last executing test programs: 17m54.050940625s ago: executing program 1 (id=9506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 17m53.823578814s ago: executing program 1 (id=9511): unshare(0x8040480) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x13, 0x0, 0x0) 17m53.581712674s ago: executing program 1 (id=9516): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 17m53.402958366s ago: executing program 1 (id=9519): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="1100000000000000", @ANYRES32=r0], 0x20) 17m53.341325305s ago: executing program 1 (id=9521): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@bridge_setlink={0x20, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x8020, 0x6020}}, 0x20}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) 17m53.277141932s ago: executing program 1 (id=9523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000080601080000000036000000000000090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) 17m38.145293517s ago: executing program 32 (id=9523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000080601080000000036000000000000090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) 7m38.152766621s ago: executing program 0 (id=16852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x4000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4044011) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r2, 0xf5277ac6e72e289d, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004880}, 0x40000) 7m37.643867686s ago: executing program 0 (id=16858): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) 7m37.326861818s ago: executing program 0 (id=16860): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000580)=0x100000b3, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 7m37.110160216s ago: executing program 0 (id=16862): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7m36.025111224s ago: executing program 0 (id=16871): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x2, 0x0, 0x20, 0x3a}, {@in=@multicast2, 0xffffffff, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x100, 0x0, 0x0, 0xfffffffffffffffc}, {0x7fffffff, 0x0, 0x5f, 0x80000001}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 7m35.762415099s ago: executing program 0 (id=16873): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x400023c, 0x300, 0x0) 7m20.593911387s ago: executing program 33 (id=16873): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x400023c, 0x300, 0x0) 12.691081694s ago: executing program 5 (id=19353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010011, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) socket$inet6(0xa, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 10.921473991s ago: executing program 5 (id=19355): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 9.70757742s ago: executing program 4 (id=19356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 9.244723517s ago: executing program 5 (id=19358): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000016c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@delchain={0x70, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xf, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5800}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe4}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4804) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000000580)=""/4103, 0x1007}, {&(0x7f00000015c0)=""/141, 0x8d}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r3) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000001b00)=0x2, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x68, r6, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e5, 0x74}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0xe48633b1f0fc192a) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000320001ff7f0000000000000001"], 0x14}}, 0x10) 9.214057945s ago: executing program 2 (id=19359): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) close(0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={0x2, 0x21, "dc62784afdc1fa0372266de5b5f83cad04d8c65d8209d4017dee5ccbccdb7c4eb8"}, &(0x7f0000000480)=0x29) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x210, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1e0, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x108, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffc7c, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x58, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x9c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0xda}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x40}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6a}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4a}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x6}, {0xa, 0x9}, {0xffff, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 8.307771478s ago: executing program 4 (id=19362): r0 = socket(0x10, 0x3, 0x0) pipe(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r1) r4 = socket$netlink(0x10, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c", @ANYRES8=0x0, @ANYRES64=r4], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 7.69306108s ago: executing program 5 (id=19363): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x1, &(0x7f00000003c0)="0100203200"/20, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x4000, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250a00000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20044051}, 0x20000000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 6.608807419s ago: executing program 4 (id=19364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a00000109da076200010080797a31000000000400048009000200"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000084c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) write(r1, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0xb, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 6.607357263s ago: executing program 3 (id=19374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xe7b}}}]}, 0x3c}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.412634336s ago: executing program 2 (id=19366): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x4, 0x3) 6.228228988s ago: executing program 5 (id=19367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xfff3, 0xc}, {0x3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x75, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x2, 0x4) 5.612349151s ago: executing program 6 (id=19368): socket$l2tp(0x2, 0x2, 0x73) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_RATE64={0xc, 0x4, 0x658e65276c28904c}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000004c0), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x0, 0x8}, {0xe, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x26}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.568758342s ago: executing program 3 (id=19369): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x103000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x300, 0x0, 0x3ff000000, 0x80000000009c2a, 0x4}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x4000009}, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3, 0xfffffffffffffffc}, {0x7}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x2000000, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x5, 0x0, 0xbd, 0x0, 0x8000000, 0xfffffffc}}, 0xe8) 4.468397489s ago: executing program 4 (id=19370): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffd, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "13080001000000bb98c68e00", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x8, 0x65f, 0x7, 0x3, 0x6, 0x72, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.268718905s ago: executing program 3 (id=19371): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340), 0xfffffdef) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f00000003c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000030427bd7c5c025d7d29fa9fb6d9", @ANYRES32=0x0, @ANYBLOB="46040900000000003000128009000100766c616e000000002000028004000380060005008300000006000100010000000600050088a8000008000500", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.149904091s ago: executing program 6 (id=19372): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10892418}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x40004) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000b00)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000b70000001007000000030000ca75ffffff00"], 0x0, 0x46, 0x0, 0x0, 0x4}, 0x28) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x68, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 3.853476612s ago: executing program 2 (id=19373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, 0x0, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) close(r3) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x8010, r1, 0x215d6000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0xa, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x61}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_COMMENT={0xf, 0x1a, '[^.\\($^\'-*\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}]}, 0x90}, 0x1, 0x0, 0x0, 0x8001}, 0x94) 3.704823593s ago: executing program 6 (id=19375): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) 3.432869197s ago: executing program 5 (id=19376): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r1 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000800)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r3, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%pK \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000f00)='cgroup.clone_children\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000f40)={0x1a0000010}) epoll_wait(r7, &(0x7f0000000f80), 0x0, 0xc9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={r4}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x11, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r8, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000e40)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 3.221568188s ago: executing program 4 (id=19377): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, 0x18, 0x107, 0x70bd25, 0x0, {0x4a, 0x7c, 0x3f}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000200)}, 0x1f00) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f00000006c0)={0xa, 0xffff, 0x0, @local, 0x3}, 0x18) sendmmsg$unix(r2, &(0x7f00000006c0), 0x318, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) epoll_wait(r0, &(0x7f00000007c0)=[{}], 0x1, 0x400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) shutdown(r1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) 3.18627511s ago: executing program 2 (id=19378): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000005c0)='X', 0x1, 0xe0, &(0x7f0000000600)={0xa, 0x4e24, 0x11, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000325bd7000fddbdf25120000003c0001800800030000000000140002006873723000000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f746f5f7465616d0000005c00018014000200736974300000000000000000000000001400020076657468305f746f5f6261746164760014000200766c616e30000000000000000000000008000300010400001400020064756d6d7930000000000000000000000800080005000000080009003f2e00000800070003000000080008000500000008000600080000000800070001000000"], 0xdc}, 0x1, 0x0, 0x0, 0x24014806}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth1\x00', 0x0}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, 0x1411, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044080) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001800050400000000000000000a800000fe03010100000000050014000b00000008000400", @ANYRES32=r6, @ANYBLOB="0600150003000000100016800c"], 0x44}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000480)) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 2.965746173s ago: executing program 3 (id=19379): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x53, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000040)='GPL\x00', 0x40, &(0x7f0000000080)={@align=0x7, {0x1, 0x81, 0x6, 0x4}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x5}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x41) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010001000000000000001a0100000700210042420000300022"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000340), &(0x7f00000003c0)=r3}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.517126313s ago: executing program 6 (id=19380): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x39, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000540), 0x56) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.546413963s ago: executing program 2 (id=19381): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000740)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x40) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3000000010000100000000000000000000400000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbce250100000000000000014100000018001700000000000000006574683a7465616d30"], 0x34}}, 0x20042000) 1.544794415s ago: executing program 3 (id=19382): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x10008af9}]}}]}, 0x48}}, 0x4000010) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c00000002060300000000000000000007000002050005000a0000000900020073797a3100000000050001000700000010000300686173683a69702c6d61630014000780080006400000afa208001340000070b80500040001000000547f6ebca5c565396eb329eeb1f4eba8a6c8ceb3d22a5fc09b025be3da"], 0x5c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) 1.497291952s ago: executing program 6 (id=19383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000600)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004380)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004440)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {0x0}], 0x2}}], 0x2, 0x20004090) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x10, 0xe, &(0x7f0000004540)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff0000000025040000000000003d400300000000007504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe2719fa6d5b8f51fc5a535daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe9326a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b26f502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc988161000000000eb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b2974c1e5f743644f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c46d8c9b71dff64075b74a740ebbdaa049f91e2c87dc6520ad0d2cccbcb08c0634ee74658d3e23bf511c8b2df1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b06138138a91d0ef4bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f30146ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b255af219c5bdd7b4309b512b36abadc4a1fac48833de5ab4bb15fecb5c935c7bcae154cdc37934d7ef50d5d63d2f6a6f9878874b45811fdf812beec1ceac104aabc181d64711a8c48e1b57be04783c85da3a4709565778e4c7127a78d07ddb105e456251df0fbd2076f5b9fdd2908d7564fb868820000000439baaffb37a34e41fdcb15b4e653b22f61e5d27b28c194033f577074c807431c7ea67f620dad8ad30b8e72034fb645a3c999a8a20b9b5076329e69e4afd67d01cb18591a76f7f4296bea32dcf5bd9b1e14b7badcae4a5e5a9c8920c45086aa938a3a6191ab"], &(0x7f0000004d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000004d40), 0x8}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000004f34070000000000000070bafc68609ee6a2d7648c785e", @ANYRES16=r7, @ANYBLOB="07000000000000000000050000000c0003800400038004000500180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000003d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/4092, 0xffc}], 0x3}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a80)=""/4103, 0x1007}, {&(0x7f0000002ac0)=""/4092, 0xffc}, {&(0x7f0000003ac0)=""/234, 0xea}, {&(0x7f0000003bc0)=""/83, 0x53}, {&(0x7f0000003c40)=""/165, 0xa5}], 0x5}, 0x900000}], 0x7, 0x2, 0x0) 436.413304ms ago: executing program 4 (id=19384): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f74"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0xc144) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 367.223883ms ago: executing program 6 (id=19385): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 35.460652ms ago: executing program 3 (id=19386): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x13, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040), 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='xfrm0\x00', 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000380), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000003c0)={'veth0_vlan', 0x32, 0x34}, 0xd) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x5}, 0x38) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000004c0)={0x84, @loopback, 0x4e22, 0x3, 'lblcr\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000500)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'sh\x00', 0x95e66838d16aced0, 0x20000, 0x77}, {@local, 0x4e20, 0xac91d2bf000ec5eb, 0x2000cd, 0x3}}, 0x44) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000580)={0x1, 0x401, 0x7fff, 0x3ff}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newlink={0x30, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={&(0x7f0000000740)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xffffffff}, 0x0) 0s ago: executing program 2 (id=19387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xa0000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x724) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): to HW filter on device bond3 [ 1270.489013][T12521] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1270.510686][ T1120] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1270.510741][ T1120] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1270.510780][ T1120] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1270.510814][ T1120] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1270.678642][T12528] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1270.804250][T31110] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1270.825701][T12531] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1270.868917][T12535] dummy0: entered promiscuous mode [ 1270.897019][T12535] bond7: (slave dummy0): Removing an active aggregator [ 1270.897755][T12535] bond7: (slave dummy0): Releasing backup interface [ 1271.146487][T12550] netlink: 'syz.4.17444': attribute type 1 has an invalid length. [ 1271.317849][T12550] bond10: entered promiscuous mode [ 1271.329786][T12550] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1271.430784][T12556] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1271.432055][T12556] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1271.432081][T12556] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1271.475252][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17449'. [ 1271.512766][T12556] bond10: (slave xfrm1): making interface the new active one [ 1271.512796][T12556] xfrm1: entered promiscuous mode [ 1271.554590][T12556] bond10: (slave xfrm1): Enslaving as an active interface with an up link [ 1271.916716][T12577] netlink: 'syz.3.17452': attribute type 1 has an invalid length. [ 1272.072948][T12577] bond8: entered promiscuous mode [ 1272.073394][T12577] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1272.449900][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17458'. [ 1272.518498][T12577] veth11: entered promiscuous mode [ 1272.528663][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17458'. [ 1272.555956][T12577] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 1272.558621][T12578] syzkaller1: entered promiscuous mode [ 1272.558646][T12578] syzkaller1: entered allmulticast mode [ 1273.489621][T12615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1274.135007][T12635] ip_tables: iptables: counters copy to user failed while replacing table [ 1274.948060][T12653] sctp: [Deprecated]: syz.5.17481 (pid 12653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1274.948060][T12653] Use struct sctp_sack_info instead [ 1276.358645][T12680] sctp: [Deprecated]: syz.5.17491 (pid 12680) Use of int in max_burst socket option deprecated. [ 1276.358645][T12680] Use struct sctp_assoc_value instead [ 1277.027765][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17496'. [ 1277.218870][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17499'. [ 1277.480356][T12649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1277.834653][T12708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17502'. [ 1278.225604][T12717] xt_hashlimit: size too large, truncated to 1048576 [ 1278.322801][T12723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1279.139745][T12735] netlink: 'syz.2.17511': attribute type 10 has an invalid length. [ 1279.181030][T12735] netlink: 'syz.2.17511': attribute type 10 has an invalid length. [ 1279.489504][T12745] syzkaller1: entered promiscuous mode [ 1279.489719][T12745] syzkaller1: entered allmulticast mode [ 1279.633336][T12753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17517'. [ 1279.884086][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17517'. [ 1280.463165][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17526'. [ 1280.509481][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17525'. [ 1280.613658][T12782] netlink: 'syz.4.17526': attribute type 1 has an invalid length. [ 1280.772091][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17528'. [ 1281.547624][T12805] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17536'. [ 1281.937492][T12816] syzkaller1: entered promiscuous mode [ 1281.937519][T12816] syzkaller1: entered allmulticast mode [ 1282.254841][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17543'. [ 1282.312527][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17544'. [ 1283.135246][T12860] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1283.255949][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.256125][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.257117][T12862] bridge_slave_0: entered allmulticast mode [ 1283.268962][T12862] bridge_slave_0: entered promiscuous mode [ 1283.283072][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.283462][T12862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.323498][T12862] bridge_slave_0: left allmulticast mode [ 1283.323530][T12862] bridge_slave_0: left promiscuous mode [ 1283.323790][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.685886][T12842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1286.136845][T12899] sock: sock_set_timeout: `syz.5.17568' (pid 12899) tries to set negative timeout [ 1286.314988][T12904] tipc: Failed to remove unknown binding: 66,1,1/4278255617:1429208839/1429208841 [ 1286.317798][T12905] gretap0: entered promiscuous mode [ 1286.650760][T12905] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1286.654036][T23612] pimreg: port 1(bridge_slave_0) entered blocking state [ 1286.654194][T23612] pimreg: port 1(bridge_slave_0) entered forwarding state [ 1286.708842][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17572'. [ 1287.039987][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17579'. [ 1287.157471][T12922] netlink: 76 bytes leftover after parsing attributes in process `syz.2.17576'. [ 1287.495090][T12941] netlink: 'syz.4.17583': attribute type 1 has an invalid length. [ 1287.582606][T12941] bond11: entered promiscuous mode [ 1287.585474][T12941] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1287.652663][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17583'. [ 1287.678748][T12941] bond11 (unregistering): Released all slaves [ 1288.855709][T12964] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17590'. [ 1289.411123][T12978] syz_tun: entered allmulticast mode [ 1289.414449][T12978] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1289.414494][T12978] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1289.414539][T12978] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1289.544190][T12977] syz_tun: left allmulticast mode [ 1289.980047][T12990] 0ªX¹¦Dö»: left allmulticast mode [ 1290.164925][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17602'. [ 1290.357841][T12931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1290.397893][T12990] 0·: left allmulticast mode [ 1290.397919][T12990] hsr_slave_0: left allmulticast mode [ 1290.397936][T12990] hsr_slave_1: left allmulticast mode [ 1290.596280][T12990] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1290.677844][T12990] bond1: left allmulticast mode [ 1290.935477][T12990] geneve4: left allmulticast mode [ 1291.204947][T12990] ip6gre3: left allmulticast mode [ 1291.678049][T12990] bond3: left allmulticast mode [ 1291.794844][T12990] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 1291.798243][T12990] ipvlan0: left allmulticast mode [ 1291.798268][T12990] virt_wifi0: left allmulticast mode [ 1291.834717][T12990] batman_adv: batadv0: Interface deactivated: gretap0 [ 1291.934898][T12990] ip6tnl2: left allmulticast mode [ 1292.685925][T12990] bridge4: left promiscuous mode [ 1292.685954][T12990] bridge4: left allmulticast mode [ 1292.745741][T12990] bond9: left promiscuous mode [ 1292.745770][T12990] erspan2: left promiscuous mode [ 1292.745968][T12990] bond9: left allmulticast mode [ 1292.785641][T12990] erspan2: left allmulticast mode [ 1292.991030][T15949] s`z1: Port: 1 Link DOWN [ 1292.999874][T13009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.999996][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.021461][T13009] bridge_slave_0: entered allmulticast mode [ 1293.027039][T13009] bridge_slave_0: entered promiscuous mode [ 1293.045248][T13009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.045376][T13009] bridge0: port 1(bridge_slave_0) entered listening state [ 1293.057434][ T759] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.057471][ T759] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1293.057498][ T759] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1293.100880][T31115] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.100920][T31115] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1293.100949][T31115] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1293.116129][T31110] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.116750][T31110] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1293.116838][T31110] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1293.137444][T31121] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.137543][T31121] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1293.137621][T31121] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1293.177230][T13011] bridge_slave_0: left allmulticast mode [ 1293.178204][T13011] bridge_slave_0: left promiscuous mode [ 1293.180398][T13011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.684356][T13039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1294.027787][T13047] bridge0: left promiscuous mode [ 1294.063304][T13047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.226010][T13047] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1294.226044][T13047] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1294.277470][T13047] veth1_macvtap: left promiscuous mode [ 1294.288457][T13047] veth0_macvtap: left promiscuous mode [ 1294.298992][T13047] veth0_macvtap: entered promiscuous mode [ 1294.316769][T13047] veth1_macvtap: entered promiscuous mode [ 1294.364503][T13047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1294.385113][T13047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1294.434453][T13047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1294.477762][T13047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.568842][T13047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1294.613766][T13047] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1294.615212][T15940] s`z1: Port: 1 Link ACTIVE [ 1294.662753][T31121] bridge0: port 1(veth0) entered blocking state [ 1294.662934][T31121] bridge0: port 1(veth0) entered forwarding state [ 1295.505528][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.522230][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.536954][ T3393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.537491][T31115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.769476][T13042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1297.059762][ T1120] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.059821][ T1120] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.116064][T13106] netlink: 'syz.2.17625': attribute type 219 has an invalid length. [ 1297.147254][T31121] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.191556][T31121] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.571572][T13118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17628'. [ 1297.797164][T13122] ip_tables: iptables: counters copy to user failed while replacing table [ 1299.323734][T13153] syzkaller1: entered promiscuous mode [ 1299.323956][T13153] syzkaller1: entered allmulticast mode [ 1299.976818][T13162] syzkaller1: entered promiscuous mode [ 1299.976943][T13162] syzkaller1: entered allmulticast mode [ 1301.197932][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17651'. [ 1303.729918][T13239] syzkaller1: entered promiscuous mode [ 1303.734575][T13239] syzkaller1: entered allmulticast mode [ 1304.896625][T13261] syzkaller1: entered promiscuous mode [ 1304.896652][T13261] syzkaller1: entered allmulticast mode [ 1305.468803][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17678'. [ 1305.468836][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17678'. [ 1305.530489][T13270] batman_adv: batadv0: Adding interface: syzkaller0 [ 1305.530513][T13270] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.530549][T13270] batman_adv: batadv0: Interface activated: syzkaller0 [ 1305.908542][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17683'. [ 1305.935723][T13269] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1306.044388][T13269] batman_adv: batadv0: Removing interface: syzkaller0 [ 1306.855997][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17688'. [ 1307.269658][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17690'. [ 1307.573149][ T29] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 1307.846295][T13319] netlink: 'syz.4.17693': attribute type 1 has an invalid length. [ 1307.846324][T13319] netlink: 'syz.4.17693': attribute type 4 has an invalid length. [ 1307.846339][T13319] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.17693'. [ 1307.882514][T13319] netlink: 'syz.4.17693': attribute type 1 has an invalid length. [ 1307.882539][T13319] netlink: 'syz.4.17693': attribute type 4 has an invalid length. [ 1307.882555][T13319] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.17693'. [ 1308.109097][T13298] scsi_nl_rcv_msg: discarding partial skb [ 1309.219377][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17702'. [ 1310.306594][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17714'. [ 1310.326477][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17714'. [ 1311.196997][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17719'. [ 1312.378278][T13420] syzkaller1: entered promiscuous mode [ 1312.378304][T13420] syzkaller1: entered allmulticast mode [ 1312.405596][T13424] block nbd9: shutting down sockets [ 1313.294794][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17730'. [ 1314.208266][T13452] tipc: Enabled bearer , priority 0 [ 1314.593967][T13470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17736'. [ 1315.078453][T13488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17740'. [ 1315.941964][T13508] netlink: 'syz.5.17744': attribute type 1 has an invalid length. [ 1316.085693][T13514] netlink: 'syz.5.17744': attribute type 10 has an invalid length. [ 1316.085718][T13514] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17744'. [ 1316.122096][T13508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1316.273585][T13511] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 1316.289724][T13514] dummy0: entered promiscuous mode [ 1316.317298][T13514] bond8: (slave dummy0): Releasing backup interface [ 1317.405108][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17754'. [ 1317.448983][T13467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1317.757841][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17756'. [ 1317.757887][T13542] netlink: 'syz.2.17756': attribute type 7 has an invalid length. [ 1317.757902][T13542] netlink: 'syz.2.17756': attribute type 8 has an invalid length. [ 1317.758025][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17756'. [ 1317.817762][T13542] erspan0: entered promiscuous mode [ 1317.849299][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17756'. [ 1317.849343][T13543] netlink: 'syz.2.17756': attribute type 7 has an invalid length. [ 1317.849359][T13543] netlink: 'syz.2.17756': attribute type 8 has an invalid length. [ 1317.849373][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17756'. [ 1317.869778][T13542] erspan0: left promiscuous mode [ 1318.054809][T13543] erspan0: entered promiscuous mode [ 1318.088816][T13543] erspan0: left promiscuous mode [ 1318.945164][T13565] netlink: 'syz.4.17763': attribute type 1 has an invalid length. [ 1319.006770][T13565] bond11: entered promiscuous mode [ 1319.007225][T13565] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1319.008556][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17763'. [ 1319.008592][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17763'. [ 1319.056637][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17764'. [ 1319.059436][T13569] hsr0: entered allmulticast mode [ 1319.059461][T13569] hsr_slave_0: entered allmulticast mode [ 1319.059481][T13569] hsr_slave_1: entered allmulticast mode [ 1319.141978][T13573] hsr_slave_0: left promiscuous mode [ 1319.146184][T13573] hsr_slave_1: left promiscuous mode [ 1319.217034][T13549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1319.335501][T13573] hsr0 (unregistering): left allmulticast mode [ 1319.483342][T13565] bond11: (slave bridge5): making interface the new active one [ 1319.483375][T13565] bridge5: entered promiscuous mode [ 1319.490032][T13565] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 1319.803201][T13580] netlink: 19 bytes leftover after parsing attributes in process `syz.5.17767'. [ 1319.813313][T13580] netlink: 19 bytes leftover after parsing attributes in process `syz.5.17767'. [ 1324.152885][T13629] sctp: [Deprecated]: syz.6.17783 (pid 13629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1324.152885][T13629] Use struct sctp_sack_info instead [ 1324.694233][T13646] __nla_validate_parse: 2 callbacks suppressed [ 1324.694256][T13646] netlink: 168 bytes leftover after parsing attributes in process `syz.6.17790'. [ 1324.922997][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17791'. [ 1324.971782][T13650] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1325.011694][T13650] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1325.708147][T13654] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1325.708650][T13643] lo: entered promiscuous mode [ 1325.708671][T13643] lo: entered allmulticast mode [ 1325.726919][T13643] bond0: entered promiscuous mode [ 1325.726963][T13643] bond0: entered allmulticast mode [ 1325.733625][T13643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.753378][T13643] dummy0: entered promiscuous mode [ 1325.753451][T13643] dummy0: entered allmulticast mode [ 1325.772397][T13643] eql: entered promiscuous mode [ 1325.772422][T13643] eql: entered allmulticast mode [ 1325.773243][T13643] ifb0: entered promiscuous mode [ 1325.773263][T13643] ifb0: entered allmulticast mode [ 1325.779179][T13643] ifb1: entered promiscuous mode [ 1325.779201][T13643] ifb1: entered allmulticast mode [ 1325.801710][T13643] virtio_net virtio1 eth0: entered promiscuous mode [ 1325.801816][T13643] virtio_net virtio1 eth0: entered allmulticast mode [ 1325.853533][T13643] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 1325.853566][T13643] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 1325.854595][T13643] hwsim0: entered promiscuous mode [ 1325.854615][T13643] hwsim0: entered allmulticast mode [ 1325.885949][T13643] teql0: entered promiscuous mode [ 1325.885978][T13643] teql0: entered allmulticast mode [ 1325.885995][T13643] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1326.108443][T13661] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1326.643093][T13662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.417166][T13662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.471885][T13662] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1327.512890][T13662] bond0 (unregistering): Released all slaves [ 1327.948575][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17808'. [ 1328.564418][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17815'. [ 1328.873049][T13719] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1328.907828][T13724] bond0: entered promiscuous mode [ 1328.907857][T13724] veth0_to_bond: entered promiscuous mode [ 1328.908847][T13724] bond0: entered allmulticast mode [ 1328.908866][T13724] veth0_to_bond: entered allmulticast mode [ 1328.942904][T13724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.141335][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17819'. [ 1329.625366][T13747] syzkaller1: entered promiscuous mode [ 1329.625392][T13747] syzkaller1: entered allmulticast mode [ 1330.498108][T13754] syzkaller1: entered promiscuous mode [ 1330.498135][T13754] syzkaller1: entered allmulticast mode [ 1330.731284][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17828'. [ 1331.565707][T13789] syzkaller1: entered promiscuous mode [ 1331.565736][T13789] syzkaller1: entered allmulticast mode [ 1331.670526][ C0] neighbour: arp_cache: neighbor table overflow! [ 1332.295853][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17843'. [ 1332.329552][T13795] batman_adv: batadv0: Adding interface: syz_tun [ 1332.329578][T13795] batman_adv: batadv0: Interface activated: syz_tun [ 1332.720444][ C0] neighbour: arp_cache: neighbor table overflow! [ 1333.152340][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17852'. [ 1333.620203][T13834] netlink: 'syz.6.17855': attribute type 1 has an invalid length. [ 1333.751027][ C0] neighbour: arp_cache: neighbor table overflow! [ 1333.866314][T13834] bond3: entered promiscuous mode [ 1333.871946][T13834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1334.050953][T13840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1334.052322][T13840] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1334.052350][T13840] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1334.092182][T13840] bond3: (slave xfrm1): making interface the new active one [ 1334.092211][T13840] xfrm1: entered promiscuous mode [ 1334.116555][T13840] xfrm1: left promiscuous mode [ 1334.962369][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17859'. [ 1335.062613][T13855] netlink: 'syz.6.17860': attribute type 1 has an invalid length. [ 1335.074017][T13858] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17862'. [ 1335.116015][T13855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1335.383502][ T12] tipc: Subscription rejected, illegal request [ 1335.439843][T13862] bond4: (slave veth13): Enslaving as an active interface with a down link [ 1336.573694][T13855] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 1336.588051][T13855] bond4: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1336.847945][T13887] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17866'. [ 1339.304169][T13940] ip_tables: iptables: counters copy to user failed while replacing table [ 1339.626993][T13947] syzkaller1: entered promiscuous mode [ 1339.627266][T13947] syzkaller1: entered allmulticast mode [ 1339.752327][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17890'. [ 1340.452448][T13955] netlink: 'syz.4.17892': attribute type 4 has an invalid length. [ 1340.513029][T13958] netlink: 'syz.4.17892': attribute type 4 has an invalid length. [ 1340.750829][T13960] batman_adv: batadv0: Interface deactivated: syz_tun [ 1340.854383][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17896'. [ 1340.872645][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17895'. [ 1340.877687][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17896'. [ 1340.949455][T13960] batman_adv: batadv0: Removing interface: syz_tun [ 1340.988932][T13960] syz_tun: entered promiscuous mode [ 1340.989102][T13960] syz_tun: entered allmulticast mode [ 1340.998082][T13960] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1341.307308][T13978] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 1341.753812][T13992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17903'. [ 1341.765281][T13992] ip_tables: iptables: counters copy to user failed while replacing table [ 1344.553839][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17914'. [ 1344.553873][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17914'. [ 1350.458092][T14153] syzkaller1: entered promiscuous mode [ 1350.458243][T14153] syzkaller1: entered allmulticast mode [ 1351.088509][T14162] x_tables: duplicate underflow at hook 3 [ 1352.669721][T14188] Bluetooth: MGMT ver 1.23 [ 1352.675956][T14188] Bluetooth: hci0: unsupported parameter 5135 [ 1352.675983][T14188] Bluetooth: hci0: unsupported parameter 8192 [ 1352.675998][T14188] Bluetooth: hci0: unsupported parameter 5135 [ 1352.676021][T14188] Bluetooth: hci0: unsupported parameter 8192 [ 1352.680503][T14188] xt_hashlimit: max too large, truncated to 1048576 [ 1352.680774][T14188] Cannot find del_set index 4 as target [ 1352.914284][T14137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1353.354196][T14194] veth0_to_bridge: entered promiscuous mode [ 1353.356178][T14194] macvtap2: entered allmulticast mode [ 1353.356200][T14194] veth0_to_bridge: entered allmulticast mode [ 1353.519650][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17967'. [ 1353.519687][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17967'. [ 1354.474677][T14218] netlink: 168 bytes leftover after parsing attributes in process `syz.3.17972'. [ 1355.678207][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17978'. [ 1356.339116][T14244] netlink: 'syz.6.17982': attribute type 1 has an invalid length. [ 1359.985073][T14244] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1359.988314][T14262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1361.020998][T14300] netlink: 'syz.6.17998': attribute type 3 has an invalid length. [ 1361.021024][T14300] netlink: 'syz.6.17998': attribute type 2 has an invalid length. [ 1361.153325][T14303] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1361.159952][T14303] bond12 (unregistering): Released all slaves [ 1361.246140][T14307] netlink: 'syz.2.18000': attribute type 11 has an invalid length. [ 1362.102515][T14322] netlink: 168 bytes leftover after parsing attributes in process `syz.2.18005'. [ 1362.268311][T14325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1363.361875][T14288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1363.387814][T14275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1365.217763][T14375] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18023'. [ 1365.226039][T14376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1365.269993][T14375] syzkaller1: entered promiscuous mode [ 1365.277979][T14375] syzkaller1: entered allmulticast mode [ 1366.172983][T14390] netlink: 'syz.3.18030': attribute type 19 has an invalid length. [ 1367.030601][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1367.165461][T14412] tipc: Failed to remove unknown binding: 66,0,2/4278255617:3527370264/3527370265 [ 1367.168816][T14412] tipc: Failed to remove unknown binding: 66,0,2/4278255617:3527370264/3527370265 [ 1367.915134][T14426] gretap0: entered promiscuous mode [ 1369.638894][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18047'. [ 1369.875319][T14457] netlink: 'syz.2.18046': attribute type 1 has an invalid length. [ 1370.388036][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18053'. [ 1371.884256][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18063'. [ 1371.955624][T14506] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18064'. [ 1372.377753][T14512] bond0: entered promiscuous mode [ 1372.377779][T14512] bond3: entered promiscuous mode [ 1372.409699][T14512] batadv0: entered promiscuous mode [ 1372.429456][T14512] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1372.466255][T14512] bond0: left promiscuous mode [ 1372.466283][T14512] bond3: left promiscuous mode [ 1372.485071][T14512] batadv0: left promiscuous mode [ 1372.501486][T14514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18066'. [ 1372.554722][T14507] syzkaller1: entered promiscuous mode [ 1372.554750][T14507] syzkaller1: entered allmulticast mode [ 1372.999453][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18071'. [ 1373.256971][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18073'. [ 1373.259834][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18073'. [ 1373.262758][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18073'. [ 1373.263602][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18073'. [ 1374.015258][T14520] netlink: 'syz.2.18069': attribute type 29 has an invalid length. [ 1374.016939][T14520] netlink: 'syz.2.18069': attribute type 29 has an invalid length. [ 1374.277753][T14543] Failed to decode metaid 5 dlen 4 err -22 [ 1375.030665][ T3740] Bluetooth: hci5: command 0x0406 tx timeout [ 1375.896161][T14561] __nla_validate_parse: 1 callbacks suppressed [ 1375.896186][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18082'. [ 1377.238925][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18098'. [ 1377.238959][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18098'. [ 1377.630959][T14616] syzkaller1: entered promiscuous mode [ 1377.630986][T14616] syzkaller1: entered allmulticast mode [ 1377.891921][T14624] netlink: 'syz.3.18103': attribute type 1 has an invalid length. [ 1378.414561][T14626] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1378.438482][T14626] bond10: (slave bond11): making interface the new active one [ 1378.451534][T14626] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1378.795590][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18108'. [ 1378.851206][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18108'. [ 1380.369049][T14662] tipc: Enabled bearer , priority 0 [ 1380.387342][T14662] syzkaller0: entered promiscuous mode [ 1380.387368][T14662] syzkaller0: entered allmulticast mode [ 1380.519857][T14664] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 1380.759635][T14675] syzkaller0: left promiscuous mode [ 1380.759662][T14675] syzkaller0: left allmulticast mode [ 1380.892554][T14677] ip_tables: iptables: counters copy to user failed while replacing table [ 1381.382565][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18121'. [ 1381.571781][T14690] TC_ACT_REPEAT abuse ? [ 1382.243006][T14698] bridge0: entered allmulticast mode [ 1382.439434][T14702] 0: reclassify loop, rule prio 0, protocol 03 [ 1382.762414][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18129'. [ 1383.556197][T14668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1383.913362][T14724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1383.913386][T14724] IPv6: NLM_F_CREATE should be set when creating new route [ 1384.467354][T14726] tipc: Enabling of bearer rejected, already enabled [ 1384.483642][T14727] syzkaller0: entered promiscuous mode [ 1384.483859][T14727] syzkaller0: entered allmulticast mode [ 1386.243662][T14772] ip_tables: iptables: counters copy to user failed while replacing table [ 1386.505193][T14770] syzkaller1: entered promiscuous mode [ 1386.505413][T14770] syzkaller1: entered allmulticast mode [ 1387.444081][T14807] syz_tun: entered allmulticast mode [ 1387.488437][T14807] syz_tun: left allmulticast mode [ 1387.979193][T14815] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1388.007887][T14815] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1388.432479][T14821] syzkaller0: Caught tx_queue_len zero misconfig [ 1388.735724][T14829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18165'. [ 1389.802196][T14850] TC_ACT_REPEAT abuse ? [ 1389.886572][T14852] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.18175'. [ 1390.085370][T14856] dvmrp6: entered allmulticast mode [ 1390.501540][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18182'. [ 1390.887074][T14881] ip_tables: iptables: counters copy to user failed while replacing table [ 1390.900181][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18184'. [ 1390.951702][ T5680] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1391.554790][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18188'. [ 1391.554825][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18188'. [ 1393.097414][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18200'. [ 1393.336094][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18201'. [ 1394.416395][ T759] IPVS: starting estimator thread 0... [ 1394.500671][T14955] IPVS: using max 24 ests per chain, 57600 per kthread [ 1394.702437][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18212'. [ 1394.778845][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18212'. [ 1398.749853][T14978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1402.021580][T14968] tipc: Resetting bearer [ 1402.051462][T13026] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1402.223959][T14968] tipc: Resetting bearer [ 1402.242373][T13026] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1402.341349][T15928] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1402.475374][T13026] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1402.953776][T15024] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18231'. [ 1403.201149][T15940] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1403.285855][T15040] xt_hashlimit: size too large, truncated to 1048576 [ 1403.413023][T15041] xt_hashlimit: size too large, truncated to 1048576 [ 1403.776296][T15026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1405.016413][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18246'. [ 1405.017581][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18246'. [ 1405.787849][T15083] syzkaller1: entered allmulticast mode [ 1406.369468][T15095] netlink: 'syz.6.18255': attribute type 2 has an invalid length. [ 1406.369506][T15095] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.18255'. [ 1406.369531][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18255'. [ 1406.989617][T15105] syzkaller1: entered promiscuous mode [ 1406.989644][T15105] syzkaller1: entered allmulticast mode [ 1407.648144][T15115] netlink: 'syz.3.18263': attribute type 1 has an invalid length. [ 1407.861920][T15122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18263'. [ 1408.204452][T15117] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1408.219483][T15117] bond12: (slave bond13): making interface the new active one [ 1408.221308][T15117] bond12: (slave bond13): Enslaving as an active interface with an up link [ 1408.333585][T15118] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 1408.406223][T15128] netlink: 'syz.4.18265': attribute type 1 has an invalid length. [ 1408.432595][T15122] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1410.557676][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18276'. [ 1411.196090][T15179] ip_tables: iptables: counters copy to user failed while replacing table [ 1411.488167][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18283'. [ 1412.348730][T15186] netlink: 164 bytes leftover after parsing attributes in process `syz.6.18284'. [ 1412.840257][T15203] netlink: 'syz.5.18288': attribute type 4 has an invalid length. [ 1412.840283][T15203] netlink: 224 bytes leftover after parsing attributes in process `syz.5.18288'. [ 1413.207336][T15214] ip_tables: iptables: counters copy to user failed while replacing table [ 1413.426836][T15222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18293'. [ 1415.150852][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18298'. [ 1415.450135][T15243] netlink: 'syz.4.18300': attribute type 39 has an invalid length. [ 1416.093031][T15256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18306'. [ 1417.127729][T15276] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1418.148535][T15298] syzkaller1: entered promiscuous mode [ 1418.148761][T15298] syzkaller1: entered allmulticast mode [ 1418.706768][T15315] nci: nci_start_poll: failed to set local general bytes [ 1419.306996][T15333] ip_tables: iptables: counters copy to user failed while replacing table [ 1419.461215][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18327'. [ 1419.549335][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.996376][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18332'. [ 1420.588141][T15362] netlink: 'syz.4.18337': attribute type 1 has an invalid length. [ 1420.728779][T15362] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1420.828383][T15362] netlink: 'syz.4.18337': attribute type 10 has an invalid length. [ 1420.828412][T15362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18337'. [ 1421.028373][T15364] bond12: (slave veth13): Enslaving as an active interface with a down link [ 1421.093886][T15365] team0: Port device dummy0 removed [ 1421.122955][T15365] bond12: (slave dummy0): Enslaving as an active interface with a down link [ 1421.123211][T15362] dummy0: entered promiscuous mode [ 1421.125259][T15362] bond12: (slave dummy0): Releasing active interface [ 1421.251378][T15376] netlink: 64 bytes leftover after parsing attributes in process `syz.6.18342'. [ 1421.487941][T15309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1422.120155][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18351'. [ 1422.170054][T15397] bond5: option ad_user_port_key: invalid value (65535) [ 1422.171714][T15397] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 1422.253863][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18351'. [ 1422.259456][T15397] bond5 (unregistering): Released all slaves [ 1423.049694][T15412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18354'. [ 1423.251796][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18354'. [ 1423.605605][T15419] netlink: 'syz.5.18355': attribute type 1 has an invalid length. [ 1423.689723][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18356'. [ 1423.974218][T15419] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1424.046915][T15422] bond0: (slave veth0_to_bond): Releasing backup interface [ 1424.046944][T15422] bond0: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1424.095754][T15422] veth0_to_bond: left promiscuous mode [ 1424.096000][T15422] veth0_to_bond: left allmulticast mode [ 1424.149693][T15422] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1424.178867][T15433] ip_tables: iptables: counters copy to user failed while replacing table [ 1424.246574][T15418] macvlan2: entered promiscuous mode [ 1424.246616][T15418] macvlan2: entered allmulticast mode [ 1424.247454][T15418] bond9: entered promiscuous mode [ 1424.248258][T15418] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1424.249122][T15418] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1424.289253][T15418] bond9: left promiscuous mode [ 1424.407452][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18361'. [ 1424.677731][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18361'. [ 1425.094918][T15435] syzkaller1: entered promiscuous mode [ 1425.094947][T15435] syzkaller1: entered allmulticast mode [ 1425.709786][T15476] netlink: 'syz.2.18369': attribute type 1 has an invalid length. [ 1425.910162][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18368'. [ 1425.917618][T15476] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1425.943520][T15480] bond10: entered allmulticast mode [ 1425.949215][T15480] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18369'. [ 1426.129320][T15484] bond10: (slave ip6gretap0): making interface the new active one [ 1426.129351][T15484] ip6gretap0: entered allmulticast mode [ 1426.169026][T15484] bond10: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1429.049295][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18387'. [ 1429.049324][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18387'. [ 1429.699360][T15572] ip_tables: iptables: counters copy to user failed while replacing table [ 1429.725578][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18393'. [ 1430.003857][T15577] syzkaller1: entered promiscuous mode [ 1430.003885][T15577] syzkaller1: entered allmulticast mode [ 1433.121465][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18416'. [ 1433.127266][T15636] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1433.170147][T15638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1434.851449][T13027] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1434.895054][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18433'. [ 1435.206430][T13027] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1437.412849][T15678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1437.412878][T15678] nci: nci_start_poll: failed to set local general bytes [ 1437.418535][T15669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1438.432320][T15746] ip_tables: iptables: counters copy to user failed while replacing table [ 1439.597967][T15754] ip_tables: iptables: counters copy to user failed while replacing table [ 1443.157615][T15723] syzkaller1: entered promiscuous mode [ 1443.157640][T15723] syzkaller1: entered allmulticast mode [ 1443.274975][T15747] syzkaller1: entered promiscuous mode [ 1443.275003][T15747] syzkaller1: entered allmulticast mode [ 1443.444806][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18456'. [ 1443.511621][T15768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18456'. [ 1446.284920][T15837] netlink: 68 bytes leftover after parsing attributes in process `syz.5.18479'. [ 1446.683806][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18482'. [ 1447.551183][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18486'. [ 1449.493029][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18502'. [ 1449.897827][T15918] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1450.086348][T15918] bond12 (unregistering): Released all slaves [ 1450.543791][T15929] ip6gretap0: entered promiscuous mode [ 1450.578475][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18506'. [ 1452.232434][T15906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1453.364731][T15972] netlink: 'syz.3.18519': attribute type 1 has an invalid length. [ 1453.484601][T15972] bond14: entered promiscuous mode [ 1453.488895][T15972] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1453.544681][T15976] bond14: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1453.544714][T15976] bond14: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1453.544732][T15976] bond14: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1453.961273][T15980] bond14: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1453.961306][T15980] bond14: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1454.958821][T15995] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003 [ 1455.345549][T16003] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1455.484150][T16002] netlink: 'syz.4.18530': attribute type 1 has an invalid length. [ 1455.500036][T16002] netlink: 84 bytes leftover after parsing attributes in process `syz.4.18530'. [ 1455.546374][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18531'. [ 1455.856222][T15997] tipc: Failed to remove unknown binding: 66,1,1/10136234:2635372925/2635372927 [ 1456.212024][T16013] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18534'. [ 1456.269819][T16013] vlan2: entered allmulticast mode [ 1456.269848][T16013] dummy0: entered allmulticast mode [ 1456.314647][T16016] netlink: 'syz.2.18536': attribute type 1 has an invalid length. [ 1456.577004][T16019] bond11: (slave veth18): Enslaving as an active interface with a down link [ 1456.658485][T16016] bond11: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1456.718335][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18538'. [ 1457.476283][T16043] netlink: 'syz.4.18544': attribute type 1 has an invalid length. [ 1457.575322][T16043] bond13: entered promiscuous mode [ 1457.588143][T16043] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1457.702168][T16051] syzkaller0: left promiscuous mode [ 1457.702193][T16051] syzkaller0: left allmulticast mode [ 1458.595968][T16075] syzkaller0: entered promiscuous mode [ 1458.595994][T16075] syzkaller0: entered allmulticast mode [ 1458.994933][T16086] syzkaller0: entered promiscuous mode [ 1458.994959][T16086] syzkaller0: entered allmulticast mode [ 1459.004851][T16084] netlink: 164 bytes leftover after parsing attributes in process `syz.5.18558'. [ 1459.005180][T16084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.18558'. [ 1460.871549][T16134] IPv6: NLM_F_CREATE should be specified when creating new route [ 1461.021596][T16124] veth1_vlan: left promiscuous mode [ 1461.025177][T16124] veth0_vlan: left promiscuous mode [ 1461.038370][T16124] veth0_vlan: entered promiscuous mode [ 1461.079740][T16124] veth1_vlan: entered promiscuous mode [ 1461.115011][T16124] veth1_macvtap: left promiscuous mode [ 1461.119856][T16124] veth0_macvtap: left promiscuous mode [ 1461.137858][T16124] veth0_macvtap: entered promiscuous mode [ 1461.232221][T16124] veth1_macvtap: entered promiscuous mode [ 1461.254670][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1461.256631][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1461.259008][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.518626][T16124] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1461.638047][T16124] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1461.723721][T16124] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1461.723787][T13027] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1461.723826][T13027] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 1461.770688][T13026] batman_adv: batadv0: Interface activated: vlan1 [ 1461.778742][T13026] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1461.911425][T13026] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1462.042283][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18580'. [ 1462.099207][T23612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1462.099568][T23612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1462.121599][T13026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1462.254900][T23612] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1462.255981][T23612] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1462.291702][T13026] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1462.326811][T13013] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1462.359819][T23612] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1462.570819][T16166] syzkaller0: entered promiscuous mode [ 1462.570848][T16166] syzkaller0: entered allmulticast mode [ 1463.129679][T16186] netlink: 'syz.2.18590': attribute type 1 has an invalid length. [ 1463.280700][T16186] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1463.387117][T16190] bond14: entered promiscuous mode [ 1465.688507][T16242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1466.301284][T16229] bond0: (slave syz_tun): Releasing backup interface [ 1466.305509][T16229] syz_tun: left promiscuous mode [ 1466.305745][T16229] syz_tun: left allmulticast mode [ 1466.366530][T16229] batman_adv: batadv0: Adding interface: syz_tun [ 1466.366552][T16229] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.366585][T16229] batman_adv: batadv0: Not using interface syz_tun (retrying later): interface not active [ 1466.737141][T16235] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1466.874511][T16261] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1466.878337][T16261] bond15: (slave macvlan5): Enslaving as a backup interface with an up link [ 1466.973918][T16263] ip_tables: iptables: counters copy to user failed while replacing table [ 1467.513729][T16267] netlink: 'syz.2.18613': attribute type 1 has an invalid length. [ 1467.670541][ C0] ip6_tnl_xmit_ctl: 10 callbacks suppressed [ 1467.670567][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1468.032871][T16288] syzkaller0: entered promiscuous mode [ 1468.032897][T16288] syzkaller0: entered allmulticast mode [ 1468.798992][T16310] veth0: entered promiscuous mode [ 1468.813064][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18628'. [ 1469.072009][T16315] syzkaller0: entered promiscuous mode [ 1469.072040][T16315] syzkaller0: entered allmulticast mode [ 1469.093891][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ed0e000: rx timeout, send abort [ 1469.094228][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ed0e000: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 1469.108815][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ed0fc00: rx timeout, send abort [ 1469.124969][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ed0fc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1469.453097][T16320] ip_tables: iptables: counters copy to user failed while replacing table [ 1470.099115][T16338] ip_tables: iptables: counters copy to user failed while replacing table [ 1470.215484][T16341] netlink: 'syz.2.18635': attribute type 1 has an invalid length. [ 1470.631252][T16325] syzkaller1: entered promiscuous mode [ 1470.631279][T16325] syzkaller1: entered allmulticast mode [ 1470.692233][T16352] netlink: 156 bytes leftover after parsing attributes in process `syz.6.18637'. [ 1470.781601][T16341] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1471.182463][T16344] bond13: (slave veth0_to_bond): making interface the new active one [ 1471.189911][T16344] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1471.577628][T16367] xt_nfacct: accounting object `' does not exist [ 1471.588622][T16366] tipc: Enabling of bearer rejected, failed to enable media [ 1471.706749][T16367] netlink: 'syz.5.18641': attribute type 2 has an invalid length. [ 1472.002982][T16378] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1472.055529][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18648'. [ 1472.145972][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18645'. [ 1472.146010][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18645'. [ 1472.256645][T16378] bond5: (slave bond0): Releasing backup interface [ 1472.287706][T16378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.308930][T16378] bond15: (slave bond0): Enslaving as an active interface with a down link [ 1472.435595][ T30] audit: type=1800 audit(1793887525.349:25): pid=16387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.18649" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8825 res=0 errno=-22 [ 1472.955445][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18652'. [ 1474.437730][T16416] syzkaller0: entered promiscuous mode [ 1474.437756][T16416] syzkaller0: entered allmulticast mode [ 1475.192166][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1475.280423][T16448] netlink: 'syz.4.18672': attribute type 1 has an invalid length. [ 1475.316231][T16448] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1475.342193][T16448] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1475.561432][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18674'. [ 1475.833537][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1475.834087][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1476.231118][ C0] neighbour: arp_cache: neighbor table overflow! [ 1477.270999][ C0] neighbour: arp_cache: neighbor table overflow! [ 1478.311785][ C0] neighbour: arp_cache: neighbor table overflow! [ 1478.444852][T16460] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1478.571579][T16464] ip_tables: iptables: counters copy to user failed while replacing table [ 1479.020435][T16473] TC_ACT_REPEAT abuse ? [ 1479.667217][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18688'. [ 1479.753900][T16479] syzkaller0: entered promiscuous mode [ 1479.753943][T16479] syzkaller0: entered allmulticast mode [ 1480.882804][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18693'. [ 1481.137067][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18693'. [ 1485.278730][T16486] syzkaller0: entered promiscuous mode [ 1485.278760][T16486] syzkaller0: entered allmulticast mode [ 1488.958175][T13013] page_pool_release_retry() stalled pool shutdown: id 337, 1 inflight 60 sec [ 1489.909344][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18700'. [ 1490.832608][T16557] syzkaller0: left promiscuous mode [ 1490.832635][T16557] syzkaller0: left allmulticast mode [ 1490.838953][T16557] tipc: Resetting bearer [ 1490.852550][T31110] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.852667][T31110] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.852708][T31110] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.852747][T31110] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.354274][T16567] TC_ACT_REPEAT abuse ? [ 1491.374382][T16566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18705'. [ 1491.593908][T16566] bond14: entered promiscuous mode [ 1491.595419][T16566] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1492.472986][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1492.813785][T16593] ip_tables: iptables: counters copy to user failed while replacing table [ 1492.986966][T16595] syzkaller0: entered promiscuous mode [ 1492.987173][T16595] syzkaller0: entered allmulticast mode [ 1493.113181][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1494.036550][T16624] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1494.745707][T16638] netlink: 80 bytes leftover after parsing attributes in process `syz.3.18730'. [ 1494.773742][T16636] syzkaller0: entered promiscuous mode [ 1494.777844][T16636] syzkaller0: entered allmulticast mode [ 1495.043969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1496.236461][T16651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18735'. [ 1496.254853][T16651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18735'. [ 1497.147471][T16664] syzkaller0: entered promiscuous mode [ 1497.147497][T16664] syzkaller0: entered allmulticast mode [ 1497.148037][T16664] tipc: Resetting bearer [ 1498.368570][T16693] ip_tables: iptables: counters copy to user failed while replacing table [ 1499.862479][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18752'. [ 1499.969251][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18751'. [ 1500.738427][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18755'. [ 1501.130013][T16737] netlink: 'syz.3.18760': attribute type 4 has an invalid length. [ 1501.309487][T16748] ip_tables: iptables: counters copy to user failed while replacing table [ 1502.685968][T16770] syz_tun: entered allmulticast mode [ 1502.725335][T16770] pimreg: entered allmulticast mode [ 1502.751360][T16769] syz_tun: left allmulticast mode [ 1502.826057][T16773] netlink: 'syz.6.18769': attribute type 1 has an invalid length. [ 1502.857409][T16767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18766'. [ 1503.009325][T16773] bond5: entered promiscuous mode [ 1503.015397][T16773] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1503.146731][T16776] macvtap1: entered allmulticast mode [ 1503.228776][T16782] macvtap2: entered allmulticast mode [ 1503.321637][T16773] bond5: (slave bridge5): making interface the new active one [ 1503.321666][T16773] bridge5: entered promiscuous mode [ 1503.343956][T16773] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1503.959048][T16795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1505.254478][T16819] netlink: 'syz.6.18782': attribute type 9 has an invalid length. [ 1505.393525][T16824] syzkaller0: left promiscuous mode [ 1505.393550][T16824] syzkaller0: left allmulticast mode [ 1505.394115][T16824] tipc: Resetting bearer [ 1505.505740][T16826] netlink: 'syz.2.18784': attribute type 1 has an invalid length. [ 1505.554838][T16826] bond15: entered promiscuous mode [ 1505.555300][T16826] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1505.587840][T16826] vlan1: entered allmulticast mode [ 1505.587870][T16826] bond15: entered allmulticast mode [ 1505.631571][T16826] bond15: (slave bridge9): making interface the new active one [ 1505.631601][T16826] bridge9: entered promiscuous mode [ 1505.631827][T16826] bridge9: entered allmulticast mode [ 1505.635549][T16826] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 1505.977738][T16778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1506.798391][T16850] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.18791'. [ 1506.829295][T16850] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.18791'. [ 1507.079195][T16855] tipc: Resetting bearer [ 1507.333143][T16862] xt_ipcomp: unknown flags 1D [ 1507.399799][T16864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1507.553457][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18798'. [ 1507.790091][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18799'. [ 1508.606355][T16890] syzkaller0: entered promiscuous mode [ 1508.606568][T16890] syzkaller0: entered allmulticast mode [ 1508.636981][T16892] eql: left promiscuous mode [ 1508.637009][T16892] eql: left allmulticast mode [ 1508.953146][T16895] syzkaller0: entered promiscuous mode [ 1508.953174][T16895] syzkaller0: entered allmulticast mode [ 1509.132678][T16911] netlink: 'syz.3.18809': attribute type 4 has an invalid length. [ 1510.747826][T16931] netlink: 'syz.6.18815': attribute type 1 has an invalid length. [ 1515.162507][T16931] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1515.366765][T16948] syzkaller0: entered promiscuous mode [ 1515.366791][T16948] syzkaller0: entered allmulticast mode [ 1515.367269][T16948] tipc: Resetting bearer [ 1515.415193][ T1106] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1515.605086][T16966] netlink: 'syz.5.18822': attribute type 8 has an invalid length. [ 1515.752360][T16974] netlink: 'syz.5.18825': attribute type 1 has an invalid length. [ 1515.840692][T16974] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1516.033251][T16976] bond12: (slave veth17): Enslaving as an active interface with a down link [ 1516.164005][T16974] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1516.237320][T16974] bond12: (slave batadv2): making interface the new active one [ 1516.274066][T16974] batadv2: entered promiscuous mode [ 1516.304752][T16974] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 1516.529130][T16979] bond12 (unregistering): (slave veth17): Releasing active interface [ 1516.559186][T16979] bond12 (unregistering): (slave batadv2): Releasing active interface [ 1516.559220][T16979] batadv2: left promiscuous mode [ 1516.695214][T16979] bond12 (unregistering): Released all slaves [ 1516.924796][T16990] syzkaller0: entered promiscuous mode [ 1516.924823][T16990] syzkaller0: entered allmulticast mode [ 1516.959281][T16990] tipc: Enabled bearer , priority 0 [ 1517.052893][T16989] tipc: Resetting bearer [ 1517.223296][T16989] tipc: Disabling bearer [ 1517.592500][T17010] syzkaller0: entered promiscuous mode [ 1517.592527][T17010] syzkaller0: entered allmulticast mode [ 1518.953831][T17039] syzkaller1: entered promiscuous mode [ 1518.953858][T17039] syzkaller1: entered allmulticast mode [ 1520.253549][T17056] netlink: 'syz.5.18847': attribute type 1 has an invalid length. [ 1520.507678][T17059] netlink: 'syz.6.18848': attribute type 83 has an invalid length. [ 1520.556552][T17056] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1520.593974][T17066] netlink: 'syz.5.18847': attribute type 10 has an invalid length. [ 1520.594002][T17066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18847'. [ 1520.752570][T17058] bond12: (slave veth19): Enslaving as an active interface with a down link [ 1520.753356][T17060] dummy0: left promiscuous mode [ 1520.814665][T17060] bond12: (slave dummy0): making interface the new active one [ 1520.816210][T17060] dummy0: entered promiscuous mode [ 1520.816750][T17060] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 1520.871294][T17066] bond12: (slave dummy0): Releasing active interface [ 1521.218837][T17076] tun1: tun_chr_ioctl cmd 1074025675 [ 1521.218867][T17076] tun1: persist enabled [ 1521.257732][T17081] tun1: tun_chr_ioctl cmd 1074025675 [ 1521.257762][T17081] tun1: persist enabled [ 1521.635566][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18853'. [ 1521.717227][T17094] batman_adv: batadv0: Removing interface: syz_tun [ 1521.784744][T17101] xfrm0: entered promiscuous mode [ 1521.784973][T17101] xfrm0: entered allmulticast mode [ 1521.816322][T17097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1523.047412][T17121] netlink: 'syz.4.18861': attribute type 1 has an invalid length. [ 1523.292885][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18861'. [ 1523.359725][T17121] bond17: (slave veth1): Enslaving as an active interface with a down link [ 1523.406992][T17124] bond16: (slave veth0_to_bond): Releasing backup interface [ 1523.472188][T17124] bond17: (slave veth0_to_bond): making interface the new active one [ 1523.498376][T17124] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1523.539063][T17127] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1523.904948][T17141] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.18863'. [ 1523.921380][T17141] 0ªX¹¦Dö»: renamed from 30ªî{X¹¦ (while UP) [ 1523.973150][T17141] 0ªX¹¦Dö»: entered allmulticast mode [ 1524.359887][T17149] syzkaller1: entered promiscuous mode [ 1524.359911][T17149] syzkaller1: entered allmulticast mode [ 1524.428881][ T30] audit: type=1107 audit(1793887577.349:26): pid=17152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1524.470937][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1524.474867][T17153] netlink: 'syz.6.18871': attribute type 10 has an invalid length. [ 1524.474894][T17153] netlink: 55 bytes leftover after parsing attributes in process `syz.6.18871'. [ 1525.504795][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18879'. [ 1526.252807][T13013] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1526.253272][T13013] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1526.289776][T13013] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1526.332034][T13013] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1526.356578][T13013] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1526.373218][T17188] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1526.895364][T17203] netlink: 'syz.4.18885': attribute type 2 has an invalid length. [ 1526.895394][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18885'. [ 1527.041657][T13027] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1527.042249][T13027] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1527.276878][T13027] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1527.709233][T17213] tc_dump_action: action bad kind [ 1528.046536][T17216] sctp: [Deprecated]: syz.3.18890 (pid 17216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1528.046536][T17216] Use struct sctp_sack_info instead [ 1528.366292][T17226] TC_ACT_REPEAT abuse ? [ 1528.382879][T17225] syzkaller0: left promiscuous mode [ 1528.383100][T17225] syzkaller0: left allmulticast mode [ 1528.683947][T17228] netlink: 48 bytes leftover after parsing attributes in process `syz.5.18895'. [ 1528.683978][T17228] netlink: 48 bytes leftover after parsing attributes in process `syz.5.18895'. [ 1529.518072][T15335] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1529.572020][T17255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1529.590505][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1529.906599][T17246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.906652][T17246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1529.906685][T17246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 1529.906717][T17246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.853967][T17246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.854012][T17246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1530.854044][T17246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 1530.854083][T17246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.874368][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1531.255585][T17246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.255631][T17246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1531.255661][T17246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 1531.255693][T17246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.672518][T17246] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.672561][T17246] netdevsim netdevsim3 €Â (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1531.672592][T17246] netdevsim netdevsim3 €Â (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 1531.719734][T17246] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.816406][T17295] syzkaller0: entered promiscuous mode [ 1531.816436][T17295] syzkaller0: entered allmulticast mode [ 1532.075235][T17312] syzkaller0: entered promiscuous mode [ 1532.075355][T17312] syzkaller0: entered allmulticast mode [ 1532.477557][T17318] openvswitch: netlink: Actions may not be safe on all matching packets [ 1532.827694][T17323] netlink: 'syz.6.18914': attribute type 2 has an invalid length. [ 1532.864128][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18914'. [ 1532.899618][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.899657][ T12] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1532.899685][ T12] netdevsim netdevsim3 eth2: set [0, 2] type 1 family 0 port 2816 - 0 [ 1532.899712][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.901951][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.902054][ T12] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1532.902138][ T12] netdevsim netdevsim3 eth1: set [0, 2] type 1 family 0 port 2816 - 0 [ 1532.902204][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.902370][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.902451][ T12] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1532.902518][ T12] netdevsim netdevsim3 eth0: set [0, 2] type 1 family 0 port 2816 - 0 [ 1532.902584][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.060614][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.060654][ T12] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1533.060682][ T12] netdevsim netdevsim3 eth3: set [0, 2] type 1 family 0 port 2816 - 0 [ 1533.060711][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.209929][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18918'. [ 1533.258287][T17330] vlan0: entered allmulticast mode [ 1533.258313][T17330] bridge6: entered allmulticast mode [ 1533.276645][T17330] bridge6: port 1(erspan0) entered blocking state [ 1533.276884][T17330] bridge6: port 1(erspan0) entered disabled state [ 1533.277185][T17330] erspan0: entered allmulticast mode [ 1533.279370][T17330] erspan0: entered promiscuous mode [ 1533.300347][T17330] bridge6: port 1(erspan0) entered blocking state [ 1533.300509][T17330] bridge6: port 1(erspan0) entered forwarding state [ 1533.430612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1533.619717][T17327] syz_tun: entered promiscuous mode [ 1533.619963][T17327] vlan2: entered promiscuous mode [ 1533.848585][T17333] syzkaller0: entered promiscuous mode [ 1533.848616][T17333] syzkaller0: entered allmulticast mode [ 1534.254689][T17348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18922'. [ 1534.550722][T17336] ip_tables: iptables: counters copy to user failed while replacing table [ 1534.645329][T17356] ±ÿ: entered allmulticast mode [ 1534.785164][T17353] ±ÿ: left allmulticast mode [ 1534.897396][T17357] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1534.976602][T17357] bond13: (slave macvlan2): Enslaving as an active interface with a down link [ 1535.037385][T17366] netlink: 'syz.6.18929': attribute type 12 has an invalid length. [ 1535.037411][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18929'. [ 1535.091321][T17366] bond0: option primary_reselect: invalid value (39) [ 1535.503947][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18930'. [ 1535.643967][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18930'. [ 1535.643994][T17374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18930'. [ 1535.976158][T17381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1536.013210][T17374] veth24: entered allmulticast mode [ 1536.033804][T17374] bond16: (slave veth24): Enslaving as an active interface with an up link [ 1536.259784][T17389] bond16 (unregistering): (slave veth24): Releasing backup interface [ 1536.295043][T17389] bond16 (unregistering): Released all slaves [ 1536.941283][T17408] bond18: entered allmulticast mode [ 1536.944078][T17407] syzkaller0: left promiscuous mode [ 1536.944293][T17407] syzkaller0: left allmulticast mode [ 1536.946632][T17407] tipc: Resetting bearer [ 1537.075227][T17410] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1537.099021][T17410] bond19: entered allmulticast mode [ 1537.099578][T17410] bond18: (slave bond19): Enslaving as an active interface with an up link [ 1537.163895][T17408] bond18 (unregistering): (slave bond19): Releasing backup interface [ 1537.167921][T17408] bond19: left allmulticast mode [ 1537.208702][T17408] bond18 (unregistering): Released all slaves [ 1537.650370][ T30] audit: type=1804 audit(1793887590.569:27): pid=17425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.18945" name="/newroot/392/cgroup.controllers" dev="tmpfs" ino=2004 res=1 errno=0 [ 1537.650434][ T30] audit: type=1800 audit(1793887590.569:28): pid=17425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.18945" name="cgroup.controllers" dev="tmpfs" ino=2004 res=0 errno=-22 [ 1539.129638][T17461] syzkaller0: entered promiscuous mode [ 1539.129699][T17461] syzkaller0: entered allmulticast mode [ 1539.130301][T17461] tipc: Resetting bearer [ 1539.190076][ C0] tipc: RX(ff010000000000000000000000000001): key[1] is activated [ 1540.605951][T17489] tipc: Failed to remove unknown binding: 66,0,2/2886997057:176235419/176235420 [ 1540.609399][T17489] tipc: Failed to remove unknown binding: 66,0,2/2886997057:176235419/176235420 [ 1540.892721][T17493] netlink: 'syz.4.18963': attribute type 1 has an invalid length. [ 1541.051174][T17493] dummy0: left promiscuous mode [ 1541.160693][ T3740] block nbd9: Receive control failed (result -32) [ 1541.162562][ T5680] block nbd9: Receive control failed (result -32) [ 1541.257950][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1541.445755][T17503] bond16: entered promiscuous mode [ 1541.458737][T17503] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1541.548313][T17503] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1541.548818][T17503] bond16: (slave sit5): The slave device specified does not support setting the MAC address [ 1541.575235][T17503] bond16: (slave sit5): Error -95 calling set_mac_address [ 1541.743459][T17509] syzkaller0: entered promiscuous mode [ 1541.743484][T17509] syzkaller0: entered allmulticast mode [ 1542.423915][T17525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1542.715068][T17537] syzkaller0: left promiscuous mode [ 1542.715094][T17537] syzkaller0: left allmulticast mode [ 1542.738578][T17538] netlink: 88 bytes leftover after parsing attributes in process `syz.4.18974'. [ 1543.665820][T17563] netlink: 'syz.3.18984': attribute type 1 has an invalid length. [ 1543.865706][T17563] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1544.174661][T17571] ip_tables: iptables: counters copy to user failed while replacing table [ 1544.545366][T17575] netlink: 'syz.3.18987': attribute type 12 has an invalid length. [ 1544.567311][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18987'. [ 1544.894569][T17581] tipc: Started in network mode [ 1544.894613][T17581] tipc: Node identity 9242cffc3b21, cluster identity 4711 [ 1544.894930][T17581] tipc: Enabled bearer , priority 0 [ 1545.398673][T17600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18994'. [ 1545.398881][T17600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18994'. [ 1545.535210][T17580] tipc: Disabling bearer [ 1545.783304][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18996'. [ 1545.951497][T17611] syzkaller0: entered promiscuous mode [ 1545.951527][T17611] syzkaller0: entered allmulticast mode [ 1546.558037][T17619] syzkaller0: entered promiscuous mode [ 1546.558064][T17619] syzkaller0: entered allmulticast mode [ 1546.868093][T17621] syzkaller0: entered promiscuous mode [ 1546.868309][T17621] syzkaller0: entered allmulticast mode [ 1547.056615][T17638] netlink: 'syz.5.19007': attribute type 1 has an invalid length. [ 1547.348236][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19007'. [ 1547.461298][T17638] bond14: (slave bridge5): making interface the new active one [ 1547.461993][T17638] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 1547.715245][T17657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19012'. [ 1547.715276][T17657] netlink: 'syz.3.19012': attribute type 1 has an invalid length. [ 1548.335652][T17653] pimreg: port 1(bridge_slave_0) entered disabled state [ 1548.412907][T17653] pimreg: port 2(bridge_slave_1) entered disabled state [ 1548.603138][T17653] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1548.739796][ T1106] bond17: (slave veth0_to_bond): link status definitely down, disabling slave [ 1548.784330][ T1106] bond17: now running without any active interface! [ 1548.788159][T17655] A link change request failed with some changes committed already. Interface 04±ÿ may have been left with an inconsistent configuration, please check. [ 1549.303667][T17672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19015'. [ 1549.407417][T17673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19015'. [ 1549.545240][T17675] netlink: 'syz.5.19015': attribute type 10 has an invalid length. [ 1549.545267][T17675] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19015'. [ 1552.513999][T17672] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1552.539713][T17674] dummy0: left promiscuous mode [ 1552.914045][T17685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19019'. [ 1553.349074][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19020'. [ 1553.349219][T17693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.946875][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19021'. [ 1553.946906][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19021'. [ 1554.007378][T17693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.037114][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19022'. [ 1554.383752][T17708] syzkaller0: left promiscuous mode [ 1554.383943][T17708] syzkaller0: left allmulticast mode [ 1554.385526][T17708] tipc: Resetting bearer [ 1554.645775][T17708] tipc: Enabling of bearer rejected, already enabled [ 1554.738465][T17712] nbd: couldn't find a device at index 0 [ 1555.219810][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19031'. [ 1555.604201][T17726] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1555.699939][T17733] macvlan6: entered promiscuous mode [ 1555.701714][T17733] macvlan6: entered allmulticast mode [ 1555.767413][T17736] bond18: (slave ipip2): refused to change device type [ 1555.915817][T17737] syzkaller0: entered promiscuous mode [ 1555.916087][T17737] syzkaller0: entered allmulticast mode [ 1555.918317][T17737] tipc: Resetting bearer [ 1556.787401][T17771] tipc: Enabling of bearer rejected, already enabled [ 1556.826736][T17771] tipc: Resetting bearer [ 1556.847105][T17768] syzkaller0: entered promiscuous mode [ 1556.847317][T17768] syzkaller0: entered allmulticast mode [ 1557.559466][T17792] syzkaller0: entered promiscuous mode [ 1557.559492][T17792] syzkaller0: entered allmulticast mode [ 1558.166446][T17798] syzkaller0: entered promiscuous mode [ 1558.166660][T17798] syzkaller0: entered allmulticast mode [ 1558.565989][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19046'. [ 1558.584725][T17809] batman_adv: batadv0: Interface deactivated: syz_tun [ 1558.584753][T17809] batman_adv: batadv0: Removing interface: syz_tun [ 1558.611663][T17809] veth0: left allmulticast mode [ 1558.611692][T17809] veth0: left promiscuous mode [ 1558.611954][T17809] bridge0: port 1(veth0) entered disabled state [ 1558.702514][T17809] bond13: (slave veth0_to_bond): Releasing active interface [ 1558.742312][T17816] ip6t_frag: unknown flags 4 [ 1558.766036][T17809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1558.848303][T17822] ip_tables: iptables: counters copy to user failed while replacing table [ 1558.859697][T17822] netlink: 'syz.4.19053': attribute type 1 has an invalid length. [ 1558.865346][T17820] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19051'. [ 1558.985628][T17822] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1559.143954][T17824] bond18: (slave gretap5): making interface the new active one [ 1559.188008][T17824] bond18: (slave gretap5): Enslaving as an active interface with an up link [ 1559.598153][T17840] syzkaller0: entered promiscuous mode [ 1559.598181][T17840] syzkaller0: entered allmulticast mode [ 1560.073789][T17849] tipc: Enabled bearer , priority 0 [ 1560.076812][T17849] syzkaller0: entered promiscuous mode [ 1560.076835][T17849] syzkaller0: entered allmulticast mode [ 1560.114499][T17851] ip_tables: iptables: counters copy to user failed while replacing table [ 1560.157405][T17849] tipc: Resetting bearer [ 1560.213860][T17848] tipc: Resetting bearer [ 1560.347064][T17848] tipc: Disabling bearer [ 1560.357716][T17854] netlink: 'syz.3.19061': attribute type 16 has an invalid length. [ 1560.357740][T17854] netlink: 'syz.3.19061': attribute type 17 has an invalid length. [ 1560.496260][T17851] tipc: Resetting bearer [ 1560.507511][T17851] tipc: Resetting bearer [ 1561.459785][T17851] tipc: Resetting bearer [ 1561.466030][T17851] tipc: Resetting bearer [ 1561.844884][T17854] gre0: left promiscuous mode [ 1561.849298][T17854] gre0: left allmulticast mode [ 1561.849833][T17854] 0ªX¹¦Dö»: left allmulticast mode [ 1561.869538][T17854] sit0: left promiscuous mode [ 1561.887510][T17854] dummy0: left promiscuous mode [ 1561.953424][T17854] geneve1: left promiscuous mode [ 1561.988211][T13026] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1562.028952][T13026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1562.053071][T17854] veth4: left allmulticast mode [ 1562.059998][T13026] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1562.081526][T13026] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1562.106692][T17854] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1562.251118][T13013] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1562.380642][T13013] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1562.401783][T17868] syzkaller0: entered promiscuous mode [ 1562.401813][T17868] syzkaller0: entered allmulticast mode [ 1562.513675][T13013] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1562.812165][T17894] tipc: Resetting bearer [ 1562.987033][T17903] ip_tables: iptables: counters copy to user failed while replacing table [ 1563.032293][T13013] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1563.277702][T17907] netlink: 'syz.2.19071': attribute type 1 has an invalid length. [ 1563.396000][T17911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19071'. [ 1563.468322][T17907] bond16: entered promiscuous mode [ 1563.468989][T17907] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1563.487884][T17911] bond16: entered allmulticast mode [ 1563.555971][T17918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.574099][T17918] batman_adv: batadv0: Adding interface: veth0 [ 1563.574118][T17918] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.574244][T17918] batman_adv: batadv0: Interface activated: veth0 [ 1563.575882][T17918] batman_adv: batadv0: Interface deactivated: veth0 [ 1563.575904][T17918] batman_adv: batadv0: Removing interface: veth0 [ 1563.762452][T15334] bond17: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 1563.762545][T15334] bond17: (slave veth1): making interface the new active one [ 1564.026967][T15334] veth1: entered promiscuous mode [ 1564.044564][T15334] bond17: active interface up! [ 1564.208294][T17907] bond16: (slave bridge10): making interface the new active one [ 1564.208324][T17907] bridge10: entered promiscuous mode [ 1564.218111][T17907] bridge10: entered allmulticast mode [ 1564.287002][T17907] bond16: (slave bridge10): Enslaving as an active interface with an up link [ 1566.448273][ T30] audit: type=1804 audit(1793887619.369:29): pid=17992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19086" name="/newroot/3855/cgroup.controllers" dev="tmpfs" ino=19438 res=1 errno=0 [ 1566.448338][ T30] audit: type=1800 audit(1793887619.369:30): pid=17992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19086" name="cgroup.controllers" dev="tmpfs" ino=19438 res=0 errno=-22 [ 1566.717996][T17973] syzkaller0: entered promiscuous mode [ 1566.718034][T17973] syzkaller0: entered allmulticast mode [ 1566.739464][T17977] tipc: Enabled bearer , priority 0 [ 1566.753985][T17982] erspan0: left allmulticast mode [ 1566.754019][T17982] erspan0: left promiscuous mode [ 1566.754343][T17982] bridge6: port 1(erspan0) entered disabled state [ 1566.806609][T17996] siw: device registration error -23 [ 1566.819740][T17982] bridge_slave_0: left allmulticast mode [ 1566.819770][T17982] bridge_slave_0: left promiscuous mode [ 1566.820102][T17982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.908139][T17982] bridge_slave_1: left allmulticast mode [ 1566.908169][T17982] bridge_slave_1: left promiscuous mode [ 1566.908382][T17982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.941047][T17982] bond0: (slave bond_slave_0): Releasing backup interface [ 1566.959080][T17982] bond0: (slave bond_slave_1): Releasing backup interface [ 1567.005984][T17982] team0: Port device team_slave_0 removed [ 1567.027339][T17982] team0: Port device team_slave_1 removed [ 1567.028509][T17982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.028533][T17982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.060006][T17982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1567.137791][T17972] tipc: Resetting bearer [ 1567.349959][T17972] tipc: Disabling bearer [ 1567.398763][T17999] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 1567.559511][T18005] syzkaller1: entered promiscuous mode [ 1567.559536][T18005] syzkaller1: entered allmulticast mode [ 1567.904821][ T1110] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1568.053592][T18011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1568.559791][T18038] ip_tables: iptables: counters copy to user failed while replacing table [ 1568.634782][T18043] syzkaller0: entered promiscuous mode [ 1568.634809][T18043] syzkaller0: entered allmulticast mode [ 1568.952294][T18049] Cannot find set identified by id 65534 to match [ 1569.283827][T18053] syzkaller1: entered allmulticast mode [ 1569.618174][T18060] netlink: 'syz.2.19106': attribute type 1 has an invalid length. [ 1569.618198][T18060] netlink: 244 bytes leftover after parsing attributes in process `syz.2.19106'. [ 1570.001237][T18067] syzkaller0: entered promiscuous mode [ 1570.001265][T18067] syzkaller0: entered allmulticast mode [ 1571.437618][T18084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19114'. [ 1571.437646][T18084] openvswitch: netlink: Flow key attr not present in new flow. [ 1571.689222][T18089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1571.831286][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1571.831790][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1572.252982][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1572.258694][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1572.259093][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1572.295115][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1572.295525][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1572.296028][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1572.332716][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1572.333243][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1573.860830][T18135] netlink: 'syz.4.19129': attribute type 1 has an invalid length. [ 1574.248226][T18137] veth15: entered allmulticast mode [ 1574.276072][T18137] bond20: (slave veth15): Enslaving as an active interface with a down link [ 1574.290281][T18139] bond17: (slave veth0_to_bond): Releasing active interface [ 1574.625158][T18139] bond20: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1574.779089][T18135] macvlan5: entered promiscuous mode [ 1574.779117][T18135] macvlan5: entered allmulticast mode [ 1574.804050][T18135] bond20: entered promiscuous mode [ 1574.814422][T18135] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1574.816934][T18135] bond20: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1574.818030][T18135] bond20: left promiscuous mode [ 1575.073857][T18170] syzkaller0: left promiscuous mode [ 1575.074072][T18170] syzkaller0: left allmulticast mode [ 1575.075670][T18170] tipc: Resetting bearer [ 1575.548745][T18175] syzkaller0: left promiscuous mode [ 1575.548773][T18175] syzkaller0: left allmulticast mode [ 1575.549326][T18175] tipc: Resetting bearer [ 1575.723287][T18177] __nla_validate_parse: 1 callbacks suppressed [ 1575.723314][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19136'. [ 1575.723336][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19136'. [ 1575.852398][T18185] syzkaller0: entered promiscuous mode [ 1575.852426][T18185] syzkaller0: entered allmulticast mode [ 1577.235265][T18198] syzkaller0: entered promiscuous mode [ 1577.235294][T18198] syzkaller0: entered allmulticast mode [ 1577.275572][T18209] syzkaller0: entered promiscuous mode [ 1577.275797][T18209] syzkaller0: entered allmulticast mode [ 1577.278790][T18209] tipc: Resetting bearer [ 1578.483780][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19151'. [ 1578.684369][T13026] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1578.684841][T13026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1578.751777][T13026] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1578.783109][T13026] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1578.816879][T18225] bond0: (slave bond3): Releasing backup interface [ 1578.836774][T18225] tipc: Resetting bearer [ 1578.855251][T18225] batman_adv: batadv0: Interface deactivated: vlan1 [ 1578.855278][T18225] batman_adv: batadv0: Removing interface: vlan1 [ 1578.937167][T18225] bond6: (slave geneve4): Releasing active interface [ 1579.020654][T13027] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1579.105144][T18225] bond8: (slave veth11): Releasing backup interface [ 1579.130723][T13027] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1579.133952][T18225] veth11: left promiscuous mode [ 1579.160656][T18225] bond10: (slave bond11): Releasing backup interface [ 1579.169317][T18225] bond12: (slave bond13): Releasing backup interface [ 1579.169346][T18225] bond12: (slave bond13): the permanent HWaddr of slave - ca:ea:ba:fa:84:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1579.169616][T18225] bond12: (slave gretap2): making interface the new active one [ 1579.252645][T13027] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1579.271404][T13027] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1579.371979][T18225] bond12: (slave gretap2): Releasing backup interface [ 1579.529001][T18225] bond15: (slave macvlan5): Releasing backup interface [ 1580.234429][T18239] syzkaller0: entered promiscuous mode [ 1580.234653][T18239] syzkaller0: entered allmulticast mode [ 1580.407217][T18253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1586.530301][T15336] veth1: left promiscuous mode [ 1586.755421][T18285] tipc: Enabling of bearer rejected, already enabled [ 1587.006429][T18295] syzkaller0: entered promiscuous mode [ 1587.006457][T18295] syzkaller0: entered allmulticast mode [ 1587.593889][T18305] syzkaller0: entered promiscuous mode [ 1587.594100][T18305] syzkaller0: entered allmulticast mode [ 1587.595997][T18305] tipc: Resetting bearer [ 1587.708459][T18314] syzkaller0: entered promiscuous mode [ 1587.708487][T18314] syzkaller0: entered allmulticast mode [ 1587.733087][T18314] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 1587.733138][T18314] 0: reclassify loop, rule prio 0, protocol 800 [ 1589.342684][T18341] syzkaller0: entered promiscuous mode [ 1589.342910][T18341] syzkaller0: entered allmulticast mode [ 1589.588511][T18336] syzkaller0: entered promiscuous mode [ 1589.588741][T18336] syzkaller0: entered allmulticast mode [ 1590.539902][T18363] tipc: Enabling of bearer rejected, already enabled [ 1590.582114][T18363] tipc: Resetting bearer [ 1590.880797][T18368] ip_tables: iptables: counters copy to user failed while replacing table [ 1591.278035][T18379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1592.313512][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1592.707641][T18368] veth0_macvtap: left promiscuous mode [ 1593.875616][T18369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1595.378339][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19191'. [ 1595.378372][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19191'. [ 1595.460596][T23612] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.460651][T23612] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.460690][T23612] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.492034][ T1120] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.590919][T18443] bond15: (slave 26±ÿ†ˆ¬hËdtÍ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1595.626984][T18443] bond15: (slave 26±ÿ†ˆ¬hËdtÍ): Enslaving as an active interface with an up link [ 1595.727159][T18443] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1595.728485][T12998] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1595.728569][ T3835] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1595.768132][T15943] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1595.979354][T18453] bond17: entered allmulticast mode [ 1595.998268][T18453] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1596.177539][T18456] batman_adv: batadv0: Adding interface: syzkaller0 [ 1596.177566][T18456] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.177924][T18456] batman_adv: batadv0: Interface activated: syzkaller0 [ 1596.246531][T18463] syzkaller0: entered promiscuous mode [ 1596.246782][T18463] syzkaller0: entered allmulticast mode [ 1596.429146][T18453] ip6gretap1: entered allmulticast mode [ 1596.438357][T18453] bond17: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1596.521776][T23612] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1596.673807][T23612] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1597.231176][T15943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1597.231692][T15943] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1597.311509][T15943] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1597.381332][T18456] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1597.409616][T15943] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1597.761882][T15943] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1597.844350][T15943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1597.941033][T15943] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1598.266902][T15943] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1598.413336][T18484] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1598.458088][T18493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.458214][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.458402][T18493] bridge_slave_0: entered allmulticast mode [ 1598.490127][T18493] bridge_slave_0: entered promiscuous mode [ 1598.515164][T18493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.515296][T18493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.591764][T18497] netlink: 'syz.2.19203': attribute type 39 has an invalid length. [ 1598.787276][T18484] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1598.849884][T18493] bridge_slave_0: left allmulticast mode [ 1598.849918][T18493] bridge_slave_0: left promiscuous mode [ 1598.868824][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.137188][T18484] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.616676][T18484] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.707099][T18516] tipc: Enabling of bearer rejected, already enabled [ 1600.094578][T18524] syzkaller0: entered promiscuous mode [ 1600.094806][T18524] syzkaller0: entered allmulticast mode [ 1600.183025][ T1106] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.186514][ T1106] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.315043][ T1120] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.316524][T15337] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.665474][T18534] batadv0: entered promiscuous mode [ 1600.684544][T18534] vlan2: entered promiscuous mode [ 1602.010451][T18561] syzkaller0: left promiscuous mode [ 1602.010477][T18561] syzkaller0: left allmulticast mode [ 1602.010991][T18561] tipc: Resetting bearer [ 1602.272198][T18566] syzkaller0: entered promiscuous mode [ 1602.272225][T18566] syzkaller0: entered allmulticast mode [ 1602.551486][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1602.746907][T18571] syzkaller0: entered promiscuous mode [ 1602.746937][T18571] syzkaller0: entered allmulticast mode [ 1602.747453][T18571] tipc: Resetting bearer [ 1602.747587][T18576] tipc: Enabling of bearer rejected, already enabled [ 1602.955481][T18593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.956149][T18593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.956337][T18593] bridge_slave_0: entered allmulticast mode [ 1602.984806][T18593] bridge_slave_0: entered promiscuous mode [ 1602.999597][T18593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.999738][T18593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.207578][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19228'. [ 1603.219593][T18588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1603.578976][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19230'. [ 1603.641474][T18607] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19230'. [ 1603.724084][T18606] tipc: Resetting bearer [ 1603.739802][T18604] dummy0: left promiscuous mode [ 1603.739960][T18604] dummy0: left allmulticast mode [ 1603.837136][ T30] audit: type=1804 audit(1793887656.759:31): pid=18610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19232" name="/newroot/3838/cgroup.controllers" dev="tmpfs" ino=19330 res=1 errno=0 [ 1603.837220][ T30] audit: type=1800 audit(1793887656.759:32): pid=18610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19232" name="cgroup.controllers" dev="tmpfs" ino=19330 res=0 errno=-22 [ 1604.429536][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19238'. [ 1604.548563][T18627] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1604.910249][T18641] ip_tables: iptables: counters copy to user failed while replacing table [ 1605.917526][T15337] bond9: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1605.917935][T15337] bond9: (slave veth0_to_bond): making interface the new active one [ 1606.015889][T15337] bond9: active interface up! [ 1607.154732][T18675] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.19243'. [ 1607.155077][T18675] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1607.187381][T18675] 0ªX¹¦Dö»: entered allmulticast mode [ 1607.259885][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19244'. [ 1607.274475][T18651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19240'. [ 1607.429849][T18675] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19243'. [ 1607.591733][T18651] bond1 (unregistering): Released all slaves [ 1608.339014][ T30] audit: type=1804 audit(1793887661.259:33): pid=18700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19250" name="/newroot/3895/cgroup.controllers" dev="tmpfs" ino=19646 res=1 errno=0 [ 1608.371953][ T30] audit: type=1800 audit(1793887661.259:34): pid=18700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19250" name="cgroup.controllers" dev="tmpfs" ino=19646 res=0 errno=-22 [ 1609.836142][T18734] gretap0: left promiscuous mode [ 1609.861224][T18734] erspan0: left promiscuous mode [ 1610.024337][T18743] netlink: 'syz.5.19259': attribute type 1 has an invalid length. [ 1610.177274][T18734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.593995][T18734] veth1_macvtap: left promiscuous mode [ 1610.598432][T18734] veth0_macvtap: entered promiscuous mode [ 1610.599867][T18734] macvtap0: left promiscuous mode [ 1610.623162][T18734] veth1_macvtap: entered promiscuous mode [ 1610.665643][T18734] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1610.692428][ T1120] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.806682][T18744] veth21: entered allmulticast mode [ 1610.841648][T18744] bond16: (slave veth21): Enslaving as an active interface with a down link [ 1610.842881][T31116] pimreg: port 1(bridge_slave_0) entered blocking state [ 1610.842977][T31116] pimreg: port 1(bridge_slave_0) entered forwarding state [ 1610.889105][T31116] pimreg: port 2(bridge_slave_1) entered blocking state [ 1610.889244][T31116] pimreg: port 2(bridge_slave_1) entered forwarding state [ 1610.991323][T18759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19261'. [ 1611.042158][T18749] bond9: (slave veth0_to_bond): Releasing active interface [ 1611.102258][T18749] bond16: (slave veth0_to_bond): making interface the new active one [ 1611.121890][T18749] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1611.208846][T15336] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.234429][ T1106] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.235405][ T1106] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.868753][T18781] ip_tables: iptables: counters copy to user failed while replacing table [ 1611.927132][T18783] netlink: 'syz.4.19267': attribute type 1 has an invalid length. [ 1612.055817][T18786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19267'. [ 1612.146599][T18783] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1612.187093][T18786] bond21: entered promiscuous mode [ 1612.187123][T18786] bond21: entered allmulticast mode [ 1612.285856][T18779] tipc: Failed to remove unknown binding: 66,1,1/4278255617:197106123/197106124 [ 1612.351093][T18790] bond21: (slave dummy0): Enslaving as an active interface with a down link [ 1612.440301][T18783] netlink: 'syz.4.19267': attribute type 10 has an invalid length. [ 1612.440330][T18783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19267'. [ 1612.538989][T18783] dummy0: entered promiscuous mode [ 1612.721612][T18783] bond21: (slave dummy0): Releasing active interface [ 1612.805842][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1613.575789][T18815] netlink: 'syz.2.19274': attribute type 1 has an invalid length. [ 1614.613393][T18821] veth28: entered allmulticast mode [ 1614.663154][T18821] bond18: (slave veth28): Enslaving as an active interface with a down link [ 1614.689422][T18815] bond18: (slave veth0_to_bond): making interface the new active one [ 1614.704546][T18815] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1614.737184][T18827] tipc: Resetting bearer [ 1615.175099][T18847] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1615.339889][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19279'. [ 1616.606507][T18880] nbd: nbd4 already in use [ 1616.617072][T18880] block nbd4: NBD_DISCONNECT [ 1616.617102][T18880] block nbd4: Send disconnect failed -32 [ 1616.617123][T18880] block nbd4: shutting down sockets [ 1616.973552][T18888] netlink: 'syz.2.19288': attribute type 1 has an invalid length. [ 1617.625630][ T1120] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1617.625673][ T1120] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1617.625704][ T1120] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.625733][ T1120] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 38115 - 0 [ 1617.894573][T18891] veth30: entered allmulticast mode [ 1617.925680][T18891] bond19: (slave veth30): Enslaving as an active interface with a down link [ 1617.967763][T18906] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.123274][ T1120] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.123316][ T1120] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1618.123346][ T1120] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.123376][ T1120] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 38115 - 0 [ 1618.208819][T18895] bond18: (slave veth0_to_bond): Releasing active interface [ 1618.274722][T18895] bond19: (slave veth0_to_bond): making interface the new active one [ 1618.296787][T18895] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1618.469265][T18913] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 1618.517975][ T1120] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.518027][ T1120] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1618.518058][ T1120] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.518087][ T1120] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 38115 - 0 [ 1618.607045][T18919] IPVS: Unknown mcast interface: lo [ 1618.858267][ T1120] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.858310][ T1120] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1618.858341][ T1120] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.858370][ T1120] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 38115 - 0 [ 1619.707143][T18924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1619.707185][T18924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.166846][ T1106] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.443241][T18924] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 1620.455250][T18924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1620.455359][T18924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.640930][ T1106] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.658909][ T1106] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.842200][T18924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1620.842244][T18924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.376516][T18924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.376559][T18924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.624529][ T1120] vlan4: left promiscuous mode [ 1621.624558][ T1120] bridge_slave_0: left promiscuous mode [ 1621.625023][ T1120] bridge0: port 1(vlan4) entered disabled state [ 1621.825773][ T1120] pim6reg99999999: left allmulticast mode [ 1623.213358][ T1120] bond2 (unregistering): (slave gre2): Releasing backup interface [ 1623.213472][ T1120] gre2 (unregistering): left promiscuous mode [ 1623.554641][ T1120] bond0 (unregistering): Released all slaves [ 1623.569330][ T1120] bond1 (unregistering): Released all slaves [ 1623.605851][ T1120] bond2 (unregistering): Released all slaves [ 1623.627012][ T1120] bond3 (unregistering): Released all slaves [ 1623.655893][ T1120] bond4 (unregistering): Released all slaves [ 1623.680924][ T1120] bond5 (unregistering): Released all slaves [ 1623.715032][ T1120] bond6 (unregistering): Released all slaves [ 1623.738206][ T1120] bond7 (unregistering): Released all slaves [ 1623.763513][ T1120] bond8 (unregistering): Released all slaves [ 1623.786315][ T1120] bond9 (unregistering): Released all slaves [ 1623.825661][ T1120] bond10 (unregistering): (slave bond11): Releasing backup interface [ 1623.825694][ T1120] bond11 (unregistering): left promiscuous mode [ 1623.828036][ T1120] bond10 (unregistering): Released all slaves [ 1623.876018][ T1120] bond11 (unregistering): Released all slaves [ 1623.909542][T15336] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.012308][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1624.025935][T12998] wg2 speed is unknown, defaulting to 1000 [ 1624.025979][T12998] syz2: Port: 1 Link DOWN [ 1624.026046][T18396] wg0 speed is unknown, defaulting to 1000 [ 1624.026085][T18396] syz1: Port: 1 Link DOWN [ 1624.026176][T18396] wg0 speed is unknown, defaulting to 1000 [ 1624.684231][ T1120] tipc: Left network mode [ 1625.071154][ T3393] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1625.071194][ T3393] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.071260][ T3393] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1625.071288][ T3393] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.076430][T19018] syzkaller0: entered promiscuous mode [ 1625.076458][T19018] syzkaller0: entered allmulticast mode [ 1625.079175][T19015] netlink: 228 bytes leftover after parsing attributes in process `syz.3.19310'. [ 1625.507780][T23612] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1625.507821][T23612] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.628922][ T3393] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1625.628961][ T3393] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.669525][T19028] netlink: 'syz.3.19315': attribute type 12 has an invalid length. [ 1625.695062][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19315'. [ 1625.863142][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19314'. [ 1627.112737][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1629.021350][T19099] bridge0: port 2(vlan0) entered disabled state [ 1629.439109][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1629.733308][T19111] netlink: 'syz.3.19329': attribute type 4 has an invalid length. [ 1629.733334][T19111] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19329'. [ 1630.821360][T19142] tipc: Enabling of bearer rejected, already enabled [ 1630.824377][T19142] syzkaller0: Caught tx_queue_len zero misconfig [ 1630.982286][T19143] syzkaller1: entered promiscuous mode [ 1630.982313][T19143] syzkaller1: entered allmulticast mode [ 1631.188274][T19151] ip_tables: iptables: counters copy to user failed while replacing table [ 1632.402401][T19170] netlink: 'syz.4.19343': attribute type 1 has an invalid length. [ 1632.421766][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19342'. [ 1632.683690][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19343'. [ 1632.921252][T19170] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1633.234791][T19185] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19345'. [ 1633.444331][T19178] bond22: (slave bridge8): making interface the new active one [ 1633.473997][T19178] bond22: (slave bridge8): Enslaving as an active interface with an up link [ 1633.489751][T19186] bond16: entered allmulticast mode [ 1633.685207][T19184] bond16: left allmulticast mode [ 1634.474736][ T1120] hsr_slave_0: left promiscuous mode [ 1634.567359][ T1120] hsr_slave_1: left promiscuous mode [ 1634.708315][T19210] SET target dimension over the limit! [ 1634.825523][ T1120] veth1_macvtap: left promiscuous mode [ 1634.827535][ T1120] veth1_vlan: left promiscuous mode [ 1634.827677][ T1120] veth0_vlan: left promiscuous mode [ 1634.848033][T19214] ip_tables: iptables: counters copy to user failed while replacing table [ 1634.926844][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19349'. [ 1635.068872][T19229] netlink: 'syz.3.19351': attribute type 1 has an invalid length. [ 1636.174574][ T1120] smc: removing net device macvtap0 with user defined pnetid SYZ0 [ 1636.503381][ T1120] team0 (unregistering): Port device veth1_to_hsr removed [ 1636.550118][T19237] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1637.239349][T23612] smbdirect: ib_dev[syz2] removed [ 1637.266854][T15336] smc: removing ib device syz1 [ 1637.507398][T15336] smbdirect: ib_dev[syz1] removed [ 1637.924590][ T1106] smc: removing ib device syz0 [ 1638.019027][ T1106] smbdirect: ib_dev[syz0] removed [ 1638.889698][T19264] netlink: 'syz.4.19356': attribute type 1 has an invalid length. [ 1638.988837][T19229] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 1639.122218][T19268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19356'. [ 1639.183639][T19231] veth23: entered allmulticast mode [ 1639.474726][T19265] bond23: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1639.641515][T19277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19358'. [ 1639.888236][T19267] veth17: entered promiscuous mode [ 1639.918931][T19267] bond23: (slave veth17): Enslaving as a backup interface with a down link [ 1639.938291][T19268] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1639.948689][ T3393] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1639.969174][T19290] netlink: 'syz.6.19361': attribute type 1 has an invalid length. [ 1640.029146][T19294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19360'. [ 1640.162885][T31116] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1640.504267][T19284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19359'. [ 1640.504443][T19284] netlink: 148 bytes leftover after parsing attributes in process `syz.2.19359'. [ 1640.505414][T19283] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19358'. [ 1640.505437][T19283] netlink: 3 bytes leftover after parsing attributes in process `syz.5.19358'. [ 1641.105103][T19290] bond7: entered promiscuous mode [ 1641.107392][T19290] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1641.203854][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19363'. [ 1641.362803][T19295] bond7: (slave bridge8): making interface the new active one [ 1641.362833][T19295] bridge8: entered promiscuous mode [ 1641.368021][T19295] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 1641.500580][T19296] ipvlan0: entered allmulticast mode [ 1641.500606][T19296] bond7: entered allmulticast mode [ 1641.500623][T19296] bridge8: entered allmulticast mode [ 1641.501246][T19296] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1641.501273][T19296] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1641.654163][T19299] pimreg: port 1(bridge_slave_0) entered blocking state [ 1641.654261][T19299] pimreg: port 1(bridge_slave_0) entered forwarding state [ 1641.654419][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19362'. [ 1643.123468][T19319] dummy0: left promiscuous mode [ 1643.566823][T19319] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1644.136222][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19368'. [ 1644.216179][T19350] ip_tables: iptables: counters copy to user failed while replacing table [ 1644.427848][T19355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1644.631140][T19356] netlink: 'syz.3.19371': attribute type 1 has an invalid length. [ 1645.227140][T19356] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1645.396462][T19374] smc: removing ib device rxe0 [ 1646.241141][T19374] smbdirect: ib_dev[rxe0] removed [ 1646.303494][T19383] bond20: option ad_select: invalid value (34) [ 1646.329108][T19383] bond20 (unregistering): Released all slaves [ 1646.782918][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1647.735449][T19411] bond19: (slave veth0_to_bond): Releasing active interface [ 1647.777967][T19411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1648.051114][T19414] nbd3: detected capacity change from 0 to 63 [ 1648.053328][ T5680] block nbd3: Receive control failed (result -32) [ 1648.082820][T19409] block nbd3: NBD_DISCONNECT [ 1648.082859][T19409] block nbd3: Send disconnect failed -32 [ 1648.082879][T19409] block nbd3: shutting down sockets [ 1648.149576][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.149715][ T1676] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1648.149922][ T1676] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1648.149942][ T1676] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1648.149959][ T1676] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1648.174321][ T1713] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.174364][ T1713] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1648.174393][ T1713] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1648.174411][ T1713] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1648.174428][ T1713] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1648.191861][ T1713] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.191901][ T1713] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1648.191922][ T1713] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1648.218630][ T1713] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.219787][ T1713] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.220457][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.220667][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.220853][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.220939][T19423] ldm_validate_partition_table(): Disk read failed. [ 1648.221072][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.221264][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1648.222057][T19423] Dev nbd3: unable to read RDB block 0 [ 1648.268360][T19419] tipc: Enabled bearer , priority 0 [ 1648.380672][T19423] nbd3: unable to read partition table [ 1648.416479][T19423] ldm_validate_partition_table(): Disk read failed. [ 1648.417152][T19423] Dev nbd3: unable to read RDB block 0 [ 1648.418049][T19423] nbd3: unable to read partition table [ 1648.533885][T19423] [ 1648.536288][T19423] ====================================================== [ 1648.543337][T19423] WARNING: possible circular locking dependency detected [ 1648.550400][T19423] syzkaller #0 Not tainted [ 1648.554834][T19423] ------------------------------------------------------ [ 1648.561872][T19423] udevd/19423 is trying to acquire lock: [ 1648.567529][T19423] ffffffff90094cc0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1648.577447][T19423] [ 1648.577447][T19423] but task is already holding lock: [ 1648.584847][T19423] ffffffff9182da00 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1648.595548][T19423] [ 1648.595548][T19423] which lock already depends on the new lock. [ 1648.595548][T19423] [ 1648.606017][T19423] [ 1648.606017][T19423] the existing dependency chain (in reverse order) is: [ 1648.615067][T19423] [ 1648.615067][T19423] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 1648.622946][T19423] __mutex_lock+0x197/0x15a0 [ 1648.628196][T19423] kobject_uevent_net_broadcast+0x27e/0x560 [ 1648.634654][T19423] kobject_uevent_env+0x566/0x9e0 [ 1648.640331][T19423] device_add+0x544/0xb80 [ 1648.645324][T19423] device_create+0x269/0x300 [ 1648.650526][T19423] msr_device_create+0x33/0x50 [ 1648.655912][T19423] cpuhp_invoke_callback+0x434/0x810 [ 1648.661819][T19423] cpuhp_thread_fun+0x362/0x780 [ 1648.667248][T19423] smpboot_thread_fn+0x5f8/0xb30 [ 1648.672743][T19423] kthread+0x38b/0x480 [ 1648.677381][T19423] ret_from_fork+0x514/0xb70 [ 1648.682607][T19423] ret_from_fork_asm+0x1a/0x30 [ 1648.688200][T19423] [ 1648.688200][T19423] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1648.695784][T19423] cpuhp_thread_fun+0x127/0x780 [ 1648.701274][T19423] smpboot_thread_fn+0x5f8/0xb30 [ 1648.706756][T19423] kthread+0x38b/0x480 [ 1648.711362][T19423] ret_from_fork+0x514/0xb70 [ 1648.716496][T19423] ret_from_fork_asm+0x1a/0x30 [ 1648.721799][T19423] [ 1648.721799][T19423] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1648.729549][T19423] cpus_read_lock+0x3d/0x160 [ 1648.734684][T19423] static_key_slow_inc+0x12/0x30 [ 1648.740224][T19423] ipv6_flowlabel_opt+0x1cac/0x2b10 [ 1648.746100][T19423] do_ipv6_setsockopt+0x9cb/0x2960 [ 1648.751821][T19423] ipv6_setsockopt+0x59/0x170 [ 1648.757054][T19423] do_sock_setsockopt+0x17c/0x1b0 [ 1648.762755][T19423] __x64_sys_setsockopt+0x13d/0x1b0 [ 1648.768527][T19423] do_syscall_64+0x166/0x520 [ 1648.773683][T19423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.780224][T19423] [ 1648.780224][T19423] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1648.787990][T19423] lock_sock_nested+0x41/0x100 [ 1648.793393][T19423] inet_shutdown+0x6a/0x390 [ 1648.798523][T19423] nbd_mark_nsock_dead+0x2cb/0x550 [ 1648.804245][T19423] sock_shutdown+0x15e/0x260 [ 1648.809388][T19423] nbd_clear_sock+0x24/0x170 [ 1648.814542][T19423] nbd_config_put+0x477/0x7e0 [ 1648.819758][T19423] nbd_genl_connect+0x19b8/0x1cd0 [ 1648.825399][T19423] genl_family_rcv_msg_doit+0x233/0x340 [ 1648.831587][T19423] genl_rcv_msg+0x614/0x7a0 [ 1648.836629][T19423] netlink_rcv_skb+0x226/0x4a0 [ 1648.842123][T19423] genl_rcv+0x28/0x40 [ 1648.846666][T19423] netlink_unicast+0x8ef/0xa80 [ 1648.852000][T19423] netlink_sendmsg+0x7f0/0xb20 [ 1648.857319][T19423] sock_sendmsg_nosec+0x14e/0x190 [ 1648.862904][T19423] ____sys_sendmsg+0x54e/0x850 [ 1648.868215][T19423] ___sys_sendmsg+0x2a5/0x360 [ 1648.873433][T19423] __x64_sys_sendmsg+0x1b1/0x290 [ 1648.878913][T19423] do_syscall_64+0x166/0x520 [ 1648.884074][T19423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.890506][T19423] [ 1648.890506][T19423] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1648.898182][T19423] __mutex_lock+0x197/0x15a0 [ 1648.903322][T19423] nbd_queue_rq+0x373/0xff0 [ 1648.908452][T19423] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1648.914703][T19423] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1648.921634][T19423] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1648.928155][T19423] blk_mq_run_work_fn+0x167/0x2f0 [ 1648.933741][T19423] process_scheduled_works+0xc3d/0x1630 [ 1648.939839][T19423] worker_thread+0xa47/0xfb0 [ 1648.944977][T19423] kthread+0x38b/0x480 [ 1648.949587][T19423] ret_from_fork+0x514/0xb70 [ 1648.954718][T19423] ret_from_fork_asm+0x1a/0x30 [ 1648.960021][T19423] [ 1648.960021][T19423] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1648.967258][T19423] __mutex_lock+0x197/0x15a0 [ 1648.972397][T19423] nbd_queue_rq+0xc1/0xff0 [ 1648.977358][T19423] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1648.983453][T19423] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1648.990328][T19423] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1648.996848][T19423] blk_mq_run_work_fn+0x167/0x2f0 [ 1649.002439][T19423] process_scheduled_works+0xc3d/0x1630 [ 1649.008547][T19423] worker_thread+0xa47/0xfb0 [ 1649.013701][T19423] kthread+0x38b/0x480 [ 1649.018328][T19423] ret_from_fork+0x514/0xb70 [ 1649.023461][T19423] ret_from_fork_asm+0x1a/0x30 [ 1649.028771][T19423] [ 1649.028771][T19423] -> #3 (set->srcu){.+.+}-{0:0}: [ 1649.035921][T19423] __synchronize_srcu+0xca/0x2f0 [ 1649.041405][T19423] elevator_switch+0x1e8/0x7b0 [ 1649.046833][T19423] elevator_change+0x2fa/0x480 [ 1649.052169][T19423] elevator_set_default+0x375/0x440 [ 1649.057926][T19423] blk_register_queue+0x404/0x4f0 [ 1649.063582][T19423] __add_disk+0x6b8/0xdb0 [ 1649.068514][T19423] add_disk_fwnode+0x100/0x3a0 [ 1649.073826][T19423] nbd_dev_add+0x733/0xb60 [ 1649.078802][T19423] nbd_init+0x168/0x1f0 [ 1649.083618][T19423] do_one_initcall+0x250/0x870 [ 1649.088920][T19423] do_initcall_level+0x10a/0x1a0 [ 1649.094489][T19423] do_initcalls+0x59/0xa0 [ 1649.099364][T19423] kernel_init_freeable+0x29d/0x3e0 [ 1649.105108][T19423] kernel_init+0x22/0x1d0 [ 1649.110006][T19423] ret_from_fork+0x514/0xb70 [ 1649.115175][T19423] ret_from_fork_asm+0x1a/0x30 [ 1649.120480][T19423] [ 1649.120480][T19423] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1649.128435][T19423] __mutex_lock+0x197/0x15a0 [ 1649.133594][T19423] elevator_change+0x1af/0x480 [ 1649.138922][T19423] elevator_set_none+0xb5/0x140 [ 1649.144325][T19423] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 1649.150698][T19423] nbd_start_device+0x189/0xb30 [ 1649.156094][T19423] nbd_genl_connect+0x167d/0x1cd0 [ 1649.161682][T19423] genl_family_rcv_msg_doit+0x233/0x340 [ 1649.167791][T19423] genl_rcv_msg+0x614/0x7a0 [ 1649.172835][T19423] netlink_rcv_skb+0x226/0x4a0 [ 1649.178167][T19423] genl_rcv+0x28/0x40 [ 1649.182712][T19423] netlink_unicast+0x8ef/0xa80 [ 1649.188032][T19423] netlink_sendmsg+0x7f0/0xb20 [ 1649.193396][T19423] sock_sendmsg_nosec+0x14e/0x190 [ 1649.199008][T19423] ____sys_sendmsg+0x54e/0x850 [ 1649.204325][T19423] ___sys_sendmsg+0x2a5/0x360 [ 1649.209558][T19423] __x64_sys_sendmsg+0x1b1/0x290 [ 1649.215059][T19423] do_syscall_64+0x166/0x520 [ 1649.220221][T19423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.226747][T19423] [ 1649.226747][T19423] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1649.235463][T19423] blk_alloc_queue+0x544/0x690 [ 1649.240806][T19423] __blk_mq_alloc_disk+0x194/0x390 [ 1649.246463][T19423] nbd_dev_add+0x494/0xb60 [ 1649.251525][T19423] nbd_init+0x168/0x1f0 [ 1649.256245][T19423] do_one_initcall+0x250/0x870 [ 1649.261555][T19423] do_initcall_level+0x10a/0x1a0 [ 1649.267035][T19423] do_initcalls+0x59/0xa0 [ 1649.271908][T19423] kernel_init_freeable+0x29d/0x3e0 [ 1649.277648][T19423] kernel_init+0x22/0x1d0 [ 1649.282522][T19423] ret_from_fork+0x514/0xb70 [ 1649.287651][T19423] ret_from_fork_asm+0x1a/0x30 [ 1649.292958][T19423] [ 1649.292958][T19423] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1649.300191][T19423] __lock_acquire+0x164c/0x2de0 [ 1649.305637][T19423] lock_acquire+0x115/0x350 [ 1649.310682][T19423] fs_reclaim_acquire+0x71/0x100 [ 1649.316164][T19423] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1649.322512][T19423] __alloc_skb+0x27a/0x7a0 [ 1649.327576][T19423] alloc_uevent_skb+0x7d/0x230 [ 1649.332880][T19423] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1649.339316][T19423] kobject_uevent_env+0x566/0x9e0 [ 1649.344890][T19423] nbd_config_put+0x2c8/0x7e0 [ 1649.350114][T19423] nbd_release+0xfe/0x140 [ 1649.354989][T19423] bdev_release+0x571/0x690 [ 1649.360129][T19423] blkdev_release+0x15/0x20 [ 1649.365178][T19423] __fput+0x408/0xa40 [ 1649.369733][T19423] fput_close_sync+0x11f/0x240 [ 1649.375037][T19423] __se_sys_close+0xa2/0x160 [ 1649.380221][T19423] do_syscall_64+0x166/0x520 [ 1649.385360][T19423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.391792][T19423] [ 1649.391792][T19423] other info that might help us debug this: [ 1649.391792][T19423] [ 1649.402038][T19423] Chain exists of: [ 1649.402038][T19423] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 1649.402038][T19423] [ 1649.414746][T19423] Possible unsafe locking scenario: [ 1649.414746][T19423] [ 1649.422207][T19423] CPU0 CPU1 [ 1649.427590][T19423] ---- ---- [ 1649.432971][T19423] lock(uevent_sock_mutex); [ 1649.437609][T19423] lock(cpuhp_state-up); [ 1649.444477][T19423] lock(uevent_sock_mutex); [ 1649.451608][T19423] lock(fs_reclaim); [ 1649.455607][T19423] [ 1649.455607][T19423] *** DEADLOCK *** [ 1649.455607][T19423] [ 1649.463765][T19423] locks held by udevd/19423: 3, last CPU#0: [ 1649.469698][T19423] #0: ffff888023f75350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 1649.479307][T19423] #1: ffff888026df2218 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 1649.490155][T19423] #2: ffffffff9182da00 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1649.501177][T19423] [ 1649.501177][T19423] stack backtrace: [ 1649.507105][T19423] CPU: 0 UID: 0 PID: 19423 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1649.516065][T19423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1649.526157][T19423] Call Trace: [ 1649.529485][T19423] [ 1649.532462][T19423] dump_stack_lvl+0xe8/0x150 [ 1649.537111][T19423] print_circular_bug+0x2e2/0x300 [ 1649.542167][T19423] check_noncircular+0x12f/0x150 [ 1649.547142][T19423] __lock_acquire+0x164c/0x2de0 [ 1649.552105][T19423] ? blkdev_release+0x15/0x20 [ 1649.556802][T19423] ? __se_sys_close+0xa2/0x160 [ 1649.561591][T19423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.567690][T19423] lock_acquire+0x115/0x350 [ 1649.572226][T19423] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1649.578249][T19423] ? __alloc_skb+0x27a/0x7a0 [ 1649.582914][T19423] fs_reclaim_acquire+0x71/0x100 [ 1649.587892][T19423] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1649.593906][T19423] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1649.599738][T19423] ? __alloc_skb+0x18d/0x7a0 [ 1649.604376][T19423] ? __alloc_skb+0x27a/0x7a0 [ 1649.609015][T19423] ? __alloc_skb+0x18d/0x7a0 [ 1649.613633][T19423] __alloc_skb+0x27a/0x7a0 [ 1649.618184][T19423] alloc_uevent_skb+0x7d/0x230 [ 1649.623421][T19423] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1649.629349][T19423] kobject_uevent_env+0x566/0x9e0 [ 1649.634425][T19423] nbd_config_put+0x2c8/0x7e0 [ 1649.639128][T19423] ? __pfx_nbd_config_put+0x10/0x10 [ 1649.644384][T19423] ? do_raw_spin_unlock+0xf5/0x200 [ 1649.649545][T19423] nbd_release+0xfe/0x140 [ 1649.653895][T19423] ? __pfx_nbd_release+0x10/0x10 [ 1649.658851][T19423] bdev_release+0x571/0x690 [ 1649.663391][T19423] ? __pfx_blkdev_release+0x10/0x10 [ 1649.668615][T19423] blkdev_release+0x15/0x20 [ 1649.673143][T19423] __fput+0x408/0xa40 [ 1649.677152][T19423] fput_close_sync+0x11f/0x240 [ 1649.681940][T19423] ? __pfx_fput_close_sync+0x10/0x10 [ 1649.687244][T19423] ? do_raw_spin_unlock+0xf5/0x200 [ 1649.692406][T19423] __se_sys_close+0xa2/0x160 [ 1649.697019][T19423] do_syscall_64+0x166/0x520 [ 1649.701635][T19423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.707742][T19423] ? clear_bhb_loop+0x70/0xc0 [ 1649.712567][T19423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.718499][T19423] RIP: 0033:0x7f0429aa7407 [ 1649.722954][T19423] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1649.742592][T19423] RSP: 002b:00007fff32793ab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1649.751071][T19423] RAX: ffffffffffffffda RBX: 00007f042a178880 RCX: 00007f0429aa7407 [ 1649.759071][T19423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1649.767066][T19423] RBP: 00007f042a1786e8 R08: 0000000000000000 R09: 0000000000000000 [ 1649.775087][T19423] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1649.783167][T19423] R13: 000055841abad190 R14: 0000000000000008 R15: 000055841abc83b0 [ 1649.791181][T19423] [ 1650.318720][ T1120] IPVS: stop unused estimator thread 0... [ 1651.269863][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19384'.