0, 0x4, 0x10012}}, 0x1c}}, 0x4040014) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440, 0x115}}}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, 0x0, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x140, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4080}, 0x48800) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x44) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 3.384703664s ago: executing program 1 (id=5211): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) 3.26902944s ago: executing program 1 (id=5214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x2}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r11, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r13], 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.382866182s ago: executing program 4 (id=5224): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}]}, 0x38}}, 0x4800) 2.275473121s ago: executing program 4 (id=5226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a3000"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) 2.262495485s ago: executing program 3 (id=5227): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmmsg$unix(r8, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0xffc}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x1, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008590000b70400000000000085000000030000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 2.122057521s ago: executing program 4 (id=5228): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf25030000000800010000000000640007800c00018008000100", @ANYRES32=r2], 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x4) 2.039169592s ago: executing program 3 (id=5229): unshare(0x6020400) r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 2.034837657s ago: executing program 0 (id=5230): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.966620793s ago: executing program 3 (id=5231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000001100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x4008004) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x81, &(0x7f0000000680)=""/129, 0x0, 0x22}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x20008080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)="2705020059feff000600002f86dd", 0xe}], 0x1}, 0x894) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000140)={r3}) recvmsg(r8, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12040) 1.895574874s ago: executing program 0 (id=5232): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x100, @void}}}}}}}}, 0x0) 1.833728166s ago: executing program 0 (id=5233): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x4, 0x2, 0x0, 0xa, 0xbc, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.731576054s ago: executing program 0 (id=5234): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="c60028bd70000000000002"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.67795698s ago: executing program 3 (id=5235): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) close(0x3) 1.609398523s ago: executing program 0 (id=5236): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) close(0x3) 1.512788438s ago: executing program 2 (id=5238): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.437233862s ago: executing program 2 (id=5239): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmmsg$unix(r8, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="987ca23ffe5a584d638d61dbed949609873fcb91ee42fbc72366e5fa1e02eaa93d2d78efa9864f75d9eb0acf04e15973f15e2c9200a5b654f012b0343294175bbab9571a7fb83e22445cec2db70ae9ff6fdc60eba2e2d7129cdf557757db0cc58af6a92161ff8e65871e375d68a66df10f1ea01f92bc685216119005dbfac7891924917b82d5f53dd853db7c7757db65949b69ab1fb26d72027ac4d5018c2d3f29b11efb8018bbe219b2fc3b1a51e98ebd860da3dc6a73ad7251630664cd012f0879c9851cd2c70a7ee8dcb57addaf0d9a9dfa2ac35ef744a830922395f9b278b5588789faad7792ccb8bc91a74c58c80007ad4893aff56e96a342d8bdce2388e83793b5a9bdafc66d58ef87d8295916c22a8cbf7b04dc02c25553e40960723f144996480967189a929b2ad6eff46608bf3ebed7bad4e1537783b279d7fdb054a5b8b1f606c8c102a860776ff2083dace799f96796737dca7b83d72b5c459c3cf8a9391733daec078344fd3aca6dfa243f69d5e2f648e448139d3ae1ce6a619829fc5cd51ff325569d41c789bae84d4d5a93c564aecaaf1da89f99211e5e4cd2fe50ab092e8afe58941a9f20e21423a0785cfd4ba11ea1ee2b7e9f22ed6e971e18dbada2ba16cc1fd6f338a1f144aed2ee0b8171217a65bddbc1051672826dec860158cde8f6143ae2185731ab1e1f2da12f8691c3b22f285bce447f3b3586e054ea2ddb8f0df00230ccdf44e3d32aaf7d14fb8e27077895480f79c06f6c7cf443b1c023051844bc924b8b3b04016fe20eebec3b31b8198e6367bcb13f0f99eeabcb1cbb2da6b71dad2fc51780e53388515afa3d73682c01f8293c4656824bd52889d8f7c2efc1e058dc5ec5c0f34e247cc43a275a2fa1106e693e1b3db4173851b7597e6945bdbd341e6d3ec227dd52f7558e5d7ad54816694e76f91ed1430707b2ad451cedecf37a95cc512b075ebcae5f3b4deb059d9a37ea92f7fceed9ae96217e5f4a2f84290d62db07c85a5fa73db9fa405f2268e33067f8149bb8cdc8f67f86034716b73e11b73e7c6e4de80188efad777f566817b5a6ee58bdd85d48dfbf2a07aa7e9549db57095ed024c44466628e0a4602ba625393d34411e5023329479a1861ee11f77d25c4f49d1e7a16923ddc8482fc5cecec256f2034b779243b9575e7e8a84be54720f864fd98d899f55914af6a22144dc0f00883e6a36e1bbfe410a4fa222e9a5ae8b0146faf990effb54853fc9ef28335acc168263233626d120d448f72c934ab983f2e0fa3bdd7760f8e14534b983441e798443c737c830ba94b94253cd8f077e0bd68025c7d2ba0011a44b89ab7687752c12996c8445765e8766f28d80d21df34245c65f61318186b0374a72e7797c64743aa7129f289a39a8e1a3384790624f8f1b3fce906285bbce435cdf63460ddaad85cdbbb20e65134f9db017daefd3255c7d16de179d5a5dc0acb254b6cc1c77b79f6cd6843dd2014044820122291568c35c488c0b7f03eaab9bb92c7acedb9833b37770a0b0018ea0bc47a96373f0544561a3f53e41b54c127389a17d1a6b38ca0339983792c842334a3bd5b25451aa034eb561153eb2fbb7237ab72b776a9d4a81f80eba4dcbfbfd94e6c405a85cfc1e7c5699515414e5a4d3efca8012d9b68497f3da99168a293cbbcba0a68466307fe18296ffccddd05e6bffd523ed01ab32713ea4d31a6b479f8dc337a7a1045d517811de4ecc11c9f0fd19ec9e87b8a1e5062107c2e64d071ea6db964ecacb5338506d24f7ceade32f709ef7c9ae2549bf1108440f00edb09010023b9eaaff5aafc03643a77ce458d82e5e19f18e6e7c44cc3c046900ff7243b55faa9747924a38242512d1080961b55636b89f653f84fa0d17d5688ae70c5ad00d24a05bda4f7ffaa855f0c94f0c5618b1ae3aeece5f39d14f39c9cc4db7ec9d1b63061adfebdeb71585ec8df8e132d7ba577be78d9ede446d059447c33cad3d426bd6a359c6ec8463efb02361a9c445c4bc92c47aa3ee21c7ce3ba50d6c34236e7488d494e94cc4618164387c2b74335dfcf5729366c8be5bb988abcb1eda9e0e12bec98b8cac797c3835b315cfdccf47b26fdb0bc063e3db450475ad329e39e4368fd9414ca4c6005ce54a5735e853db852982d934e78c27a4ed287932ac71d46c86d12c31203f36c026b910ff54dba9ada216101b6d392cba991dcb7bbfdaabdeec0f81b0c21b2bad35ea87bfb99e28372413bc1684ef46b44b6b31a253589e8e4901b4be9029dba837ee46a54fb7bf707aae3687c54db65a5455ec8e9a16308c9e1e041acc50af66d7242a0e64aee1c23f1282877b4b8d99b3be8f4935b4e8ec70815050eb26c0688498326ec86659bd2ab23b8d8a5405149fb1b202660bef38208318c0159217061ff0f12fefbdd4eb9ee41d6eec866ca9142c8aaf75a0091041472c96a58e1f60e84ba772424555399a2956c61e9488367601bf1364c3935d5accc72a3cca7d3c99195b52168e046459599fd5d498a099737f6393f1b40472198fc349266a231761caf8c79e9c46f849887c5ea26ee419ea9200a08d1813515ea66371838f077b76aad7bc68c9b73a66a4a166b6f322ee8382f1a656853476f1ef76e476f2043e72e95e6122f250583c6e4b63cf987ddab9159ed6c551e35e1b6a08d647fb815dc748aeb4ace820221afc9a48e6f8550877c6a66dc3b4598919d15ccaaba05e6e91cd2034af7c6d7841b0164a5df2fc28f36b948d4ed58b0a18f4f1ab7822b9f5dddebe182b17ba2a16fed2529164dbe0d26da8ddbcfb20daf66ecfec15f20c49271d1dbd77200784f7ded5faeb1293b3b8bb7844bf84a13bdce3e0335a72843869e7bb735929702611d560b54c0498b8e1a6859f8585028d48fe32dc9a462a04d1ef9ad7d75fa0f9f4acf69bf77223abc32cd9c365acbef5b1c51518c82e9729dcf051ed7fd4ca732c6a76d7556ec41be123ed75f65d003713b7e1462cb7400828eac8da0a221a5e09db245e709e96f156fc2bfad2f75ed72958af6b9306689493ca14e3b27eff85742b85661f64b62a6b82b46e8f48b71c319cad6c6402959af30f86500bfbeb7d9cc5e7e1a9f254a9d9d36f839d3dfab679f66eb674399b34174a10e444fe4605a84f7cc6e93e7d0e5bba6d482e6ba448481b09aeb330dba314fc6c0d8caecd5ffd88e64b37a39bb007a6664372500c7816482fc121ab7b184beb1a30ab1941dbee08616a976f8713fa1bfa218f4851a0b93a958647630ab8a9d2c6655d5a609161565d1f5306ef3e215c9f0087d06fe2411143ac1a16e31be76aaf2c18cad6492f089b33bd50551d3b8c03b6a10322254ff384b391d2ab6d254c7603f3fac16990a38dc5eecd50c3779c8eba8e0ea423edcd144ac893a5f8bc5fc3ba9719ef986f95a741ca87204326946a920bc5c05e3be79d08f526d03cd5434f2d3846832dc0e303645f86f1291de4b5ece53072ed6d03ba5ed3be20d78328449275ed863714c55a3e4ee2044459b610e636285c517fa115c4c27a8c4456fa7f1a205e9dcf44e263e0a708495379bb6a3fc1d627e7315a4391eb96123d7d37eb05bfefd84e383c928db42dd47e83e078590636135ac0efb3e98d415564f2a82425393972689f9b9d26fb1353dd1652b083607e3566f0214273116f40165b3f1a16308f6557c1271c2ebeadca9bc75fbf5eb0c9f6a33d0f4bf5a63188bef4f70f6ce0213943faa0a8d0b83a8b8d13baebfb8906780a57c370180c18c222b30274560a3f08a8c0d4591bccec3f792586132967561f916d84be7f7061a0fd438881ea66c648fcb8b2bee277b932c150c2b9357a488d96d5b229202baf8f1a13d6ceb01eff8e7cb881622afd6aaf87c3af231789c4c4bf9fc430fd44b776981e6ea9c35535bdc07cf517352978a4f7d70b68fe52e77acf6bf24ec7f34ca34c52f01b663bbd43c4bd293bfd84303fec10ecbb7843ba96524496e316b75f51fbb894c4bd575c4bcbaa4db69d280a4fa11f5ff05280ed81ba73a93a4067d6c668d982603d222dde32efe67c7a16ad1f57bcb1728c663d078bafe0e83dda39b61686e1906a67f295e4bbae79d3553d5582daef188ea531d1e28e8036f043c2e3356fda203955f997e960a4e2d31efb56f38f4212fc366a1159ba04807332a00826e3c4b23be43daf3eaa08b86bdfc57eec79574f22ed98eb88f04d6650b51326681dc6d6bd303ba21e3a537817fd7c62f6b692815cceb3237c49dcdc2ace93635bd78769ba21696d34454715fb74650aad3c88f0a5992583f9b81a0e0c5c09a57a3b1628a144e6053ba26f569e4ee465b13118ed0096ae9ab0c867881faba517b304557f2155c9f1bb179ed531f8cba3abb1c97afae5b3adbb7cc0027917a44e96ab8e6a20a11eacc69cd799d158b12a302433c222035a050f8d3378580028da9c8fa7c7326c4e8b3fb8327e9c6bbea839f70f4aa6a07b5d56c46f980724ba92483b0f0451c817aa617e1bb7221397a00998105d80a79b50981ab317f4326f01a2229958437babc1e270d6333f110d4bdf76931362f5eae0dc3df60e6e9d688473d388b42f5416dce639a92e1e9b40a03a12f9c25fc3b845f9d1ba7b8420bfaf26093af88b8bd75be440a2e89906fe1c88e1fab0c110410acab8f3c6866d25524e25be63677bd2124cac76fc75c59edb064cf45ba2e9c27cdaeddb9f823dce0e89880fd8fc00151b53322a92757a5b3cdb62276d08f62a89817f489c19e97f53b21a5b9cd03093842aa083f53bf1bc9c15a2148ccd182bde08b8ebaf8d2dfc0d8d304f99fddf571eb228c930fc984004fb893b100aed0290cfc6ab4935fbbdaa50decbcc91f2ec46f7a48b0cb001746bb1a82b51953f49d22e1aa86c1ef8da00798bf85d8fbe85ce408e873d3ea151b6ce63a525ce80832761d359140d68d713d2b1170d8b658bcf9c8ab7d9539bf2eb5f62ec07696125f95b66609961e17e860014432328595b91b6aec49d9a7f77a33e681c372ef5ad2115f8c1162b391f14f05d9426a50ebf7fb4c3716f964bdc01db9564e150f0676b029a02d7b198ebf6e8dd13b18bee8bd0b73e65e38cfea0c4b52c195ca7bf238165200e455118eda70462dbe19e62535edec88544007ee42c903b0b0125f5b48d3c34ae904135a736d72bdab5d1b32d5780681f79ee6193ad3e961d5030ac6a17d729b0d8dca1aff31940f86c75d4debdb86eabdd41f19f695c2a59c6a255a097b3b7b6f42454401b0740125c02a3dc107f05a489b4d0230a34bd4e1a60d9c3855b73f6df4d678bee36662ad7821d0bb2efa441f57fbc01011ae1fbcdae06b2e2940c12befe1e3e3b165e773dcf710b9777771d92ad0981881e1061c3dab3b9f3ac79c6b8c0097129d5c7c06fb2cac78fa1ec3c00272884ee9b8360f71c9fef8bbdaac1d00cfed05fd55459843577dd4d94abb8216302392619d29f7375343485b271a9ea144cadc6ddf014a4d87f0b17d20818a75c5f256688ff239cf1df7d1e17c29f0ba135d132424eae628d08180139a3311455e000ad83cb877d9f943008455bf791b7bc701d353e6f095055b7cd5a01cc265327de8b6540adf152905e602cf10ab5b6c1555173b7c729f745d9cb3837ace2f5e0f055bd1bdcef742e81d4d95aa531a7b0dda04a84474be9b7e885be24a4f3778d7c7767717635c484addb898afd87f13d6661efd6ae9db09a4dba871f18c2b06279ffd341b00c7d195329a21fe33c9b8709fb04066df1825081fa7233a7056a21b03f8d7", 0xffe}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x1, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008590000b70400000000000085000000030000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 1.179705189s ago: executing program 2 (id=5240): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x4) sendfile(r0, r1, 0x0, 0xffffffff000) connect$llc(r0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000000018060020010000000000000000000000000002fe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b415dbe75799"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000002340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x38}, 0x20000000) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000000)={'veth0_to_batadv\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801002020205d0af8ff00000020bea100000000000007010000f8ffffffb702000000b7030000ff090000850000007200000095000000811c2264ab33a9ca43081cb0b3756e7dd434170753ea4785495380b615971d8af42c71ec0380d98a64be8c510a8f1b8a78d78179db2693f99bf0b6ace32a80914774ed000f7538b9a4ae3e7cecf4bf0865a90f2952ed33c8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 438.861475ms ago: executing program 2 (id=5241): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000800)=ANY=[@ANYRES32=r1]) 359.767919ms ago: executing program 2 (id=5242): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}, 0xffff2bbe}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000940)=""/56, 0x38}, {&(0x7f0000000980)=""/84, 0x54}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001b00)=""/193, 0xc1}, {&(0x7f0000001c00)=""/4092, 0xffc}], 0x2}, 0xfffff000}], 0x4, 0x20000, 0x0) 148.97537ms ago: executing program 4 (id=5243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) 147.13532ms ago: executing program 1 (id=5244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 103.699667ms ago: executing program 0 (id=5245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000001100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x4008004) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x81, &(0x7f0000000680)=""/129, 0x0, 0x22}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x20008080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)="2705020059feff000600002f86dd", 0xe}], 0x1}, 0x894) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000140)={r3}) recvmsg(r8, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12040) 103.275391ms ago: executing program 2 (id=5246): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@loopback, r1}, 0x14) 102.769826ms ago: executing program 3 (id=5247): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) close(0x3) 1.289814ms ago: executing program 1 (id=5248): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/21, 0x15}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f00000039c0)=""/97, 0x61}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xf55f}], 0x5, 0x0, 0x0) 0s ago: executing program 3 (id=5249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4024890}, 0x4000880) kernel console output (not intermixed with test programs): 47.005623][T22467] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3896'. [ 647.024736][T22467] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 647.088916][ T29] audit: type=1800 audit(1785055414.672:78): pid=22454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3892" name="memory.events" dev="tmpfs" ino=4174 res=0 errno=0 [ 647.178533][T22473] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3900'. [ 647.309959][T22483] batadv0: left promiscuous mode [ 647.318863][T22483] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 647.326986][T22483] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 647.567734][T22492] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 647.584568][T22492] bond14 (unregistering): Released all slaves [ 647.894691][T22505] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 647.908683][T22505] bond14 (unregistering): Released all slaves [ 648.952798][ T29] audit: type=1800 audit(1785055416.532:79): pid=22516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3912" name="memory.events" dev="tmpfs" ino=4185 res=0 errno=0 [ 649.269732][T22543] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 649.283296][T22543] bond14 (unregistering): Released all slaves [ 649.384313][T22549] syz_tun: entered allmulticast mode [ 649.562453][T22549] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 649.605462][T22549] bond6 (unregistering): Released all slaves [ 649.692462][T22546] syz_tun: left allmulticast mode [ 650.150761][T22587] __nla_validate_parse: 8 callbacks suppressed [ 650.150778][T22587] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3929'. [ 650.585180][T22606] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 651.608465][T22638] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 651.616415][T22638] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 651.640020][T22638] netlink: 'syz.3.3943': attribute type 2 has an invalid length. [ 651.656073][T22638] netlink: 'syz.3.3943': attribute type 2 has an invalid length. [ 651.679697][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3943'. [ 651.979611][T22649] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3946'. [ 652.312748][T22661] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3947'. [ 652.371511][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3948'. [ 652.449688][T22669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3948'. [ 653.129446][T22703] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 653.239983][T22702] macsec0: entered promiscuous mode [ 653.253302][T22702] veth1_macvtap: entered promiscuous mode [ 653.281568][T22702] veth1_macvtap: left promiscuous mode [ 653.479606][T22724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3963'. [ 653.958895][T22751] batadv0: entered promiscuous mode [ 653.987552][T22751] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 654.008376][T22753] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3967'. [ 654.181274][ T29] audit: type=1800 audit(1785055421.762:80): pid=22731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3963" name="memory.events" dev="tmpfs" ino=3921 res=0 errno=0 [ 654.246641][T22765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3972'. [ 654.392296][T22774] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3974'. [ 655.238437][T22807] syzkaller1: entered promiscuous mode [ 655.258114][T22807] syzkaller1: entered allmulticast mode [ 655.385151][T22814] __nla_validate_parse: 2 callbacks suppressed [ 655.385168][T22814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3987'. [ 655.497905][T22821] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3989'. [ 655.592176][T22828] syzkaller1: entered promiscuous mode [ 655.599140][T22828] syzkaller1: entered allmulticast mode [ 655.767390][T22833] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.779807][T22833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.788221][ T53] syz1: Port: 1 Link ACTIVE [ 655.799681][T22833] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 655.807895][T22833] netlink: 'syz.3.3993': attribute type 2 has an invalid length. [ 656.829467][T22869] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 656.853273][T22869] netlink: 'syz.3.4005': attribute type 2 has an invalid length. [ 657.279347][T22885] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4011'. [ 657.373200][T22773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.576451][T22895] netlink: 'syz.2.4013': attribute type 13 has an invalid length. [ 657.740071][ T29] audit: type=1800 audit(1785055425.322:81): pid=22886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4011" name="memory.events" dev="tmpfs" ino=4019 res=0 errno=0 [ 658.079856][T22913] netlink: 'syz.3.4018': attribute type 12 has an invalid length. [ 658.229445][T22927] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4022'. [ 658.266925][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4018'. [ 658.946359][T22933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4023'. [ 660.302532][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4018'. [ 660.315607][T22936] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 660.340302][T22936] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 660.359817][T22936] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 660.514783][T22946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4027'. [ 660.584168][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 660.837464][T22959] lo speed is unknown, defaulting to 1000 [ 661.090651][ T29] audit: type=1800 audit(1785055428.672:82): pid=22956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4027" name="memory.events" dev="tmpfs" ino=4030 res=0 errno=0 [ 661.602150][T22992] netlink: 'syz.3.4034': attribute type 12 has an invalid length. [ 661.673069][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'. [ 661.731076][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4034'. [ 662.054727][T23007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4036'. [ 662.371257][T23014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4038'. [ 662.716680][T23021] netlink: 'syz.2.4040': attribute type 1 has an invalid length. [ 662.740341][T23021] 8021q: adding VLAN 0 to HW filter on device bond19 [ 662.789732][T23024] netlink: 'syz.2.4041': attribute type 4 has an invalid length. [ 662.800519][T23024] netlink: 'syz.2.4041': attribute type 4 has an invalid length. [ 662.811049][T16178] lo speed is unknown, defaulting to 1000 [ 662.818869][T16178] syz2: Port: 1 Link ACTIVE [ 662.823818][T16178] lo speed is unknown, defaulting to 1000 [ 663.137178][T23030] batadv0: entered promiscuous mode [ 663.142483][T23030] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 663.392021][T23034] netlink: 'syz.2.4045': attribute type 12 has an invalid length. [ 663.413033][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4045'. [ 663.426650][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4045'. [ 663.491934][T22948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.745262][T23052] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4050'. [ 663.989246][T23054] syzkaller1: entered promiscuous mode [ 664.025971][T23054] syzkaller1: entered allmulticast mode [ 664.086700][T23047] lo speed is unknown, defaulting to 1000 [ 664.134635][T23064] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4051'. [ 664.981668][T23075] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 665.214150][T23086] netlink: 'syz.4.4056': attribute type 12 has an invalid length. [ 665.348182][T23085] lo speed is unknown, defaulting to 1000 [ 665.791165][T23103] syzkaller0: entered promiscuous mode [ 665.796965][T23103] syzkaller0: entered allmulticast mode [ 665.866269][ T29] audit: type=1800 audit(1785055433.452:83): pid=23100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4059" name="memory.events" dev="tmpfs" ino=4052 res=0 errno=0 [ 666.083351][T23113] __nla_validate_parse: 4 callbacks suppressed [ 666.083369][T23113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4064'. [ 668.612047][T23127] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 668.741335][T23129] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4066'. [ 668.793505][T23131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4068'. [ 669.781054][T23150] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4074'. [ 669.892036][T23154] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4075'. [ 670.131259][T23161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4076'. [ 670.142265][T23161] batadv0: left promiscuous mode [ 670.158742][ T47] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.180762][ T47] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.203774][ T47] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.228270][ T47] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.379287][T23167] netlink: 'syz.3.4078': attribute type 1 has an invalid length. [ 670.403213][T23165] syzkaller0: entered promiscuous mode [ 670.409014][T23165] syzkaller0: entered allmulticast mode [ 670.471236][T23167] 8021q: adding VLAN 0 to HW filter on device bond11 [ 670.508180][T23167] netlink: 'syz.3.4078': attribute type 10 has an invalid length. [ 670.516756][T23167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4078'. [ 670.536041][T23171] syzkaller1: entered promiscuous mode [ 670.543205][T23171] syzkaller1: entered allmulticast mode [ 670.641887][T23176] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 670.660546][T23180] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4084'. [ 670.693659][T23178] syzkaller0: entered promiscuous mode [ 670.699739][T23178] syzkaller0: entered allmulticast mode [ 670.709387][T23178] tipc: Enabled bearer , priority 0 [ 670.717968][T23177] tipc: Resetting bearer [ 670.740623][T23183] netlink: 'syz.1.4085': attribute type 1 has an invalid length. [ 670.798122][T23177] tipc: Disabling bearer [ 670.837186][T23187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4086'. [ 670.885638][T23183] 8021q: adding VLAN 0 to HW filter on device bond14 [ 671.041206][T23187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 671.246921][T23206] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4091'. [ 671.428631][T23220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4095'. [ 671.522149][T23223] syzkaller0: entered promiscuous mode [ 671.540616][T23223] syzkaller0: entered allmulticast mode [ 671.611187][T23227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4098'. [ 671.685809][ T29] audit: type=1800 audit(1785055439.272:84): pid=23213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4091" name="memory.events" dev="tmpfs" ino=4253 res=0 errno=0 [ 671.869687][T23235] tipc: Enabled bearer , priority 0 [ 671.939055][T23239] syzkaller0: entered promiscuous mode [ 671.945138][T23239] syzkaller0: entered allmulticast mode [ 671.966067][T23233] tipc: Disabling bearer [ 671.983017][T23242] syzkaller0: entered promiscuous mode [ 671.990267][T23242] syzkaller0: entered allmulticast mode [ 673.149395][T23268] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4108'. [ 674.813835][T23280] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4112'. [ 674.915029][T23281] nbd0: detected capacity change from 0 to 63 [ 674.963810][T23286] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4111'. [ 675.060863][ T5630] block nbd0: Receive control failed (result -104) [ 675.202940][T23296] syzkaller0: entered promiscuous mode [ 675.212223][T23296] syzkaller0: entered allmulticast mode [ 675.235005][T23296] tipc: Enabled bearer , priority 0 [ 675.251740][T23295] tipc: Resetting bearer [ 675.270828][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4116'. [ 675.308521][T23295] tipc: Disabling bearer [ 675.398688][ T29] audit: type=1800 audit(1785055442.982:85): pid=23287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4112" name="memory.events" dev="tmpfs" ino=4156 res=0 errno=0 [ 675.497734][T23306] macsec0: entered promiscuous mode [ 675.504373][T23306] veth1_macvtap: entered promiscuous mode [ 675.512642][T23306] veth1_macvtap: left promiscuous mode [ 675.553559][T23304] syzkaller0: entered promiscuous mode [ 675.566714][T23304] syzkaller0: entered allmulticast mode [ 675.657911][T23314] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4122'. [ 676.202082][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4125'. [ 676.226235][T23329] block nbd0: reconnected socket [ 676.240617][ T5630] block nbd0: Receive control failed (result -32) [ 676.307283][T23333] syzkaller0: entered promiscuous mode [ 676.312915][T23333] syzkaller0: entered allmulticast mode [ 676.352719][T23337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4130'. [ 676.471574][T23340] syzkaller0: entered promiscuous mode [ 676.505185][T23340] syzkaller0: entered allmulticast mode [ 677.062238][T23363] syzkaller0: entered promiscuous mode [ 677.078963][T23363] syzkaller0: entered allmulticast mode [ 677.187633][T23366] tipc: Enabled bearer , priority 0 [ 677.210876][T23365] tipc: Disabling bearer [ 677.411521][T23369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.463154][T23374] syzkaller0: entered promiscuous mode [ 677.486858][T23374] syzkaller0: entered allmulticast mode [ 677.904252][T23388] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 677.919256][T23388] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 677.930196][T23387] syzkaller0: entered promiscuous mode [ 677.950309][T23387] syzkaller0: entered allmulticast mode [ 677.962289][T23390] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4144'. [ 678.202451][T23399] syzkaller0: entered promiscuous mode [ 678.214187][T23399] syzkaller0: entered allmulticast mode [ 678.300816][T23405] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4150'. [ 678.912127][T23413] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4152'. [ 679.027566][ T29] audit: type=1800 audit(1785055446.612:86): pid=23407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4150" name="memory.events" dev="tmpfs" ino=4166 res=0 errno=0 [ 679.128456][T23420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4155'. [ 679.514653][T23437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4159'. [ 679.577430][ T5630] block nbd1: Receive control failed (result -1) [ 679.774307][T23449] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4163'. [ 679.950143][T23454] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 680.050862][T23461] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4166'. [ 680.289151][T23472] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 680.309503][T23472] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 680.620739][T23481] syzkaller0: entered promiscuous mode [ 680.635329][T23481] syzkaller0: entered allmulticast mode [ 680.949713][T23495] netlink: 'syz.0.4175': attribute type 12 has an invalid length. [ 681.112929][T23488] syzkaller0: entered promiscuous mode [ 681.118630][T23488] syzkaller0: entered allmulticast mode [ 681.120917][T23504] netlink: 'syz.4.4177': attribute type 2 has an invalid length. [ 681.133741][T23504] netlink: 'syz.4.4177': attribute type 2 has an invalid length. [ 681.135652][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4175'. [ 681.227522][T23495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4175'. [ 683.517307][T23500] tipc: Enabled bearer , priority 0 [ 683.545528][T23502] syzkaller0: entered promiscuous mode [ 683.551008][T23502] syzkaller0: entered allmulticast mode [ 683.558062][T23502] tipc: Resetting bearer [ 683.579106][T23499] tipc: Resetting bearer [ 683.608783][T23520] netlink: 'syz.3.4180': attribute type 1 has an invalid length. [ 683.620888][T23520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4180'. [ 685.928044][T23499] tipc: Disabling bearer [ 686.038346][T23553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4186'. [ 686.199483][T23567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4190'. [ 686.266964][T23576] netlink: 'syz.1.4192': attribute type 10 has an invalid length. [ 686.308278][T23578] netlink: 'syz.0.4191': attribute type 12 has an invalid length. [ 686.349128][T23576] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.407623][T23576] bond0: (slave team0): Enslaving as an active interface with an up link [ 686.474354][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'. [ 686.508158][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4191'. [ 686.771060][ T29] audit: type=1800 audit(1785055454.352:87): pid=23563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4186" name="memory.events" dev="tmpfs" ino=4358 res=0 errno=0 [ 687.041060][T23608] lo: entered allmulticast mode [ 687.070788][T23608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4196'. [ 687.149913][T23608] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 687.421932][T23608] bond12 (unregistering): Released all slaves [ 687.579169][T23612] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 687.613080][T23612] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 687.638211][T23604] lo: left allmulticast mode [ 687.756317][T23616] syzkaller0: entered promiscuous mode [ 687.769478][T23616] syzkaller0: entered allmulticast mode [ 687.795249][T23618] syzkaller0: entered promiscuous mode [ 687.808557][T23618] syzkaller0: entered allmulticast mode [ 687.959100][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4205'. [ 687.959959][T23631] netlink: 'syz.4.4204': attribute type 12 has an invalid length. [ 688.001988][T23628] netlink: 'syz.0.4201': attribute type 13 has an invalid length. [ 688.076920][T23631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4204'. [ 688.105558][T23630] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 688.120996][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4204'. [ 688.138841][T23635] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 688.161254][T23630] macvlan2: entered promiscuous mode [ 688.167519][T23630] macvlan2: entered allmulticast mode [ 688.173321][T23630] bond15: (slave macvlan2): Error -98 calling set_mac_address [ 688.220314][T23635] syzkaller0: entered promiscuous mode [ 688.228492][T23635] syzkaller0: entered allmulticast mode [ 688.411099][T23646] tipc: Resetting bearer [ 688.517259][T23646] tipc: Resetting bearer [ 688.526484][T23646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.537788][T23646] batman_adv: batadv0: Interface activated: dummy0 [ 688.547144][T23646] batadv0: left promiscuous mode [ 688.553003][T23646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.715269][T23646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.727296][T23646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.739804][T23646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.750798][T23646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.763074][T23646] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 688.804690][T23656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4212'. [ 688.891159][T21587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.895963][T23671] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4213'. [ 688.927882][T23656] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 688.950926][T23656] bond12 (unregistering): Released all slaves [ 688.991565][T21587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.017792][T21587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.058021][T23669] syzkaller0: entered promiscuous mode [ 689.069360][T23669] syzkaller0: entered allmulticast mode [ 689.080826][T21587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.100831][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 689.183384][T23681] syzkaller0: entered promiscuous mode [ 689.197072][T23681] syzkaller0: entered allmulticast mode [ 689.356032][T23686] syzkaller0: entered promiscuous mode [ 689.371789][T23686] syzkaller0: entered allmulticast mode [ 689.402937][T23693] netlink: 'syz.1.4219': attribute type 12 has an invalid length. [ 689.498324][ T29] audit: type=1800 audit(1785055457.082:88): pid=23674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4213" name="memory.events" dev="tmpfs" ino=4223 res=0 errno=0 [ 689.519747][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4221'. [ 689.529277][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'. [ 689.545164][T23695] openvswitch: netlink: Flow key attr not present in new flow. [ 689.563999][T23697] tipc: Enabled bearer , priority 0 [ 689.573900][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'. [ 689.583693][T23697] syzkaller0: entered promiscuous mode [ 689.592990][T23697] syzkaller0: entered allmulticast mode [ 689.669845][T23697] tipc: Resetting bearer [ 689.700406][T23696] tipc: Resetting bearer [ 689.726034][T23696] tipc: Disabling bearer [ 689.737886][T23699] syzkaller0: entered promiscuous mode [ 689.743542][T23699] syzkaller0: entered allmulticast mode [ 689.752662][T23706] batadv0: entered promiscuous mode [ 689.758876][T23706] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 689.878222][T23705] tipc: Enabled bearer , priority 0 [ 689.918088][T23705] tipc: Resetting bearer [ 690.008120][T23720] syz_tun: entered allmulticast mode [ 690.039946][T23720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4228'. [ 690.169701][T23720] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 690.189978][T23720] bond6 (unregistering): Released all slaves [ 690.317604][T23714] syz_tun: left allmulticast mode [ 690.408534][T23733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4231'. [ 690.510250][T23739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4234'. [ 690.577012][T23736] tipc: Resetting bearer [ 690.640677][T23736] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 690.677884][T23736] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 690.867300][T23755] gre0: MTU too low for tipc bearer [ 690.875982][T23755] tipc: Disabling bearer [ 690.995146][T16178] tipc: Node number set to 1311690204 [ 691.188460][ T29] audit: type=1800 audit(1785055458.772:89): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4234" name="memory.events" dev="tmpfs" ino=4240 res=0 errno=0 [ 691.217606][T23771] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 691.275666][T23770] syzkaller0: entered promiscuous mode [ 691.293654][T23770] syzkaller0: entered allmulticast mode [ 691.646452][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'. [ 691.731990][T23782] syzkaller0: entered promiscuous mode [ 691.749395][T23782] syzkaller0: entered allmulticast mode [ 691.996862][T23808] lo: entered allmulticast mode [ 692.038670][T23806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4243'. [ 692.159503][T23806] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 692.186004][T23806] bond12 (unregistering): Released all slaves [ 692.309359][T23813] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 692.329489][T23813] bond12 (unregistering): Released all slaves [ 692.398925][T23825] syzkaller0: entered promiscuous mode [ 692.407697][T23825] syzkaller0: entered allmulticast mode [ 692.415249][T23805] lo: left allmulticast mode [ 692.650444][T23842] tipc: Enabling of bearer rejected, already enabled [ 692.686130][T23842] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 692.696129][T23842] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 692.727335][T23842] tipc: Resetting bearer [ 692.798434][T23842] syzkaller0: mtu less than device minimum [ 692.811993][T23852] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 692.888624][T23855] syzkaller0: entered promiscuous mode [ 692.901406][T23855] syzkaller0: entered allmulticast mode [ 693.282017][T23868] syzkaller0: entered promiscuous mode [ 693.302991][T23868] syzkaller0: entered allmulticast mode [ 693.333204][T23870] syzkaller0: entered promiscuous mode [ 693.342801][T23870] syzkaller0: entered allmulticast mode [ 693.492476][T23883] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 693.632618][T23885] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 693.654350][T23885] bond12 (unregistering): Released all slaves [ 693.721172][T23889] syz_tun: entered allmulticast mode [ 693.906306][T23889] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 693.964041][T23889] bond6 (unregistering): Released all slaves [ 694.169725][T23888] syz_tun: left allmulticast mode [ 694.192611][T23918] __nla_validate_parse: 7 callbacks suppressed [ 694.192627][T23918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4263'. [ 694.302285][T23923] syzkaller0: entered promiscuous mode [ 694.310490][T23923] syzkaller0: entered allmulticast mode [ 694.392784][T23935] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4266'. [ 694.399534][T23937] netlink: 'syz.2.4267': attribute type 1 has an invalid length. [ 694.451925][T23937] bond20: entered promiscuous mode [ 694.459549][T23937] 8021q: adding VLAN 0 to HW filter on device bond20 [ 694.518190][T23937] vlan6: entered allmulticast mode [ 694.538762][T23937] bond20: entered allmulticast mode [ 694.622152][T23942] bond20: (slave bridge10): making interface the new active one [ 694.632303][T23945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4270'. [ 694.644389][T23942] bridge10: entered promiscuous mode [ 694.652079][T23942] bridge10: entered allmulticast mode [ 694.667517][T23942] bond20: (slave bridge10): Enslaving as an active interface with an up link [ 694.801820][T23945] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 694.880686][T23945] bond12 (unregistering): Released all slaves [ 694.919547][ T29] audit: type=1800 audit(1785055462.502:90): pid=23939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4266" name="memory.events" dev="tmpfs" ino=4266 res=0 errno=0 [ 694.949664][T23956] tipc: Enabling of bearer rejected, already enabled [ 695.090564][T23962] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 695.239978][T23969] syzkaller0: entered promiscuous mode [ 695.257834][T23969] syzkaller0: entered allmulticast mode [ 695.460278][T23977] tipc: Enabled bearer , priority 0 [ 695.468721][T23977] syzkaller0: entered promiscuous mode [ 695.474511][T23977] syzkaller0: entered allmulticast mode [ 695.481886][T23978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4275'. [ 695.564253][T23978] bond21: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 695.579138][T23978] bond21 (unregistering): Released all slaves [ 695.627865][T23992] tipc: Resetting bearer [ 695.661857][T23976] tipc: Resetting bearer [ 695.712777][T23976] tipc: Disabling bearer [ 695.723363][T23995] netlink: 'syz.4.4279': attribute type 12 has an invalid length. [ 695.792784][T23991] syzkaller0: entered promiscuous mode [ 695.798374][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4279'. [ 695.807869][T23991] syzkaller0: entered allmulticast mode [ 695.815109][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4279'. [ 695.937835][T24004] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4283'. [ 698.151638][T24036] tipc: Enabling of bearer rejected, failed to enable media [ 698.310177][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4288'. [ 698.327440][T24048] netlink: 'syz.2.4289': attribute type 1 has an invalid length. [ 698.358604][T24048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4289'. [ 698.437763][T24053] syzkaller0: entered promiscuous mode [ 698.443388][T24053] syzkaller0: entered allmulticast mode [ 698.467849][T24053] tipc: Enabled bearer , priority 0 [ 698.595337][T24052] syzkaller0: entered promiscuous mode [ 698.610041][T24052] syzkaller0: entered allmulticast mode [ 698.629462][T24050] tipc: Resetting bearer [ 698.688349][T24050] tipc: Disabling bearer [ 698.709702][T24067] netlink: 'syz.1.4295': attribute type 12 has an invalid length. [ 698.784020][T24065] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 698.802184][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 700.938353][T24079] tipc: Resetting bearer [ 700.951871][T24083] netlink: 'syz.4.4296': attribute type 1 has an invalid length. [ 700.960084][T24083] netlink: 'syz.4.4296': attribute type 2 has an invalid length. [ 701.093589][T24101] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 701.117912][T24101] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 701.153545][T24107] syzkaller0: entered promiscuous mode [ 701.169724][T24107] syzkaller0: entered allmulticast mode [ 701.998119][T24130] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 702.092700][T24132] syzkaller0: entered promiscuous mode [ 702.103737][T24132] syzkaller0: entered allmulticast mode [ 702.126036][T24132] 0: reclassify loop, rule prio 0, protocol 800 [ 702.249805][T24144] __nla_validate_parse: 1 callbacks suppressed [ 702.249822][T24144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4310'. [ 702.319299][T24143] syzkaller0: entered promiscuous mode [ 702.327325][T24143] syzkaller0: entered allmulticast mode [ 702.634103][T24160] netlink: 'syz.1.4313': attribute type 12 has an invalid length. [ 702.727377][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 702.747423][T24165] syzkaller0: entered promiscuous mode [ 702.756158][T24165] syzkaller0: entered allmulticast mode [ 702.768579][T24160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4313'. [ 702.891301][T24168] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 703.046274][T24174] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 703.066784][T24174] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 703.105541][T24175] syzkaller0: entered promiscuous mode [ 703.127794][T24175] syzkaller0: entered allmulticast mode [ 703.249792][T24180] syzkaller0: entered promiscuous mode [ 703.265018][T24180] syzkaller0: entered allmulticast mode [ 703.421273][T24186] syzkaller0: entered promiscuous mode [ 703.429222][T24186] syzkaller0: entered allmulticast mode [ 703.668692][T24198] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4328'. [ 703.798136][T24203] syzkaller0: entered promiscuous mode [ 703.814134][T24203] syzkaller0: entered allmulticast mode [ 703.845986][T24210] netlink: 'syz.1.4330': attribute type 12 has an invalid length. [ 703.979054][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 704.068133][T24210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4330'. [ 704.201704][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4331'. [ 704.360092][T24228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4334'. [ 704.393879][T24230] syzkaller0: entered promiscuous mode [ 704.411575][T24230] syzkaller0: entered allmulticast mode [ 704.628430][T24234] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4338'. [ 704.732634][T24238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4337'. [ 704.935573][T24242] syzkaller0: entered promiscuous mode [ 704.947839][T24242] syzkaller0: entered allmulticast mode [ 704.962249][T24249] netlink: 'syz.3.4342': attribute type 12 has an invalid length. [ 705.274545][T24261] batman_adv: batadv0: Adding interface: gretap2 [ 705.289713][T24261] batman_adv: batadv0: Interface activated: gretap2 [ 705.455612][ T1644] block nbd0: Connection timed out, retrying (0/1 alive) [ 705.468617][ T1644] block nbd0: Connection timed out, retrying (0/1 alive) [ 705.475987][ T1644] block nbd0: Connection timed out, retrying (0/1 alive) [ 705.483150][ T1644] block nbd0: Connection timed out, retrying (0/1 alive) [ 705.490874][ T1644] block nbd0: Dead connection, failed to find a fallback [ 705.647949][T24281] syzkaller0: entered promiscuous mode [ 705.653579][T24281] syzkaller0: entered allmulticast mode [ 706.021945][T24289] syzkaller0: entered promiscuous mode [ 706.031894][T24289] syzkaller0: entered allmulticast mode [ 706.044544][T24295] netlink: 'syz.1.4357': attribute type 12 has an invalid length. [ 706.153059][T24297] ip6gre3: entered promiscuous mode [ 706.164194][T24297] ip6gre3: entered allmulticast mode [ 706.504380][T24303] syzkaller0: entered promiscuous mode [ 706.541490][T24303] syzkaller0: entered allmulticast mode [ 706.729626][T24313] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 706.774639][T24313] bond12 (unregistering): Released all slaves [ 707.087433][T24337] syzkaller0: entered promiscuous mode [ 707.093178][T24337] syzkaller0: entered allmulticast mode [ 707.634029][T24369] netlink: 'syz.0.4370': attribute type 12 has an invalid length. [ 707.686325][T24372] netlink: 'syz.4.4369': attribute type 11 has an invalid length. [ 707.800287][T24373] __nla_validate_parse: 14 callbacks suppressed [ 707.800307][T24373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4370'. [ 707.931330][T24377] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4371'. [ 707.954482][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4370'. [ 707.973506][T24362] lo speed is unknown, defaulting to 1000 [ 708.114215][T24383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4373'. [ 708.159090][T24383] ip6gre4: entered promiscuous mode [ 708.181383][T24383] ip6gre4: entered allmulticast mode [ 708.224564][T24384] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4373'. [ 708.796681][T24402] syzkaller0: entered promiscuous mode [ 708.820752][T24402] syzkaller0: entered allmulticast mode [ 708.863337][T24402] TC_ACT_REPEAT abuse ? [ 709.117564][T24410] syzkaller0: entered promiscuous mode [ 709.164568][T24410] syzkaller0: entered allmulticast mode [ 709.300928][T24422] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4378'. [ 709.746265][T24436] syzkaller0: entered promiscuous mode [ 709.763007][T24436] syzkaller0: entered allmulticast mode [ 709.779013][T24438] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4382'. [ 709.809914][T24438] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4382'. [ 710.089371][T24452] netlink: 'syz.0.4383': attribute type 12 has an invalid length. [ 710.130622][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.138824][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.144966][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.151050][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.157142][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.163196][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.169279][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.175357][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.181406][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.187491][T24450] tc action pedit 'at' offset 5 out of bounds [ 710.193540][T24450] 0: reclassify loop, rule prio 0, protocol 800 [ 710.246219][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4383'. [ 710.317715][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4383'. [ 710.725509][T24471] syzkaller0: entered promiscuous mode [ 710.743140][T24471] syzkaller0: entered allmulticast mode [ 710.807485][T24471] tipc: Enabled bearer , priority 0 [ 710.847855][T24468] tipc: Resetting bearer [ 710.941886][T24468] tipc: Disabling bearer [ 711.654991][T24487] tunl0: Caught tx_queue_len zero misconfig [ 712.251501][T24517] syzkaller0: entered promiscuous mode [ 712.262100][T24517] syzkaller0: entered allmulticast mode [ 712.283280][T24521] netlink: 'syz.3.4398': attribute type 12 has an invalid length. [ 712.573325][T24530] tipc: Enabled bearer , priority 0 [ 712.594525][T24530] syzkaller0: entered promiscuous mode [ 712.612150][T24530] syzkaller0: entered allmulticast mode [ 712.640661][T24530] tipc: Resetting bearer [ 712.677665][T24529] tipc: Resetting bearer [ 712.759563][T24529] tipc: Disabling bearer [ 712.943298][T24548] __nla_validate_parse: 5 callbacks suppressed [ 712.943340][T24548] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4403'. [ 713.476465][T24569] syz_tun: left promiscuous mode [ 713.530456][T24569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.562770][T24572] netlink: 'syz.2.4404': attribute type 1 has an invalid length. [ 713.600277][T24572] netlink: 'syz.2.4404': attribute type 2 has an invalid length. [ 713.661129][T24577] syzkaller0: entered promiscuous mode [ 713.676693][T24577] syzkaller0: entered allmulticast mode [ 713.925533][T24585] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4408'. [ 714.035759][T24593] netlink: 'syz.3.4409': attribute type 12 has an invalid length. [ 714.076101][T24591] syzkaller0: entered promiscuous mode [ 714.102436][T24591] syzkaller0: entered allmulticast mode [ 714.122075][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4409'. [ 714.157354][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4409'. [ 714.218865][T24599] syzkaller0: entered promiscuous mode [ 714.231821][T24599] syzkaller0: entered allmulticast mode [ 714.520893][T24612] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 715.483947][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4421'. [ 715.521835][T24660] syzkaller0: entered promiscuous mode [ 715.532249][T24660] syzkaller0: entered allmulticast mode [ 715.750707][T24665] netlink: 'syz.3.4423': attribute type 12 has an invalid length. [ 715.784257][T24669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4425'. [ 715.809529][T24668] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4424'. [ 715.832842][T24669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4425'. [ 715.840989][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4423'. [ 715.899930][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4423'. [ 715.939286][T24672] syzkaller0: entered promiscuous mode [ 715.955787][T24672] syzkaller0: entered allmulticast mode [ 716.315323][T24678] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 716.389709][T24678] bond12 (unregistering): Released all slaves [ 716.519999][T24702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 716.527305][T24702] IPv6: NLM_F_CREATE should be set when creating new route [ 716.568889][T24702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 716.666399][T24708] tipc: Resetting bearer [ 716.712815][T24698] netlink: 'syz.4.4432': attribute type 1 has an invalid length. [ 716.732913][T24698] netlink: 'syz.4.4432': attribute type 2 has an invalid length. [ 716.763297][T24718] tipc: Enabling of bearer rejected, already enabled [ 716.984425][T24731] netlink: 'syz.1.4437': attribute type 12 has an invalid length. [ 717.287556][T24735] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 717.335684][T24735] bond12 (unregistering): Released all slaves [ 717.683757][T24754] macsec0: entered promiscuous mode [ 717.710356][T24754] veth1_macvtap: entered promiscuous mode [ 717.764183][T24754] veth1_macvtap: left promiscuous mode [ 717.931050][T24761] sch_fq: defrate 2869 ignored. [ 718.060067][T24765] netlink: 'syz.2.4445': attribute type 1 has an invalid length. [ 718.077291][T24765] netlink: 'syz.2.4445': attribute type 2 has an invalid length. [ 718.331039][T24778] netlink: 'syz.4.4447': attribute type 10 has an invalid length. [ 718.420949][T24774] tipc: Resetting bearer [ 718.515570][T24767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.544374][T24767] netlink: 'syz.3.4446': attribute type 1 has an invalid length. [ 718.559784][T24767] netlink: 'syz.3.4446': attribute type 2 has an invalid length. [ 718.660326][T24793] __nla_validate_parse: 7 callbacks suppressed [ 718.660355][T24793] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4453'. [ 718.679579][T24789] netlink: 'syz.1.4451': attribute type 13 has an invalid length. [ 718.690409][T24794] netlink: 'syz.3.4454': attribute type 1 has an invalid length. [ 718.777381][T24796] mac80211_hwsim hwsim19 syzkaller0: Caught tx_queue_len zero misconfig [ 718.861224][T24800] veth11: entered allmulticast mode [ 718.877559][T24800] bond12: (slave veth11): Enslaving as an active interface with a down link [ 718.892969][T24795] syzkaller0: entered promiscuous mode [ 718.905788][T24795] syzkaller0: entered allmulticast mode [ 718.940614][T24794] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 719.047021][T24799] syzkaller0: entered promiscuous mode [ 719.052732][T24799] syzkaller0: entered allmulticast mode [ 721.235551][T24825] tipc: Resetting bearer [ 721.243243][T24826] netlink: 'syz.4.4458': attribute type 1 has an invalid length. [ 721.252336][T24826] netlink: 'syz.4.4458': attribute type 2 has an invalid length. [ 721.548328][T24853] syzkaller0: entered promiscuous mode [ 721.572278][T24853] syzkaller0: entered allmulticast mode [ 721.577638][T24857] netlink: 'syz.0.4465': attribute type 1 has an invalid length. [ 721.653253][T24857] 8021q: adding VLAN 0 to HW filter on device bond6 [ 721.918997][T24869] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4467'. [ 722.065189][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 722.160605][T24878] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4469'. [ 722.476732][ T29] audit: type=1800 audit(1785055490.062:91): pid=24871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4467" name="memory.events" dev="tmpfs" ino=4607 res=0 errno=0 [ 722.620072][T24895] syzkaller0: entered promiscuous mode [ 722.628181][T24895] syzkaller0: entered allmulticast mode [ 722.728018][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 722.753670][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4473'. [ 722.765441][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 722.776052][T24895] tipc: Enabled bearer , priority 0 [ 722.789926][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 722.805591][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 722.819178][T24894] tipc: Resetting bearer [ 722.862853][T24894] tipc: Disabling bearer [ 722.874068][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 723.044662][T24905] syzkaller0: entered promiscuous mode [ 723.050509][T24905] syzkaller0: entered allmulticast mode [ 723.088715][T24911] IPVS: Error connecting to the multicast addr [ 725.500055][T24918] syzkaller0: entered promiscuous mode [ 725.505750][T24918] syzkaller0: entered allmulticast mode [ 725.610600][T24943] batman_adv: batadv0: Interface deactivated: gretap2 [ 725.617350][T24946] __nla_validate_parse: 6 callbacks suppressed [ 725.617367][T24946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4489'. [ 725.634413][T24943] batman_adv: batadv0: Removing interface: gretap2 [ 725.663992][T24943] bond14: (slave batadv0): Releasing active interface [ 725.671463][T24943] veth3: entered promiscuous mode [ 725.759423][T24948] syzkaller0: entered promiscuous mode [ 725.767725][T24948] syzkaller0: entered allmulticast mode [ 725.942106][T24952] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4490'. [ 725.963928][T24952] bridge_slave_0: left allmulticast mode [ 725.971551][T24952] bridge_slave_0: left promiscuous mode [ 725.979005][T24952] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.984485][ T29] audit: type=1800 audit(1785055493.562:92): pid=24949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4489" name="memory.events" dev="tmpfs" ino=4618 res=0 errno=0 [ 726.134101][T24957] veth0: left promiscuous mode [ 726.220774][T24957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 726.235026][T24957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.277465][T24957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.287200][T24957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.297198][T24957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.309680][T24957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 726.329286][T24957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.342671][T24957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.383153][T24957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 726.445692][T24957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 726.456267][T24957] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 726.480195][T24957] veth0: entered promiscuous mode [ 726.496918][T24957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 726.511345][T24957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 726.523906][T24957] 8021q: adding VLAN 0 to HW filter on device bond7 [ 726.532748][T24957] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.545172][T24957] 8021q: adding VLAN 0 to HW filter on device bond9 [ 726.553624][T24957] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.563644][T24957] 8021q: adding VLAN 0 to HW filter on device bond11 [ 726.571788][T24957] 8021q: adding VLAN 0 to HW filter on device bond12 [ 726.583148][T24957] 8021q: adding VLAN 0 to HW filter on device bond13 [ 726.592837][T24957] 8021q: adding VLAN 0 to HW filter on device bond14 [ 726.602257][T24957] 8021q: adding VLAN 0 to HW filter on device bond15 [ 726.611309][T24957] 8021q: adding VLAN 0 to HW filter on device bond16 [ 726.619157][T24957] 8021q: adding VLAN 0 to HW filter on device bond17 [ 726.630587][T24957] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 726.644416][T24957] 8021q: adding VLAN 0 to HW filter on device bond18 [ 726.669534][T24957] bond20: left promiscuous mode [ 726.674421][T24957] bridge10: left promiscuous mode [ 726.703794][ T53] syz_tun: entered promiscuous mode [ 726.759347][ T6530] bridge0: port 1(vlan2) entered blocking state [ 726.765806][ T6530] bridge0: port 1(vlan2) entered forwarding state [ 726.792458][T24966] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 726.900877][T24983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4495'. [ 726.958179][T24970] tipc: Resetting bearer [ 726.981418][T24970] batman_adv: batadv0: Interface deactivated: dummy0 [ 727.468451][ T6465] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.477839][ T6465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.487006][ T6465] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.496010][ T6465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.605840][T25008] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4500'. [ 727.655262][T24988] bridge0: port 3(syz_tun) entered disabled state [ 727.684972][T24988] batadv0: left promiscuous mode [ 727.735886][T24988] veth11: left allmulticast mode [ 727.761827][T24998] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 727.787142][T24998] validate_nla: 6 callbacks suppressed [ 727.787238][T24998] netlink: 'syz.2.4498': attribute type 1 has an invalid length. [ 727.814490][T24998] netlink: 'syz.2.4498': attribute type 2 has an invalid length. [ 728.081094][T25027] netlink: 'syz.2.4502': attribute type 1 has an invalid length. [ 728.089516][T25027] netlink: 'syz.2.4502': attribute type 2 has an invalid length. [ 728.109892][ T6465] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.119039][ T6465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.129699][ T6465] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.141669][T16178] syz1: Port: 1 Link DOWN [ 728.142659][ T1029] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 728.195633][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4501'. [ 728.408086][ T1029] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 728.409948][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 728.428586][T25020] netlink: 'syz.3.4501': attribute type 12 has an invalid length. [ 728.437459][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'. [ 728.473606][ T6465] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.505241][ T6465] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.558236][T25033] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4504'. [ 728.572249][ T6465] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.895295][ T6173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 728.965338][ T29] audit: type=1800 audit(1785055496.542:93): pid=25040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4504" name="memory.events" dev="tmpfs" ino=4640 res=0 errno=0 [ 729.298168][ T6179] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 731.107292][ T1029] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 731.115215][ T1029] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 731.123918][T25043] syzkaller0: entered promiscuous mode [ 731.129580][T25043] syzkaller0: entered allmulticast mode [ 731.146281][ T6173] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 731.188916][T16178] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 731.280155][T25089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4511'. [ 731.356613][T25089] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 731.378101][T25089] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 731.406018][T25096] netlink: 'syz.2.4514': attribute type 13 has an invalid length. [ 731.431098][T25097] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.450368][T25097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.542914][T25092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4512'. [ 731.595101][ T6173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 731.722487][ T10] syz1: Port: 1 Link ACTIVE [ 731.731637][T25097] netlink: 'syz.3.4513': attribute type 1 has an invalid length. [ 731.746034][T25097] netlink: 'syz.3.4513': attribute type 2 has an invalid length. [ 731.765239][T23443] udevd[23443]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 731.786425][T25102] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 731.830233][T25113] siw: device registration error -23 [ 731.835473][T25102] syzkaller0: entered promiscuous mode [ 731.842795][T25102] syzkaller0: entered allmulticast mode [ 731.912612][T25117] netlink: 'syz.4.4516': attribute type 12 has an invalid length. [ 732.032844][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4516'. [ 732.050365][T25120] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4517'. [ 732.069504][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4516'. [ 732.088577][T25123] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4518'. [ 732.229700][T25130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4520'. [ 732.368705][T25131] TC_ACT_REPEAT abuse ? [ 732.557918][T25136] batadv0: entered promiscuous mode [ 732.575308][T25136] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 732.676279][ T29] audit: type=1800 audit(1785055500.252:94): pid=25125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4518" name="memory.events" dev="tmpfs" ino=4816 res=0 errno=0 [ 732.729971][T25140] syzkaller0: entered promiscuous mode [ 732.738699][T25140] syzkaller0: entered allmulticast mode [ 732.770779][T25140] tipc: Enabled bearer , priority 0 [ 732.795590][T25140] tipc: Resetting bearer [ 732.831745][T25139] tipc: Resetting bearer [ 732.901883][T25139] tipc: Disabling bearer [ 732.946181][T25145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4525'. [ 733.200544][T25162] syzkaller0: entered promiscuous mode [ 733.217300][T25162] syzkaller0: entered allmulticast mode [ 733.351148][T25171] netlink: 'syz.4.4531': attribute type 12 has an invalid length. [ 733.389671][T25174] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 733.422162][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'. [ 733.478015][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'. [ 733.543474][T25174] bond16: entered promiscuous mode [ 733.549263][T25174] 8021q: adding VLAN 0 to HW filter on device bond16 [ 733.829925][T25183] syzkaller0: entered promiscuous mode [ 733.842501][T25183] syzkaller0: entered allmulticast mode [ 734.502334][ T29] audit: type=1800 audit(1785055502.082:95): pid=25199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4535" name="memory.events" dev="tmpfs" ino=4837 res=0 errno=0 [ 734.975643][ C1] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 734.975657][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 736.469196][T25230] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 736.479152][T25230] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 736.489509][T25230] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 736.668866][T25248] __nla_validate_parse: 3 callbacks suppressed [ 736.668883][T25248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4541'. [ 736.705494][T25246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4540'. [ 736.835305][T25246] batadv0: left promiscuous mode [ 736.850830][T25246] ip6gre4: left promiscuous mode [ 736.858515][T25246] ip6gre4: left allmulticast mode [ 736.871887][T25255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4544'. [ 737.063071][T25264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 737.127193][T25270] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4548'. [ 737.341208][T25279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.341793][T25288] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4550'. [ 737.406635][T25279] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.452229][T25279] bridge_slave_0: entered promiscuous mode [ 737.548827][T25279] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 737.580977][T25279] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 737.616065][T25279] veth1_vlan: left promiscuous mode [ 737.630858][T25279] veth0_vlan: left promiscuous mode [ 737.649104][T25279] veth0_vlan: entered promiscuous mode [ 737.668989][T25279] veth1_vlan: entered promiscuous mode [ 737.728732][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 737.753939][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 737.777034][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.807439][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.829739][T25279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.852424][T25279] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 737.975086][T21594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.002005][ T29] audit: type=1800 audit(1785055505.582:96): pid=25281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4548" name="memory.events" dev="tmpfs" ino=4875 res=0 errno=0 [ 738.003866][T21594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.077198][T21594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.109025][T21594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.208719][T25301] erspan0: left allmulticast mode [ 738.222300][T25303] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4551'. [ 738.222794][T25301] erspan0: left promiscuous mode [ 738.262573][T25301] bridge5: port 1(erspan0) entered disabled state [ 738.366149][T25301] syz_tun: left allmulticast mode [ 738.375233][T25301] syz_tun: left promiscuous mode [ 738.381206][T25301] bridge0: port 3(syz_tun) entered disabled state [ 738.448954][T25301] bridge_slave_1: left allmulticast mode [ 738.477618][T25301] bridge_slave_1: left promiscuous mode [ 738.496761][T25301] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.529909][T25301] bond12: (slave veth0_to_bond): Releasing active interface [ 738.550488][T25301] team0: Port device team_slave_1 removed [ 738.559143][T25301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 738.592478][T25309] team0: Refused to change device type [ 738.611049][T25313] tipc: Enabled bearer , priority 0 [ 738.627009][T25325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4554'. [ 738.807669][ T6536] veth3: left promiscuous mode [ 738.897812][T25328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4556'. [ 738.906225][T25333] netlink: 'syz.2.4557': attribute type 12 has an invalid length. [ 738.953272][T25335] batadv0: left promiscuous mode [ 738.988123][T25335] ip6gre3: left promiscuous mode [ 739.009935][T25335] ip6gre3: left allmulticast mode [ 739.015857][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 739.031281][T25333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'. [ 739.598218][ T4988] udevd[4988]: worker [23289] /devices/virtual/block/nbd0 is taking a long time [ 740.072128][T25366] syzkaller0: entered promiscuous mode [ 740.095623][T25366] syzkaller0: entered allmulticast mode [ 740.602418][T25387] netlink: 'syz.2.4569': attribute type 1 has an invalid length. [ 740.630606][T25387] netlink: 'syz.2.4569': attribute type 2 has an invalid length. [ 740.843768][T25391] syzkaller0: entered promiscuous mode [ 740.857474][T25391] syzkaller0: entered allmulticast mode [ 740.877040][T25397] netlink: 'syz.2.4571': attribute type 12 has an invalid length. [ 741.935045][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 742.391564][T25400] bond16: left promiscuous mode [ 742.402365][T25399] __nla_validate_parse: 7 callbacks suppressed [ 742.402383][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 742.534613][ T6536] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.568199][ T6536] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.608200][ T6536] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.639705][ T6536] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.692741][T25424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4578'. [ 742.708463][T25429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4580'. [ 742.759522][T25432] syz_tun: entered allmulticast mode [ 742.801339][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4579'. [ 742.898805][T25432] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 742.910440][T25432] bond13 (unregistering): Released all slaves [ 742.943886][T25441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4582'. [ 742.973493][T25437] netlink: 'syz.2.4581': attribute type 1 has an invalid length. [ 742.983862][T25437] netlink: 'syz.2.4581': attribute type 2 has an invalid length. [ 743.030220][T25427] syz_tun: left allmulticast mode [ 743.215205][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 743.355768][T25451] batadv0: entered promiscuous mode [ 743.386800][T25451] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 743.677950][T25468] netlink: 'syz.3.4588': attribute type 12 has an invalid length. [ 743.773845][T25468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4588'. [ 743.818013][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4588'. [ 744.314015][T25477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4591'. [ 744.396421][T25479] lo speed is unknown, defaulting to 1000 [ 744.473919][T25486] netlink: 'syz.0.4592': attribute type 12 has an invalid length. [ 744.562032][T25489] netlink: 'syz.2.4595': attribute type 1 has an invalid length. [ 744.593111][T25489] netlink: 'syz.2.4595': attribute type 2 has an invalid length. [ 744.636089][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4592'. [ 744.691965][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4592'. [ 744.980677][T25498] bridge0: port 1(vlan2) entered disabled state [ 745.324556][T25498] vlan6: left allmulticast mode [ 745.329681][T25498] bond20: left allmulticast mode [ 745.334944][T25498] bridge10: left allmulticast mode [ 745.344226][T16178] lo speed is unknown, defaulting to 1000 [ 745.353114][ T1029] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.363572][T16178] syz2: Port: 1 Link DOWN [ 745.375838][ T1029] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.395037][ T1029] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.416067][ T1029] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.452045][ T53] lo speed is unknown, defaulting to 1000 [ 745.452798][ T1029] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.484961][ T1029] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.973977][T25524] pim6reg1: entered promiscuous mode [ 745.990139][T25524] pim6reg1: entered allmulticast mode [ 746.658748][T25537] netlink: 'syz.4.4607': attribute type 12 has an invalid length. [ 747.441872][T25562] siw: device registration error -23 [ 748.312305][T25585] vlan8: entered allmulticast mode [ 748.332555][T25585] bond0: entered allmulticast mode [ 748.346358][T25586] __nla_validate_parse: 11 callbacks suppressed [ 748.346376][T25586] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4620'. [ 748.485636][T25589] netlink: 'syz.4.4623': attribute type 1 has an invalid length. [ 748.570571][T25589] 8021q: adding VLAN 0 to HW filter on device bond12 [ 748.760931][T25604] netlink: 'syz.1.4622': attribute type 12 has an invalid length. [ 748.811120][T25605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4624'. [ 748.985228][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4622'. [ 749.016381][T25610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 749.163872][T25618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4629'. [ 749.243929][T25622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4627'. [ 749.481188][T25616] 8021q: adding VLAN 0 to HW filter on device bond14 [ 749.562757][T25616] bond14 (unregistering): Released all slaves [ 749.889539][T25645] syzkaller0: entered promiscuous mode [ 749.915105][T25645] syzkaller0: entered allmulticast mode [ 750.214633][T25648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.234435][T25648] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.340254][T25651] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 750.383998][T25651] netlink: 'syz.1.4635': attribute type 2 has an invalid length. [ 750.578182][T25658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4639'. [ 750.590427][T25655] syzkaller0: entered promiscuous mode [ 750.602890][T25655] syzkaller0: entered allmulticast mode [ 750.661059][T25669] netlink: 'syz.0.4638': attribute type 12 has an invalid length. [ 750.836937][T25669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4638'. [ 750.879165][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4638'. [ 751.028692][T25682] x_tables: unsorted entry at hook 2 [ 751.061802][T25682] xt_hashlimit: size too large, truncated to 1048576 [ 751.542543][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4644'. [ 752.575116][T25656] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 753.922722][T25694] netlink: 'syz.0.4644': attribute type 12 has an invalid length. [ 753.940031][T25698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4644'. [ 754.166769][T25724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4652'. [ 754.491826][T25742] netlink: 'syz.2.4653': attribute type 12 has an invalid length. [ 754.651765][T25735] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4650'. [ 754.752131][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4653'. [ 754.807626][T25738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'. [ 755.257810][T25756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4656'. [ 755.586196][T25771] rdma_rxe: rxe_newlink: failed to add bond0 [ 755.652389][T25783] netlink: 'syz.1.4661': attribute type 12 has an invalid length. [ 755.740048][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4661'. [ 755.774569][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4661'. [ 756.026710][T25789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4662'. [ 756.149935][T25786] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 756.197842][T25786] bond17 (unregistering): Released all slaves [ 756.226725][T25797] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4664'. [ 756.474344][T25808] netlink: 'syz.2.4666': attribute type 12 has an invalid length. [ 756.737507][T25814] veth1_vlan: left promiscuous mode [ 756.762749][T25814] veth0_vlan: left promiscuous mode [ 756.781668][T25814] veth0_vlan: entered promiscuous mode [ 756.814023][T25814] veth1_vlan: entered promiscuous mode [ 756.854636][T25814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.887817][T25814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.913806][T25814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.948084][T25814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.969194][T25814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.997106][T25814] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 757.060107][T21594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.070874][T21594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.083435][T21594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.095729][T21594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.549910][T25854] syzkaller0: entered promiscuous mode [ 757.572344][T25854] syzkaller0: entered allmulticast mode [ 757.818853][T25870] lo: entered allmulticast mode [ 757.923885][T25870] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 758.024282][T25870] bond13 (unregistering): Released all slaves [ 758.176446][T25863] lo: left allmulticast mode [ 758.707327][T25902] netlink: 'syz.2.4683': attribute type 12 has an invalid length. [ 758.951076][T25900] __nla_validate_parse: 7 callbacks suppressed [ 758.951095][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4683'. [ 759.382964][T25920] syzkaller0: entered promiscuous mode [ 759.406617][T25920] syzkaller0: entered allmulticast mode [ 759.459574][T25926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4690'. [ 759.602178][T25926] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 759.638816][T25942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4692'. [ 759.655866][T25926] bond17 (unregistering): Released all slaves [ 759.974654][T25951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4693'. [ 761.427050][T25987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 763.359919][ T6530] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.369400][ T6530] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.400673][T25987] team0: Port device batadv0 removed [ 763.440971][ T6530] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.465142][ T6530] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.502352][T26002] netlink: 'syz.3.4701': attribute type 12 has an invalid length. [ 763.568215][T26000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'. [ 763.597436][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4701'. [ 763.734739][T26015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4703'. [ 763.750224][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4704'. [ 763.813680][T26015] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 763.834587][T26015] bond17 (unregistering): Released all slaves [ 764.144390][T26040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4708'. [ 764.585736][T26053] ip6erspan1: entered allmulticast mode [ 764.987137][T26077] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4713'. [ 765.167729][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 765.204301][T26083] xt_hashlimit: size too large, truncated to 1048576 [ 765.266027][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 765.296583][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 765.333677][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 765.376145][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 765.410697][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 765.569649][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 765.595891][T26093] netlink: 'syz.1.4715': attribute type 12 has an invalid length. [ 765.748562][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'. [ 765.857239][T26103] lo: entered allmulticast mode [ 765.984167][T26103] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 766.011071][T26103] bond13 (unregistering): Released all slaves [ 766.130019][T26099] lo: left allmulticast mode [ 767.857142][T26173] netlink: 'syz.4.4729': attribute type 12 has an invalid length. [ 768.299723][T26187] syzkaller0: entered promiscuous mode [ 768.317066][T26187] syzkaller0: entered allmulticast mode [ 768.341232][T26192] syz_tun: entered allmulticast mode [ 768.566964][T26189] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 769.503385][T26189] bond14 (unregistering): Released all slaves [ 769.651985][T26183] syz_tun: left allmulticast mode [ 769.704112][T26231] geneve1: entered promiscuous mode [ 769.740088][T26231] __nla_validate_parse: 11 callbacks suppressed [ 769.740106][T26231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4738'. [ 769.831606][T26235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4740'. [ 769.952813][T26242] lo speed is unknown, defaulting to 1000 [ 770.625550][T26264] netlink: 'syz.3.4743': attribute type 12 has an invalid length. [ 770.744783][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4743'. [ 770.808094][T26264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 770.938655][T26276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4744'. [ 770.967358][T26276] geneve1: left promiscuous mode [ 770.999848][T26280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4745'. [ 771.363835][T26301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4748'. [ 771.465947][T26303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4746'. [ 771.603081][T26310] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4751'. [ 771.623635][T26313] lo: entered allmulticast mode [ 771.662138][T26313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4750'. [ 771.736553][T26313] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 771.771433][T26313] bond13 (unregistering): Released all slaves [ 771.850962][T26306] lo: left allmulticast mode [ 772.498365][T26346] openvswitch: netlink: IP tunnel dst address not specified [ 772.523542][T26346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.864003][T26363] bridge11: entered promiscuous mode [ 772.883355][T26363] bridge11: entered allmulticast mode [ 772.924201][T26363] team0: Device bridge11 is of different type [ 773.061296][T26360] bridge11: entered promiscuous mode [ 773.075702][T26360] bridge11: entered allmulticast mode [ 773.124490][T26360] team0: Device bridge11 is of different type [ 773.222729][T26381] netlink: 'syz.3.4762': attribute type 12 has an invalid length. [ 773.250419][T26380] ip6erspan1: left allmulticast mode [ 773.550118][T26392] lo: entered allmulticast mode [ 773.789580][T26392] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 773.824067][T26392] bond13 (unregistering): Released all slaves [ 773.941966][ T6530] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 773.974344][T26399] tipc: Resetting bearer [ 773.999518][T26399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.035253][T26402] netlink: 'syz.3.4766': attribute type 1 has an invalid length. [ 774.060107][T26402] netlink: 'syz.3.4766': attribute type 2 has an invalid length. [ 774.074185][T26384] lo: left allmulticast mode [ 774.080019][T26413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.087340][T26413] IPv6: NLM_F_CREATE should be set when creating new route [ 774.094604][T26413] IPv6: NLM_F_CREATE should be set when creating new route [ 774.277890][T26423] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 774.542141][T26443] tipc: Enabling of bearer rejected, already enabled [ 774.823981][T26462] netlink: 'syz.1.4775': attribute type 12 has an invalid length. [ 775.083608][T26469] __nla_validate_parse: 10 callbacks suppressed [ 775.083627][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 775.120478][T26462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4775'. [ 775.146931][T26478] tipc: Resetting bearer [ 775.153188][T26478] batadv0: left promiscuous mode [ 775.228038][T26478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.279362][T26478] veth1_vlan: left promiscuous mode [ 775.308649][T26478] veth0_vlan: left promiscuous mode [ 775.326557][T26478] veth0_vlan: entered promiscuous mode [ 775.352010][T26478] veth1_vlan: entered promiscuous mode [ 775.381587][T26478] veth0_macvtap: left promiscuous mode [ 775.400277][T26478] 8021q: adding VLAN 0 to HW filter on device €Â [ 775.445804][T26478] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 775.498404][T26478] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 775.569262][T26478] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 775.614437][T26478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 775.654048][T26478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 775.668473][T26478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.689753][T26478] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 775.699860][T26478] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 775.719077][T26478] bridge1: left promiscuous mode [ 775.740450][T26478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 775.759411][T26478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 775.774241][T26478] 8021q: adding VLAN 0 to HW filter on device bond6 [ 775.794369][T26478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 775.804947][ T47] bond6: (slave ip6gretap1): link status up again after 0 ms [ 775.813917][T26478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.825350][ T47] bond6: (slave ip6gretap1): link status up again after 0 ms [ 775.833165][T26478] 8021q: adding VLAN 0 to HW filter on device bond8 [ 775.854948][ T6465] bond6: (slave ip6gretap1): link status up again after 0 ms [ 775.855773][T26478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 775.875019][ T6465] bond6: (slave ip6gretap1): link status up again after 0 ms [ 775.875645][T26478] 8021q: adding VLAN 0 to HW filter on device bond10 [ 775.895357][ T6465] bond6: (slave ip6gretap1): link status up again after 0 ms [ 775.911656][T26478] 8021q: adding VLAN 0 to HW filter on device bond11 [ 775.924085][T26478] 8021q: adding VLAN 0 to HW filter on device bond12 [ 775.934723][T26478] 8021q: adding VLAN 0 to HW filter on device bond13 [ 775.935231][ T6465] bond6: (slave ip6gretap1): link status up again after 0 ms [ 775.957214][ T53] bridge1: entered promiscuous mode [ 775.986153][T21587] bond6: (slave ip6gretap1): link status up again after 0 ms [ 776.010938][ T1120] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.019621][T21594] bond6: (slave ip6gretap1): link status up again after 0 ms [ 776.045038][ T1120] netdevsim netdevsim3 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.061476][ T1120] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.080976][ T1120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.100708][ T47] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 776.119054][ T47] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 776.128641][ T5728] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 776.164606][T26506] syz_tun: entered allmulticast mode [ 776.173147][ T1120] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.185458][ T5728] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 776.193126][ T1120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.223176][ T1120] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.256517][ T1120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.284195][T26508] netlink: 'syz.1.4780': attribute type 1 has an invalid length. [ 776.313070][T26508] netlink: 'syz.1.4780': attribute type 2 has an invalid length. [ 776.325838][T26520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4779'. [ 776.364558][T26517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.376037][T26517] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.443334][ T47] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 776.517755][T26506] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 776.534007][T26506] bond14 (unregistering): Released all slaves [ 776.565830][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 776.642943][ T47] bond12: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 776.723739][ T47] bond12: (slave veth11): making interface the new active one [ 776.748625][ T47] bond12: active interface up! [ 776.757567][T26522] lo speed is unknown, defaulting to 1000 [ 776.765596][T26505] syz_tun: left allmulticast mode [ 777.184307][T26527] dvmrp0: entered allmulticast mode [ 777.412797][T26561] dvmrp0: entered allmulticast mode [ 777.573119][T26556] lo speed is unknown, defaulting to 1000 [ 777.586634][T21587] net_ratelimit: 41 callbacks suppressed [ 777.586729][T21587] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 777.736506][T21590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 777.753069][T26574] netlink: 'syz.2.4790': attribute type 12 has an invalid length. [ 777.938384][T26575] veth1_vlan: left promiscuous mode [ 777.964791][T26575] veth0_vlan: left promiscuous mode [ 777.977241][T26575] veth0_vlan: entered promiscuous mode [ 778.004382][T26575] veth1_vlan: entered promiscuous mode [ 778.046552][T26575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.073944][T26575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.101147][T26575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.130279][T26575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.130363][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'. [ 778.171240][T26575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.214056][T26575] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 778.240838][ T1029] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 778.315911][T26570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4790'. [ 778.359561][ T6465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.378509][ T6465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.413340][ T6465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.448553][ T6465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.654418][T26584] tipc: Resetting bearer [ 779.784472][T26584] vlan8: left allmulticast mode [ 779.792635][T26584] bond0: left allmulticast mode [ 779.813331][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4794'. [ 779.827957][ T5728] syz1: Port: 1 Link DOWN [ 779.835660][ T1120] netdevsim netdevsim3 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.855344][ T1120] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.875537][ T1120] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.887297][ T1120] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.896769][T26607] syz_tun: entered allmulticast mode [ 780.017914][T26609] bond21: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 780.066777][T26609] bond21 (unregistering): Released all slaves [ 780.172604][ T1120] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.200006][ T1120] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.245995][ T1120] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.271113][ T1120] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.291624][T26623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4795'. [ 780.324198][T26615] syz_tun: entered allmulticast mode [ 780.338909][T26601] syz_tun: left allmulticast mode [ 780.415874][T26623] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 780.443892][T26623] bond14 (unregistering): Released all slaves [ 780.544296][T26611] syz_tun: left allmulticast mode [ 781.630111][T26674] netlink: 'syz.2.4803': attribute type 12 has an invalid length. [ 781.791342][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4803'. [ 781.847698][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4803'. [ 782.062430][T26682] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 782.082883][T26682] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 782.122927][T26682] tipc: Resetting bearer [ 782.775468][T26695] syzkaller1: entered promiscuous mode [ 782.792691][T26695] syzkaller1: entered allmulticast mode [ 782.932919][T26700] dvmrp0: left allmulticast mode [ 783.002257][T26702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4808'. [ 783.138030][T26697] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 783.157155][T26697] bond8 (unregistering): Released all slaves [ 783.172983][T26709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4809'. [ 783.454255][T26706] tipc: Resetting bearer [ 783.476146][T26706] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 783.483414][T26706] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 783.500650][ T1029] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.523514][ T1029] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.549455][ T1029] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.573572][ T1029] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.730790][T26737] ipt_REJECT: ECHOREPLY no longer supported. [ 784.032038][T26747] lo speed is unknown, defaulting to 1000 [ 784.342140][T26768] x_tables: duplicate entry at hook 1 [ 784.392420][T26768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4818'. [ 784.423005][T26776] netlink: 'syz.4.4817': attribute type 12 has an invalid length. [ 784.432503][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4819'. [ 784.532349][T26776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4817'. [ 784.532541][T26768] netlink: 'syz.3.4818': attribute type 1 has an invalid length. [ 784.592294][T26776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4817'. [ 785.115608][T26797] lo speed is unknown, defaulting to 1000 [ 785.171620][T26801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4823'. [ 786.101233][T26813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4826'. [ 786.255335][T26813] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 786.268804][T26813] bond17 (unregistering): Released all slaves [ 786.644571][T26820] netlink: 'syz.4.4827': attribute type 4 has an invalid length. [ 786.690211][T26820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4827'. [ 786.723995][T26820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4827'. [ 786.743428][T26820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4827'. [ 787.810971][T26853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4830'. [ 787.972047][T26853] ip6gre4: entered promiscuous mode [ 788.007624][T26853] ip6gre4: entered allmulticast mode [ 788.034292][T26856] netlink: 'syz.4.4830': attribute type 6 has an invalid length. [ 788.086621][T26856] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4830'. [ 788.751275][T26879] netlink: 'syz.1.4832': attribute type 12 has an invalid length. [ 788.839860][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4832'. [ 788.889592][T26879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4832'. [ 788.993449][T26874] bridge5: entered promiscuous mode [ 789.012452][T26874] bridge5: entered allmulticast mode [ 789.267902][T26874] bridge5: entered promiscuous mode [ 789.286985][T26874] bridge5: entered allmulticast mode [ 789.363519][T26895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.376633][T26895] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.518515][T26897] netlink: 'syz.1.4834': attribute type 1 has an invalid length. [ 789.549377][T26897] netlink: 'syz.1.4834': attribute type 2 has an invalid length. [ 789.577937][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4836'. [ 789.934472][T26926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4840'. [ 790.783330][T26945] IPVS: Unknown mcast interface: vcan0 [ 790.899477][T26961] netlink: 'syz.3.4844': attribute type 12 has an invalid length. [ 791.191142][T26966] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 791.280999][T26976] __nla_validate_parse: 4 callbacks suppressed [ 791.281018][T26976] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4848'. [ 791.441572][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4845'. [ 791.703968][T26997] netlink: 'syz.1.4849': attribute type 1 has an invalid length. [ 791.712745][T26997] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4849'. [ 791.752581][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 791.994767][T27011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4851'. [ 792.054284][T27011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4851'. [ 792.538468][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4855'. [ 792.859244][T27048] netlink: 'syz.3.4857': attribute type 12 has an invalid length. [ 792.934976][T27048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4857'. [ 792.971065][T27048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 793.074094][T27043] netlink: 'syz.1.4856': attribute type 1 has an invalid length. [ 793.096270][T27056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.163730][T27056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.554557][T27074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.623568][T27078] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4863'. [ 793.642898][T27057] tipc: Failed to remove unknown binding: 66,0,0/21568242:354594308/354594310 [ 793.652225][T27057] tipc: Failed to remove unknown binding: 66,0,0/21568242:354594308/354594309 [ 793.664740][T27057] tipc: Failed to remove unknown binding: 66,0,0/21568242:354594308/354594310 [ 793.679180][T27057] tipc: Failed to remove unknown binding: 66,0,0/21568242:354594308/354594309 [ 794.617593][T27101] ip6gre4: left promiscuous mode [ 794.638100][T27101] ip6gre4: left allmulticast mode [ 794.689950][T27109] netlink: 'syz.2.4870': attribute type 12 has an invalid length. [ 795.025156][T27120] macsec0: entered promiscuous mode [ 795.372489][T27113] tipc: Resetting bearer [ 795.405901][T27125] macsec0 (unregistering): left promiscuous mode [ 795.598908][T27123] lo speed is unknown, defaulting to 1000 [ 795.679271][T27132] openvswitch: netlink: Message has 512 unknown bytes. [ 795.720356][T21594] tipc: Subscription rejected, illegal request [ 796.176972][T27148] netlink: 'syz.4.4878': attribute type 1 has an invalid length. [ 796.248506][T27152] lo: Caught tx_queue_len zero misconfig [ 796.316148][T27152] netlink: 'syz.0.4879': attribute type 1 has an invalid length. [ 796.369230][T27157] __nla_validate_parse: 10 callbacks suppressed [ 796.369255][T27157] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4880'. [ 796.471800][T27152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 796.618394][T27163] bond8: (slave geneve4): making interface the new active one [ 796.642610][T27163] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 796.708915][ T1029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.733793][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.770243][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.788985][ T1029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.093363][T27141] Cannot find set identified by id 0 to match [ 797.431571][T27180] IPv6: NLM_F_CREATE should be specified when creating new route [ 797.451999][T27180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.459293][T27180] IPv6: NLM_F_CREATE should be set when creating new route [ 797.466586][T27180] IPv6: NLM_F_CREATE should be set when creating new route [ 797.473825][T27180] IPv6: NLM_F_CREATE should be set when creating new route [ 797.505584][T27188] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4884'. [ 797.568889][T27189] team_slave_1: Caught tx_queue_len zero misconfig [ 797.688365][T27189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4885'. [ 797.884247][T27205] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4887'. [ 798.198949][T27211] lo speed is unknown, defaulting to 1000 [ 799.615852][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4896'. [ 799.900245][T27259] netlink: 'syz.3.4898': attribute type 1 has an invalid length. [ 799.928144][T27259] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4898'. [ 800.035545][ T1120] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 800.053269][ T1120] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 800.062955][T27270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'. [ 800.086586][T27270] tunl0: Caught tx_queue_len zero misconfig [ 800.136994][ T1120] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 800.175880][ T1120] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 800.203671][T27277] syzkaller0: entered promiscuous mode [ 800.232841][T27277] syzkaller0: entered allmulticast mode [ 800.302074][T27277] netlink: 'syz.2.4901': attribute type 1 has an invalid length. [ 800.333690][T27277] netlink: 'syz.2.4901': attribute type 3 has an invalid length. [ 800.351652][T27277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4901'. [ 800.765157][T27297] vlan7: entered promiscuous mode [ 800.778419][T27297] bridge0: entered promiscuous mode [ 800.790945][T27297] vlan2: entered promiscuous mode [ 800.831938][T27297] geneve0: entered promiscuous mode [ 800.952917][T21587] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 801.004556][T21587] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 801.024961][T21587] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 801.048755][T21587] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 801.748547][T27322] batman_adv: batadv0: Removing interface: dummy0 [ 802.006755][T27329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4907'. [ 802.143465][T27331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4907'. [ 802.633969][T27342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4909'. [ 802.777280][T27259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.808738][T27328] netlink: 'syz.1.4907': attribute type 1 has an invalid length. [ 802.846151][T27347] batadv0: entered promiscuous mode [ 802.877814][T27347] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 802.996797][T27359] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4911'. [ 803.104297][T27364] netlink: 'syz.1.4914': attribute type 1 has an invalid length. [ 803.279792][T27364] 8021q: adding VLAN 0 to HW filter on device bond17 [ 803.348779][T27375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.391657][T27375] bond17: (slave bond0): making interface the new active one [ 803.436553][T27375] bond17: (slave bond0): Enslaving as an active interface with an up link [ 803.505373][T27379] bond17: entered promiscuous mode [ 803.537938][T27379] bond0: entered promiscuous mode [ 803.566439][T27379] team0: entered promiscuous mode [ 803.585876][T27379] bridge3: entered promiscuous mode [ 803.603196][T27379] bridge4: entered promiscuous mode [ 803.622175][T27379] bond13: entered promiscuous mode [ 803.643696][T27379] bond17: entered allmulticast mode [ 803.662752][T27379] bond0: entered allmulticast mode [ 803.670300][T27379] team0: entered allmulticast mode [ 803.675769][T27379] bridge3: entered allmulticast mode [ 803.681580][T27379] bridge4: entered allmulticast mode [ 803.688149][T27379] bond13: entered allmulticast mode [ 803.724607][T27388] macsec0: entered promiscuous mode [ 803.738213][T27388] veth1_macvtap: entered promiscuous mode [ 803.747604][T27388] veth1_macvtap: left promiscuous mode [ 803.829529][T27397] bond13 (unregistering): Released all slaves [ 804.150986][T27413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4920'. [ 804.654376][T27439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4923'. [ 804.931635][T27452] netlink: 'syz.0.4924': attribute type 12 has an invalid length. [ 805.017175][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4924'. [ 805.058203][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4924'. [ 805.634113][T27485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4925'. [ 806.003236][T27496] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4929'. [ 806.597653][T27405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.419124][T27546] tipc: Resetting bearer [ 807.442855][T27546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.477885][T27546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.929434][T27552] netlink: 'syz.2.4939': attribute type 11 has an invalid length. [ 807.947434][T27556] only policy match revision 0 supported [ 807.947454][T27556] unable to load match [ 808.046177][T27554] lo speed is unknown, defaulting to 1000 [ 808.105940][T27560] bridge7: entered promiscuous mode [ 808.135578][T27560] bridge7: entered allmulticast mode [ 808.280045][T27574] __nla_validate_parse: 2 callbacks suppressed [ 808.280064][T27574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4945'. [ 808.359568][T27576] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 808.426868][T27579] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4946'. [ 808.465342][ T1029] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.483722][ T1029] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.519774][ T1029] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.566611][T21590] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.811197][T27598] tipc: Resetting bearer [ 808.873075][T27598] batadv0: left promiscuous mode [ 808.980163][T27598] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 809.558529][T27621] lo speed is unknown, defaulting to 1000 [ 810.249613][T27640] ip6gre2: entered promiscuous mode [ 810.265210][T27640] ip6gre2: entered allmulticast mode [ 810.744260][T27653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4958'. [ 810.989340][T27666] bond0: Device is already in use. [ 810.999897][ T1029] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 811.019770][ T1029] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 811.027643][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 811.292436][T27677] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4962'. [ 811.315322][T27677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4962'. [ 811.343991][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 811.486364][T27677] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4962'. [ 811.645333][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 811.695438][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 811.811746][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 811.868857][T27691] xt_hashlimit: size too large, truncated to 1048576 [ 812.083692][T27699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 813.153849][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4972'. [ 813.177229][T27738] netlink: 'syz.0.4971': attribute type 13 has an invalid length. [ 813.190463][T27738] netlink: 'syz.0.4971': attribute type 17 has an invalid length. [ 813.373595][T27738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.383181][T27738] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.393587][T27738] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 813.443943][T27738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 813.455973][T27738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 813.471303][T27738] veth1_vlan: left promiscuous mode [ 813.478664][T27738] veth0_vlan: left promiscuous mode [ 813.489953][T27738] veth0_vlan: entered promiscuous mode [ 813.498635][T27738] veth1_vlan: entered promiscuous mode [ 813.513270][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.525791][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.542533][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.555871][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.566598][T27738] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 813.606181][T27736] bond18 (unregistering): Released all slaves [ 813.669730][T15438] syz0: Port: 1 Link ACTIVE [ 813.675010][ T1029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.718237][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.741006][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.766274][ T1029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.826689][T27754] netlink: 'syz.3.4974': attribute type 23 has an invalid length. [ 813.986712][T27754] netlink: 'syz.3.4974': attribute type 1 has an invalid length. [ 814.007647][T27754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 814.008174][T27760] IPv6: Can't replace route, no match found [ 814.017839][T27754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 814.053911][T27760] IPv6: Can't replace route, no match found [ 814.075870][T27760] x_tables: duplicate underflow at hook 2 [ 814.082022][T27754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 814.099332][T27760] xt_NFQUEUE: number of total queues is 0 [ 814.105663][T27754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 814.146866][T27754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 814.190223][T27754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 814.292183][T27783] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4979'. [ 814.735075][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 814.750730][T27806] tipc: Can't bind to reserved service type 0 [ 814.820538][T27806] bond14 (unregistering): Released all slaves [ 815.221606][T27816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 815.457781][T27816] vlan2: left allmulticast mode [ 815.462768][T27816] geneve0: left allmulticast mode [ 815.467957][T27816] vlan2: left promiscuous mode [ 815.472761][T27816] geneve0: left promiscuous mode [ 815.478552][T27816] bridge0: port 1(vlan2) entered disabled state [ 815.994067][T27840] bond21 (unregistering): Released all slaves [ 815.995931][T27842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4986'. [ 816.378795][T27853] xt_hashlimit: size too large, truncated to 1048576 [ 816.503200][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4991'. [ 816.971276][T27762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.343354][T27875] veth1_vlan: left promiscuous mode [ 817.372767][T27875] veth0_vlan: left promiscuous mode [ 817.390099][T27875] veth0_vlan: entered promiscuous mode [ 817.413371][T27875] veth1_vlan: entered promiscuous mode [ 817.463600][T27875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.509203][T27875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.554677][T27875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.611359][T27875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 817.693751][T27875] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 817.770744][T27879] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 817.791711][T27879] bond14 (unregistering): Released all slaves [ 817.848036][ T1029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.861204][T27891] syz_tun: entered allmulticast mode [ 817.874696][T27901] lo: Caught tx_queue_len zero misconfig [ 817.900098][T27901] sch_tbf: burst 0 is lower than device lo mtu (5390) ! [ 817.953474][ T1029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.985413][T27878] syz_tun: left allmulticast mode [ 818.019236][T27905] lo speed is unknown, defaulting to 1000 [ 818.019817][ T1029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.100253][ T1029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.628215][T27935] syz_tun: entered allmulticast mode [ 818.822771][T27930] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 818.853255][T27930] bond14 (unregistering): Released all slaves [ 819.140272][T27948] tipc: Resetting bearer [ 819.503007][T27928] syz_tun: left allmulticast mode [ 819.755480][T27972] only policy match revision 0 supported [ 819.755500][T27972] unable to load match [ 819.820720][T27977] syz_tun: entered allmulticast mode [ 819.854049][T27977] __nla_validate_parse: 12 callbacks suppressed [ 819.854066][T27977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5012'. [ 819.910425][T27979] bridge8: entered promiscuous mode [ 819.917031][T27979] bridge8: entered allmulticast mode [ 819.930490][T27979] team0: Port device bridge8 added [ 819.977609][T27971] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 819.990400][T27971] bond9 (unregistering): Released all slaves [ 820.059036][T27985] bridge9: entered promiscuous mode [ 820.065913][T27985] bridge9: entered allmulticast mode [ 820.077555][T27985] team0: Port device bridge9 added [ 820.151234][T27967] syz_tun: left allmulticast mode [ 820.481987][T27964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.854623][T28006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5017'. [ 821.164281][T28033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5024'. [ 821.263812][T28035] macsec0: entered promiscuous mode [ 821.276632][T28035] veth1_macvtap: entered promiscuous mode [ 821.319986][T28035] veth1_macvtap: left promiscuous mode [ 821.697797][ T29] audit: type=1800 audit(1785055589.282:97): pid=28037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5024" name="memory.events" dev="tmpfs" ino=5397 res=0 errno=0 [ 821.730972][T28053] syz_tun: entered allmulticast mode [ 821.758347][T28053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5026'. [ 821.869536][T28053] bond21: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 821.904909][T28053] bond21 (unregistering): Released all slaves [ 822.042548][T28049] syz_tun: left allmulticast mode [ 822.337676][T28084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5032'. [ 822.516294][T28096] debugfs: '1ù!' already exists in 'ieee80211' [ 822.574987][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 823.596106][T28145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5045'. [ 823.618756][T28119] macsec0: entered promiscuous mode [ 823.641531][T28119] veth1_macvtap: entered promiscuous mode [ 823.676443][T28119] veth1_macvtap: left promiscuous mode [ 823.699198][ T5749] syz0: Port: 1 Link DOWN [ 823.699217][ T6528] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.714024][ T6528] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.723260][ T6528] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.733617][ T6528] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.784763][T28148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5048'. [ 823.868010][T28160] syz_tun: entered allmulticast mode [ 823.909640][T28160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5049'. [ 823.964609][T28164] openvswitch: netlink: Flow key attr not present in new flow. [ 824.121148][T28160] bond21: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 824.194756][T28160] bond21 (unregistering): Released all slaves [ 824.453688][T28155] syz_tun: left allmulticast mode [ 824.610209][T28171] ip6gre5: entered promiscuous mode [ 824.633089][T28171] ip6gre5: entered allmulticast mode [ 824.653255][T28181] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 824.679016][T21590] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 824.712799][T15438] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 824.720797][T21590] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 825.026287][ T5830] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 825.047390][T28212] xt_TCPMSS: Only works on TCP SYN packets [ 825.235133][ T5830] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 825.369563][T28226] tipc: Resetting bearer [ 825.412486][T28226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.480106][T28226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.572854][T28239] netlink: 'syz.4.5067': attribute type 1 has an invalid length. [ 825.595187][T28239] netlink: 'syz.4.5067': attribute type 2 has an invalid length. [ 825.851281][T28248] netlink: 'syz.1.5069': attribute type 1 has an invalid length. [ 825.877011][T28248] netlink: 'syz.1.5069': attribute type 2 has an invalid length. [ 825.973831][T28251] bridge0: entered promiscuous mode [ 825.990250][T28251] bridge0: entered allmulticast mode [ 826.015691][T28251] team0: Device bridge0 is of different type [ 826.185846][T28251] bridge0: entered promiscuous mode [ 826.200416][T28251] bridge0: entered allmulticast mode [ 826.222300][T28251] team0: Device bridge0 is of different type [ 826.230438][T28263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.344442][T28267] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5076'. [ 826.712460][T28285] IPv6: NLM_F_CREATE should be specified when creating new route [ 826.728262][T28285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 826.735601][T28285] IPv6: NLM_F_CREATE should be set when creating new route [ 826.742884][T28285] IPv6: NLM_F_CREATE should be set when creating new route [ 826.750153][T28285] IPv6: NLM_F_CREATE should be set when creating new route [ 826.799786][T28285] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5082'. [ 827.664305][T28281] bond17: left promiscuous mode [ 827.676127][T28281] bond0: left promiscuous mode [ 827.677874][T28312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5086'. [ 827.686969][T28281] team0: left promiscuous mode [ 827.696294][T28281] bridge3: left promiscuous mode [ 827.701445][T28281] bridge4: left promiscuous mode [ 827.707120][T28281] bond13: left promiscuous mode [ 827.712517][T28281] bond17: left allmulticast mode [ 827.717953][T28281] bond0: left allmulticast mode [ 827.722831][T28281] team0: left allmulticast mode [ 827.727732][T28281] bridge3: left allmulticast mode [ 827.732874][T28281] bridge4: left allmulticast mode [ 827.738390][T28281] bond13: left allmulticast mode [ 827.743634][T28281] bridge7: left promiscuous mode [ 827.748817][T28281] bridge7: left allmulticast mode [ 827.754261][T28281] ip6gre2: left promiscuous mode [ 827.759994][T28281] ip6gre2: left allmulticast mode [ 827.771665][T28281] bridge8: left promiscuous mode [ 827.780629][T28281] bridge8: left allmulticast mode [ 827.788499][T28281] bridge9: left promiscuous mode [ 827.796136][T28281] bridge9: left allmulticast mode [ 827.825193][T21587] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.846016][T21587] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.923432][T28312] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 827.938750][T28312] bond13 (unregistering): Released all slaves [ 828.031318][T21587] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.052615][T21587] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.470395][T28341] tipc: Resetting bearer [ 828.660736][T28331] netlink: 'syz.3.5091': attribute type 1 has an invalid length. [ 829.055009][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 829.238440][T28341] ip6gre5: left promiscuous mode [ 829.245076][T28341] ip6gre5: left allmulticast mode [ 831.175817][T28330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.429176][T28433] syz_tun: entered allmulticast mode [ 831.460234][T28433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5103'. [ 831.531796][T28433] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 831.550548][T28433] bond9 (unregistering): Released all slaves [ 831.719778][T28428] syz_tun: left allmulticast mode [ 831.890743][T28453] macsec0: entered promiscuous mode [ 831.914633][T28453] veth1_macvtap: entered promiscuous mode [ 831.958533][T28453] veth1_macvtap: left promiscuous mode [ 831.980948][T28460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5111'. [ 832.729363][T28492] syz_tun: entered allmulticast mode [ 832.770156][T28492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5119'. [ 832.892663][T28492] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 832.927079][T28492] bond14 (unregistering): Released all slaves [ 833.089804][T28485] syz_tun: left allmulticast mode [ 833.142251][T28510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5123'. [ 833.518725][T28526] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 833.665530][T28531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.752442][T28531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.759159][T28537] macsec0: entered promiscuous mode [ 833.798199][T28537] veth1_macvtap: entered promiscuous mode [ 833.844476][T28537] veth1_macvtap: left promiscuous mode [ 834.147327][T28553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.459234][T28563] ip6gre3: entered allmulticast mode [ 834.595824][T28572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5135'. [ 834.733529][T28586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5136'. [ 834.963602][T28586] bond18: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 835.003068][T28586] bond18 (unregistering): Released all slaves [ 835.166128][T28597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5139'. [ 836.385695][T28648] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5148'. [ 836.784778][T28670] macsec0: entered promiscuous mode [ 836.805110][T28670] veth1_macvtap: entered promiscuous mode [ 836.821738][T28670] veth1_macvtap: left promiscuous mode [ 836.905243][T28672] syz_tun: entered allmulticast mode [ 836.930537][T28672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5152'. [ 836.965165][T28672] bond21: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 836.977302][T28672] bond21 (unregistering): Released all slaves [ 837.029872][T28671] syz_tun: left allmulticast mode [ 838.481452][T28618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 838.727577][T28716] syz_tun: entered allmulticast mode [ 838.745945][T28716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5165'. [ 838.805722][T28716] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 838.846568][T28716] bond9 (unregistering): Released all slaves [ 839.040042][T28711] syz_tun: left allmulticast mode [ 839.297288][T28742] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5175'. [ 839.688986][T28756] syz_tun: left promiscuous mode [ 839.755699][T28756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.845664][ T5830] lo speed is unknown, defaulting to 1000 [ 839.853835][ T5830] syz2: Port: 1 Link ACTIVE [ 839.855260][T28759] netlink: 'syz.2.5177': attribute type 1 has an invalid length. [ 839.887562][T28759] netlink: 'syz.2.5177': attribute type 2 has an invalid length. [ 839.919763][T28764] macsec0: entered promiscuous mode [ 839.925520][T28764] veth1_macvtap: entered promiscuous mode [ 839.936728][T28764] veth1_macvtap: left promiscuous mode [ 839.974525][ T5830] lo speed is unknown, defaulting to 1000 [ 842.183123][T28738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 842.346940][T28773] xt_hashlimit: size too large, truncated to 1048576 [ 842.495479][T28787] syz_tun: entered allmulticast mode [ 842.537372][T28787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5184'. [ 842.599498][T28787] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 842.616931][T28787] bond9 (unregistering): Released all slaves [ 842.761396][T28781] syz_tun: left allmulticast mode [ 842.991732][T28811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5192'. [ 843.018284][T28810] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5193'. [ 846.052790][T28815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.298328][T28850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5203'. [ 846.362851][T28850] bond18: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 846.387627][T28850] bond18 (unregistering): Released all slaves [ 846.673261][T28866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5209'. [ 846.712514][T28869] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5210'. [ 846.794223][T28874] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 846.861944][T28881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5213'. [ 847.235093][T28902] syz_tun: entered allmulticast mode [ 847.253352][T28902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5219'. [ 847.309181][T28902] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 847.330391][T28902] bond14 (unregistering): Released all slaves [ 847.481629][T28897] syz_tun: left allmulticast mode [ 847.873133][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5226'. [ 847.889899][T28926] netlink: 'syz.3.5227': attribute type 12 has an invalid length. [ 847.941602][T28926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5227'. [ 847.974252][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5227'. [ 848.171432][T28938] syz_tun: entered allmulticast mode [ 848.188003][T28938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5231'. [ 848.235324][T28938] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 848.248362][T28938] bond14 (unregistering): Released all slaves [ 848.348376][T28932] syz_tun: left allmulticast mode [ 848.683282][T28965] netlink: 'syz.2.5239': attribute type 12 has an invalid length. [ 848.770664][T28968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5239'. [ 848.783678][T28968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'. [ 849.840304][T28880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.037423][T28992] syz_tun: entered allmulticast mode [ 850.079126][T28992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5245'. [ 850.095599][ T30] INFO: task kworker/0:1H:1644 blocked for more than 143 seconds. [ 850.125208][ T30] Not tainted syzkaller #0 [ 850.140789][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 850.154631][T28992] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 850.165457][ T30] task:kworker/0:1H state:D stack:25656 pid:1644 tgid:1644 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 850.183615][ T30] Workqueue: kblockd blk_mq_requeue_work [ 850.189738][ T30] Call Trace: [ 850.193205][ T30] [ 850.196475][ T30] __schedule+0x17d9/0x56c0 [ 850.201284][ T30] ? __lock_acquire+0x683/0x2cf0 [ 850.206631][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 850.211795][ T30] ? __pfx___schedule+0x10/0x10 [ 850.217326][ T30] ? schedule+0x90/0x2b0 [ 850.221668][ T30] schedule+0x164/0x2b0 [ 850.226073][ T30] schedule_timeout+0x152/0x2c0 [ 850.231177][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 850.236868][ T30] ? __pfx_process_timeout+0x10/0x10 [ 850.242405][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 850.253728][ T30] ? prepare_to_wait_event+0x436/0x480 [ 850.261364][ T30] nbd_queue_rq+0x889/0x1150 [ 850.266368][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 850.271521][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 850.277996][ T30] blk_mq_dispatch_rq_list+0x499/0x1990 [ 850.283744][ T30] ? sbitmap_get+0x229/0x390 [ 850.288587][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 850.294605][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 850.300601][ T30] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 850.307134][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 850.313924][ T30] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 850.319790][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 850.325299][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 850.330630][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 850.336783][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 850.342101][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 850.347419][ T30] blk_mq_run_hw_queues+0x268/0x3f0 [ 850.352657][ T30] blk_mq_requeue_work+0x703/0x760 [ 850.358025][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 850.363723][ T30] ? rcu_is_watching+0x15/0xb0 [ 850.368782][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 850.374602][ T30] process_scheduled_works+0xa8e/0x14e0 [ 850.380313][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 850.386564][ T30] ? assign_work+0x3cf/0x5d0 [ 850.391198][ T30] worker_thread+0xa47/0xfb0 [ 850.395995][ T30] ? __kthread_parkme+0x71/0x1f0 [ 850.401040][ T30] kthread+0x388/0x470 [ 850.405263][ T30] ? __pfx_worker_thread+0x10/0x10 [ 850.410409][ T30] ? __pfx_kthread+0x10/0x10 [ 850.415165][ T30] ret_from_fork+0x514/0xb70 [ 850.419915][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 850.425195][ T30] ? __switch_to+0xc89/0x1420 [ 850.429994][ T30] ? __pfx_kthread+0x10/0x10 [ 850.434597][ T30] ret_from_fork_asm+0x1a/0x30 [ 850.439584][ T30] [ 850.442933][ T30] [ 850.442933][ T30] Showing all locks held in the system: [ 850.444035][T28992] bond9 (unregistering): Released all slaves [ 850.452273][ T30] 1 lock held by khungtaskd/30: [ 850.462054][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 850.474259][ T30] 3 locks held by kworker/u8:8/1120: [ 850.480472][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 850.492450][ T30] #1: ffffc900057a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 850.503761][ T30] #2: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 850.513379][ T30] 4 locks held by kworker/0:1H/1644: [ 850.518927][ T30] #0: ffff88801e6eb940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 850.530105][ T30] #1: ffffc900070d7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 850.543552][ T30] #2: ffff8880274d1b18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 850.553296][ T30] #3: ffff88802761e6b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 850.562668][ T30] 2 locks held by getty/5376: [ 850.567613][ T30] #0: ffff8880367260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 850.577988][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 850.588671][ T30] 5 locks held by kworker/u8:6/21590: [ 850.594119][ T30] 1 lock held by udevd/23289: [ 850.598905][ T30] #0: ffff88802751e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 850.608549][ T30] 3 locks held by syz.0.5245/28992: [ 850.613757][ T30] #0: ffffffff9057c900 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 850.623383][ T30] #1: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 850.632511][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 850.643729][ T30] 3 locks held by syz.1.5248/28996: [ 850.649017][ T30] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 850.657534][ T30] #1: ffff888037bef6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 850.668376][ T30] #2: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x49/0x6b0 [ 850.678074][ T30] 3 locks held by syz.3.5249/29002: [ 850.683316][ T30] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 850.691573][ T30] #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 850.701201][ T30] #2: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9c0 [ 850.710723][ T30] [ 850.713313][ T30] ============================================= [ 850.713313][ T30] [ 850.741670][ T30] NMI backtrace for cpu 1 [ 850.741768][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 850.741811][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 850.741833][ T30] Call Trace: [ 850.741848][ T30] [ 850.741860][ T30] dump_stack_lvl+0xe8/0x150 [ 850.741922][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 850.741988][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 850.742116][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 850.742136][ T30] sys_info+0x135/0x170 [ 850.742160][ T30] watchdog+0xfd7/0x1030 [ 850.742233][ T30] ? watchdog+0x1c7/0x1030 [ 850.742262][ T30] kthread+0x388/0x470 [ 850.742288][ T30] ? __pfx_watchdog+0x10/0x10 [ 850.742308][ T30] ? __pfx_kthread+0x10/0x10 [ 850.742334][ T30] ret_from_fork+0x514/0xb70 [ 850.742363][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 850.742390][ T30] ? __switch_to+0xc89/0x1420 [ 850.742416][ T30] ? __pfx_kthread+0x10/0x10 [ 850.742441][ T30] ret_from_fork_asm+0x1a/0x30 [ 850.742471][ T30] [ 850.742479][ T30] Sending NMI from CPU 1 to CPUs 0: [ 850.853557][ C0] NMI backtrace for cpu 0 [ 850.853574][ C0] CPU: 0 UID: 0 PID: 5606 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 850.853595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 850.853605][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 850.853629][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2c b6 88 00 48 c7 c3 d8 f8 6d 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d b9 e1 c0 11 74 11 83 e0 04 c1 e8 02 5b [ 850.853645][ C0] RSP: 0018:ffffc90003b2fea8 EFLAGS: 00000806 [ 850.853728][ C0] RAX: 0000000000000000 RBX: ffff8880b86338d8 RCX: 0000000080000001 [ 850.853741][ C0] RDX: 0000000000000000 RSI: ffffffff8c4bdb60 RDI: ffffffff8c4bdb20 [ 850.853754][ C0] RBP: ffffc90003b2ff38 R08: ffffffff90578f37 R09: 1ffffffff20af1e6 [ 850.853767][ C0] R10: dffffc0000000000 R11: fffffbfff20af1e7 R12: 00000000000000e6 [ 850.853780][ C0] R13: ffffffff81000130 R14: ffffffff8e4fc7d0 R15: dffffc0000000000 [ 850.853793][ C0] FS: 000055557fa51540(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 850.853808][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.853820][ C0] CR2: 00007f5ab1fef4b8 CR3: 00000000290e8000 CR4: 00000000003526f0 [ 850.853836][ C0] Call Trace: [ 850.853844][ C0] [ 850.853852][ C0] trace_irq_disable+0x3b/0x140 [ 850.853916][ C0] do_syscall_64+0x96/0x580 [ 850.853969][ C0] ? clear_bhb_loop+0x40/0x90 [ 850.854006][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.854024][ C0] RIP: 0033:0x7f09c8359017 [ 850.854038][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 850.854053][ C0] RSP: 002b:00007ffd1d97f550 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 850.854070][ C0] RAX: ffffffffffffffda RBX: 000055557fa51540 RCX: 00007f09c8359017 [ 850.854082][ C0] RDX: 00007ffd1d97f590 RSI: 0000000000000000 RDI: 0000000000000000 [ 850.854093][ C0] RBP: 00007ffd1d97fa70 R08: 0000000000000000 R09: 0000000000000000 [ 850.854104][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 850.854115][ C0] R13: 00007ffd1d97f5cc R14: 00007ffd1d97f660 R15: 0000000000000000 [ 850.854136][ C0] [ 851.076401][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 851.083255][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 851.092346][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 851.102394][ T30] Call Trace: [ 851.105666][ T30] [ 851.108588][ T30] vpanic+0x56c/0xa60 [ 851.112622][ T30] ? __pfx___schedule+0x10/0x10 [ 851.117458][ T30] ? __pfx_vpanic+0x10/0x10 [ 851.121954][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 851.128096][ T30] panic+0xc5/0xd0 [ 851.131808][ T30] ? __pfx_panic+0x10/0x10 [ 851.136212][ T30] ? preempt_schedule_common+0x82/0xd0 [ 851.141668][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 851.147042][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 851.153183][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 851.159329][ T30] watchdog+0x1030/0x1030 [ 851.163662][ T30] ? watchdog+0x1c7/0x1030 [ 851.168076][ T30] kthread+0x388/0x470 [ 851.172141][ T30] ? __pfx_watchdog+0x10/0x10 [ 851.176806][ T30] ? __pfx_kthread+0x10/0x10 [ 851.181390][ T30] ret_from_fork+0x514/0xb70 [ 851.185979][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 851.191085][ T30] ? __switch_to+0xc89/0x1420 [ 851.195755][ T30] ? __pfx_kthread+0x10/0x10 [ 851.200341][ T30] ret_from_fork_asm+0x1a/0x30 [ 851.205101][ T30] [ 851.208395][ T30] Kernel Offset: disabled [ 851.212707][ T30] Rebooting in 86400 seconds..