last executing test programs: 4.265245284s ago: executing program 3 (id=17910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780d2bbc6d9475b6787d27afb58638f452fad5917e6"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @fwd={0x9}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001980)=""/150, 0x40, 0x96, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', 0x0, r6, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e697cc7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) socket$kcm(0x2, 0xa, 0x2) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 4.194767267s ago: executing program 4 (id=17912): mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040), 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61f0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002602000000dbdf2516004000"], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x52fd794718c63698) mmap$xdp(&(0x7f0000ad9000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r1, 0x100000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f0000000380)="ac1a5ba4c0ee8a30bf6ff2d548e4dc1e0dce3627060afb80d6631b55724b53f943e84a3f6bbf09cb7b6bd03286be20f8b887f673346c04a318380775645773d89ff91e05fb5372f0acf6efa604a4092074a6565c1b679f594d1d693469f5c1c0a8511d277c9c653de267a2de27ce6b5681c0b13f", 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @loopback, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) r6 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) 3.511912675s ago: executing program 2 (id=17914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x88c1}, 0x4004) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2c8100, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x808, 0xf9, 0x14, 0x8}, {0x4000, 0x1, 0x46, 0xdf0}]}) write(r4, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0xffffffffffffff54, 0x81000) ioctl$sock_SIOCSIFBR(r5, 0x8941, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$alg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x1f, 0x80000, 0x0) 3.002146226s ago: executing program 4 (id=17915): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x5, 0x480, 0x8, {0x77359400}, {}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "da96af2fcead2a68"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040051) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01010100ffffffff000000000086dd0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x48, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}]}, 0x48}, 0x1, 0x0, 0x0, 0x882}, 0x40004) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.909074328s ago: executing program 3 (id=17917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) 2.896041218s ago: executing program 2 (id=17918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r2, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r3) 2.425254168s ago: executing program 2 (id=17922): r0 = socket$inet(0x2, 0x3, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000020000000020a01080000000000000000000000090c000440000000000000000214000000020a010400000000000000000200000a14000000110001000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) socket(0x10, 0x3, 0x0) socket(0x1, 0x4, 0x9) unshare(0x24020400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x3, 0x6, "e53d2d79723e2e614a791ba8e24e1e340dfa35b12c52ed4e1d3a7be902511feb177b3d2b4b5fd2d7f807eee09e02b0720f9c5c2a4eb765c4ec38ea9353f8ef37cf1fda11b5e36f1348c053b5d7f8879bcd302757e2740e74b724a53c87a743960f0d0f503ca445247d318285b25e3088b7321f3f850a6d203eeb0602a8f7083ca95ddea898aa09e692a56366e476fd3fd2a10a87b2f1dd16cc58d8d202b80d3ee800253b801d40dec7b04ac3e71489f9"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$nfc_llcp(r7, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r9, &(0x7f00000005c0)="48fcc048c8", 0x5, 0x0, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x9000}, 0x8) 2.366618057s ago: executing program 3 (id=17923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.334829696s ago: executing program 4 (id=17924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x420000, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000640)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001e00)={{r1, &(0x7f0000000680)='\x00', 0x40, &(0x7f00000006c0)={@align=0x1, {0x100, 0x1, 0x8, 0x2}}, 0xd, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}, 0x7, &(0x7f0000001d00)=[{0x3, 0x3, &(0x7f0000000800)='%)-(!$\x00', &(0x7f0000000840)="b85240d908bc0591dafb1fd20f9f111a591266ea12306a1808da4f88d818b278c3bab852b2e98d43b66e29e36fb3c264", 0x30, 0x30}, {0x3, 0xd3e9, &(0x7f0000000880)='$\x00', &(0x7f00000008c0)="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", 0x1000, 0x2a}, {0x2, 0x3, &(0x7f00000018c0)='/dev/ppp\x00', &(0x7f0000001900)="d2fab43306c6d91ad9e7a5a37637d2f29eedbeb5a930b5c5eb4cb30580f6c4ec60de1265d41b2d4977fc2c940e64eedb3857a109d3be9ec03a21880ae63c115719afd81edce4867d4a7e43812796e1b05ae0ed4cec4e49608650f3ef311935", 0x5f, 0xa}, {0x2, 0x0, &(0x7f0000001980)='nl80211\x00', &(0x7f00000019c0)="284b771c5a62486cc9f3e3db8697a416d432f016aec6f92c5960b6ad2c", 0x1d, 0x18}, {0x2, 0x2e4d, &(0x7f0000001a00)='syzkaller0\x00', &(0x7f0000001a40)="614abe70104720497fcbd2bebfe010f3318ed5e9245a7f2eb12dc7fa9ca4f33854494312249005fff6887c28147024f9832dddc8f34b734ea6905ed0dbc3bbd3725b2d55a0854f158ac00202818d8caa5c73ef5c716f78dc5c4f370fb44d5641f6ce2789b9fe61458f67021a6bb005f4f79f777ff30158120336fe7ff3597b85235ff450f68cbfe4510397c92927", 0x8e, 0x1}, {0x2, 0x4, &(0x7f0000001b00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001b40)="6b8d7aac4a4ca906342a09df918635970da30f3335adf688b7d8463770391ad5b4d92a38d856c5e8e6aabf35bf665a35573bd293f8dd4ae5071cc87f1479326acf5b0cd613f54dbc80b1490dae7e7729130c6bbe77c0d4295d43f62323c7142ad30a7c15372a60f031a9c9e8a0fa74603bd888", 0x73, 0x22}, {0x2, 0x61, &(0x7f0000001c00)='\xfb#}\']{\\\x00', &(0x7f0000001c40)="2f64133db8caf5009235e9fe974ce180c69693fc1c9e53e2e64a2330e2eada8aaf7b087c665c1f7676f72e952efad372a908572136aa621038f6ba39aaffa37ee714aa73782b607f24f3b54ce6ab264b727276beace8d79891e670f191fb471780090e7618b71a7627c92988445f60c5d313581c475a20737b9daf6fe36243bed2de5e2e", 0x84, 0x2}]}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001e80)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040050) recvfrom$inet(r4, &(0x7f0000001ec0), 0x0, 0x40000101, &(0x7f0000001f00)={0x2, 0x4e21, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r8}}, 0x40) sendmsg$nl_generic(r5, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f80)={0x26c, 0x1f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x30, 0x130, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r8}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x4c}]}, @generic="cafa9bd16b32f5b4d6b9a169e6563097bfb639c71554180362b3", @generic="da24d1f81a040088ca774aca9fa3d38246676458ffab9a4e7199de46e3c9c105cc10582f86c80d00ff7abcccee9891c664584052516ee250ebf2f40a8eb6d8be36eba9302ab9f8766f6aa1b065850114c90d77785f0472e664010267e6d196", @typed={0x103, 0x84, 0x0, 0x0, @binary="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"}, @typed={0xb, 0xe3, 0x0, 0x0, @str='%)-(!$\x00'}, @nested={0x9b, 0x10c, 0x0, 0x1, [@generic="ca8d7eb4806b91600d8a6893170c7d4d89dc3d7e354defaba9313604e4607059a56180f7d0acde648dd05b02bb1b4f491c9c810a144223ff6af7138f1243c6f78e110e766c0b3bbf538a53693ad251425c5b200ee7ebed9a2969fa8069b8cb8f193b8f97d2857198b6b2a2b4e8297461d83408d4ec4f19f01b1d101705b582f0c342b9f91df7dab59ff0e883ec8ebd206109f30da06549"]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 2.217187928s ago: executing program 3 (id=17926): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x5820a61ca228551, 0x4, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x81}}]}, 0x2c}}, 0x8d0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r10, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 2.116719193s ago: executing program 2 (id=17927): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) r1 = socket(0x840000000002, 0x1, 0x100) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x14c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xfff3}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0x35}, {0xffffffffffffff0f, 0x2, [@TCA_CHOKE_PARMS={0x0, 0x1, {0x43, 0x401, 0x4, 0x1f, 0x0, 0xb, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x401, 0xffff, 0x2, 0xc, 0x1e, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) write$rfkill(r1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xffffff00], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x5, @multicast}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x3, 0x7, 0x0, 0x8}, 0xffffffffffffff53) listen(r0, 0x10) 1.944968126s ago: executing program 0 (id=17928): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x8001}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)='%+9llu \x00'}, 0x7f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, r5}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x5, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 1.673472433s ago: executing program 4 (id=17929): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 1.514163035s ago: executing program 3 (id=17930): r0 = socket$inet(0x2, 0x2, 0x1007ffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000030000000100000f000000040b00000006000000003000007715"], 0x0, 0x30, 0x0, 0x1, 0x1002}, 0x28) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x108) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) 1.465633151s ago: executing program 1 (id=17931): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 1.437602771s ago: executing program 1 (id=17932): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x8) write$cgroup_devices(r3, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) pipe(&(0x7f0000000140)) 1.435318759s ago: executing program 2 (id=17933): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400e890) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getgid() getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000000c0)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x10040, &(0x7f0000000200)={@_ha_fsid={[0x80, 0x7f]}, {0xe2, 0x40, 0x4, 0x3}}, 0x80, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x80}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="e874b743dea4df5abaa5148c5a901b2cc38169181b811b9f89f6d56139", 0x1d) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0xa, 0x0, 0x1, 0xc8, 0x0, 0x1000}, [@RTA_UID={0x8}]}, 0x24}}, 0x24008800) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001900)={{{@in6=@private1, @in6=@dev}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000001a00)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4004c}}], 0x1, 0x805) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @rand_addr=0x64010101}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x40080) socket$rds(0x15, 0x5, 0x0) 1.384540757s ago: executing program 0 (id=17934): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000003a00010020000000000000000b00000014000100fc020000000000000000000000000000bf9501b7f2ff72d78f8644cfd6d6d3fbdb2c902948f3c79e7d8e3d39b12d2eb89069466948fbd070b82a4030a4e5c8c5c927ddab6c60c35c4b0e84bb70415d1aac"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x41, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000001080), 0x0, 0x2, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r3], 0x48}}, 0x2404c054) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) r4 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r5, 0x0, 0x0, 0x2004000) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) write$cgroup_devices(r4, 0x0, 0xa) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) connect$inet6(r7, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040), 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 1.236966923s ago: executing program 1 (id=17935): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e23, 0x0, 'fo\x00', 0x20, 0x6d64, 0x6b}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f0000000100)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000000240)={0x1c, 0x4, 0x1ff, 0x2e964515, 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="140000003e00230e010001000400000004004e272f8a092823a83ea707a981800870ec4808383ee1c05b00"], 0x14}], 0x1}, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080048080028006800008002907800000000e0000300070bb2ac1414aa06000000000000007800060001"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@private2, @local, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1, 0x3ff, 0x7, 0x100, 0x2, 0x2850107, r4}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x30, 0x80001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.094354298s ago: executing program 0 (id=17936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.02216714s ago: executing program 1 (id=17937): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 928.256379ms ago: executing program 0 (id=17938): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0xc}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r7, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x22040005}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x28, 0x14, 0x20, 0x70bd2b, 0x25dfdbfd, {0x2, 0x3f, 0x82, 0xff, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xfff}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x55) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 926.356844ms ago: executing program 3 (id=17939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004"], 0xfdef) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf25070000000c0017000201aaaaaaaaaaaa0a0004007770616e3300000008000100000000000c001700010055555555555508000300", @ANYRES32=r8, @ANYBLOB="0c0017000203aaaaaaaaaaaa080001a3370000000800050000"], 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4004) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010901080000000021000000120080090800034000000008080005400000001a100002000c0002800500010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="000700000000040014001a80100004800c0005"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 691.552119ms ago: executing program 4 (id=17940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 390.745449ms ago: executing program 4 (id=17941): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x338) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x5, 0x3, 0x8, 0x6}) r6 = socket(0xa, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4b71}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x4004005) 236.202243ms ago: executing program 0 (id=17942): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 223.06473ms ago: executing program 1 (id=17943): sendmsg$key(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x2, 0x4, 0x3a, 0x8, 0x23, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x20, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_ident={0x2, 0xa, 0x2, 0x0, 0x2e9}, @sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x8f, 0x45, 0x2, 0x40000000}, @sadb_key={0x1b, 0x8, 0x670, 0x0, "b90495c694ee3e0607e01911fa1d737482aa0a3e440fe7b64449a23a1e73a9b317089aaa36ebf8a737b40422566cb6636256c9d5cce86c7b391c64a8ae14b7e01786c374e8ec1c731aec50e7eda570283792c08cca9ad679c3fe68502ccfb1b933e4fa832f881bca065df1179cdbb1a7b0c41acc4f65b0228fa58ae881189ced1060f800f93d269f516065ce296a11178baa2d81dbd84b3f53aef6a865913722e7c303ad08818327a1bb9e7c9560cf8105e56aea21b330907af634b3c7506bd71a5d40458acc27b1c6e6a898219d"}]}, 0x118}}, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x3, 'vlan0\x00', {0x6}, 0xff}) 49.88587ms ago: executing program 1 (id=17944): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r11, &(0x7f0000000780), 0x0) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r6, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 48.186178ms ago: executing program 2 (id=17945): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400df030e7c00"/20], 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b0000000000ca4c763f017dd47cbc5fbbda527427d908b47e884e7538fa493130f1b0a7c4c52fbcd7e92e422948c89ee1bc911c4d8547853fdb8d715c8f959f2b8aa42fb3e7c77822db65edf2a54226f8eb3d7b5c1f819f04c7496aae05c47bbae4e07698fc05a98050594d6d297029a32f5c882fd5ff1e34f93f3f7fdc084214dcd21a647b5f358b70c45f2046c3298d25ea49c053f832fa15eda65f68491323"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r3, &(0x7f0000000300), 0x0, 0x4044880, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}}) socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x340000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=17946): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffdfd) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a0001002bbd700000010000ac1e010100000000005100000000000000010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b00000000000008000000000000001c250800000000000500000000000000fcffffffffffffff040000000000000025ad00000000000000000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}, 0x1, 0x0, 0x0, 0x8024}, 0x844) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r12, &(0x7f0000003380)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000004c0), 0xd, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x82}], 0x1, 0x4000004) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, 0x0, 0x0) kernel console output (not intermixed with test programs): 724892][T12152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1129.753329][T12161] netlink: 'syz.3.16701': attribute type 4 has an invalid length. [ 1129.778090][T12157] team0: No ports can be present during mode change [ 1129.806895][T12156] netlink: 'syz.3.16701': attribute type 4 has an invalid length. [ 1129.815515][ T5260] lo speed is unknown, defaulting to 1000 [ 1129.827276][ T5260] syz2: Port: 1 Link DOWN [ 1129.838122][ T5260] lo speed is unknown, defaulting to 1000 [ 1129.845342][ T5260] syz2: Port: 1 Link ACTIVE [ 1130.086447][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16708'. [ 1130.096044][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16708'. [ 1130.139335][T12178] xt_ipcomp: unknown flags 1D [ 1130.149084][T12179] netlink: 'syz.2.16708': attribute type 4 has an invalid length. [ 1130.182392][T12181] netlink: 550 bytes leftover after parsing attributes in process `syz.0.16711'. [ 1130.199209][T12173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.214886][T12179] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16708'. [ 1130.238141][T12173] bond12: (slave bond0): making interface the new active one [ 1130.246516][T12173] bond12: (slave bond0): Enslaving as an active interface with an up link [ 1130.273396][T12179] .`: renamed from bond0 (while UP) [ 1130.304692][T12175] syzkaller0: entered promiscuous mode [ 1130.316822][T12175] syzkaller0: entered allmulticast mode [ 1130.326694][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16712'. [ 1130.338089][T12188] syzkaller0: entered promiscuous mode [ 1130.349329][T12188] syzkaller0: entered allmulticast mode [ 1130.527147][T12197] netlink: 'syz.2.16714': attribute type 1 has an invalid length. [ 1130.624567][T12197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.707711][T12201] bond0: (slave veth11): Enslaving as an active interface with a down link [ 1130.775098][T12204] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1130.785997][T12204] bond0: (slave batadv2): making interface the new active one [ 1130.796678][T12204] batadv2: entered promiscuous mode [ 1130.804830][T12204] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 1130.815688][T12210] syzkaller0: entered promiscuous mode [ 1130.822154][T12210] syzkaller0: entered allmulticast mode [ 1130.915393][T12197] bond0 (unregistering): (slave veth11): Releasing active interface [ 1130.968754][T12197] bond0 (unregistering): (slave batadv2): Releasing active interface [ 1130.999553][T12197] bond0 (unregistering): Released all slaves [ 1131.109415][T12215] syzkaller0: entered promiscuous mode [ 1131.131192][T12215] syzkaller0: entered allmulticast mode [ 1131.377575][T12231] syzkaller0: entered promiscuous mode [ 1131.398587][T12231] syzkaller0: entered allmulticast mode [ 1131.464579][T12235] netlink: 'syz.0.16727': attribute type 1 has an invalid length. [ 1131.599661][T12235] bond11: entered promiscuous mode [ 1131.605567][T12235] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1131.625938][T12240] vlan4: entered allmulticast mode [ 1131.631539][T12240] bond11: entered allmulticast mode [ 1131.659668][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16729'. [ 1131.747042][T12244] bond11: (slave bridge17): making interface the new active one [ 1131.782946][T12244] bridge17: entered promiscuous mode [ 1131.808189][T12244] bridge17: entered allmulticast mode [ 1131.826246][T12244] bond11: (slave bridge17): Enslaving as an active interface with an up link [ 1131.912337][T12252] syzkaller0: entered promiscuous mode [ 1131.939608][T12252] syzkaller0: entered allmulticast mode [ 1132.115093][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16734'. [ 1132.363506][T12265] syzkaller0: entered promiscuous mode [ 1132.376243][T12265] syzkaller0: entered allmulticast mode [ 1132.674146][T12282] netlink: 'syz.0.16742': attribute type 1 has an invalid length. [ 1132.705651][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16743'. [ 1132.756118][T12282] bond12: entered promiscuous mode [ 1132.761932][T12282] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1132.866320][T12289] bond12: (slave bridge18): making interface the new active one [ 1132.900470][T12289] bridge18: entered promiscuous mode [ 1132.915933][T12289] bond12: (slave bridge18): Enslaving as an active interface with an up link [ 1132.978187][T12282] bond12: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1132.991349][T12282] bond12: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1133.066771][T12299] syzkaller0: entered promiscuous mode [ 1133.101256][T12299] syzkaller0: entered allmulticast mode [ 1133.237800][T12313] netlink: 'syz.0.16749': attribute type 1 has an invalid length. [ 1133.472253][T12313] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1133.602187][T12316] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1133.627910][T12316] bond13: (slave gre4): The slave device specified does not support setting the MAC address [ 1133.655123][T12316] bond13: (slave gre4): Error -95 calling set_mac_address [ 1133.681480][T12330] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1133.756707][T12313] macvlan2: entered promiscuous mode [ 1133.778048][T12313] macvlan2: entered allmulticast mode [ 1133.827913][T12313] bond13: entered promiscuous mode [ 1133.861278][T12313] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1133.877878][T12313] bond13: left promiscuous mode [ 1134.045157][T12334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1134.322449][ T30] audit: type=1107 audit(1781475272.336:10): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1134.335724][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16758'. [ 1134.361756][T12345] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1134.377464][T12348] netlink: 'syz.0.16759': attribute type 1 has an invalid length. [ 1134.521781][T12348] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1134.595320][T12354] vlan5: entered allmulticast mode [ 1134.615110][T12354] bond14: entered allmulticast mode [ 1134.859810][T12371] openvswitch: netlink: Flow actions attr not present in new flow. [ 1135.434815][T12386] tipc: Enabling of bearer rejected, already enabled [ 1136.106112][T12413] netlink: 'syz.3.16778': attribute type 13 has an invalid length. [ 1136.352917][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16778'. [ 1137.356196][T12442] netlink: 'syz.0.16787': attribute type 1 has an invalid length. [ 1137.448959][T12442] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1137.728756][T12446] bond15: (slave veth15): Enslaving as an active interface with a down link [ 1137.816855][T12448] bond15: (slave dummy0): making interface the new active one [ 1137.868269][T12448] dummy0: entered promiscuous mode [ 1137.887544][T12448] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 1138.586833][T12467] syzkaller0: entered promiscuous mode [ 1138.609518][T12467] syzkaller0: entered allmulticast mode [ 1139.135301][T12477] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.16798'. [ 1139.178900][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16798'. [ 1139.420128][T12483] syzkaller0: entered promiscuous mode [ 1139.439660][T12483] syzkaller0: entered allmulticast mode [ 1140.218095][T12494] syzkaller0: entered promiscuous mode [ 1140.242314][T12494] syzkaller0: entered allmulticast mode [ 1140.271456][T12494] tipc: Enabled bearer , priority 0 [ 1140.314582][T12493] tipc: Resetting bearer [ 1140.432883][T12493] tipc: Disabling bearer [ 1140.732808][T12500] syzkaller0: entered promiscuous mode [ 1140.763058][T12500] syzkaller0: entered allmulticast mode [ 1140.803995][T12500] tipc: Enabled bearer , priority 0 [ 1140.839047][T12498] tipc: Resetting bearer [ 1140.927510][T12498] tipc: Disabling bearer [ 1141.189957][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16810'. [ 1141.633567][T12520] lo speed is unknown, defaulting to 1000 [ 1141.654195][T12520] xfrm0 speed is unknown, defaulting to 1000 [ 1141.912396][T12525] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1142.225947][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16817'. [ 1142.240885][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16817'. [ 1142.983368][T12544] syzkaller0: entered promiscuous mode [ 1143.015706][T12544] syzkaller0: entered allmulticast mode [ 1143.600936][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16827'. [ 1143.613250][T12553] syzkaller0: entered promiscuous mode [ 1143.618991][T12553] syzkaller0: entered allmulticast mode [ 1147.269831][T12569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16829'. [ 1147.280419][T12569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16829'. [ 1147.326941][T12575] syzkaller0: entered promiscuous mode [ 1147.341900][T12575] syzkaller0: entered allmulticast mode [ 1147.366795][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16834'. [ 1147.513933][T12613] tipc: Bearer : already 2 bearers with priority 10 [ 1147.542872][T12613] tipc: Bearer : trying with adjusted priority [ 1147.569753][T12613] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1147.589330][T12621] netlink: 'syz.4.16838': attribute type 1 has an invalid length. [ 1147.667891][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16836'. [ 1147.720335][T12629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16838'. [ 1147.770062][T12621] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1147.816171][T12626] vlan2: entered promiscuous mode [ 1147.822759][T12626] bond11: entered promiscuous mode [ 1147.828411][T12626] vlan2: entered allmulticast mode [ 1147.834940][T12626] bond11: entered allmulticast mode [ 1147.879494][T12629] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1147.895895][T12629] bond11: (slave batadv1): making interface the new active one [ 1147.913795][T12629] batadv1: entered promiscuous mode [ 1147.932609][T12629] batadv1: entered allmulticast mode [ 1147.944389][T12629] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 1148.081606][T12631] syzkaller0: entered promiscuous mode [ 1148.087435][T12631] syzkaller0: entered allmulticast mode [ 1148.205413][T12633] syzkaller0: entered promiscuous mode [ 1148.213285][T12633] syzkaller0: entered allmulticast mode [ 1148.219469][T12649] netlink: 'syz.4.16842': attribute type 4 has an invalid length. [ 1155.160001][T12651] ip6gretap0: left promiscuous mode [ 1155.175905][T12651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.213234][T12651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.235481][T12651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1155.247148][T12651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1155.261321][T12651] tipc: Resetting bearer [ 1155.267189][T12651] tipc: Resetting bearer [ 1155.274207][T12651] veth1_vlan: left promiscuous mode [ 1155.281323][T12651] veth0_vlan: left promiscuous mode [ 1155.287765][T12651] veth0_vlan: entered promiscuous mode [ 1155.297594][T12651] veth1_vlan: entered promiscuous mode [ 1155.315611][T12651] batman_adv: batadv0: Interface activated: vlan2 [ 1155.330602][T12651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.340444][T12651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.349673][T12651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.358382][T12651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1155.367447][T12651] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1155.386782][T12681] tipc: Enabling of bearer rejected, already enabled [ 1155.467390][ T1758] dummy0: left promiscuous mode [ 1155.486932][T12687] tipc: Resetting bearer [ 1155.836503][ T2552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.950305][ T2552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.982286][ T2552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.017015][ T2552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.138969][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16860'. [ 1156.214839][T12720] bridge9: port 1(dummy0) entered blocking state [ 1156.240915][T12720] bridge9: port 1(dummy0) entered disabled state [ 1156.260027][T12720] dummy0: entered allmulticast mode [ 1156.260258][T12723] netlink: 'syz.4.16860': attribute type 10 has an invalid length. [ 1156.315761][T12720] dummy0: entered promiscuous mode [ 1156.317655][T12723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16860'. [ 1156.413273][T12723] bridge9: port 1(dummy0) entered blocking state [ 1156.420397][T12723] bridge9: port 1(dummy0) entered forwarding state [ 1156.473607][T12723] dummy0: left allmulticast mode [ 1156.501393][T12723] bridge9: port 1(dummy0) entered disabled state [ 1156.590298][T12729] netlink: 'syz.1.16862': attribute type 1 has an invalid length. [ 1156.794175][T12729] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1156.868300][T12737] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1156.922300][T12737] bond21: (slave batadv2): making interface the new active one [ 1156.934633][T12737] bond21: (slave batadv2): Enslaving as an active interface with an up link [ 1157.475417][T12756] netlink: 84 bytes leftover after parsing attributes in process `syz.2.16870'. [ 1157.908991][T12782] netlink: 'syz.1.16877': attribute type 12 has an invalid length. [ 1158.308135][T12789] syzkaller0: entered promiscuous mode [ 1158.321596][T12789] syzkaller0: entered allmulticast mode [ 1158.341863][T12797] wg1: Caught tx_queue_len zero misconfig [ 1158.551910][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16880'. [ 1158.886498][T12812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1162.069503][T12803] bridge19: port 1(veth17) entered blocking state [ 1162.076548][T12803] bridge19: port 1(veth17) entered disabled state [ 1162.083693][T12803] veth17: entered allmulticast mode [ 1162.091408][T12803] veth17: entered promiscuous mode [ 1162.104494][T12804] bridge19: port 2(veth0_to_bond) entered blocking state [ 1162.112353][T12804] bridge19: port 2(veth0_to_bond) entered disabled state [ 1162.119689][T12804] veth0_to_bond: entered allmulticast mode [ 1162.129616][T12804] veth0_to_bond: entered promiscuous mode [ 1162.165655][T12805] bridge19: port 3(veth19) entered blocking state [ 1162.174715][T12805] bridge19: port 3(veth19) entered disabled state [ 1162.182486][T12805] veth19: entered allmulticast mode [ 1162.189393][T12805] veth19: entered promiscuous mode [ 1162.287495][T12809] lo speed is unknown, defaulting to 1000 [ 1162.307427][T12809] xfrm0 speed is unknown, defaulting to 1000 [ 1162.449250][T12833] pimreg: entered allmulticast mode [ 1163.205911][T12845] tipc: Enabled bearer , priority 0 [ 1163.214520][T12845] syzkaller0: entered promiscuous mode [ 1163.236867][T12845] syzkaller0: entered allmulticast mode [ 1163.247727][T12845] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1163.296890][T12845] tipc: Resetting bearer [ 1163.307410][T12844] tipc: Resetting bearer [ 1163.359939][T12844] tipc: Disabling bearer [ 1163.728292][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16895'. [ 1163.976432][T12862] netlink: 200 bytes leftover after parsing attributes in process `syz.2.16898'. [ 1164.024946][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16898'. [ 1164.294822][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16902'. [ 1164.394732][T12876] netlink: 'syz.2.16904': attribute type 3 has an invalid length. [ 1164.415955][T12876] netlink: 666 bytes leftover after parsing attributes in process `syz.2.16904'. [ 1164.537603][T12880] tipc: Enabling of bearer rejected, already enabled [ 1164.558199][T12880] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1165.015936][T12892] syzkaller1: entered promiscuous mode [ 1165.037418][T12892] syzkaller1: entered allmulticast mode [ 1165.103485][T12903] syzkaller0: entered promiscuous mode [ 1165.115548][T12903] syzkaller0: entered allmulticast mode [ 1165.567884][T12909] gre0: left promiscuous mode [ 1165.582767][T12909] gre0: left allmulticast mode [ 1165.598183][T12911] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1165.714021][T12909] dummy0: left promiscuous mode [ 1165.937748][T12909] batadv0: left promiscuous mode [ 1166.105196][T12909] bridge_slave_1: left allmulticast mode [ 1166.284177][T12909] vlan0: left promiscuous mode [ 1166.322226][T12909] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 1166.332739][T12909] bond1: left promiscuous mode [ 1166.339119][T12909] ip6erspan0: left allmulticast mode [ 1166.346218][T12909] ip6gre2: left allmulticast mode [ 1166.366164][T12909] ip6erspan1: left allmulticast mode [ 1166.388354][T12909] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1166.396826][T12909] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1166.543805][T12909] ip6tnl4: left allmulticast mode [ 1166.576714][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16920'. [ 1166.652981][T12909] bond5: left promiscuous mode [ 1166.714307][T12909] ipvlan2: left allmulticast mode [ 1166.719553][T12909] bond6: left allmulticast mode [ 1166.735677][T12909] bond7: left promiscuous mode [ 1166.759437][T12909] geneve4: left promiscuous mode [ 1166.835451][T12909] vlan2: left promiscuous mode [ 1166.843354][T12909] bond11: left promiscuous mode [ 1166.850325][T12909] batadv1: left promiscuous mode [ 1166.856735][T12909] vlan2: left allmulticast mode [ 1166.861940][T12909] bond11: left allmulticast mode [ 1166.867337][T12909] batadv1: left allmulticast mode [ 1166.911793][ T2552] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.942078][ T2552] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1166.968258][ T2552] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.990654][ T2552] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.010796][ T2552] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1167.031784][ T2552] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.084283][T12936] vlan0: entered promiscuous mode [ 1167.103802][T12936] bond0: entered promiscuous mode [ 1167.165760][T12940] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1167.224033][T12954] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.16925'. [ 1167.233855][ T2552] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.245747][ T2552] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1167.267499][ T2552] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.288137][ T2552] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.306519][ T2552] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1167.326641][ T2552] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.366130][T12945] syzkaller0: entered promiscuous mode [ 1167.372104][T12945] syzkaller0: entered allmulticast mode [ 1167.387001][T12943] netlink: 'syz.4.16922': attribute type 1 has an invalid length. [ 1167.407826][T12939] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16921'. [ 1167.658962][T12955] syzkaller0: entered promiscuous mode [ 1167.672715][T12955] syzkaller0: entered allmulticast mode [ 1167.744703][T12974] syzkaller0: entered promiscuous mode [ 1167.759990][T12974] syzkaller0: entered allmulticast mode [ 1167.846405][T12980] netlink: 'syz.3.16931': attribute type 1 has an invalid length. [ 1168.024992][T12987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16931'. [ 1170.985482][T12974] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1170.995099][T12979] netlink: 200 bytes leftover after parsing attributes in process `syz.4.16932'. [ 1171.005436][T12980] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 1171.147655][T12990] syzkaller0: left promiscuous mode [ 1171.167942][T12990] syzkaller0: left allmulticast mode [ 1171.300114][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16934'. [ 1171.413450][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16937'. [ 1171.428276][T13007] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1171.453437][T13007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1171.515286][T13005] bond20: entered promiscuous mode [ 1171.521784][T13005] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1171.583610][T13005] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1171.606062][T13005] bond20: (slave sit2): The slave device specified does not support setting the MAC address [ 1171.627901][T13005] bond20: (slave sit2): Error -95 calling set_mac_address [ 1172.035532][T13028] netlink: 'syz.4.16944': attribute type 1 has an invalid length. [ 1174.049561][T13058] netlink: 'syz.1.16950': attribute type 13 has an invalid length. [ 1175.900454][T13028] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1176.156509][T13064] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1176.237337][T13064] syzkaller0: entered promiscuous mode [ 1176.261274][T13064] syzkaller0: entered allmulticast mode [ 1176.364505][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16954'. [ 1176.430547][T13082] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1176.441411][T13090] syzkaller0: entered promiscuous mode [ 1176.453817][T13090] syzkaller0: entered allmulticast mode [ 1176.468269][T13088] syzkaller0: entered promiscuous mode [ 1176.477397][T13088] syzkaller0: entered allmulticast mode [ 1176.689995][T13110] syzkaller0: left promiscuous mode [ 1176.710901][T13110] syzkaller0: left allmulticast mode [ 1177.473717][T13118] tipc: Resetting bearer [ 1177.543611][T13118] tipc: Resetting bearer [ 1177.616700][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16967'. [ 1178.035403][T13118] tipc: Resetting bearer [ 1178.808525][T13118] bond10: left promiscuous mode [ 1178.813749][T13118] bond10: left allmulticast mode [ 1178.893100][T13125] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 1178.899896][T13140] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1178.933700][T13140] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1179.037176][T13158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16969'. [ 1179.080795][T13158] netlink: 'syz.3.16969': attribute type 7 has an invalid length. [ 1179.106218][T13160] netlink: 'syz.2.16968': attribute type 1 has an invalid length. [ 1179.130743][T13158] netlink: 'syz.3.16969': attribute type 8 has an invalid length. [ 1179.157997][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16969'. [ 1179.187140][T13160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.285262][T13163] bond0: (slave veth15): Enslaving as a backup interface with a down link [ 1179.359109][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16981'. [ 1179.368659][T13164] ip6tnl0: Caught tx_queue_len zero misconfig [ 1179.376472][T13163] netlink: 'syz.2.16968': attribute type 10 has an invalid length. [ 1179.391449][T13163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16968'. [ 1179.454588][ T59] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1179.469863][T13160] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1179.483558][T13163] dummy0: entered promiscuous mode [ 1179.500031][T13163] bond0: (slave dummy0): Removing an active aggregator [ 1179.508899][T13163] bond0: (slave dummy0): Releasing backup interface [ 1179.967634][T13191] tipc: Enabling of bearer rejected, already enabled [ 1180.036195][T13190] gretap0: left promiscuous mode [ 1180.044060][T13190] erspan0: left promiscuous mode [ 1180.078109][T13190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.097235][T13190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.139061][T13190] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1180.165927][T13200] syzkaller0: entered promiscuous mode [ 1180.172425][T13200] syzkaller0: entered allmulticast mode [ 1180.229525][T13196] tc action pedit unable to extract header offset for header type (0x5) [ 1180.584235][T13219] 8021q: VLANs not supported on ip6gre0 [ 1180.650501][T13216] syzkaller0: entered promiscuous mode [ 1180.657623][T13216] syzkaller0: entered allmulticast mode [ 1180.897621][T13231] netlink: 204 bytes leftover after parsing attributes in process `syz.1.16993'. [ 1180.924216][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16993'. [ 1181.065887][T13240] syzkaller0: entered promiscuous mode [ 1181.071753][T13240] syzkaller0: entered allmulticast mode [ 1181.354279][T13245] lo speed is unknown, defaulting to 1000 [ 1181.396486][T13245] xfrm0 speed is unknown, defaulting to 1000 [ 1181.623705][ T30] audit: type=1800 audit(1781475319.636:11): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16998" name="memory.events" dev="tmpfs" ino=17041 res=0 errno=0 [ 1182.217079][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17005'. [ 1182.256157][T13267] syzkaller0: entered promiscuous mode [ 1182.275162][T13267] syzkaller0: entered allmulticast mode [ 1182.325283][T13267] tipc: Enabled bearer , priority 0 [ 1182.362721][T13266] tipc: Resetting bearer [ 1182.442025][T13266] tipc: Disabling bearer [ 1182.493697][T13279] tipc: Enabling of bearer rejected, already enabled [ 1183.027758][T13291] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1183.057263][T13291] syzkaller0: entered promiscuous mode [ 1183.081587][T13291] syzkaller0: entered allmulticast mode [ 1183.451282][T13307] lo speed is unknown, defaulting to 1000 [ 1183.476631][T13310] syzkaller0: entered promiscuous mode [ 1183.494643][T13310] syzkaller0: entered allmulticast mode [ 1183.505548][T13307] xfrm0 speed is unknown, defaulting to 1000 [ 1183.942987][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17021'. [ 1183.963301][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17021'. [ 1184.179759][T13316] syzkaller0: entered promiscuous mode [ 1184.195298][T13316] syzkaller0: entered allmulticast mode [ 1184.304656][T13335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1187.874693][T13362] syzkaller0: entered promiscuous mode [ 1187.892916][T13362] syzkaller0: entered allmulticast mode [ 1187.912764][T13362] TC_ACT_REPEAT abuse ? [ 1187.921363][T13365] syzkaller0: entered promiscuous mode [ 1188.929501][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17042'. [ 1189.683122][T13424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.710817][T13424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.722582][T13424] tipc: Resetting bearer [ 1189.743649][T13424] dummy0: left promiscuous mode [ 1189.764187][T13424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.861926][T13424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1189.893433][T13424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1189.918910][T13424] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1190.135679][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17051'. [ 1191.407976][T13475] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1191.433310][T13475] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1191.566950][T13483] netlink: 'syz.2.17063': attribute type 1 has an invalid length. [ 1191.612648][T13483] netlink: 88 bytes leftover after parsing attributes in process `syz.2.17063'. [ 1191.642587][T13483] netlink: 'syz.2.17063': attribute type 1 has an invalid length. [ 1191.676529][T13483] netlink: 638 bytes leftover after parsing attributes in process `syz.2.17063'. [ 1191.691632][T13483] netlink: 1 bytes leftover after parsing attributes in process `syz.2.17063'. [ 1191.865174][T13494] team0: Port device xfrm0 removed [ 1191.887203][T13494] bond10: (slave macvlan0): Releasing active interface [ 1191.932045][T13494] bond11: (slave batadv1): Releasing active interface [ 1192.043271][T13501] syzkaller0: entered promiscuous mode [ 1192.101627][T13501] 0: reclassify loop, rule prio 0, protocol 700 [ 1192.262102][T13507] syzkaller0: entered promiscuous mode [ 1192.283561][T13507] syzkaller0: entered allmulticast mode [ 1192.614717][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17077'. [ 1192.887156][T13534] bond0: Caught tx_queue_len zero misconfig [ 1193.121515][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17082'. [ 1193.162771][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17082'. [ 1193.216265][T13537] netlink: 'syz.4.17082': attribute type 4 has an invalid length. [ 1193.224501][T13537] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17082'. [ 1193.284132][T13541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.296444][T13541] bond12: (slave bond0): making interface the new active one [ 1193.305571][T13541] bond12: (slave bond0): Enslaving as an active interface with an up link [ 1193.341994][T13537] .`: renamed from bond0 (while UP) [ 1193.554589][T13557] netlink: 'syz.4.17089': attribute type 1 has an invalid length. [ 1193.570757][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17089'. [ 1193.590076][T13561] netlink: 'syz.0.17087': attribute type 10 has an invalid length. [ 1193.599867][T13557] netlink: 'syz.4.17089': attribute type 1 has an invalid length. [ 1193.626247][T13561] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1193.660597][T13557] syzkaller1: entered promiscuous mode [ 1193.667431][T13557] syzkaller1: entered allmulticast mode [ 1193.973967][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17091'. [ 1194.678695][T13601] syzkaller0: entered promiscuous mode [ 1194.719734][T13601] syzkaller0: entered allmulticast mode [ 1194.803103][T13601] tc action pedit offset 136 out of bounds [ 1195.469393][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17099'. [ 1195.510938][T13609] netlink: 196 bytes leftover after parsing attributes in process `syz.3.17099'. [ 1195.558653][T13620] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1195.590910][T13620] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1195.965512][T13641] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1196.124196][T13648] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17111'. [ 1196.215325][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17112'. [ 1196.240043][T13642] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1196.248405][T13653] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1196.257764][T13653] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1196.273108][T13648] syzkaller0: left promiscuous mode [ 1196.279335][T13648] syzkaller0: left allmulticast mode [ 1196.342674][T13656] TC_ACT_REPEAT abuse ? [ 1196.602411][T13664] tipc: Enabling of bearer rejected, already enabled [ 1196.674401][T13661] syzkaller0: entered promiscuous mode [ 1196.680153][T13661] syzkaller0: entered allmulticast mode [ 1196.849857][T13668] bond13 (unregistering): Released all slaves [ 1196.983931][T13674] syzkaller0: entered promiscuous mode [ 1197.011021][T13674] syzkaller0: entered allmulticast mode [ 1197.447792][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17124'. [ 1197.626669][T13700] netlink: 'syz.3.17126': attribute type 4 has an invalid length. [ 1197.658509][T13729] lo speed is unknown, defaulting to 1000 [ 1197.679519][T13729] syz2: Port: 1 Link DOWN [ 1197.687537][T13700] netlink: 'syz.3.17126': attribute type 4 has an invalid length. [ 1197.711817][T13702] bond0 (unregistering): Released all slaves [ 1197.746648][T13729] lo speed is unknown, defaulting to 1000 [ 1197.755719][T13729] syz2: Port: 1 Link ACTIVE [ 1197.761865][T13700] netlink: 'syz.3.17126': attribute type 4 has an invalid length. [ 1197.792615][T13729] lo speed is unknown, defaulting to 1000 [ 1197.806681][T13729] syz2: Port: 1 Link DOWN [ 1197.946780][T13710] netlink: 'syz.3.17128': attribute type 1 has an invalid length. [ 1198.405372][T13726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17131'. [ 1199.087971][T13752] netlink: 'syz.2.17136': attribute type 11 has an invalid length. [ 1199.120470][T13752] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.17136'. [ 1199.424116][T13761] syzkaller0: entered promiscuous mode [ 1199.442996][T13761] syzkaller0: entered allmulticast mode [ 1200.170994][T13770] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17142'. [ 1200.757622][T13781] netlink: 'syz.0.17147': attribute type 2 has an invalid length. [ 1200.769838][T13781] netlink: 'syz.0.17147': attribute type 9 has an invalid length. [ 1200.778419][T13781] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17147'. [ 1200.793539][T13783] Cannot find del_set index 4 as target [ 1200.796318][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17147'. [ 1200.836154][T13783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17148'. [ 1201.049731][T13793] netlink: 'syz.1.17150': attribute type 12 has an invalid length. [ 1201.074790][T13793] lo: Caught tx_queue_len zero misconfig [ 1201.311164][T13798] syzkaller0: entered promiscuous mode [ 1201.330519][T13798] syzkaller0: entered allmulticast mode [ 1201.657545][T13804] netlink: 732 bytes leftover after parsing attributes in process `syz.3.17155'. [ 1201.672906][T13804] netlink: 732 bytes leftover after parsing attributes in process `syz.3.17155'. [ 1201.777008][T13809] netlink: 'syz.3.17155': attribute type 10 has an invalid length. [ 1201.821806][T13809] dummy0: entered allmulticast mode [ 1201.840500][T13809] team0: Device dummy0 is of different type [ 1202.146039][T13813] tipc: Enabled bearer , priority 0 [ 1202.229513][T13812] tipc: Resetting bearer [ 1202.244753][T13816] syzkaller0: entered promiscuous mode [ 1202.259634][T13816] syzkaller0: entered allmulticast mode [ 1202.282265][T13808] tipc: Resetting bearer [ 1202.319520][T13808] tipc: Disabling bearer [ 1202.371630][T13800] syzkaller1: entered promiscuous mode [ 1202.389489][T13800] syzkaller1: entered allmulticast mode [ 1202.630356][T13833] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17160'. [ 1202.731519][T13840] syzkaller0: entered promiscuous mode [ 1202.750056][T13840] syzkaller0: entered allmulticast mode [ 1202.846639][T13842] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17164'. [ 1202.901176][T13844] vlan6: entered promiscuous mode [ 1202.910518][T13844] batadv0: entered promiscuous mode [ 1202.990571][T13846] syzkaller0: entered promiscuous mode [ 1203.008530][T13846] syzkaller0: entered allmulticast mode [ 1203.170383][T13851] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 1203.292620][T13856] syzkaller0: entered promiscuous mode [ 1203.315075][T13856] syzkaller0: entered allmulticast mode [ 1203.452111][T13862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17172'. [ 1203.512217][T13865] tipc: Enabling of bearer rejected, already enabled [ 1203.605513][T13871] netlink: 'syz.2.17176': attribute type 12 has an invalid length. [ 1204.289095][T13898] __nla_validate_parse: 7 callbacks suppressed [ 1204.289119][T13898] netlink: 200 bytes leftover after parsing attributes in process `syz.0.17184'. [ 1204.854848][T13912] bond20: entered allmulticast mode [ 1204.924494][T13916] syzkaller0: entered promiscuous mode [ 1205.090170][T13922] syzkaller0: entered promiscuous mode [ 1205.103467][T13922] syzkaller0: entered allmulticast mode [ 1205.167185][T13921] ÿÿ: left allmulticast mode [ 1205.184880][T13921] team0: left allmulticast mode [ 1205.189882][T13921] xfrm0: left allmulticast mode [ 1205.199727][T13921] tipc: Resetting bearer [ 1205.208151][T13921] tipc: Resetting bearer [ 1205.269337][T13921] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1205.312764][T13729] lo speed is unknown, defaulting to 1000 [ 1205.322258][T13729] syz2: Port: 1 Link ACTIVE [ 1205.467958][T13930] syzkaller0: entered promiscuous mode [ 1205.484211][T13930] syzkaller0: entered allmulticast mode [ 1205.809973][T13948] syzkaller0: entered promiscuous mode [ 1205.816902][T13948] syzkaller0: entered allmulticast mode [ 1205.870149][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17197'. [ 1206.065824][T13956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17198'. [ 1206.489003][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17202'. [ 1206.540534][T13963] netlink: 196 bytes leftover after parsing attributes in process `syz.1.17202'. [ 1206.655688][T13971] netlink: 'syz.0.17204': attribute type 13 has an invalid length. [ 1206.749190][T13558] udevd[13558]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1206.858225][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17204'. [ 1206.922184][T13974] netlink: 'syz.0.17204': attribute type 2 has an invalid length. [ 1206.942221][T13971] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17204'. [ 1207.003586][T13971] bond15: (slave dummy0): Releasing active interface [ 1207.381652][T13989] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17207'. [ 1207.511542][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17208'. [ 1207.739305][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17209'. [ 1207.888822][T13997] lo speed is unknown, defaulting to 1000 [ 1207.903772][T13997] xfrm0 speed is unknown, defaulting to 1000 [ 1208.661275][T14021] syzkaller0: entered promiscuous mode [ 1208.676897][T14021] syzkaller0: entered allmulticast mode [ 1208.905858][T14027] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1209.787990][T14046] syzkaller0: entered promiscuous mode [ 1209.805355][T14046] syzkaller0: entered allmulticast mode [ 1209.837475][T14046] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.17223'. [ 1210.527814][T14065] lo speed is unknown, defaulting to 1000 [ 1210.593351][T14065] xfrm0 speed is unknown, defaulting to 1000 [ 1210.817442][T14079] syzkaller1: entered promiscuous mode [ 1210.863938][T14079] syzkaller1: entered allmulticast mode [ 1211.396733][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17234'. [ 1212.011460][T14105] netlink: 'syz.4.17237': attribute type 1 has an invalid length. [ 1212.045529][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17237'. [ 1212.545466][T14107] bond16 (unregistering): Released all slaves [ 1212.642892][T14118] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 1212.988032][T14124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17242'. [ 1213.725799][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17246'. [ 1214.058133][T14158] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1214.203086][T14161] netlink: 'syz.2.17251': attribute type 1 has an invalid length. [ 1214.344387][T14161] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1214.488365][T14169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17255'. [ 1214.503386][T14169] team0: No ports can be present during mode change [ 1214.669654][T14178] netlink: 'syz.4.17258': attribute type 1 has an invalid length. [ 1214.701054][T14178] bond0: entered promiscuous mode [ 1214.706787][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.742324][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17257'. [ 1214.785310][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17256'. [ 1214.808184][T14178] macvtap0: entered allmulticast mode [ 1214.859178][T14178] macvtap1: entered allmulticast mode [ 1214.896888][T14178] bond0: (slave bridge10): making interface the new active one [ 1214.904722][T14178] bridge10: entered promiscuous mode [ 1214.913680][T14178] bond0: (slave bridge10): Enslaving as an active interface with an up link [ 1215.044003][T14184] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1215.051664][T14184] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1215.246298][T14060] Set syz1 is full, maxelem 65536 reached [ 1215.360222][T14189] xt_cgroup: invalid path, errno=-2 [ 1215.527314][T14192] tipc: Failed to remove unknown binding: 66,0,0/8432298:34764056/34764058 [ 1215.536469][T14192] tipc: Failed to remove unknown binding: 66,0,0/8432298:34764056/34764057 [ 1215.669176][T14194] syzkaller0: entered promiscuous mode [ 1215.674918][T14194] syzkaller0: entered allmulticast mode [ 1215.750796][T14194] tipc: Enabled bearer , priority 0 [ 1215.785357][T14193] tipc: Resetting bearer [ 1215.908665][T14193] tipc: Disabling bearer [ 1216.091861][T14198] lo speed is unknown, defaulting to 1000 [ 1216.109463][T14198] xfrm0 speed is unknown, defaulting to 1000 [ 1216.927075][T14229] netlink: 204 bytes leftover after parsing attributes in process `syz.3.17274'. [ 1216.980161][T14229] netlink: 'syz.3.17274': attribute type 1 has an invalid length. [ 1216.989079][T14229] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17274'. [ 1217.051229][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17273'. [ 1217.777065][T14246] syzkaller1: entered promiscuous mode [ 1217.810424][T14246] syzkaller1: entered allmulticast mode [ 1218.706435][T14226] SET target dimension over the limit! [ 1219.193180][T14151] Set syz1 is full, maxelem 65536 reached [ 1219.291712][T14276] batadv0: entered promiscuous mode [ 1219.322810][T14278] netlink: 'syz.3.17287': attribute type 1 has an invalid length. [ 1219.327512][T14276] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1219.375119][T14280] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 1219.450812][T14282] bond21: (slave geneve6): making interface the new active one [ 1219.459499][T14282] bond21: (slave geneve6): Enslaving as an active interface with an up link [ 1219.469155][ T1054] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1219.501236][ T1054] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1219.510147][ T1054] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1219.578338][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17287'. [ 1219.610961][T14278] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1219.644701][T14278] tipc: Resetting bearer [ 1219.651109][T14278] tipc: Resetting bearer [ 1219.781432][T13720] lo speed is unknown, defaulting to 1000 [ 1220.125029][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17295'. [ 1220.592244][T14318] syzkaller0: entered promiscuous mode [ 1220.597939][T14318] syzkaller0: entered allmulticast mode [ 1220.771081][T14325] tipc: Failed to remove unknown binding: 66,0,0/8432298:1067011114/1067011116 [ 1220.814633][T14325] tipc: Failed to remove unknown binding: 66,0,0/8432298:1067011114/1067011115 [ 1220.892590][T14327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1221.076380][T14331] tipc: Resetting bearer [ 1221.113873][T14334] tipc: Failed to remove unknown binding: 66,0,0/8432298:1067011114/1067011116 [ 1221.134524][T14334] tipc: Failed to remove unknown binding: 66,0,0/8432298:1067011114/1067011115 [ 1221.154143][T14331] tipc: Resetting bearer [ 1221.167436][T14331] tipc: Resetting bearer [ 1221.642188][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17306'. [ 1221.788797][T14358] §: renamed from sit0 [ 1222.101354][T14363] lo: left promiscuous mode [ 1222.121707][T14363] ip6tnl0: left promiscuous mode [ 1222.138207][T14363] ip6tnl0: left allmulticast mode [ 1222.159313][T14363] bridge_slave_1: left allmulticast mode [ 1222.174231][T14367] netlink: 'syz.0.17311': attribute type 10 has an invalid length. [ 1222.182967][T14363] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 1222.201899][T14363] ip6erspan0: left allmulticast mode [ 1222.218996][T14367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17311'. [ 1222.244360][T14363] geneve2: left allmulticast mode [ 1222.260318][T14363] bond1: left promiscuous mode [ 1222.280926][T14363] bond1: left allmulticast mode [ 1222.311883][T14363] geneve4: left promiscuous mode [ 1222.340389][T14363] vlan1: left promiscuous mode [ 1222.373173][T14363] syzkaller0: left promiscuous mode [ 1222.401209][T14363] syzkaller0: left allmulticast mode [ 1222.428927][T14363] ip6gre3: left promiscuous mode [ 1222.449547][T14363] ip6gre3: left allmulticast mode [ 1222.472993][T14363] geneve5: left promiscuous mode [ 1222.480855][T14363] geneve5: left allmulticast mode [ 1222.493189][T14363] ip6gre4: left promiscuous mode [ 1222.507225][T14363] ip6gre4: left allmulticast mode [ 1222.520345][T14363] bond6: left promiscuous mode [ 1222.532292][T14363] bond6: left allmulticast mode [ 1222.545179][T14363] bond7: left promiscuous mode [ 1222.556198][T14363] gretap2: left promiscuous mode [ 1222.576001][T14363] bond0: left promiscuous mode [ 1222.587990][T14363] bridge10: left promiscuous mode [ 1222.604255][T14363] bond8: left promiscuous mode [ 1222.614830][T14363] bridge16: left promiscuous mode [ 1222.626148][T14363] bond8: left allmulticast mode [ 1222.637292][T14363] bridge16: left allmulticast mode [ 1222.653064][T14363] bond10: left promiscuous mode [ 1222.665989][T14363] bond10: left allmulticast mode [ 1222.703553][T14363] bond11: left promiscuous mode [ 1222.713935][T14363] bridge17: left promiscuous mode [ 1222.749363][T14363] vlan4: left allmulticast mode [ 1222.774880][T14363] bond11: left allmulticast mode [ 1222.791253][T14363] bridge17: left allmulticast mode [ 1222.821199][T14363] bond12: left promiscuous mode [ 1222.838765][T14363] bridge18: left promiscuous mode [ 1222.927524][T14363] vlan5: left allmulticast mode [ 1222.949460][T14363] bond14: left allmulticast mode [ 1223.116072][T14367] team0: entered promiscuous mode [ 1223.141173][T14367] geneve1: entered promiscuous mode [ 1223.171057][T14367] team0: entered allmulticast mode [ 1223.185259][T14367] geneve1: entered allmulticast mode [ 1223.205064][T14367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.240083][T14367] bridge0: port 1(team0) entered blocking state [ 1223.266610][T14367] bridge0: port 1(team0) entered disabled state [ 1223.441290][T14375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17309'. [ 1223.460891][T14375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17309'. [ 1223.491240][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17315'. [ 1223.666733][T14387] lo: Caught tx_queue_len zero misconfig [ 1224.279510][T14408] tipc: Enabled bearer , priority 10 [ 1224.358527][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17326'. [ 1224.368918][T14410] bond0: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 1224.625082][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17328'. [ 1224.704595][T14413] tipc: Resetting bearer [ 1225.019420][T14413] bond0: left promiscuous mode [ 1225.031294][T14413] bridge10: left promiscuous mode [ 1225.046607][T14413] macvtap0: left allmulticast mode [ 1225.056050][T14413] macvtap1: left allmulticast mode [ 1225.116227][T14415] bond16: entered promiscuous mode [ 1225.124142][T14415] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1225.729097][T14459] bond12: (slave .`): Releasing backup interface [ 1225.758512][T14459] bond0: (slave bridge10): Releasing backup interface [ 1225.826646][T14459] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1225.877438][T14459] team0: Port device xfrm0 added [ 1225.932148][T14459] tipc: Enabling of bearer rejected, already enabled [ 1226.217769][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17344'. [ 1226.362083][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17344'. [ 1226.434577][T14481] netlink: 'syz.0.17345': attribute type 11 has an invalid length. [ 1226.551430][T14481] erspan0: left promiscuous mode [ 1226.593480][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17344'. [ 1226.620047][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17347'. [ 1226.657708][T14481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.781794][T14481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1226.798967][T14481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1226.827098][T14481] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1226.855352][T14488] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1226.869423][T14488] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 1227.215960][T14489] hsr_slave_1 (unregistering): left promiscuous mode [ 1227.251206][T14494] tipc: Resetting bearer [ 1227.251209][T13729] xfrm0 speed is unknown, defaulting to 1000 [ 1227.251250][T13729] syz0: Port: 1 Link ACTIVE [ 1227.257294][T14494] hsr0: entered promiscuous mode [ 1227.413276][ T6541] xfrm0 speed is unknown, defaulting to 1000 [ 1227.425040][T14510] syzkaller0: entered promiscuous mode [ 1227.441388][T14510] syzkaller0: entered allmulticast mode [ 1227.642559][T14516] __nla_validate_parse: 1 callbacks suppressed [ 1227.642582][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17354'. [ 1227.686317][T14520] netlink: 'syz.3.17356': attribute type 1 has an invalid length. [ 1227.734616][T14520] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1227.868785][T14526] netlink: 'syz.2.17357': attribute type 2 has an invalid length. [ 1227.955705][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17359'. [ 1227.985846][T14531] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1228.006405][T14532] netlink: 256 bytes leftover after parsing attributes in process `syz.4.17359'. [ 1228.113345][T14516] tipc: Resetting bearer [ 1228.704701][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17360'. [ 1228.849619][ T6541] xfrm0 speed is unknown, defaulting to 1000 [ 1228.871593][ T6541] syz0: Port: 1 Link DOWN [ 1228.881867][ T6541] xfrm0 speed is unknown, defaulting to 1000 [ 1229.027564][T14544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17362'. [ 1229.096348][T14548] bridge0: entered promiscuous mode [ 1229.104545][T14548] bridge0: entered allmulticast mode [ 1229.126809][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17364'. [ 1229.137411][T14544] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1229.156062][T14544] batman_adv: batadv0: Adding interface: gretap3 [ 1229.167103][T14544] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.196113][T14544] batman_adv: batadv0: Interface activated: gretap3 [ 1229.243988][T14553] netlink: 'syz.1.17365': attribute type 41 has an invalid length. [ 1229.377588][T14557] vlan0: entered promiscuous mode [ 1229.392489][T14557] tipc: Resetting bearer [ 1229.593775][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17370'. [ 1229.734308][T14573] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1229.745779][T14571] netlink: 'syz.0.17382': attribute type 30 has an invalid length. [ 1229.822585][T14571] bond17: option arp_missed_max: invalid value (0) [ 1229.829364][T14571] bond17: option arp_missed_max: allowed values 1 - 255 [ 1229.854907][T14571] bond17 (unregistering): Released all slaves [ 1229.931962][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17373'. [ 1230.041179][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17374'. [ 1230.340111][T14602] netlink: 'syz.0.17377': attribute type 1 has an invalid length. [ 1231.009432][T14612] bond17: (slave gretap4): making interface the new active one [ 1231.041757][T14612] bond17: (slave gretap4): Enslaving as an active interface with an up link [ 1231.054588][T14614] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1231.062430][T14614] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1231.114836][T14594] macvlan2: entered promiscuous mode [ 1231.138104][T14594] macvlan2: entered allmulticast mode [ 1231.159408][T14594] bond17: entered promiscuous mode [ 1231.165116][T14594] gretap4: entered promiscuous mode [ 1231.171671][T14594] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1231.189242][T14594] bond17: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1231.248867][T14594] bond17: left promiscuous mode [ 1231.268921][T14594] gretap4: left promiscuous mode [ 1231.741564][T14640] bond18 (unregistering): Released all slaves [ 1232.103256][T14659] netlink: 'syz.0.17392': attribute type 27 has an invalid length. [ 1232.480426][T14670] bridge0: entered allmulticast mode [ 1232.650218][T14672] syzkaller1: entered promiscuous mode [ 1232.661445][T14672] syzkaller1: entered allmulticast mode [ 1232.743206][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17399'. [ 1232.901501][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17402'. [ 1232.993789][T14685] vlan4: entered allmulticast mode [ 1232.999712][T14685] bridge11: entered allmulticast mode [ 1233.011048][T14685] bridge11: port 1(erspan0) entered blocking state [ 1233.018554][T14685] bridge11: port 1(erspan0) entered disabled state [ 1233.025795][T14685] erspan0: entered allmulticast mode [ 1233.034516][T14685] erspan0: left allmulticast mode [ 1233.350310][T14697] netlink: zone id is out of range [ 1233.356564][T14697] netlink: zone id is out of range [ 1233.363107][T14697] netlink: zone id is out of range [ 1233.368447][T14697] netlink: zone id is out of range [ 1233.374718][T14697] netlink: zone id is out of range [ 1233.380213][T14697] netlink: zone id is out of range [ 1233.386306][T14697] netlink: zone id is out of range [ 1233.392427][T14697] netlink: zone id is out of range [ 1233.398103][T14697] netlink: zone id is out of range [ 1233.403813][T14697] netlink: zone id is out of range [ 1233.801268][T14708] netlink: 'syz.2.17407': attribute type 1 has an invalid length. [ 1234.161703][T14708] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1234.199538][T14713] bridge0: entered promiscuous mode [ 1234.226697][T14713] bridge0: entered allmulticast mode [ 1234.708852][T14725] tipc: Resetting bearer [ 1234.835053][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17416'. [ 1235.237586][T14725] batadv0: left promiscuous mode [ 1235.361342][T14725] bridge_slave_1: left allmulticast mode [ 1235.497834][T14725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.602969][T14725] hsr0: left promiscuous mode [ 1235.752414][T14725] batman_adv: batadv0: Interface deactivated: vlan2 [ 1235.842740][T14725] hsr1: left allmulticast mode [ 1235.847556][T14725] gretap0: left allmulticast mode [ 1235.853994][T14725] geneve5: left promiscuous mode [ 1235.859101][T14725] geneve5: left allmulticast mode [ 1235.864893][T14725] gretap1: left promiscuous mode [ 1235.870055][T14725] bond13: left promiscuous mode [ 1235.875209][T14725] ip6gre1: left promiscuous mode [ 1235.881369][T14725] bridge0: left promiscuous mode [ 1235.886353][T14725] bridge0: left allmulticast mode [ 1235.900427][T14725] bond15: left promiscuous mode [ 1235.905707][T14725] bond15: left allmulticast mode [ 1235.911874][T14725] bond16: left promiscuous mode [ 1235.916875][T14725] veth15: left promiscuous mode [ 1235.923662][T14725] bond0: left promiscuous mode [ 1235.928769][T14725] vlan3: left allmulticast mode [ 1235.934435][T14725] veth0_to_bond: left allmulticast mode [ 1236.033715][T14743] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 1236.040401][T14746] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 1236.149109][ T1758] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.243776][ T1758] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.269202][T14770] netlink: 'syz.3.17422': attribute type 1 has an invalid length. [ 1236.280264][ T1758] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.470316][T14770] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1236.501188][ T1758] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.516136][T14760] syzkaller0: entered promiscuous mode [ 1236.524160][T14760] syzkaller0: entered allmulticast mode [ 1236.567665][T14781] bond23: (slave geneve7): making interface the new active one [ 1236.582338][T14781] bond23: (slave geneve7): Enslaving as an active interface with an up link [ 1236.682273][ T1758] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1236.697143][ T1758] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1236.820013][ T1758] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1237.125324][T14802] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 1237.620167][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17429'. [ 1237.636552][T14809] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17430'. [ 1237.643087][T14807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17429'. [ 1237.671971][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17429'. [ 1237.727155][T14807] syzkaller1: entered promiscuous mode [ 1237.751572][T14807] syzkaller1: entered allmulticast mode [ 1237.883957][T14812] batman_adv: batadv0: Interface deactivated: gretap3 [ 1237.963441][T14823] nbd: nbd3 already in use [ 1237.979697][T14823] block nbd3: NBD_DISCONNECT [ 1237.996914][T14823] block nbd3: Send disconnect failed -32 [ 1238.036129][T14823] block nbd3: shutting down sockets [ 1238.107051][T14824] vlan4: entered promiscuous mode [ 1238.113453][T14824] bridge0: entered promiscuous mode [ 1238.207819][T14821] netlink: 'syz.1.17433': attribute type 4 has an invalid length. [ 1238.226015][T14832] netlink: 'syz.0.17435': attribute type 3 has an invalid length. [ 1238.280175][T14834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17437'. [ 1238.461612][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17438'. [ 1238.571422][T14846] net_ratelimit: 391 callbacks suppressed [ 1238.571444][T14846] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1238.598449][T14846] team0: No ports can be present during mode change [ 1238.607473][T14846] vlan0: entered promiscuous mode [ 1238.903293][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17440'. [ 1238.988410][T14857] vlan0: left promiscuous mode [ 1239.279126][T14867] netlink: 'syz.1.17446': attribute type 1 has an invalid length. [ 1239.474600][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17449'. [ 1239.552027][T14867] bond22: (slave gretap3): making interface the new active one [ 1239.564493][T14867] bond22: (slave gretap3): Enslaving as an active interface with an up link [ 1239.650220][T14881] bond22: (slave bridge19): Enslaving as an active interface with a down link [ 1239.706470][T14867] macvlan3: entered promiscuous mode [ 1239.718855][T14867] macvlan3: entered allmulticast mode [ 1239.743943][T14867] bond22: entered promiscuous mode [ 1239.759751][T14867] gretap3: entered promiscuous mode [ 1239.779964][T14867] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1239.792793][T14867] bond22: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1239.811120][T14867] bond22: left promiscuous mode [ 1239.818341][T14867] gretap3: left promiscuous mode [ 1239.830313][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17451'. [ 1239.983593][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17452'. [ 1240.194668][T14891] tipc: Disabling bearer [ 1240.196471][T14902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17455'. [ 1240.258287][T14906] netlink: 'syz.0.17456': attribute type 1 has an invalid length. [ 1240.272244][T14908] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1240.287911][T14909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17455'. [ 1240.304066][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17457'. [ 1240.359243][T14912] netlink: 'syz.4.17457': attribute type 1 has an invalid length. [ 1240.410921][T14917] bond18: entered promiscuous mode [ 1240.434192][T14906] bridge0: port 1(team0) entered disabled state [ 1240.516893][T14906] veth0_to_bond: left allmulticast mode [ 1240.534213][T14906] veth0_to_bond: left promiscuous mode [ 1240.552239][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17457'. [ 1240.569016][T14906] bridge19: port 2(veth0_to_bond) entered disabled state [ 1240.594465][T14906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1240.706957][T14912] bond13: entered promiscuous mode [ 1240.742080][T14912] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1240.843642][T14908] bond13: entered allmulticast mode [ 1240.867875][T14924] bond13: (slave bridge12): making interface the new active one [ 1240.877565][T14924] bridge12: entered promiscuous mode [ 1240.885793][T14924] bridge12: entered allmulticast mode [ 1240.893972][T14924] bond13: (slave bridge12): Enslaving as an active interface with an up link [ 1240.903894][T14903] bond18: left promiscuous mode [ 1241.154983][T14931] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 1241.299711][T14931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.315523][T14934] netlink: 'syz.0.17460': attribute type 4 has an invalid length. [ 1241.373423][T14942] IPVS: ip_vs_add_dest(): server weight less than zero [ 1241.402143][T14931] batman_adv: batadv0: Removing interface: vlan2 [ 1241.412886][T14944] netlink: 'syz.0.17460': attribute type 4 has an invalid length. [ 1241.574326][T14945] lo speed is unknown, defaulting to 1000 [ 1241.583456][T14945] xfrm0 speed is unknown, defaulting to 1000 [ 1243.643569][T14999] __nla_validate_parse: 3 callbacks suppressed [ 1243.643591][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17477'. [ 1243.684661][T14999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17477'. [ 1243.833819][T15009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17480'. [ 1243.845195][T15010] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1244.162714][T15017] netlink: 'syz.2.17481': attribute type 13 has an invalid length. [ 1244.180984][T15017] netlink: 'syz.2.17481': attribute type 17 has an invalid length. [ 1244.376985][T15010] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1244.523726][T15022] netlink: 'syz.4.17482': attribute type 2 has an invalid length. [ 1244.571792][T15017] 8021q: adding VLAN 0 to HW filter on device .` [ 1244.582065][T15017] tipc: Resetting bearer [ 1244.588120][T15017] tipc: Resetting bearer [ 1244.594075][T15017] dummy0: left promiscuous mode [ 1244.604123][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17482'. [ 1244.667542][T15017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1244.679673][T15017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1244.705952][T15017] veth1_vlan: left promiscuous mode [ 1244.717617][T15017] vlan0: left promiscuous mode [ 1244.723370][T15017] tipc: Resetting bearer [ 1244.729097][T15017] tipc: Resetting bearer [ 1244.735689][T15017] veth1_vlan: entered promiscuous mode [ 1244.748928][T15017] veth0_macvtap: left promiscuous mode [ 1244.782416][T15017] veth0_macvtap: entered promiscuous mode [ 1244.825527][T15017] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1245.012343][T15017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1245.030445][T15017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1245.125493][T15017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1245.133961][T15017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1245.171946][T15017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1245.226485][T15017] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1245.244399][T15017] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1245.269112][T15017] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1245.282557][T15017] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1245.298574][T15017] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1245.310998][T15017] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1245.324918][T15017] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1245.337299][T15017] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1245.351458][ T2552] bond11: (slave bridge0): link status up again after 0 ms [ 1245.365830][T15017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.390916][ T2552] bond11: (slave bridge0): link status up again after 0 ms [ 1245.406840][T15017] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1245.411319][ T2552] bond11: (slave bridge0): link status up again after 0 ms [ 1245.478305][ T2552] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1245.534347][ T2552] bond11: (slave bridge0): link status up again after 0 ms [ 1245.594492][ T2552] bond11: (slave bridge0): link status up again after 0 ms [ 1245.630860][ T59] bond11: (slave bridge0): link status up again after 0 ms [ 1245.673899][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17488'. [ 1245.716955][ T59] bond0: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1245.758930][ T59] bond0: active interface up! [ 1245.789362][T15044] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1245.791774][T15036] team0: No ports can be present during mode change [ 1245.817874][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17487'. [ 1245.846079][T15036] vlan0: entered promiscuous mode [ 1246.038766][T15039] sctp: [Deprecated]: syz.0.17487 (pid 15039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1246.038766][T15039] Use struct sctp_sack_info instead [ 1246.192998][T15064] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 1246.265482][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17493'. [ 1246.292893][T15068] netlink: 'syz.2.17495': attribute type 3 has an invalid length. [ 1246.358586][T15068] nbd: nbd2 already in use [ 1246.379467][T15068] block nbd2: NBD_DISCONNECT [ 1246.392864][T15068] block nbd2: Send disconnect failed -32 [ 1246.423306][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17493'. [ 1246.617882][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17493'. [ 1247.627616][T15115] netlink: 'syz.1.17503': attribute type 3 has an invalid length. [ 1247.950934][T15124] team0: No ports can be present during mode change [ 1247.984815][T15124] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1247.995287][T15115] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1248.048836][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17504'. [ 1248.234025][T15133] hsr_slave_1 (unregistering): left promiscuous mode [ 1248.452408][T15148] netlink: 'syz.4.17511': attribute type 1 has an invalid length. [ 1248.579573][T15148] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1248.798338][T15163] lo: entered allmulticast mode [ 1248.823169][T15163] lo: left allmulticast mode [ 1248.911065][T15177] net_ratelimit: 30 callbacks suppressed [ 1248.911084][T15177] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1248.948260][T15177] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1248.961680][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1249.093242][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1249.212208][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1249.390845][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1249.616312][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1249.706431][T15214] __nla_validate_parse: 2 callbacks suppressed [ 1249.706453][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17523'. [ 1249.732622][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1249.823678][T15214] hsr_slave_0: left promiscuous mode [ 1249.884475][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17527'. [ 1249.921852][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1249.976490][T15223] netlink: 272 bytes leftover after parsing attributes in process `syz.1.17527'. [ 1249.995774][T15219] netlink: 'syz.1.17527': attribute type 1 has an invalid length. [ 1250.010958][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17527'. [ 1250.030794][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1250.132461][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17531'. [ 1250.172408][T15233] bond23 (unregistering): Released all slaves [ 1250.735993][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17537'. [ 1251.120092][T15266] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1251.137605][T15266] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1251.155403][T15266] bridge0: left promiscuous mode [ 1251.173689][T15266] bridge0: left allmulticast mode [ 1251.191880][T15266] vlan4: left allmulticast mode [ 1251.209335][T15266] bridge11: left allmulticast mode [ 1251.235064][T15266] bond13: left promiscuous mode [ 1251.259000][T15266] bridge12: left promiscuous mode [ 1251.282816][T15266] bond13: left allmulticast mode [ 1251.298986][T15272] netlink: 'syz.4.17543': attribute type 1 has an invalid length. [ 1251.322008][T15266] bridge12: left allmulticast mode [ 1251.419179][T15250] netlink: 196 bytes leftover after parsing attributes in process `syz.3.17537'. [ 1251.625445][T15266] gretap2: entered allmulticast mode [ 1251.698956][T15266] bond15: (slave gretap2): making interface the new active one [ 1251.739714][T15266] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 1252.198460][T15285] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1252.226591][T15285] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1252.245727][T15285] veth0_virt_wifi: entered allmulticast mode [ 1252.280094][T15285] veth0_virt_wifi: entered promiscuous mode [ 1252.296100][T15290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17545'. [ 1252.360312][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17545'. [ 1252.529362][T15301] tipc: Enabling of bearer rejected, already enabled [ 1252.560139][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17555'. [ 1252.595851][T15301] netlink: 'syz.3.17555': attribute type 1 has an invalid length. [ 1252.638015][T15301] bond24: entered promiscuous mode [ 1252.644820][T15301] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1252.783195][T15311] netlink: 'syz.1.17557': attribute type 1 has an invalid length. [ 1252.826150][T15301] bond24: entered allmulticast mode [ 1252.908318][T15301] bond24: (slave bridge14): making interface the new active one [ 1252.928827][T15301] bridge14: entered promiscuous mode [ 1252.937836][T15301] bridge14: entered allmulticast mode [ 1252.981815][T15301] bond24: (slave bridge14): Enslaving as an active interface with an up link [ 1253.510998][T15328] vlan4: entered promiscuous mode [ 1253.922239][ T2552] net_ratelimit: 24 callbacks suppressed [ 1253.922259][ T2552] bond11: (slave bridge0): failed to get link speed/duplex [ 1254.062380][ T2552] bond11: (slave bridge0): failed to get link speed/duplex [ 1254.090408][T15348] tipc: Enabled bearer , priority 0 [ 1254.136918][T15345] tipc: Disabling bearer [ 1254.141299][T15353] xt_l2tp: invalid flags combination: 8 [ 1254.174449][T15353] netlink: 'syz.1.17567': attribute type 1 has an invalid length. [ 1254.250785][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1254.278758][T15353] gre0: entered promiscuous mode [ 1254.291114][T15353] gre0: entered allmulticast mode [ 1254.526392][T15363] 8021q: adding VLAN 0 to HW filter on device .` [ 1254.658318][T15363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.726720][T15373] __nla_validate_parse: 6 callbacks suppressed [ 1254.726746][T15373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17572'. [ 1255.169954][T15363] tipc: Resetting bearer [ 1255.199954][T15363] tipc: Resetting bearer [ 1255.271569][T15363] veth1_vlan: left promiscuous mode [ 1255.278210][T15363] veth0_vlan: left promiscuous mode [ 1255.285058][T15363] veth0_vlan: entered promiscuous mode [ 1255.302057][T15363] veth1_vlan: entered promiscuous mode [ 1255.335724][T15363] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1255.479912][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17573'. [ 1255.516491][ T1758] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.525131][ T1758] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.555469][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17573'. [ 1255.575909][ T1758] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.614165][ T1758] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.664176][ T1758] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.704023][ T1758] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.730511][ T1758] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.766449][ T1758] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.822409][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1255.855798][T15396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17577'. [ 1255.960920][ T4764] bond11: (slave bridge0): failed to get link speed/duplex [ 1256.080853][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1256.201236][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1256.330811][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1256.387258][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17576'. [ 1256.444574][T15389] netlink: 196 bytes leftover after parsing attributes in process `syz.1.17576'. [ 1256.465020][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1256.652874][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17581'. [ 1257.140499][T15426] netlink: 'syz.3.17582': attribute type 1 has an invalid length. [ 1257.166591][T15430] syz.2.17583: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1257.191914][T15426] netlink: 'syz.3.17582': attribute type 4 has an invalid length. [ 1257.222461][T15430] CPU: 1 UID: 0 PID: 15430 Comm: syz.2.17583 Not tainted syzkaller #0 PREEMPT(full) [ 1257.222502][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1257.222515][T15430] Call Trace: [ 1257.222523][T15430] [ 1257.222531][T15430] dump_stack_lvl+0xe8/0x150 [ 1257.222560][T15430] warn_alloc+0x249/0x340 [ 1257.222588][T15430] ? __pfx_stack_trace_save+0x10/0x10 [ 1257.222621][T15430] ? __pfx_warn_alloc+0x10/0x10 [ 1257.222652][T15430] ? __kasan_kmalloc+0x93/0xb0 [ 1257.222677][T15430] ? __kmalloc_cache_noprof+0x318/0x660 [ 1257.222701][T15430] ? xskq_create+0x56/0x170 [ 1257.222716][T15430] ? xsk_init_queue+0x8a/0xe0 [ 1257.222743][T15430] ? xsk_setsockopt+0x52a/0x960 [ 1257.222768][T15430] ? do_sock_setsockopt+0x17c/0x1b0 [ 1257.222784][T15430] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1257.222801][T15430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.222825][T15430] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1257.222877][T15430] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1257.222916][T15430] ? __kasan_kmalloc+0x93/0xb0 [ 1257.222948][T15430] vmalloc_user_noprof+0xad/0xe0 [ 1257.222974][T15430] ? xskq_create+0xbf/0x170 [ 1257.222992][T15430] xskq_create+0xbf/0x170 [ 1257.223012][T15430] xsk_init_queue+0x8a/0xe0 [ 1257.223042][T15430] xsk_setsockopt+0x52a/0x960 [ 1257.223068][T15430] ? __fget_files+0x2a/0x420 [ 1257.223092][T15430] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1257.223119][T15430] ? __pfx_aa_sk_perm+0x10/0x10 [ 1257.223149][T15430] ? aa_sock_opt_perm+0xff/0x1a0 [ 1257.223179][T15430] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1257.223203][T15430] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1257.223231][T15430] do_sock_setsockopt+0x17c/0x1b0 [ 1257.223253][T15430] __x64_sys_setsockopt+0x13d/0x1b0 [ 1257.223274][T15430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.223293][T15430] do_syscall_64+0x174/0x580 [ 1257.223315][T15430] ? trace_irq_disable+0x3b/0x140 [ 1257.223347][T15430] ? clear_bhb_loop+0x40/0x90 [ 1257.223369][T15430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.223388][T15430] RIP: 0033:0x7f68dc99ce59 [ 1257.223407][T15430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.223423][T15430] RSP: 002b:00007f68dd837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1257.223443][T15430] RAX: ffffffffffffffda RBX: 00007f68dcc15fa0 RCX: 00007f68dc99ce59 [ 1257.223456][T15430] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1257.223467][T15430] RBP: 00007f68dca32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1257.223478][T15430] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.223489][T15430] R13: 00007f68dcc16038 R14: 00007f68dcc15fa0 R15: 00007fff75fff098 [ 1257.223519][T15430] [ 1257.223531][T15430] Mem-Info: [ 1257.511719][T15430] active_anon:11074 inactive_anon:16 isolated_anon:0 [ 1257.511719][T15430] active_file:2335 inactive_file:41174 isolated_file:0 [ 1257.511719][T15430] unevictable:768 dirty:485 writeback:0 [ 1257.511719][T15430] slab_reclaimable:13394 slab_unreclaimable:214809 [ 1257.511719][T15430] mapped:29514 shmem:2833 pagetables:1534 [ 1257.511719][T15430] sec_pagetables:0 bounce:0 [ 1257.511719][T15430] kernel_misc_reclaimable:0 [ 1257.511719][T15430] free:1172649 free_pcp:32360 free_cma:0 [ 1257.562818][T15430] Node 0 active_anon:43296kB inactive_anon:64kB active_file:9340kB inactive_file:164484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118056kB dirty:1940kB writeback:0kB shmem:8796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15772kB pagetables:6000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1257.628557][T15430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1257.688608][ T6542] lo speed is unknown, defaulting to 1000 [ 1257.696021][ T6542] syz2: Port: 1 Link DOWN [ 1257.745464][T15432] netlink: 'syz.2.17583': attribute type 10 has an invalid length. [ 1257.782674][T15430] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1257.841985][T15432] team0: Device dummy0 is of different type [ 1257.892427][T15445] team0: No ports can be present during mode change [ 1257.908587][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17583'. [ 1257.966681][T15432] netlink: 'syz.2.17583': attribute type 10 has an invalid length. [ 1257.999926][T15430] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1258.024827][T15430] Node 0 DMA32 free:1136720kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39192kB inactive_anon:64kB active_file:9340kB inactive_file:164492kB unevictable:1536kB writepending:1944kB zspages:0kB present:3129332kB managed:2552904kB mlocked:0kB bounce:0kB free_pcp:65244kB local_pcp:35712kB free_cma:0kB [ 1258.125342][T15430] lowmem_reserve[]: 0 0 0 0 0 [ 1258.156821][T15430] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1258.224025][T15430] lowmem_reserve[]: 0 0 0 0 0 [ 1258.234418][T15430] Node 1 Normal free:3554968kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56808kB local_pcp:28480kB free_cma:0kB [ 1258.285824][T15430] lowmem_reserve[]: 0 0 0 0 0 [ 1258.299175][T15430] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB [ 1258.330344][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17590'. [ 1258.347292][T15430] Node 0 DMA32: 3389*4kB (UME) 5433*8kB (UM) 3536*16kB (UM) 358*32kB (UME) 260*64kB (UME) 793*128kB (UME) 802*256kB (UM) 460*512kB (UME) 270*1024kB (UM) 87*2048kB (UM) 0*4096kB = 1138684kB [ 1258.367758][T15430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.394833][T15457] netlink: 'syz.4.17590': attribute type 13 has an invalid length. [ 1258.402989][T15430] Node 1 Normal: 10*4kB (UM) 8*8kB (UM) 19*16kB (UM) 10*32kB (UM) 13*64kB (UM) 13*128kB (UM) 12*256kB (UM) 13*512kB (UM) 11*1024kB (UM) 10*2048kB (U) 857*4096kB (M) = 3554968kB [ 1258.421676][T15457] netlink: 'syz.4.17590': attribute type 17 has an invalid length. [ 1258.438343][T15430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.455424][T15430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.480723][T15430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.496120][T15430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.536521][T15430] 44802 total pagecache pages [ 1258.552333][T15430] 0 pages in swap cache [ 1258.564171][T15430] Free swap = 124996kB [ 1258.582882][T15430] Total swap = 124996kB [ 1258.596108][T15430] 2097051 pages RAM [ 1258.604578][T15430] 0 pages HighMem/MovableOnly [ 1258.614916][T15430] 427040 pages reserved [ 1258.626641][T15430] 0 pages cma reserved [ 1258.789643][T15457] tipc: Resetting bearer [ 1258.805216][T15457] tipc: Resetting bearer [ 1258.894555][T15463] tipc: Enabling of bearer rejected, already enabled [ 1259.017204][T15466] syzkaller0: entered promiscuous mode [ 1259.034713][T15466] syzkaller0: entered allmulticast mode [ 1259.368481][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17595'. [ 1259.504886][T15495] netlink: 'syz.1.17596': attribute type 16 has an invalid length. [ 1259.513644][T15495] netlink: 'syz.1.17596': attribute type 17 has an invalid length. [ 1261.846057][T15510] __nla_validate_parse: 1 callbacks suppressed [ 1261.846079][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17601'. [ 1262.476037][T15517] netlink: 'syz.0.17603': attribute type 16 has an invalid length. [ 1262.484190][T15517] netlink: 'syz.0.17603': attribute type 17 has an invalid length. [ 1263.018564][T15492] tipc: Resetting bearer [ 1263.036634][T15492] tipc: Resetting bearer [ 1263.121739][T15495] gre0: left promiscuous mode [ 1263.131805][T15495] gre0: left allmulticast mode [ 1263.141489][T15495] tipc: Resetting bearer [ 1263.264519][T15495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1263.276794][T15495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.289405][T15495] tipc: Resetting bearer [ 1263.296269][T15495] tipc: Resetting bearer [ 1263.305345][T15495] veth1_vlan: left promiscuous mode [ 1263.316881][T15495] vlan0: left promiscuous mode [ 1263.332059][T15495] veth1_vlan: entered promiscuous mode [ 1263.358750][T15495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1263.370481][T15495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1263.376099][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17607'. [ 1263.386483][T15495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1263.390141][T15495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1263.433679][T15495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1263.477551][T15495] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1263.505588][T15495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1263.535140][T15495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1263.568787][T15495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1263.613709][T15495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1263.630700][T15495] ip6gretap0: entered promiscuous mode [ 1263.668139][T15495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1263.681451][T15495] net_ratelimit: 9 callbacks suppressed [ 1263.681472][T15495] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1263.729618][T15517] tipc: Resetting bearer [ 1263.743072][T15517] bridge0: left allmulticast mode [ 1263.750542][T15517] team0: left promiscuous mode [ 1263.762082][T15517] geneve1: left promiscuous mode [ 1263.772354][T15517] team0: left allmulticast mode [ 1263.778544][T15517] geneve1: left allmulticast mode [ 1263.799297][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.844518][T15517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1263.855760][T15517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.878559][T15517] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1263.886310][T15517] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 1263.917669][T15517] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1263.937875][ T6542] team_slave_1: entered promiscuous mode [ 1263.946178][ T6542] veth1_to_hsr: entered promiscuous mode [ 1264.160796][T15551] netlink: 'syz.0.17609': attribute type 13 has an invalid length. [ 1264.174712][T15534] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1264.182342][T15534] bridge0: port 1(veth0_virt_wifi) entered listening state [ 1264.203916][T15534] bridge0: entered promiscuous mode [ 1264.209321][T15534] bridge0: entered allmulticast mode [ 1264.221445][ T2552] bond11: (slave bridge0): failed to get link speed/duplex [ 1264.232247][ T1054] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.261037][ T1054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.281852][ T1054] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.305253][ T1054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.325674][T13729] xfrm0 speed is unknown, defaulting to 1000 [ 1264.332743][T13729] syz0: Port: 1 Link ACTIVE [ 1264.360836][ T1054] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.405972][ T1054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.443914][T13729] xfrm0 speed is unknown, defaulting to 1000 [ 1264.450252][T15554] IPVS: Error joining to the multicast group [ 1264.475547][ T1054] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.506692][ T1054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.538110][ T1054] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.574071][ T1054] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.593432][ T1054] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.610558][ T1054] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.700403][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1264.722965][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17612'. [ 1264.820910][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1264.945499][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1265.083215][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1265.212045][ T2552] bond11: (slave bridge0): failed to get link speed/duplex [ 1265.343807][ T2552] bond11: (slave bridge0): failed to get link speed/duplex [ 1265.471172][ T2552] bond11: (slave bridge0): failed to get link speed/duplex [ 1265.687231][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17619'. [ 1265.863409][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17621'. [ 1266.220765][ C1] bridge0: port 1(veth0_virt_wifi) entered learning state [ 1266.291756][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17624'. [ 1266.799467][T15626] netlink: 'syz.2.17626': attribute type 1 has an invalid length. [ 1266.877584][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17629'. [ 1266.895680][T15630] netlink: 3 bytes leftover after parsing attributes in process `syz.4.17628'. [ 1266.907727][T15626] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1266.918430][T15632] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1266.929380][T15630] 0ªX¹¦À: renamed from batadv0 (while UP) [ 1266.942265][T15630] 0ªX¹¦À: entered allmulticast mode [ 1267.145713][T15639] veth0: entered promiscuous mode [ 1267.256869][T15646] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 1267.300930][T15646] tipc: Enabled bearer , priority 10 [ 1267.810180][T15664] can: request_module (can-proto-0) failed. [ 1268.262366][T15638] veth0: left promiscuous mode [ 1268.300753][ C1] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 1268.308155][ C1] bridge0: topology change detected, propagating [ 1268.444853][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17638'. [ 1268.616808][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17643'. [ 1268.741588][ T1758] net_ratelimit: 25 callbacks suppressed [ 1268.741610][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1268.785207][T15705] netlink: 240 bytes leftover after parsing attributes in process `syz.2.17644'. [ 1268.863460][ T1758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.891987][T15709] netlink: 280 bytes leftover after parsing attributes in process `syz.0.17646'. [ 1268.939560][T15705] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1269.147800][T15705] bond16 (unregistering): Released all slaves [ 1269.181429][ T4943] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1269.336025][T15711] bond16: option lacp_rate: invalid value (128) [ 1269.396081][T15697] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1269.458735][T15711] bond16 (unregistering): Released all slaves [ 1269.716502][T15731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17647'. [ 1269.801314][T15740] netlink: 292 bytes leftover after parsing attributes in process `syz.1.17648'. [ 1270.271212][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1270.386142][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1270.510776][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1270.644445][ T1758] bond11: (slave bridge0): failed to get link speed/duplex [ 1270.716649][T15771] netlink: 248 bytes leftover after parsing attributes in process `syz.2.17654'. [ 1270.791067][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1270.809039][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17655'. [ 1270.992853][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1271.120751][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1271.240792][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1271.793758][T15801] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1272.033085][T15809] __nla_validate_parse: 2 callbacks suppressed [ 1272.033118][T15809] netlink: 13 bytes leftover after parsing attributes in process `syz.4.17661'. [ 1272.591914][T15818] netlink: 'syz.2.17663': attribute type 1 has an invalid length. [ 1272.722617][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17664'. [ 1272.807503][T15830] netlink: 'syz.2.17666': attribute type 12 has an invalid length. [ 1273.064846][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17666'. [ 1273.148801][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17666'. [ 1273.405982][T15854] bridge0: entered allmulticast mode [ 1273.435969][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17672'. [ 1273.452937][T15856] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 1273.747057][T15863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17673'. [ 1273.780589][T15869] netlink: 280 bytes leftover after parsing attributes in process `syz.4.17676'. [ 1273.791122][ T59] net_ratelimit: 14 callbacks suppressed [ 1273.791145][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1273.823553][T15868] netlink: 'syz.2.17675': attribute type 4 has an invalid length. [ 1273.876285][T15873] netlink: 'syz.2.17675': attribute type 4 has an invalid length. [ 1273.902990][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.922697][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1274.054980][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1274.196680][ T6390] bond11: (slave bridge0): failed to get link speed/duplex [ 1274.225779][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17678'. [ 1274.269058][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17678'. [ 1274.307652][T15881] netlink: 'syz.4.17678': attribute type 18 has an invalid length. [ 1274.343738][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1274.471046][ T13] bond11: (slave bridge0): failed to get link speed/duplex [ 1274.612952][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1274.700964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.711782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.044026][T15913] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1275.061959][T15913] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1275.177948][T15913] tipc: Enabling of bearer rejected, already enabled [ 1275.495624][T15924] netlink: 'syz.3.17691': attribute type 1 has an invalid length. [ 1275.520494][T15928] netlink: 'syz.4.17688': attribute type 1 has an invalid length. [ 1275.678621][T15934] tipc: Resetting bearer [ 1275.712451][ T9580] IPVS: starting estimator thread 0... [ 1275.810836][T15937] IPVS: using max 29 ests per chain, 69600 per kthread [ 1275.919065][T15940] tipc: Resetting bearer [ 1275.928061][T15940] tipc: Resetting bearer [ 1275.941053][T15943] netlink: 'syz.0.17694': attribute type 16 has an invalid length. [ 1275.959366][T15943] netlink: 'syz.0.17694': attribute type 17 has an invalid length. [ 1276.131980][T15945] syzkaller0: entered promiscuous mode [ 1276.144572][T15945] syzkaller0: entered allmulticast mode [ 1276.466573][T15954] netlink: 'syz.1.17700': attribute type 19 has an invalid length. [ 1276.506189][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17700'. [ 1276.519017][T15957] bond12: (slave .`): Releasing backup interface [ 1276.613032][T15955] bridge16: entered promiscuous mode [ 1276.627678][T15955] bridge16: entered allmulticast mode [ 1276.653208][T15961] team0: No ports can be present during mode change [ 1276.704323][T15964] nbd: couldn't find a device at index 4 [ 1276.827786][T15969] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1276.919766][T15967] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1277.059407][T15975] syzkaller0: entered promiscuous mode [ 1277.091999][T15975] syzkaller0: entered allmulticast mode [ 1277.202226][T15971] syzkaller0: entered promiscuous mode [ 1277.207855][T15971] syzkaller0: entered allmulticast mode [ 1277.594536][T15989] __nla_validate_parse: 2 callbacks suppressed [ 1277.594557][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17706'. [ 1277.629132][T15989] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 1279.194802][ T59] net_ratelimit: 39 callbacks suppressed [ 1279.194824][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.307593][T15986] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1281.317775][T15986] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1281.327757][T15986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1281.337817][ T2552] bond11: (slave bridge0): failed to get link speed/duplex [ 1281.666522][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17713'. [ 1281.693441][T16005] tipc: Resetting bearer [ 1282.246965][T16005] geneve5: left allmulticast mode [ 1282.334887][T16005] gretap2: left allmulticast mode [ 1282.364198][T16005] bond18: left promiscuous mode [ 1282.369250][T16005] bridge12: left promiscuous mode [ 1282.407404][T16005] bond24: left promiscuous mode [ 1282.413093][T16005] bridge14: left promiscuous mode [ 1282.418420][T16005] bond24: left allmulticast mode [ 1282.425030][T16005] bridge14: left allmulticast mode [ 1282.442908][T16005] bridge16: left promiscuous mode [ 1282.448213][T16005] bridge16: left allmulticast mode [ 1282.493224][T16030] hsr_slave_1 (unregistering): left promiscuous mode [ 1282.528035][ T59] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.548798][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 60551 - 0 [ 1282.570180][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1282.594657][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 1282.616408][ T59] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.637330][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 60551 - 0 [ 1282.651317][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1282.675814][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 1282.707774][ T59] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.749252][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 60551 - 0 [ 1282.789775][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1282.823634][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 1282.930768][ T59] bond11: (slave bridge0): failed to get link speed/duplex [ 1283.047689][T16055] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1283.102232][ T6390] bond11: (slave bridge0): failed to get link speed/duplex [ 1283.140410][T16059] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 1283.196692][T16059] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.17719'. [ 1283.254064][ T6390] bond11: (slave bridge0): failed to get link speed/duplex [ 1283.384009][ T1054] bond11: (slave bridge0): failed to get link speed/duplex [ 1283.415570][T16084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17722'. [ 1283.475289][T16084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17722'. [ 1283.717241][T16090] macvtap2: entered allmulticast mode [ 1283.729635][T16090] dummy0: entered allmulticast mode [ 1283.758579][T16090] dummy0: entered promiscuous mode [ 1283.788439][T16090] dummy0: left allmulticast mode [ 1284.222056][ T1054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.653949][T16098] tipc: Resetting bearer [ 1285.392641][T16098] tipc: Resetting bearer [ 1286.025329][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.036862][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.047867][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.065913][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.074623][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.083568][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.092176][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.114257][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.127630][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.392507][T13729] dummy0: left promiscuous mode [ 1286.588567][T16141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17731'. [ 1286.708253][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17731'. [ 1286.901959][T16154] bond25: invalid ARP target 0.0.0.0 specified for addition [ 1286.910933][T16154] bond25: option arp_ip_target: invalid value (0) [ 1286.919678][T16154] bond25 (unregistering): Released all slaves [ 1286.953917][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17734'. [ 1286.967939][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17734'. [ 1286.978822][T16159] syzkaller0: entered promiscuous mode [ 1286.985203][T16159] syzkaller0: entered allmulticast mode [ 1287.358553][T16169] netlink: 277 bytes leftover after parsing attributes in process `syz.1.17739'. [ 1287.740365][T16164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17737'. [ 1288.339840][T16195] validate_nla: 2 callbacks suppressed [ 1288.346272][T16195] netlink: 'syz.1.17745': attribute type 29 has an invalid length. [ 1288.355020][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17745'. [ 1288.369097][T16195] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1288.659171][T16202] syzkaller0: entered promiscuous mode [ 1288.678021][T16202] syzkaller0: entered allmulticast mode [ 1288.734594][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17749'. [ 1288.806862][T16207] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17749'. [ 1288.898666][T16210] netlink: 34 bytes leftover after parsing attributes in process `syz.1.17750'. [ 1289.052212][T16213] netlink: 'syz.4.17751': attribute type 1 has an invalid length. [ 1289.071602][T16215] netlink: 'syz.3.17752': attribute type 1 has an invalid length. [ 1289.097591][T16213] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1289.234241][T16215] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1289.414444][T16225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1289.615407][T16232] netlink: 80 bytes leftover after parsing attributes in process `syz.4.17755'. [ 1289.687480][T16237] netlink: 'syz.1.17757': attribute type 1 has an invalid length. [ 1289.709990][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17757'. [ 1289.920282][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17759'. [ 1289.971406][T16252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17762'. [ 1290.061819][ T6390] net_ratelimit: 26 callbacks suppressed [ 1290.061842][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.435121][T16271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.463285][T16266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17766'. [ 1290.476308][T16271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.497421][T16271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.512547][T16273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.534879][T16273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.954314][T16289] bridge9: entered promiscuous mode [ 1290.973955][T16289] bridge9: entered allmulticast mode [ 1290.999255][T16289] team0: Device bridge9 is of different type [ 1291.114768][T16280] bridge9: entered promiscuous mode [ 1291.123613][T16280] bridge9: entered allmulticast mode [ 1291.130201][T16275] nbd: couldn't find a device at index 0 [ 1291.170184][T16280] team0: Device bridge9 is of different type [ 1291.250848][T16271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.277075][T16271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.471563][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17772'. [ 1291.852950][T16321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.507351][T16335] netlink: 'syz.3.17781': attribute type 1 has an invalid length. [ 1292.543238][T16335] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1292.609266][T16335] bond26: (slave geneve8): making interface the new active one [ 1292.640469][T16335] bond26: (slave geneve8): Enslaving as an active interface with an up link [ 1292.667753][ T1054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.696960][ T1054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.721885][ T1054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.028630][T16353] bond27: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1293.121318][T16353] bond27 (unregistering): Released all slaves [ 1293.313072][T16355] bond27: option lacp_rate: invalid value (128) [ 1293.429766][T16355] bond27 (unregistering): Released all slaves [ 1293.599663][T16378] netlink: 'syz.4.17787': attribute type 13 has an invalid length. [ 1293.618167][T16378] netlink: 'syz.4.17787': attribute type 17 has an invalid length. [ 1293.852864][T16386] __nla_validate_parse: 6 callbacks suppressed [ 1293.852889][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17787'. [ 1293.878867][T16385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17790'. [ 1293.994360][T16371] tipc: Resetting bearer [ 1294.336119][T16371] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1294.498964][T16378] 8021q: adding VLAN 0 to HW filter on device .` [ 1294.518280][T16378] 0ªX¹¦À: left allmulticast mode [ 1294.533084][T16378] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1294.559532][T16378] tipc: Resetting bearer [ 1294.587751][T16396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17792'. [ 1294.617977][T16378] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1294.647777][T16377] tipc: Resetting bearer [ 1294.708619][T16377] team_slave_1: left promiscuous mode [ 1294.714521][T16377] veth1_to_hsr: left promiscuous mode [ 1294.916002][T16377] tipc: Resetting bearer [ 1294.922362][T16377] tipc: Resetting bearer [ 1295.275688][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17790'. [ 1295.351361][ T6390] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.533588][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17792'. [ 1295.565192][ T6390] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.605807][ T6390] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.622818][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17795'. [ 1295.654980][ T6390] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.685333][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17794'. [ 1295.700853][ T6390] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.714946][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17795'. [ 1295.750888][ T6390] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.822300][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.921746][ T6390] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.945320][ T6390] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.008675][ T6390] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.020288][ T6390] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.031342][ T6390] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.052399][ T6390] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.131813][T16432] netlink: 240 bytes leftover after parsing attributes in process `syz.0.17800'. [ 1296.185706][T16432] bond20: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1296.240336][T16441] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1296.247575][T16432] bond20 (unregistering): Released all slaves [ 1296.250544][T16441] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1296.275115][T16441] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1296.362430][T16436] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17801'. [ 1296.477821][T16440] bond20: option lacp_rate: invalid value (128) [ 1296.565756][T16440] bond20 (unregistering): Released all slaves [ 1297.169126][T16484] netlink: 'syz.2.17810': attribute type 13 has an invalid length. [ 1297.534260][T16494] netlink: 'syz.2.17812': attribute type 1 has an invalid length. [ 1297.596530][T16494] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1297.685357][T16496] bond16: (slave veth17): Enslaving as an active interface with a down link [ 1297.799563][T16496] netlink: 'syz.2.17812': attribute type 1 has an invalid length. [ 1297.819378][T16496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1298.146808][T16506] bond23: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1298.214129][T16506] bond23 (unregistering): Released all slaves [ 1298.295137][T16511] bond23: option lacp_rate: invalid value (128) [ 1298.363882][T16511] bond23 (unregistering): Released all slaves [ 1298.409112][T16513] batadv_slave_1: entered promiscuous mode [ 1298.472055][T16502] batadv_slave_1: left promiscuous mode [ 1298.724631][T16537] nbd: couldn't find a device at index 0 [ 1298.851283][T16533] lo speed is unknown, defaulting to 1000 [ 1298.887008][T16533] xfrm0 speed is unknown, defaulting to 1000 [ 1299.159933][T16552] bridge0: left allmulticast mode [ 1299.520392][T16568] openvswitch: netlink: IP tunnel dst address not specified [ 1299.570211][T16572] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1299.585336][T16568] netlink: 'syz.1.17829': attribute type 8 has an invalid length. [ 1299.595889][T16572] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1299.603296][T16572] bridge0: port 1(veth0_virt_wifi) entered listening state [ 1299.627445][T16568] __nla_validate_parse: 7 callbacks suppressed [ 1299.627467][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17829'. [ 1299.661824][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17829'. [ 1300.020472][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17830'. [ 1300.075452][T16577] netlink: 196 bytes leftover after parsing attributes in process `syz.0.17830'. [ 1300.973739][T16596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17834'. [ 1301.018933][T16596] tipc: Resetting bearer [ 1301.092899][T16599] xt_hl: Unknown TTL match mode: 237 [ 1301.112437][T16596] team_slave_1: mtu greater than device maximum [ 1301.121188][T16596] team0: Device team_slave_1 failed to change mtu [ 1301.128869][T16601] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17836'. [ 1301.329085][T16614] netlink: 12700 bytes leftover after parsing attributes in process `syz.2.17836'. [ 1301.521707][T16618] lo speed is unknown, defaulting to 1000 [ 1301.545503][T16618] xfrm0 speed is unknown, defaulting to 1000 [ 1301.581383][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.660797][ C0] bridge0: port 1(veth0_virt_wifi) entered learning state [ 1301.845097][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17843'. [ 1302.390570][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17845'. [ 1302.555928][T16658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17846'. [ 1302.988016][T16661] lo speed is unknown, defaulting to 1000 [ 1303.047405][T16661] xfrm0 speed is unknown, defaulting to 1000 [ 1303.058292][T16674] team0: Port device veth1_to_hsr removed [ 1303.109950][T16674] hsr_slave_1 (unregistering): left promiscuous mode [ 1303.401895][T16685] xt_hashlimit: size too large, truncated to 1048576 [ 1303.641998][T16691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1303.676618][T16687] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1303.740766][ C0] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 1303.748221][ C0] bridge0: topology change detected, propagating [ 1305.053309][T16744] __nla_validate_parse: 8 callbacks suppressed [ 1305.053328][T16744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17868'. [ 1305.159905][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17868'. [ 1305.194491][ T30] audit: type=1804 audit(1781475443.206:12): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.17870" name="/newroot/3604/cgroup.controllers" dev="tmpfs" ino=18187 res=1 errno=0 [ 1305.223427][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17869'. [ 1305.271938][ T30] audit: type=1800 audit(1781475443.236:13): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17870" name="cgroup.controllers" dev="tmpfs" ino=18187 res=0 errno=0 [ 1305.318354][ T30] audit: type=1804 audit(1781475443.266:14): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.17870" name="/newroot/3604/cgroup.controllers" dev="tmpfs" ino=18187 res=1 errno=0 [ 1305.805650][T16765] lo: Caught tx_queue_len zero misconfig [ 1306.362383][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17877'. [ 1306.389589][T16769] netlink: 196 bytes leftover after parsing attributes in process `syz.2.17877'. [ 1306.567835][T16782] netlink: 'syz.0.17880': attribute type 1 has an invalid length. [ 1306.594785][T16782] netlink: 96 bytes leftover after parsing attributes in process `syz.0.17880'. [ 1306.626885][T16782] netlink: 'syz.0.17880': attribute type 1 has an invalid length. [ 1306.656194][T16782] netlink: 'syz.0.17880': attribute type 8 has an invalid length. [ 1306.672309][T16782] netlink: 582 bytes leftover after parsing attributes in process `syz.0.17880'. [ 1306.694237][T16782] netlink: 1 bytes leftover after parsing attributes in process `syz.0.17880'. [ 1307.027623][T16797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17882'. [ 1307.178540][T16793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1307.195704][T16793] tipc: Resetting bearer [ 1307.203109][T16793] tipc: Resetting bearer [ 1307.235991][T16793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1307.246029][T16793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1307.260208][T16793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1307.283766][T16793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1307.298376][T16793] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1307.393246][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17882'. [ 1307.405120][ T1758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.415764][T16807] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1307.436239][T16807] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1307.489591][ T1758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.518441][ T1758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.544716][ T1758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.907553][T16819] tipc: Resetting bearer [ 1307.965168][T16819] team0: Port device xfrm0 removed [ 1307.997984][T16824] netlink: 'syz.4.17889': attribute type 3 has an invalid length. [ 1308.010519][T16819] veth0_virt_wifi: left allmulticast mode [ 1308.029670][T16819] veth0_virt_wifi: left promiscuous mode [ 1308.052003][T16819] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1308.082616][T16819] bond13: (slave bridge12): Releasing backup interface [ 1308.103400][T16819] bond15: (slave gretap2): Releasing active interface [ 1308.136409][T16817] lo speed is unknown, defaulting to 1000 [ 1308.164736][T16817] xfrm0 speed is unknown, defaulting to 1000 [ 1308.280317][T16827] lo speed is unknown, defaulting to 1000 [ 1308.465850][T16833] openvswitch: netlink: IP tunnel dst address not specified [ 1308.487174][T16833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1308.898810][T16827] xfrm0 speed is unknown, defaulting to 1000 [ 1309.748681][T16855] tipc: Resetting bearer [ 1309.786369][T16855] veth1_vlan: left promiscuous mode [ 1309.804782][T16855] veth0_vlan: left promiscuous mode [ 1309.822021][T16855] veth0_vlan: entered promiscuous mode [ 1309.861810][T16855] veth1_vlan: entered promiscuous mode [ 1309.915408][T16855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1310.088134][T16862] bond27: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1310.192580][T16862] bond27 (unregistering): Released all slaves [ 1310.335776][T16864] bond27: option lacp_rate: invalid value (128) [ 1310.345654][T16864] bond27 (unregistering): Released all slaves [ 1310.429360][ T1758] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.522912][ T1758] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.550936][ T1758] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.586790][ T1758] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.708099][T16884] netlink: 'syz.3.17902': attribute type 29 has an invalid length. [ 1310.718042][T16884] __nla_validate_parse: 6 callbacks suppressed [ 1310.718063][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1310.736183][T16884] netlink: 'syz.3.17902': attribute type 29 has an invalid length. [ 1310.751467][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1310.762602][T16884] netlink: 'syz.3.17902': attribute type 29 has an invalid length. [ 1310.793315][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1310.821357][T16884] netlink: 'syz.3.17902': attribute type 29 has an invalid length. [ 1310.839558][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1310.863287][T16884] netlink: 'syz.3.17902': attribute type 29 has an invalid length. [ 1310.896829][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1310.933298][T16884] netlink: 'syz.3.17902': attribute type 29 has an invalid length. [ 1310.961537][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1310.992898][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1311.031714][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1311.078966][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1311.105732][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17902'. [ 1311.283096][T16886] syzkaller1: entered promiscuous mode [ 1311.300455][T16886] syzkaller1: entered allmulticast mode [ 1311.707116][T16901] syzkaller0: entered promiscuous mode [ 1311.723688][T16901] syzkaller0: entered allmulticast mode [ 1312.630437][T16940] bond20: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1313.343823][T16940] bond20 (unregistering): Released all slaves [ 1313.376331][T16944] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 1313.891416][T16964] tipc: Resetting bearer [ 1314.215353][T16987] validate_nla: 40 callbacks suppressed [ 1314.215374][T16987] netlink: 'syz.2.17922': attribute type 4 has an invalid length. [ 1314.423484][T16996] block nbd2: server does not support multiple connections per device. [ 1314.442558][T16996] block nbd2: shutting down sockets [ 1314.528560][T17001] ip6gre2: entered promiscuous mode [ 1314.534243][T17001] ip6gre2: entered allmulticast mode [ 1314.646524][T17008] bond17: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1314.708773][T17008] bond17 (unregistering): Released all slaves [ 1314.842744][T17011] bond17: option lacp_rate: invalid value (128) [ 1314.906948][T17011] bond17 (unregistering): Released all slaves [ 1315.150404][T17031] tipc: Enabling of bearer rejected, already enabled [ 1315.259281][T17039] tipc: Enabling of bearer rejected, failed to enable media [ 1315.862258][T17060] __nla_validate_parse: 46 callbacks suppressed [ 1315.862280][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17938'. [ 1316.008800][T17057] bridge22: entered promiscuous mode [ 1316.036642][T17057] bridge22: entered allmulticast mode [ 1316.164698][T17056] xt_hashlimit: size too large, truncated to 1048576 [ 1316.345618][T17072] netlink: 'syz.4.17941': attribute type 12 has an invalid length. [ 1316.699333][T17079] block nbd2: server does not support multiple connections per device. [ 1316.808405][T17079] block nbd2: shutting down sockets [ 1316.816583][T17093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17946'. [ 1316.914188][T17094] [ 1316.916611][T17094] ====================================================== [ 1316.923681][T17094] WARNING: possible circular locking dependency detected [ 1316.930758][T17094] syzkaller #0 Not tainted [ 1316.935227][T17094] ------------------------------------------------------ [ 1316.942301][T17094] syz.1.17944/17094 is trying to acquire lock: [ 1316.948502][T17094] ffff888029e7be18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1316.957525][T17094] [ 1316.957525][T17094] but task is already holding lock: [ 1316.964940][T17094] ffff88802a6a6bf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1316.974452][T17094] [ 1316.974452][T17094] which lock already depends on the new lock. [ 1316.974452][T17094] [ 1316.984896][T17094] [ 1316.984896][T17094] the existing dependency chain (in reverse order) is: [ 1316.993951][T17094] [ 1316.993951][T17094] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1317.001935][T17094] __mutex_lock+0x19d/0x1590 [ 1317.007090][T17094] elevator_change+0x1af/0x480 [ 1317.012409][T17094] elevator_set_none+0xb5/0x140 [ 1317.017813][T17094] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1317.024183][T17094] nbd_start_device+0x189/0xb30 [ 1317.029595][T17094] nbd_genl_connect+0x1597/0x1c10 [ 1317.035179][T17094] genl_family_rcv_msg_doit+0x233/0x340 [ 1317.041287][T17094] genl_rcv_msg+0x614/0x7a0 [ 1317.046438][T17094] netlink_rcv_skb+0x226/0x4a0 [ 1317.051755][T17094] genl_rcv+0x28/0x40 [ 1317.056291][T17094] netlink_unicast+0x7bb/0x940 [ 1317.061623][T17094] netlink_sendmsg+0x813/0xb40 [ 1317.066939][T17094] ____sys_sendmsg+0x9b9/0xa20 [ 1317.072258][T17094] ___sys_sendmsg+0x2a5/0x360 [ 1317.077484][T17094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.082972][T17094] do_syscall_64+0x174/0x580 [ 1317.088147][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.094604][T17094] [ 1317.094604][T17094] -> #5 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 1317.103294][T17094] blk_alloc_queue+0x544/0x690 [ 1317.108625][T17094] __blk_mq_alloc_disk+0x194/0x390 [ 1317.114313][T17094] nbd_dev_add+0x494/0xb60 [ 1317.119303][T17094] nbd_init+0x15f/0x1e0 [ 1317.124020][T17094] do_one_initcall+0x250/0x870 [ 1317.129349][T17094] do_initcall_level+0x10a/0x1a0 [ 1317.134869][T17094] do_initcalls+0x59/0xa0 [ 1317.139750][T17094] kernel_init_freeable+0x29d/0x3e0 [ 1317.145499][T17094] kernel_init+0x1d/0x1d0 [ 1317.150393][T17094] ret_from_fork+0x514/0xb70 [ 1317.155533][T17094] ret_from_fork_asm+0x1a/0x30 [ 1317.160943][T17094] [ 1317.160943][T17094] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1317.168225][T17094] fs_reclaim_acquire+0x71/0x100 [ 1317.173727][T17094] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1317.180090][T17094] __alloc_skb+0x1d7/0x7a0 [ 1317.185078][T17094] __ip6_append_data+0x2ea3/0x4080 [ 1317.190851][T17094] ip6_append_data+0x108/0x270 [ 1317.196182][T17094] rawv6_sendmsg+0x1298/0x18c0 [ 1317.201506][T17094] ____sys_sendmsg+0x853/0xa20 [ 1317.206817][T17094] ___sys_sendmsg+0x2a5/0x360 [ 1317.212059][T17094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.217546][T17094] do_syscall_64+0x174/0x580 [ 1317.222679][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.229144][T17094] [ 1317.229144][T17094] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1317.236914][T17094] lock_sock_nested+0x41/0x100 [ 1317.242233][T17094] inet_shutdown+0x6a/0x390 [ 1317.247289][T17094] nbd_mark_nsock_dead+0x2cb/0x550 [ 1317.252950][T17094] sock_shutdown+0x15e/0x260 [ 1317.258094][T17094] nbd_clear_sock+0x24/0x170 [ 1317.263240][T17094] nbd_config_put+0x35b/0x660 [ 1317.268477][T17094] nbd_genl_connect+0x18f7/0x1c10 [ 1317.274084][T17094] genl_family_rcv_msg_doit+0x233/0x340 [ 1317.280214][T17094] genl_rcv_msg+0x614/0x7a0 [ 1317.285281][T17094] netlink_rcv_skb+0x226/0x4a0 [ 1317.290624][T17094] genl_rcv+0x28/0x40 [ 1317.295167][T17094] netlink_unicast+0x7bb/0x940 [ 1317.300503][T17094] netlink_sendmsg+0x813/0xb40 [ 1317.305865][T17094] ____sys_sendmsg+0x9b9/0xa20 [ 1317.311211][T17094] ___sys_sendmsg+0x2a5/0x360 [ 1317.316437][T17094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.321916][T17094] do_syscall_64+0x174/0x580 [ 1317.327056][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.333497][T17094] [ 1317.333497][T17094] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1317.341171][T17094] __mutex_lock+0x19d/0x1590 [ 1317.346313][T17094] nbd_queue_rq+0x373/0x1150 [ 1317.351546][T17094] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1317.357646][T17094] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1317.364525][T17094] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1317.371064][T17094] blk_mq_run_hw_queue+0x348/0x4f0 [ 1317.376727][T17094] blk_mq_dispatch_list+0xd11/0xe10 [ 1317.382487][T17094] blk_mq_flush_plug_list+0x45f/0x540 [ 1317.388409][T17094] __blk_flush_plug+0x3ed/0x4d0 [ 1317.393806][T17094] __submit_bio+0x465/0x560 [ 1317.398862][T17094] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1317.405737][T17094] block_read_full_folio+0x599/0x830 [ 1317.411594][T17094] filemap_read_folio+0x12c/0x3a0 [ 1317.417178][T17094] do_read_cache_folio+0x354/0x590 [ 1317.422844][T17094] read_part_sector+0xb6/0x2b0 [ 1317.428159][T17094] adfspart_check_ICS+0xb1/0x960 [ 1317.433658][T17094] bdev_disk_changed+0x82b/0x1780 [ 1317.439238][T17094] blkdev_get_whole+0x372/0x510 [ 1317.444648][T17094] bdev_open+0x324/0xd70 [ 1317.449454][T17094] blkdev_open+0x461/0x600 [ 1317.454417][T17094] do_dentry_open+0x816/0x1380 [ 1317.459736][T17094] vfs_open+0x3b/0x340 [ 1317.464354][T17094] path_openat+0x2e3b/0x3890 [ 1317.469499][T17094] do_file_open+0x23e/0x4a0 [ 1317.474634][T17094] do_sys_openat2+0x113/0x200 [ 1317.479857][T17094] __x64_sys_openat+0x138/0x170 [ 1317.485254][T17094] do_syscall_64+0x174/0x580 [ 1317.490393][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.496830][T17094] [ 1317.496830][T17094] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1317.504158][T17094] __mutex_lock+0x19d/0x1590 [ 1317.509296][T17094] nbd_queue_rq+0xc1/0x1150 [ 1317.514351][T17094] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1317.520445][T17094] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1317.527320][T17094] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1317.533853][T17094] blk_mq_run_hw_queue+0x348/0x4f0 [ 1317.539526][T17094] blk_mq_dispatch_list+0xd11/0xe10 [ 1317.545289][T17094] blk_mq_flush_plug_list+0x45f/0x540 [ 1317.551307][T17094] __blk_flush_plug+0x3ed/0x4d0 [ 1317.556730][T17094] __submit_bio+0x465/0x560 [ 1317.561794][T17094] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1317.567989][T17094] block_read_full_folio+0x599/0x830 [ 1317.573826][T17094] filemap_read_folio+0x12c/0x3a0 [ 1317.579407][T17094] do_read_cache_folio+0x354/0x590 [ 1317.585072][T17094] read_part_sector+0xb6/0x2b0 [ 1317.590393][T17094] adfspart_check_ICS+0xb1/0x960 [ 1317.595873][T17094] bdev_disk_changed+0x82b/0x1780 [ 1317.601442][T17094] blkdev_get_whole+0x372/0x510 [ 1317.606838][T17094] bdev_open+0x324/0xd70 [ 1317.611628][T17094] blkdev_open+0x461/0x600 [ 1317.616590][T17094] do_dentry_open+0x816/0x1380 [ 1317.621901][T17094] vfs_open+0x3b/0x340 [ 1317.626511][T17094] path_openat+0x2e3b/0x3890 [ 1317.631651][T17094] do_file_open+0x23e/0x4a0 [ 1317.636707][T17094] do_sys_openat2+0x113/0x200 [ 1317.641931][T17094] __x64_sys_openat+0x138/0x170 [ 1317.647330][T17094] do_syscall_64+0x174/0x580 [ 1317.652471][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.658905][T17094] [ 1317.658905][T17094] -> #0 (set->srcu){.+.+}-{0:0}: [ 1317.666056][T17094] __lock_acquire+0x1520/0x2cd0 [ 1317.671458][T17094] lock_sync+0x9d/0x120 [ 1317.676178][T17094] __synchronize_srcu+0xc9/0x2f0 [ 1317.681655][T17094] elevator_switch+0x1e8/0x7b0 [ 1317.686965][T17094] elevator_change+0x2fa/0x480 [ 1317.692277][T17094] elevator_set_default+0x375/0x440 [ 1317.698017][T17094] blk_register_queue+0x3f3/0x4e0 [ 1317.703592][T17094] __add_disk+0x6cb/0xe30 [ 1317.708491][T17094] add_disk_fwnode+0xfb/0x4b0 [ 1317.713724][T17094] nbd_dev_add+0x733/0xb60 [ 1317.718689][T17094] nbd_genl_connect+0x992/0x1c10 [ 1317.724178][T17094] genl_family_rcv_msg_doit+0x233/0x340 [ 1317.730366][T17094] genl_rcv_msg+0x614/0x7a0 [ 1317.735421][T17094] netlink_rcv_skb+0x226/0x4a0 [ 1317.740731][T17094] genl_rcv+0x28/0x40 [ 1317.745269][T17094] netlink_unicast+0x7bb/0x940 [ 1317.750594][T17094] netlink_sendmsg+0x813/0xb40 [ 1317.755925][T17094] ____sys_sendmsg+0x9b9/0xa20 [ 1317.761239][T17094] ___sys_sendmsg+0x2a5/0x360 [ 1317.766546][T17094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.772028][T17094] do_syscall_64+0x174/0x580 [ 1317.777178][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.783717][T17094] [ 1317.783717][T17094] other info that might help us debug this: [ 1317.783717][T17094] [ 1317.793961][T17094] Chain exists of: [ 1317.793961][T17094] set->srcu --> &q->q_usage_counter(io)#56 --> &q->elevator_lock [ 1317.793961][T17094] [ 1317.807651][T17094] Possible unsafe locking scenario: [ 1317.807651][T17094] [ 1317.815123][T17094] CPU0 CPU1 [ 1317.820679][T17094] ---- ---- [ 1317.826072][T17094] lock(&q->elevator_lock); [ 1317.830693][T17094] lock(&q->q_usage_counter(io)#56); [ 1317.838622][T17094] lock(&q->elevator_lock); [ 1317.845758][T17094] sync(set->srcu); [ 1317.849678][T17094] [ 1317.849678][T17094] *** DEADLOCK *** [ 1317.849678][T17094] [ 1317.857841][T17094] 6 locks held by syz.1.17944/17094: [ 1317.863144][T17094] #0: ffffffff8fe31888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1317.872480][T17094] #1: ffffffff8fe316c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1317.881592][T17094] #2: ffff888076e531c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 1317.891991][T17094] #3: ffff88802a6a6c80 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1317.901877][T17094] #4: ffff88802a6a6708 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1317.912820][T17094] #5: ffff88802a6a6bf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1317.922694][T17094] [ 1317.922694][T17094] stack backtrace: [ 1317.928612][T17094] CPU: 0 UID: 0 PID: 17094 Comm: syz.1.17944 Not tainted syzkaller #0 PREEMPT(full) [ 1317.928635][T17094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1317.928647][T17094] Call Trace: [ 1317.928656][T17094] [ 1317.928667][T17094] dump_stack_lvl+0xe8/0x150 [ 1317.928691][T17094] print_circular_bug+0x2e1/0x300 [ 1317.928718][T17094] check_noncircular+0x12e/0x150 [ 1317.928745][T17094] __lock_acquire+0x1520/0x2cd0 [ 1317.928765][T17094] ? check_noncircular+0xda/0x150 [ 1317.928791][T17094] ? lockdep_unlock+0x5d/0xd0 [ 1317.928806][T17094] ? __lock_acquire+0x13e8/0x2cd0 [ 1317.928826][T17094] ? __lock_acquire+0x13e8/0x2cd0 [ 1317.928847][T17094] ? __synchronize_srcu+0xb5/0x2f0 [ 1317.928864][T17094] lock_sync+0x9d/0x120 [ 1317.928882][T17094] ? __synchronize_srcu+0xb5/0x2f0 [ 1317.928902][T17094] __synchronize_srcu+0xc9/0x2f0 [ 1317.928933][T17094] ? __pfx___synchronize_srcu+0x10/0x10 [ 1317.928950][T17094] ? do_raw_spin_lock+0x12b/0x2f0 [ 1317.928981][T17094] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1317.929000][T17094] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1317.929029][T17094] ? synchronize_srcu+0x20a/0x260 [ 1317.929047][T17094] elevator_switch+0x1e8/0x7b0 [ 1317.929091][T17094] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1317.929116][T17094] elevator_change+0x2fa/0x480 [ 1317.929136][T17094] ? do_raw_spin_unlock+0xf5/0x210 [ 1317.929164][T17094] elevator_set_default+0x375/0x440 [ 1317.929186][T17094] ? __pfx_elevator_set_default+0x10/0x10 [ 1317.929212][T17094] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1317.929243][T17094] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1317.929263][T17094] blk_register_queue+0x3f3/0x4e0 [ 1317.929290][T17094] __add_disk+0x6cb/0xe30 [ 1317.929320][T17094] add_disk_fwnode+0xfb/0x4b0 [ 1317.929349][T17094] nbd_dev_add+0x733/0xb60 [ 1317.929378][T17094] ? __pfx_nbd_dev_add+0x10/0x10 [ 1317.929413][T17094] ? bpf_lsm_capable+0x9/0x20 [ 1317.929431][T17094] ? security_capable+0x7e/0x2c0 [ 1317.929457][T17094] ? radix_tree_lookup+0x240/0x290 [ 1317.929486][T17094] nbd_genl_connect+0x992/0x1c10 [ 1317.929516][T17094] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1317.929543][T17094] ? rcu_is_watching+0x15/0xb0 [ 1317.929566][T17094] ? trace_kmalloc+0x2a/0xf0 [ 1317.929595][T17094] ? __nla_parse+0x40/0x60 [ 1317.929617][T17094] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1317.929646][T17094] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1317.929677][T17094] genl_family_rcv_msg_doit+0x233/0x340 [ 1317.929707][T17094] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1317.929739][T17094] ? __lock_acquire+0x683/0x2cd0 [ 1317.929762][T17094] genl_rcv_msg+0x614/0x7a0 [ 1317.929790][T17094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1317.929815][T17094] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1317.929847][T17094] netlink_rcv_skb+0x226/0x4a0 [ 1317.929867][T17094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1317.929892][T17094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1317.929919][T17094] ? down_read+0x270/0x2e0 [ 1317.929941][T17094] ? genl_rcv+0xd/0x40 [ 1317.929966][T17094] genl_rcv+0x28/0x40 [ 1317.929988][T17094] netlink_unicast+0x7bb/0x940 [ 1317.930023][T17094] netlink_sendmsg+0x813/0xb40 [ 1317.930047][T17094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.930075][T17094] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1317.930103][T17094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1317.930127][T17094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.930148][T17094] ____sys_sendmsg+0x9b9/0xa20 [ 1317.930172][T17094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.930196][T17094] ? import_iovec+0x73/0xa0 [ 1317.930218][T17094] ___sys_sendmsg+0x2a5/0x360 [ 1317.930236][T17094] ? __lock_acquire+0x683/0x2cd0 [ 1317.930257][T17094] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.930279][T17094] ? futex_wait+0x2a2/0x390 [ 1317.930318][T17094] ? __fget_files+0x2a/0x420 [ 1317.930340][T17094] ? __fget_files+0x3a2/0x420 [ 1317.930368][T17094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.930388][T17094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1317.930412][T17094] ? rcu_is_watching+0x15/0xb0 [ 1317.930437][T17094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.930457][T17094] do_syscall_64+0x174/0x580 [ 1317.930477][T17094] ? trace_irq_disable+0x3b/0x140 [ 1317.930505][T17094] ? clear_bhb_loop+0x40/0x90 [ 1317.930526][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.930545][T17094] RIP: 0033:0x7f05b239ce59 [ 1317.930564][T17094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.930580][T17094] RSP: 002b:00007f05b31e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.930602][T17094] RAX: ffffffffffffffda RBX: 00007f05b2616180 RCX: 00007f05b239ce59 [ 1317.930617][T17094] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000c [ 1317.930632][T17094] RBP: 00007f05b2432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1317.930646][T17094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.930659][T17094] R13: 00007f05b2616218 R14: 00007f05b2616180 R15: 00007ffcc0c137a8 [ 1317.930683][T17094] [ 1318.502321][T17101] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1318.509133][T17101] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1318.571812][T17098] tipc: Resetting bearer [ 1318.576569][T17094] nbd1: detected capacity change from 0 to 63 [ 1318.585219][T17099] block nbd1: NBD_DISCONNECT [ 1318.634750][T17099] block nbd1: Disconnected due to user request. [ 1318.670113][T17099] block nbd1: shutting down sockets [ 1318.686216][ C0] blk_print_req_error: 138 callbacks suppressed [ 1318.686238][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.701677][ C0] buffer_io_error: 138 callbacks suppressed [ 1318.701695][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1318.711256][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.724593][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1318.732626][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.741735][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1318.749563][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.758688][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1318.766658][T16316] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.779768][T16316] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1318.798269][T16316] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.809146][T16316] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1318.817952][T16316] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.827478][T16316] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1318.836449][T16316] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.846212][T16316] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1318.854432][T16316] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.864115][T16316] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1318.873574][T16316] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.884261][T16316] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1318.894663][T16316] ldm_validate_partition_table(): Disk read failed. [ 1318.904118][T16316] Dev nbd1: unable to read RDB block 0 [ 1318.912063][T16316] nbd1: unable to read partition table [ 1318.923527][T16316] ldm_validate_partition_table(): Disk read failed. [ 1318.932048][T16316] Dev nbd1: unable to read RDB block 0 [ 1318.938588][T16316] nbd1: unable to read partition table