last executing test programs: 6.641749353s ago: executing program 2 (id=4838): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) write(r5, &(0x7f00000001c0)="b4", 0x1) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000005000000000000000700000000004200", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x3d) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYRES8=r2, @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0xff, 0x2, 0x80, @empty, @mcast1, 0x20, 0x40, 0x4, 0x7f}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="000426bd7000fedbdf25020000005c000180140002006261746164765f736c6176655f300000080003000000000014000200626f6e645f736c6176655f3000000000140002006d61637365633000000000000000000014000200677265746170300000000000000000001400018008000100", @ANYRES32=r10, @ANYBLOB="77aec6a357136b4e53b9819c004a6718d59696f887b0e42cacaaadcb3b3d0060b6a4335d1ac587b0f3169b3225831ed582b00cae7cf4ac7add6982e8"], 0x84}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r11 = socket$inet6(0xa, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r12 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000000a06010100000000000000000300000908000944800000010900020073797a310000000005000100070000000800094000000005880008800c"], 0x13a}, 0x1, 0x0, 0x0, 0x90be2d9b0c93a716}, 0x48084) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@mcast2, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffc, 0x10001, 0x5, 0x8000000005, 0x5, 0xfffffffffffffffd}, {0x2, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private0, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x40, 0x0, 0x200000}}, 0xe8) sendmsg$key(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="020902090f00000029bd7000fcdbdf250800120000000300be6b6e000900a80006006c008b810000be0d00000000000000000000000000000000343f010000000000010000000000000000000000000000000102000100000004d3000ab00200000000010014000e00000002000100000600000005aa0000000060f3"], 0x78}}, 0x20000001) 6.222185602s ago: executing program 2 (id=4843): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) accept4$nfc_llcp(r0, 0x0, 0x0, 0x800) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (rerun: 64) 1.692355536s ago: executing program 1 (id=4898): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0xb2, 0x4) (rerun: 64) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24040000) (async) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xdb31}], 0x1, 0x40002102, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x260, 0xc8, 0x6c, 0x0, 0xc8, 0x0, 0x190, 0x258, 0x258, 0x190, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x20}, [0xff, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'dvmrp0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2c, 0x5, 0x2, 0x2}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x80, 0x0}}, [], [], 'pimreg1\x00', 'lo\x00', {0xff}}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x2c0) 1.510542309s ago: executing program 3 (id=4900): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="c00200003000010000000000fcdbdf2503"], 0x2c0}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9d, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r9, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b}, 0x6}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r9, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r10, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r6, 0x31, 0x0, @val=@iter={&(0x7f0000000380)=@map_fd=r7, 0x10}}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="000000000000000000aca932135450853f541a91f8eb165723520366796e6487cde1110724dfb997a268a1873bccf59ed6f496e64536bfe3dd906bb059d848a82a863fbd4411", 0x46}], 0x1}}], 0x1, 0x41) openat$cgroup_ro(r6, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) 1.342133006s ago: executing program 1 (id=4903): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000000}) bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x7, 0x24, 0x1}, 0x48) shutdown(r1, 0x0) epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 1.17812544s ago: executing program 0 (id=4906): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESDEC, @ANYRES8=r1], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4040050) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 1.160366204s ago: executing program 4 (id=4908): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.135760721s ago: executing program 1 (id=4909): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 1.00223041s ago: executing program 0 (id=4910): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402800c", @ANYRESOCT=r0, @ANYRES8=r0], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.001098027s ago: executing program 1 (id=4911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r1], 0x7c}}, 0x20000000) 999.928071ms ago: executing program 4 (id=4912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x68}, 0x1, 0x0, 0x0, 0x20048040}, 0x8044) (async) r2 = socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x16, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x20400) (async) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r3}, 0x0, 0x8, 0x4}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) write$ppp(r7, &(0x7f00000006c0)="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", 0x1000) (async) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r6, &(0x7f0000000040), &(0x7f0000000140)=0x14) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000075360c000000140003800c00038008000180840002000400010018000180140002007369743000"], 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 912.150222ms ago: executing program 4 (id=4913): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000000)=""/75, 0x4b}], 0x4}, 0x9af}], 0x2, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) 902.620709ms ago: executing program 0 (id=4914): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x100002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000380)=""/147, &(0x7f0000000440)=0x93) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r4], 0x7c}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 743.105928ms ago: executing program 2 (id=4915): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x59f8, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000804) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) (async) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) (async) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x34, r8, 0x60b, 0x0, 0x1, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) recvmmsg(r0, 0x0, 0x0, 0x100e0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newtclass={0xc4, 0x28, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0x7}, {}, {0x8, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5e}}, @tclass_kind_options=@c_htb={{0x8}, {0x58, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x4cf}, @TCA_HTB_RATE64={0xc, 0x6, 0x3ff}, @TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x1, 0xdba2, 0x1, 0x8001, 0x100}, {0x7, 0x0, 0x7, 0xfff7, 0x3, 0x7}, 0xffffff80, 0x9, 0x5, 0x800, 0x8}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x5db}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xf7, 0x7}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40091}, 0x81) 734.80495ms ago: executing program 3 (id=4916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000085000000a000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r5, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @GTPA_FAMILY={0x5, 0xd, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x58, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1a}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b41918", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00bd6dc444855ac489012cbd7000ffdbdf2541000000050018010d0000000800a00004000000081fffffff0000000808000000040000050019010e000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000) 578.571067ms ago: executing program 2 (id=4917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) 510.284678ms ago: executing program 0 (id=4918): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}], 0x1c) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) 507.203775ms ago: executing program 3 (id=4919): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 506.645102ms ago: executing program 4 (id=4920): accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) 456.43915ms ago: executing program 1 (id=4921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x9, 0x580, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40000) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8864}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)={0x28, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 419.690616ms ago: executing program 3 (id=4922): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffc}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 313.219803ms ago: executing program 0 (id=4923): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001640)={r3, r4, 0x4}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001640)={r3, r4, 0x4}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) (async) 312.180198ms ago: executing program 4 (id=4924): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x9b, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 297.890653ms ago: executing program 2 (id=4925): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 267.952121ms ago: executing program 3 (id=4926): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0xe0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb4, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "d103a44776f222112001a0c010ae45bea2e33079c2daa2c3bae012dd0fffa9d9780162349d518a8d7671110a5e94c98435c55fb344839862e8e5ec1d8c9e38deecdd294f717e668545ca0216d3e72f8f71efbb4cc433a5745949c87babbcd37e86163636c7823dcaa57f1571437e61e0bbf93fb082fb1ff4c068a19dcbbd6fed13d9e8a4d9b641e7b6fc386f7422ea32e63cc1d2b1241fcc4d38"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a0101"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r11, 0xfffffffc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r10, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8088) 153.801216ms ago: executing program 0 (id=4927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600010000000000000000000a00c3"], 0x18}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) close(r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x1000, 0x18, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast2, 0x80, 0x20, 0x2}}) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1c, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x91}, @map_fd={0x18, 0xd92162ae69a0a5c8, 0x1, 0x0, r1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x70}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe81b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0xfffffff6, 0xd2, &(0x7f0000000580)=""/210, 0x41000, 0x12, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r7, r8], &(0x7f0000000900)=[{0x1, 0x5, 0x8, 0xa}, {0x4, 0x4, 0x2, 0x8}], 0x10, 0xad}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r10, 0x10c, 0x8, 0x0, &(0x7f0000001380)) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 123.002204ms ago: executing program 4 (id=4928): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) (async) r1 = socket$inet6(0xa, 0x4, 0x7) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) preadv(r10, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000300)=""/10, 0xa}], 0x2, 0x1, 0x35) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 64) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000240)={0x2, 0x0, 0xfffffeff, 0x0, 0xfff8, 0x3, 0x0, &(0x7f0000000180)=[{0x15, 0x0, 0xfffffff7}, {0x12, 0x1ff, 0x200}, {0x7, 0x1ff, 0xf}]}) (async, rerun: 64) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) (async) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r15, 0x2, 0x70bd2e, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 60.867232ms ago: executing program 3 (id=4929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$inet6(0xa, 0x3, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x36) 10.465286ms ago: executing program 1 (id=4930): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x80, 0x0}}], 0x2, 0x41) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f00000005c0)) connect$can_j1939(r1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) close(r4) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x80, 0x0}}], 0x2, 0x41) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f00000005c0)) (async) connect$can_j1939(r1, 0x0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 0s ago: executing program 2 (id=4931): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0xfd, 0x116}, {0x6}]}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43d589a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbee112c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x535ceb71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28597ae8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46c8d05a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67496ce7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9ddcaed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x163e43ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x327525a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ac764f0}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x24000041) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): ady. Interface wpan1 may have been left with an inconsistent configuration, please check. [ 486.766705][ T5838] lo speed is unknown, defaulting to 1000 [ 486.773529][T17147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.789298][ T5838] syú2: Port: 1 Link ACTIVE [ 486.804356][T17147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.980018][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'. [ 489.005688][T17565] tipc: Started in network mode [ 489.010587][T17565] tipc: Node identity 6e886362af74, cluster identity 4711 [ 489.018142][T17565] tipc: Enabled bearer , priority 0 [ 489.030073][T17147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.042574][T17147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.063054][T17553] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 489.086194][T17569] syzkaller0: entered promiscuous mode [ 489.097798][T17569] syzkaller0: entered allmulticast mode [ 489.120818][T17582] tipc: Resetting bearer [ 489.153232][T17551] tipc: Resetting bearer [ 489.230796][T17551] tipc: Disabling bearer [ 489.482805][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 489.521739][T17642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3158'. [ 489.557305][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.589731][T17642] veth1_vlan (unregistering): left allmulticast mode [ 489.933045][T17664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3163'. [ 489.956918][T17147] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.988755][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.995940][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.036361][T17664] tipc: Enabled bearer , priority 0 [ 490.048901][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'. [ 490.102680][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.109906][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.246314][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.577912][T17699] veth1_macvtap: renamed from vlan0 [ 490.632214][T17663] tipc: Disabling bearer [ 490.649370][T17703] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3170'. [ 490.682303][T17698] lo speed is unknown, defaulting to 1000 [ 491.649522][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 491.750801][T17751] wg2: Caught tx_queue_len zero misconfig [ 491.802710][T17739] syzkaller1: entered promiscuous mode [ 491.833760][T17739] syzkaller1: entered allmulticast mode [ 492.052585][T17147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.536885][T17147] veth0_vlan: entered promiscuous mode [ 492.605633][T17147] veth1_vlan: entered promiscuous mode [ 492.770892][T17807] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3187'. [ 492.792770][T17147] veth0_macvtap: entered promiscuous mode [ 492.822221][T17147] veth1_macvtap: entered promiscuous mode [ 492.854070][T17147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.911121][T17147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.972261][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.011310][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 493.022339][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.041864][T17820] openvswitch: netlink: Flow actions attr not present in new flow. [ 493.064548][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.078895][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.098907][T17822] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3192'. [ 493.151627][T17831] netlink: 'syz.0.3192': attribute type 8 has an invalid length. [ 493.165576][T17824] syzkaller0: entered promiscuous mode [ 493.179121][T17824] syzkaller0: entered allmulticast mode [ 493.201422][T17824] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3190'. [ 493.318850][T17837] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3193'. [ 493.498424][T16554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.523746][T16554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.637876][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.651904][T17850] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3199'. [ 493.666046][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.829416][T17854] netlink: 'syz.1.3200': attribute type 4 has an invalid length. [ 494.121859][T17873] netlink: 'syz.4.3205': attribute type 9 has an invalid length. [ 494.142071][T17876] netlink: 'syz.1.3204': attribute type 4 has an invalid length. [ 494.296671][T17883] vcan0: tx address claim with dlc 0 [ 494.451236][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.463888][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.487600][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.499531][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.509208][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 495.138964][T17933] __nla_validate_parse: 3 callbacks suppressed [ 495.138984][T17933] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3217'. [ 495.173474][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'. [ 495.290176][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'. [ 495.306226][ T82] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.336197][ T82] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.362261][ T82] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.560183][ T82] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.611320][ T82] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.651782][T17963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3223'. [ 495.664478][ T82] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.697859][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3223'. [ 495.750223][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3223'. [ 495.808792][ T82] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.842845][ T82] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.887435][ T82] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 496.021565][ T82] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.072901][ T82] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.120529][ T82] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 496.152752][T17997] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3229'. [ 496.203698][T17892] lo speed is unknown, defaulting to 1000 [ 496.211295][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3229'. [ 496.575436][ T5638] Bluetooth: hci4: command tx timeout [ 496.608562][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 496.643480][T18025] netlink: 'syz.0.3232': attribute type 29 has an invalid length. [ 496.669095][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 496.823404][T18025] bond13: entered promiscuous mode [ 497.232265][ T82] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 497.256177][ T82] bond13 (unregistering): (slave ip6gre3): Releasing backup interface [ 497.265630][ T82] ip6gre3 (unregistering): left promiscuous mode [ 497.437595][ T82] bond5 (unregistering): (slave geneve2): Releasing active interface [ 497.491499][ T82] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 497.507073][ T82] bridge1 (unregistering): left promiscuous mode [ 497.513481][ T82] bridge1 (unregistering): left allmulticast mode [ 497.532612][ T82] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 497.541445][ T82] bridge3 (unregistering): left promiscuous mode [ 497.574082][ T82] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 497.583471][ T82] bridge6 (unregistering): left promiscuous mode [ 497.590471][ T82] bridge6 (unregistering): left allmulticast mode [ 497.610127][ T82] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 497.629381][ T82] bridge7 (unregistering): left promiscuous mode [ 497.679819][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.692309][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.711530][ T82] bond0 (unregistering): (slave team0): Releasing backup interface [ 497.720760][ T82] bond0 (unregistering): Released all slaves [ 497.734023][ T82] bond1 (unregistering): Released all slaves [ 497.753505][ T82] bond2 (unregistering): Released all slaves [ 497.785740][ T82] bond3 (unregistering): Released all slaves [ 497.808212][ T82] bond4 (unregistering): Released all slaves [ 497.831639][ T82] bond5 (unregistering): Released all slaves [ 497.866083][ T82] bond6 (unregistering): Released all slaves [ 497.882541][ T82] bond7 (unregistering): Released all slaves [ 497.906232][ T82] bond8 (unregistering): Released all slaves [ 497.919575][ T82] bond9 (unregistering): Released all slaves [ 497.932420][ T82] bond10 (unregistering): Released all slaves [ 497.949696][ T82] bond11 (unregistering): Released all slaves [ 497.973921][ T82] bond12 (unregistering): Released all slaves [ 497.987619][ T82] bond13 (unregistering): Released all slaves [ 498.155295][ T82] : left promiscuous mode [ 498.247066][T17892] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.254367][T17892] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.262265][T17892] bridge_slave_0: entered allmulticast mode [ 498.269877][T17892] bridge_slave_0: entered promiscuous mode [ 498.277774][ T82] tipc: Left network mode [ 498.278510][T17892] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.289798][T17892] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.298002][T17892] bridge_slave_1: entered allmulticast mode [ 498.306162][T17892] bridge_slave_1: entered promiscuous mode [ 498.341334][T17892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.377555][T17892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.404124][T17892] team0: Port device team_slave_0 added [ 498.412626][T17892] team0: Port device team_slave_1 added [ 498.440937][T17892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.454327][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.480880][T17892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.503501][T17892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.510603][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.537464][T17892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.581719][T17892] hsr_slave_0: entered promiscuous mode [ 498.588949][T17892] hsr_slave_1: entered promiscuous mode [ 498.595497][T17892] debugfs: 'hsr0' already exists in 'hsr' [ 498.601330][T17892] Cannot create hsr debugfs directory [ 498.622043][ T82] hsr_slave_0: left promiscuous mode [ 498.627866][ T82] hsr_slave_1: left promiscuous mode [ 498.633585][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.641089][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.648913][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.657460][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.665465][ T5638] Bluetooth: hci4: command tx timeout [ 498.680973][ T82] veth0_macvtap: left promiscuous mode [ 498.686714][ T82] veth1_vlan: left allmulticast mode [ 498.692005][ T82] veth1_vlan: left promiscuous mode [ 498.697697][ T82] veth0_vlan: left promiscuous mode [ 498.893700][ T82] team0 (unregistering): Port device team_slave_1 removed [ 498.912172][ T82] team0 (unregistering): Port device team_slave_0 removed [ 499.245704][ T82] IPVS: stop unused estimator thread 0... [ 499.403157][T18013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.558296][T18083] IPv6: addrconf: prefix option has invalid lifetime [ 499.821130][T18087] openvswitch: netlink: Flow actions attr not present in new flow. [ 500.047688][T17892] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.127042][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.147927][T17892] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 500.183031][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.202386][T17892] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.235286][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.261799][T17892] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.286428][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.333268][T18133] __nla_validate_parse: 4 callbacks suppressed [ 500.333286][T18133] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3247'. [ 500.479603][T17892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.541954][T17892] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.592608][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.599810][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.610575][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3249'. [ 500.681357][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.688601][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.735642][ T5638] Bluetooth: hci4: command tx timeout [ 500.958743][T18163] syzkaller0: entered promiscuous mode [ 500.964260][T18163] syzkaller0: entered allmulticast mode [ 501.005018][T18163] 0: reclassify loop, rule prio 0, protocol 800 [ 501.022693][T18163] pim6reg: entered allmulticast mode [ 501.053349][T18173] macvlan0: entered promiscuous mode [ 501.082362][T18173] macvlan0: entered allmulticast mode [ 501.432326][T18194] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3260'. [ 501.650529][ T5638] block nbd0: Receive control failed (result -32) [ 501.790459][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 501.828240][T17892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.890095][T18214] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 501.931411][T18214] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3263'. [ 502.035522][T17892] veth0_vlan: entered promiscuous mode [ 502.043011][T18213] syzkaller0: entered promiscuous mode [ 502.060927][T18213] syzkaller0: entered allmulticast mode [ 502.150111][T18223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3267'. [ 502.153402][T18225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3268'. [ 502.194895][T17892] veth1_vlan: entered promiscuous mode [ 502.288506][T17892] veth0_macvtap: entered promiscuous mode [ 502.314111][T17892] veth1_macvtap: entered promiscuous mode [ 502.361548][T17892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.387013][T17892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.421044][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.458247][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.485908][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.545251][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.621871][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.629476][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.709423][T18251] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3276'. [ 502.740090][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.759739][T18253] netlink: 'syz.3.3278': attribute type 8 has an invalid length. [ 502.764572][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.770881][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 502.790136][T18253] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.797796][T18253] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.814956][ T5638] Bluetooth: hci4: command tx timeout [ 502.841659][T18251] kthread_run failed with err -4 [ 502.934081][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.967385][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.349868][T18282] team0 (unregistering): Port device team_slave_0 removed [ 503.422486][T18282] team0 (unregistering): Port device team_slave_1 removed [ 503.478645][T18282] team0 (unregistering): Port device bridge4 removed [ 503.607108][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.624614][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.642017][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.662073][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.672834][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.883894][T18306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3291'. [ 504.075128][T18318] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 504.159892][T18318] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 504.208883][T18323] netlink: 'syz.4.3295': attribute type 39 has an invalid length. [ 504.235805][T18318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.274170][T18318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.302717][T18318] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 504.315575][T18318] bond0 (unregistering): Released all slaves [ 504.641050][T18296] lo speed is unknown, defaulting to 1000 [ 504.892095][T18354] sock: sock_timestamping_bind_phc: sock not bind to device [ 505.246993][T18296] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.265563][T18296] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.280239][T18296] bridge_slave_0: entered allmulticast mode [ 505.296560][T18296] bridge_slave_0: entered promiscuous mode [ 505.320316][T18296] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.351231][T18296] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.377118][T18377] netlink: 'syz.2.3307': attribute type 9 has an invalid length. [ 505.392463][T18296] bridge_slave_1: entered allmulticast mode [ 505.413713][T18296] bridge_slave_1: entered promiscuous mode [ 505.705524][ T5644] Bluetooth: hci1: command tx timeout [ 505.926378][T18385] netlink: 'syz.3.3310': attribute type 4 has an invalid length. [ 505.958438][T18296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.996278][T18296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.087316][T18296] team0: Port device team_slave_0 added [ 506.098081][T18296] team0: Port device team_slave_1 added [ 506.197351][T18296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.213269][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.266418][T18296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.319197][T18296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.345352][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.390746][T18296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.410336][T18411] syzkaller0: entered promiscuous mode [ 506.429367][T18411] syzkaller0: entered allmulticast mode [ 506.610641][T18420] sctp: [Deprecated]: syz.4.3322 (pid 18420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.610641][T18420] Use struct sctp_sack_info instead [ 506.640220][T18296] hsr_slave_0: entered promiscuous mode [ 506.649247][T18296] hsr_slave_1: entered promiscuous mode [ 506.655744][T18296] debugfs: 'hsr0' already exists in 'hsr' [ 506.661647][T18296] Cannot create hsr debugfs directory [ 507.088563][T18296] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.101909][T18296] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.121571][T18296] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.268560][T18447] __nla_validate_parse: 6 callbacks suppressed [ 507.268560][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3331'. [ 507.268577][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3331'. [ 507.309998][T18296] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.339928][T18296] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.353352][T18296] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.403125][T18459] Unsupported ieee802154 address type: 0 [ 507.490657][T18296] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.517249][T18296] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.563180][T18296] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.573058][T18469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3338'. [ 507.573091][T18469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3338'. [ 507.628901][T18469] gretap0: entered promiscuous mode [ 507.638598][T18469] gretap0: left promiscuous mode [ 507.653317][T18296] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.663274][T18296] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.675465][T18296] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.777030][ T5644] Bluetooth: hci1: command tx timeout [ 507.963732][T18296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.988266][T18296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.996822][T18296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 508.007568][T18296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.020520][T18296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 508.032688][T18296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.042119][T18296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 508.055879][T18296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.267066][T18296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.289380][T18495] xt_socket: unknown flags 0x8 [ 508.306609][T18296] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.339764][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.346982][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.408321][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.415537][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.468050][T18505] syzkaller1: entered promiscuous mode [ 508.475643][T18505] syzkaller1: entered allmulticast mode [ 508.601519][T18513] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3349'. [ 508.670913][T18516] netlink: 'syz.2.3350': attribute type 1 has an invalid length. [ 508.847170][T18527] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3353'. [ 508.866689][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 509.046960][T18536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.253590][T18543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3357'. [ 509.287573][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 509.701373][T18296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.834189][T18296] veth0_vlan: entered promiscuous mode [ 509.856301][ T5644] Bluetooth: hci1: command tx timeout [ 509.882352][T18296] veth1_vlan: entered promiscuous mode [ 509.899001][T18568] netlink: 'syz.4.3364': attribute type 1 has an invalid length. [ 509.947064][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3363'. [ 510.247826][T18296] veth0_macvtap: entered promiscuous mode [ 510.299569][T18296] veth1_macvtap: entered promiscuous mode [ 510.408849][T18296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.483229][T18296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.556102][ T7497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.605142][ T7497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.633565][ T7497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.679952][ T7497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.980947][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.023748][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.235194][T16554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.264880][T16554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.379276][T18610] syzkaller0: entered promiscuous mode [ 511.404834][T18610] syzkaller0: entered allmulticast mode [ 511.703487][T18622] macvtap0: entered allmulticast mode [ 511.728896][T18622] veth0_macvtap: entered allmulticast mode [ 511.934979][ T5644] Bluetooth: hci1: command tx timeout [ 512.029431][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.047643][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.056694][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.069033][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.078544][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.580760][T18660] __nla_validate_parse: 4 callbacks suppressed [ 512.580777][T18660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3388'. [ 512.589417][T18662] Bluetooth: MGMT ver 1.23 [ 512.761629][T18660] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 512.816723][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 512.833850][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 512.935408][T18682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3393'. [ 513.135632][T18635] lo speed is unknown, defaulting to 1000 [ 513.537538][T18709] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3398'. [ 514.005965][T18740] ipt_REJECT: ECHOREPLY no longer supported. [ 514.019096][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'. [ 514.177325][ T5644] Bluetooth: hci0: command tx timeout [ 514.382033][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'. [ 514.409064][T18635] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.417940][T18635] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.425809][T18635] bridge_slave_0: entered allmulticast mode [ 514.437946][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'. [ 514.439395][T18635] bridge_slave_0: entered promiscuous mode [ 514.471905][T18635] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.485302][T18635] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.493140][T18635] bridge_slave_1: entered allmulticast mode [ 514.503710][T18635] bridge_slave_1: entered promiscuous mode [ 514.508331][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'. [ 514.579651][T18765] Cannot find add_set index 0 as target [ 514.596453][T18635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.645995][T18635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.717036][T18773] netlink: 'syz.1.3411': attribute type 10 has an invalid length. [ 514.734206][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 514.756217][T18773] openvswitch: netlink: Flow key attr not present in new flow. [ 514.761041][T18775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3412'. [ 514.782031][T18635] team0: Port device team_slave_0 added [ 514.801677][T18635] team0: Port device team_slave_1 added [ 514.885794][T18780] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3413'. [ 514.938360][T18635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.950603][T18635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.013113][T18635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.037037][T18780] bond0: Error: Cannot enslave bond to itself. [ 515.046000][T18635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.063885][T18635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.128914][T18635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.458808][T18635] hsr_slave_0: entered promiscuous mode [ 515.477407][T18635] hsr_slave_1: entered promiscuous mode [ 515.494053][T18635] debugfs: 'hsr0' already exists in 'hsr' [ 515.508362][T18635] Cannot create hsr debugfs directory [ 516.090591][T18854] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 516.113255][T18857] netlink: 'syz.3.3428': attribute type 1 has an invalid length. [ 516.164200][T18635] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.196024][T18635] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.255173][ T5644] Bluetooth: hci0: command tx timeout [ 516.415659][T18635] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.447699][T18635] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.510234][T18880] xt_nat: multiple ranges no longer supported [ 516.525077][T18881] netlink: 'syz.2.3432': attribute type 10 has an invalid length. [ 516.542013][T18635] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.555061][T18635] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.637693][T18635] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.673470][T18635] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.713525][T18886] syzkaller0: entered promiscuous mode [ 516.721120][T18886] syzkaller0: entered allmulticast mode [ 518.334560][ T5644] Bluetooth: hci0: command tx timeout [ 519.294996][T18870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.332356][T18635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 519.399788][T18635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.427065][T18635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 519.469314][T18635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.488304][T18898] __nla_validate_parse: 3 callbacks suppressed [ 519.488321][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 519.513405][T18896] syzkaller0: entered promiscuous mode [ 519.521058][T18896] syzkaller0: entered allmulticast mode [ 519.534016][T18635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 519.591900][T18635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 519.605850][T18910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3440'. [ 519.616017][T18910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3440'. [ 519.702989][T18635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 519.733220][T18635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 519.923604][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'. [ 520.077736][T18635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.122355][T18954] sctp: [Deprecated]: syz.3.3450 (pid 18954) Use of int in max_burst socket option. [ 520.122355][T18954] Use struct sctp_assoc_value instead [ 520.233819][T18635] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.273766][T16554] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.280976][T16554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.320123][T16554] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.327322][T16554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.381945][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 520.415166][ T5644] Bluetooth: hci0: command tx timeout [ 520.469323][T18962] team0 (unregistering): Port device team_slave_0 removed [ 520.492558][T18962] team0 (unregistering): Port device team_slave_1 removed [ 520.585310][T18978] openvswitch: netlink: Flow key attr not present in new flow. [ 520.711401][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3460'. [ 520.757068][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3460'. [ 520.781036][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 520.823129][T18989] pimreg: entered allmulticast mode [ 520.860694][T18994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3461'. [ 520.918678][T18986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.065686][T19000] nbd: must specify at least one socket [ 521.147257][T19001] netlink: 'syz.0.3464': attribute type 21 has an invalid length. [ 521.380356][T18635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.644618][T19008] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3467'. [ 521.977533][T18635] veth0_vlan: entered promiscuous mode [ 522.003777][T18635] veth1_vlan: entered promiscuous mode [ 522.081236][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.086750][T18635] veth0_macvtap: entered promiscuous mode [ 522.101934][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.118661][T18635] veth1_macvtap: entered promiscuous mode [ 522.230699][T18635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.349702][T18635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.418741][T16554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.437723][T16554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.474499][T16554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.496957][T16554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.801214][T19076] syzkaller0: entered promiscuous mode [ 522.821112][T19076] syzkaller0: entered allmulticast mode [ 522.890324][T19076] netlink: 'syz.1.3479': attribute type 17 has an invalid length. [ 522.967987][T19076] gretap0: entered promiscuous mode [ 522.994833][T19076] gretap0: left promiscuous mode [ 523.062431][ T7497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.090950][ T7497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.920110][ T7497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.953910][ T7497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.028969][ T9] IPVS: starting estimator thread 0... [ 525.048750][T19110] __nla_validate_parse: 3 callbacks suppressed [ 525.048786][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3489'. [ 525.053109][T19109] Cannot find del_set index 4 as target [ 525.110788][T19109] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3488'. [ 525.125280][T19112] IPVS: using max 29 ests per chain, 69600 per kthread [ 525.146081][T19109] nbd: illegal input index -8454144 [ 525.223467][T19126] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 525.250179][T19125] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 526.171376][T19164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3500'. [ 526.182114][T19163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.327845][T19173] netlink: 'syz.0.3503': attribute type 12 has an invalid length. [ 526.338123][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3503'. [ 526.353465][T19173] netlink: 'syz.0.3503': attribute type 12 has an invalid length. [ 526.353587][ T82] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.361731][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3503'. [ 526.373267][ T82] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.388792][ T82] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.411193][ T82] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.515829][T19176] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.342257][T19138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.356091][T19152] netlink: 'syz.2.3495': attribute type 4 has an invalid length. [ 528.616065][T19188] vlan2: entered promiscuous mode [ 528.622348][T19188] bridge0: entered promiscuous mode [ 528.629336][T19202] nbd: socks must be embedded in a SOCK_ITEM attr [ 528.704128][T19198] syzkaller0: entered promiscuous mode [ 528.712754][T19198] syzkaller0: entered allmulticast mode [ 528.720270][T19205] netlink: 'syz.0.3512': attribute type 1 has an invalid length. [ 528.736304][T19188] block nbd4: Unsupported socket: should be TCP or UNIX. [ 528.844536][T19205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.144725][T19211] bond1: (slave veth3): Enslaving as an active interface with a down link [ 529.174014][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3515'. [ 529.202256][T19205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 529.215529][T19205] bond1: (slave batadv1): making interface the new active one [ 529.235673][T19205] batadv1: entered promiscuous mode [ 529.250199][T19205] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 529.304218][T19218] bond1: (slave veth5): Enslaving as an active interface with a down link [ 529.313188][T19213] syzkaller1: entered promiscuous mode [ 529.322131][T19213] syzkaller1: entered allmulticast mode [ 529.493470][T19239] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 529.549122][T19239] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 529.617916][T19239] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 529.686592][T19239] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 529.707755][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3520'. [ 529.935341][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 530.000960][T19263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.032870][T19261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.126109][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3525'. [ 530.541851][T19300] netlink: 'syz.1.3534': attribute type 32 has an invalid length. [ 530.569294][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 530.637848][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3536'. [ 530.648148][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3536'. [ 530.709329][T19300] bond1: option coupled_control: invalid value (192) [ 530.722340][T19300] bond1 (unregistering): Released all slaves [ 530.899159][T19321] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 531.165958][T19337] netlink: 'syz.3.3545': attribute type 1 has an invalid length. [ 531.350002][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3549'. [ 531.451140][T19351] netlink: 'syz.3.3549': attribute type 1 has an invalid length. [ 531.460085][T19351] netlink: 'syz.3.3549': attribute type 2 has an invalid length. [ 531.483245][T19354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3550'. [ 531.513130][T19354] netlink: 'syz.4.3550': attribute type 2 has an invalid length. [ 531.548437][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 531.551636][T19354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3550'. [ 531.583463][T19360] netlink: 'syz.2.3552': attribute type 21 has an invalid length. [ 531.602547][T19360] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 531.633862][T19364] netlink: 'syz.0.3554': attribute type 1 has an invalid length. [ 531.712082][T19374] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3556'. [ 531.820277][T19364] bond3: entered promiscuous mode [ 531.839466][T19364] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.873260][T19385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3555'. [ 531.978174][T19389] netlink: 'syz.2.3559': attribute type 2 has an invalid length. [ 532.220820][T19389] lo speed is unknown, defaulting to 1000 [ 532.388289][T19413] tipc: Started in network mode [ 532.393344][T19413] tipc: Node identity 72f1288094fd, cluster identity 4711 [ 532.401146][T19413] tipc: Enabled bearer , priority 0 [ 532.459667][T19413] syzkaller0: entered promiscuous mode [ 532.471766][T19413] syzkaller0: entered allmulticast mode [ 532.510424][T19413] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 532.874767][T19440] tipc: Resetting bearer [ 532.881577][ T14] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xef [ 533.105872][T19411] tipc: Resetting bearer [ 533.154068][T19411] tipc: Disabling bearer [ 533.216677][T19475] netlink: 'syz.2.3580': attribute type 58 has an invalid length. [ 535.401109][T19490] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.471853][T19508] netlink: 'syz.4.3587': attribute type 17 has an invalid length. [ 535.503509][T19508] __nla_validate_parse: 8 callbacks suppressed [ 535.503529][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 535.576633][T19508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3587'. [ 535.682859][T19508] erspan0: entered promiscuous mode [ 535.717842][T19508] gretap0: entered promiscuous mode [ 536.159799][T19540] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3597'. [ 536.316756][T19550] syzkaller0: entered promiscuous mode [ 536.335310][T19550] syzkaller0: entered allmulticast mode [ 536.433200][T19556] lo speed is unknown, defaulting to 1000 [ 536.500903][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3603'. [ 537.021719][T19591] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 537.045221][T19591] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3613'. [ 537.167879][T19601] netlink: 'syz.0.3614': attribute type 1 has an invalid length. [ 537.230830][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'. [ 537.335456][T19606] netlink: 'syz.1.3617': attribute type 64 has an invalid length. [ 537.439744][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 537.834563][T19642] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 537.993269][T19657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.005761][T19654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.053389][T19653] bond1: entered promiscuous mode [ 538.063025][T19653] bond1: entered allmulticast mode [ 538.068931][T19653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.114345][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 538.162244][T19663] netlink: 'syz.2.3628': attribute type 1 has an invalid length. [ 538.184536][T19663] netlink: 'syz.2.3628': attribute type 2 has an invalid length. [ 538.217769][T19671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3631'. [ 538.239310][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'. [ 538.367342][T19677] netlink: 'syz.2.3633': attribute type 1 has an invalid length. [ 538.528637][T19677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.776310][T19703] netlink: 'syz.4.3640': attribute type 2 has an invalid length. [ 539.239546][T19729] netlink: 'syz.2.3648': attribute type 2 has an invalid length. [ 539.282026][T19726] netlink: 'syz.4.3647': attribute type 1 has an invalid length. [ 539.410548][T19726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.493633][T19730] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 539.510276][T19742] TCP: TCP_TX_DELAY enabled [ 539.607758][T19726] macvlan0: entered promiscuous mode [ 539.632014][T19726] macvlan0: entered allmulticast mode [ 539.666902][T19726] bond1: entered promiscuous mode [ 539.692108][T19726] veth0_to_bond: entered promiscuous mode [ 539.730637][T19726] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 539.765058][T19726] bond1: left promiscuous mode [ 539.783121][T19726] veth0_to_bond: left promiscuous mode [ 540.166371][T19787] netlink: 'syz.4.3662': attribute type 1 has an invalid length. [ 540.338933][T19795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.600291][T19800] bond1: (slave geneve2): making interface the new active one [ 540.652271][T19800] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 540.823518][T19829] syzkaller0: entered promiscuous mode [ 540.830903][T19829] syzkaller0: entered allmulticast mode [ 540.857257][T19833] __nla_validate_parse: 5 callbacks suppressed [ 540.857273][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3671'. [ 540.884777][T19829] xt_hashlimit: size too large, truncated to 1048576 [ 540.957128][T19833] team0: entered promiscuous mode [ 540.970835][T19833] team_slave_0: entered promiscuous mode [ 540.989529][T19833] team_slave_1: entered promiscuous mode [ 541.028370][ T29] audit: type=1804 audit(1782778174.555:4): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3673" name="/newroot/80/cgroup.controllers" dev="tmpfs" ino=422 res=1 errno=0 [ 541.053665][T19833] team0: left promiscuous mode [ 541.061518][T19833] team_slave_0: left promiscuous mode [ 541.088285][T19833] team_slave_1: left promiscuous mode [ 541.118502][ T29] audit: type=1800 audit(1782778174.555:5): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3673" name="cgroup.controllers" dev="tmpfs" ino=422 res=0 errno=0 [ 541.545649][T16554] batadv1: left promiscuous mode [ 541.600945][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'. [ 541.800376][T19880] xt_cgroup: path and classid specified [ 541.824663][T19857] syzkaller0: entered promiscuous mode [ 541.849110][T19857] syzkaller0: entered allmulticast mode [ 541.986878][T19883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.204343][T19892] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 542.603342][T19904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3685'. [ 542.616485][T19904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3685'. [ 542.898573][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.905851][ C0] bridge0: topology change detected, propagating [ 542.912551][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.919787][ C0] bridge0: topology change detected, propagating [ 544.476662][T19904] gretap0: entered promiscuous mode [ 544.484924][T19904] gretap0: left promiscuous mode [ 544.564747][T19925] IPv6: sit1: Disabled Multicast RS [ 544.585931][T19925] sit1: entered allmulticast mode [ 544.769677][T19940] validate_nla: 1 callbacks suppressed [ 544.769695][T19940] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 544.829994][T19941] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20000 [ 545.136104][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3694'. [ 545.251901][T19970] netlink: 'syz.1.3697': attribute type 10 has an invalid length. [ 545.317321][T19970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.359147][T19970] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 545.533598][T19982] netlink: 'syz.0.3700': attribute type 11 has an invalid length. [ 545.640065][T19986] syzkaller0: entered promiscuous mode [ 545.654875][T19986] syzkaller0: entered allmulticast mode [ 545.731572][T19984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3701'. [ 545.862100][T19997] netlink: 'syz.2.3706': attribute type 16 has an invalid length. [ 545.915255][T19997] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3706'. [ 545.959366][T20000] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3707'. [ 545.988454][T20000] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3707'. [ 546.011345][ T1030] bond0: (slave bond_slave_0): interface is now down [ 546.038748][T20003] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3709'. [ 546.056790][ T1030] bond0: (slave bond_slave_1): interface is now down [ 546.109439][T20012] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3710'. [ 546.190165][ T1030] bond0: now running without any active interface! [ 546.220227][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 546.275932][T20017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.383886][T20024] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 546.385566][ T9] syzkaller1: tun_net_xmit 90 [ 546.402551][T20024] syzkaller1: Linktype set failed because interface is up [ 546.561959][T20046] netlink: 'syz.3.3717': attribute type 1 has an invalid length. [ 546.587525][T20046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3717'. [ 546.626254][T20052] xt_hashlimit: size too large, truncated to 1048576 [ 547.183343][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 547.535700][T20102] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3733'. [ 547.624164][T20102] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3733'. [ 547.785271][T20116] openvswitch: netlink: Missing key (keys=40, expected=100) [ 548.207823][T20143] netlink: 'syz.1.3747': attribute type 64 has an invalid length. [ 548.279705][T20149] syzkaller1: entered promiscuous mode [ 548.308246][T20149] syzkaller1: entered allmulticast mode [ 548.342981][T20153] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 548.647726][T20173] netlink: 'syz.1.3752': attribute type 9 has an invalid length. [ 548.859633][T20185] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 548.943908][T20185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.953686][T20185] bond2: (slave bond3): making interface the new active one [ 548.962105][T20185] bond2: (slave bond3): Enslaving as an active interface with an up link [ 549.286990][T20200] bond1: option min_links: invalid value (18446744073709551614) [ 549.342311][T20200] bond1: option min_links: allowed values 0 - 2147483647 [ 549.427377][T20200] bond1 (unregistering): Released all slaves [ 549.504007][T20206] tipc: Enabling of bearer rejected, failed to enable media [ 549.749588][T20226] netlink: 'syz.3.3763': attribute type 21 has an invalid length. [ 550.415379][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.439751][T20255] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 550.671480][T20297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.738973][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.752749][T20297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.845883][T20297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.899287][T20297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.921878][T20297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.971051][T20290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.034023][T20315] bond2: option all_slaves_active: invalid value (222) [ 551.045664][T20315] bond2 (unregistering): Released all slaves [ 551.082725][T20329] __nla_validate_parse: 5 callbacks suppressed [ 551.082742][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3783'. [ 551.161824][T20335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 551.338379][T20343] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 551.338379][T20343] Please contact the netfilter-devel mailing list or update your nftables rules. [ 551.387697][T20345] veth1_to_bond: entered allmulticast mode [ 551.431871][T20344] veth1_to_bond: left allmulticast mode [ 551.454778][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.822935][T20372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3801'. [ 551.852535][T20375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3802'. [ 551.867028][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.886292][T20371] bond2: option min_links: invalid value (18446744073709551614) [ 551.893995][T20371] bond2: option min_links: allowed values 0 - 2147483647 [ 551.905775][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3802'. [ 551.907035][T20371] bond2 (unregistering): Released all slaves [ 551.939623][T20379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3802'. [ 551.949910][T20376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.957570][T20376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.000080][T20376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.037622][T20376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.071853][T20376] bond0: (slave batadv0): Releasing backup interface [ 552.254246][T20392] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3809'. [ 552.272935][T20395] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 552.431655][T20404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3812'. [ 552.436376][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 552.480374][T20406] netlink: 'syz.4.3811': attribute type 11 has an invalid length. [ 552.502086][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.792905][T20422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3818'. [ 552.808096][T20426] netlink: 'syz.1.3819': attribute type 17 has an invalid length. [ 552.914054][T20429] syzkaller0: entered promiscuous mode [ 552.923191][T20429] syzkaller0: entered allmulticast mode [ 553.103002][T20442] vlan0: entered promiscuous mode [ 553.113163][T20446] netlink: 'syz.3.3827': attribute type 2 has an invalid length. [ 553.114698][T20442] bridge0: entered promiscuous mode [ 553.148196][T20446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.216493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.226072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.234624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.496499][T20460] team0: Device xfrm0 is of different type [ 553.548725][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.676438][T20425] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 553.941459][T20487] veth1_to_bond: entered allmulticast mode [ 553.960293][T20490] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.018107][T20487] veth1_to_bond: entered promiscuous mode [ 554.101677][T20498] netlink: 'syz.1.3841': attribute type 21 has an invalid length. [ 554.185247][T20498] veth1_to_bond (unregistering): left allmulticast mode [ 554.193491][T20498] veth1_to_bond (unregistering): left promiscuous mode [ 554.220255][T20498] bond0: (slave bond_slave_1): Releasing backup interface [ 554.296204][T20506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.325146][T20506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.256511][T20544] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 555.423418][T20547] netlink: 'syz.0.3860': attribute type 2 has an invalid length. [ 555.455838][T20547] netlink: 'syz.0.3860': attribute type 2 has an invalid length. [ 555.832193][T20573] tipc: Started in network mode [ 555.861215][T20573] tipc: Node identity f22c34290b2a, cluster identity 4711 [ 555.869188][T20573] tipc: Enabled bearer , priority 0 [ 555.878414][T20573] syzkaller0: entered promiscuous mode [ 555.884111][T20573] syzkaller0: entered allmulticast mode [ 555.893390][T20573] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 556.005109][T20582] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 556.018777][T20582] bond4 (unregistering): Released all slaves [ 556.058586][T20573] tipc: Resetting bearer [ 556.211341][T20572] tipc: Resetting bearer [ 556.243667][T20572] tipc: Disabling bearer [ 556.251645][T20598] __nla_validate_parse: 22 callbacks suppressed [ 556.251662][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 556.267611][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'. [ 556.537423][T20608] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3879'. [ 556.655676][ T5754] net_ratelimit: 1214 callbacks suppressed [ 556.655693][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.882242][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 557.035385][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3881'. [ 557.063479][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3881'. [ 557.096911][T20629] netlink: 'syz.3.3881': attribute type 14 has an invalid length. [ 557.105163][T20629] netlink: 'syz.3.3881': attribute type 13 has an invalid length. [ 557.553070][T20643] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 557.611040][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 557.681646][T20647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3886'. [ 557.690852][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3886'. [ 557.701688][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.761652][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 557.939305][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.739188][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.916140][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.113566][T20643] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 559.291808][T20663] lo: entered allmulticast mode [ 559.600510][T20685] IPv6: addrconf: prefix option has invalid lifetime [ 559.620920][T20678] lo speed is unknown, defaulting to 1000 [ 559.774809][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.026035][T20696] syzkaller0: entered promiscuous mode [ 560.034843][T20696] syzkaller0: entered allmulticast mode [ 560.046131][T20701] netlink: 'syz.4.3903': attribute type 3 has an invalid length. [ 560.346654][T20708] netlink: 'syz.4.3905': attribute type 21 has an invalid length. [ 560.818753][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.989127][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.123315][T20751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.340785][T20767] syzkaller0: entered promiscuous mode [ 561.372934][T20767] syzkaller0: entered allmulticast mode [ 561.490066][T20769] nbd5: detected capacity change from 0 to 63 [ 561.503608][T20777] block nbd0: NBD_DISCONNECT [ 561.510988][T20777] block nbd0: Send disconnect failed -32 [ 561.517565][T20777] block nbd0: shutting down sockets [ 561.545479][ T5644] block nbd5: Receive control failed (result -104) [ 561.697481][T20793] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 561.709204][T20792] __nla_validate_parse: 8 callbacks suppressed [ 561.709221][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 561.782868][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3934'. [ 561.807064][ T82] pim6reg: left allmulticast mode [ 561.814581][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.825601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.855335][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.863521][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.871652][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.884846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.122489][T20819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.130995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.272340][ T82] bond7 (unregistering): (slave gretap2): Releasing active interface [ 562.318792][ T82] bond2 (unregistering): (slave geneve2): Releasing active interface [ 562.389796][ T82]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.403749][ T82]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.413459][ T82]  (unregistering): Released all slaves [ 562.427998][ T82] bond1 (unregistering): Released all slaves [ 562.448083][ T82] bond2 (unregistering): Released all slaves [ 562.462146][ T82] bond3 (unregistering): Released all slaves [ 562.480570][ T82] bond4 (unregistering): Released all slaves [ 562.494177][ T82] bond5 (unregistering): Released all slaves [ 562.511939][ T82] bond6 (unregistering): Released all slaves [ 562.531937][ T82] bond7 (unregistering): Released all slaves [ 562.550778][ T82] bond0 (unregistering): Released all slaves [ 562.572668][ T82] bond8 (unregistering): Released all slaves [ 562.589949][ T82] bond9 (unregistering): (slave bond10): Releasing backup interface [ 562.598629][ T82] bond9 (unregistering): Released all slaves [ 562.613330][ T82] bond10 (unregistering): Released all slaves [ 562.631945][ T82] bond11 (unregistering): Released all slaves [ 562.647876][ T82] bond12 (unregistering): Released all slaves [ 562.661866][T20793] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 562.763400][T20810] lo speed is unknown, defaulting to 1000 [ 562.896377][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.925769][ T82] tipc: Left network mode [ 562.937915][T20829] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3940'. [ 562.999293][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'. [ 563.028104][ T82] IPVS: stopping backup sync thread 7107 ... [ 563.051483][T20834] rdma_op ffff8880261659f0 conn xmit_rdma 0000000000000000 [ 563.163774][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3943'. [ 563.472672][T20852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3946'. [ 563.561916][T20854] netlink: 'syz.2.3947': attribute type 1 has an invalid length. [ 563.705206][T20862] x_tables: duplicate underflow at hook 2 [ 563.799937][T20867] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 563.815836][T20854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.935807][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.035683][T20867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.051484][T20885] x_tables: duplicate underflow at hook 1 [ 564.090691][T20872] bond4: (slave geneve3): making interface the new active one [ 564.101654][T20872] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 564.111697][T20878] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 564.131617][T20878] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.139292][T20878] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.198131][ T1030] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.339735][ T14] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.353494][ T14] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.377999][ T14] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.637382][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'. [ 565.002396][T20931] x_tables: duplicate underflow at hook 3 [ 565.073377][ T82] hsr_slave_0: left promiscuous mode [ 565.100056][ T82] hsr_slave_1: left promiscuous mode [ 565.112997][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.127428][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.146122][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.161681][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.184333][ T82] veth1_macvtap: left promiscuous mode [ 565.197771][ T82] veth0_macvtap: left promiscuous mode [ 565.204039][ T82] veth1_vlan: left promiscuous mode [ 565.209393][ T82] veth0_vlan: left promiscuous mode [ 565.317849][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 565.428711][ T82] smc: removing net device veth1_to_hsr with user defined pnetid SYZ1 [ 565.646130][ T82] smc: removing net device veth1 with user defined pnetid SYZ2 [ 565.708068][T20928] tipc: Enabled bearer , priority 0 [ 565.749308][ T14] smbdirect: ib_dev[syú2] removed [ 565.822008][T20959] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3971'. [ 565.831985][T20934] syzkaller0: entered promiscuous mode [ 565.841108][T20934] syzkaller0: entered allmulticast mode [ 565.848733][T20934] tipc: Resetting bearer [ 565.867032][ T5747] lo speed is unknown, defaulting to 1000 [ 565.883944][ T5747] infiniband syú2: ib_query_port failed (-19) [ 565.954015][T20927] tipc: Resetting bearer [ 567.058693][ T5739] net_ratelimit: 3 callbacks suppressed [ 567.058712][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.072434][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.915564][T20927] tipc: Disabling bearer [ 567.928962][T20968] macvlan0: entered promiscuous mode [ 568.015663][ T9] tipc: Node number set to 3859556480 [ 568.085645][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3975'. [ 568.099240][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.110239][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3975'. [ 568.195069][T20981] ipvlan2: entered allmulticast mode [ 568.213863][T20981] erspan0: entered allmulticast mode [ 568.237189][T20988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3978'. [ 568.278955][T20992] sctp: [Deprecated]: syz.0.3979 (pid 20992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.278955][T20992] Use struct sctp_sack_info instead [ 568.349620][ T82] IPVS: stop unused estimator thread 0... [ 568.498108][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.638380][T21003] netlink: 'syz.2.3982': attribute type 1 has an invalid length. [ 568.671341][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3982'. [ 568.698699][T21003] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.721663][T21013] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3984'. [ 568.759475][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'. [ 568.770976][T21011] syzkaller0: entered promiscuous mode [ 568.777189][T21011] syzkaller0: entered allmulticast mode [ 568.905727][T21009] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3984'. [ 568.928866][T21022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.937493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.955915][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3988'. [ 569.135486][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.143693][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.243291][T21034] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 569.478109][T21043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.543436][T21054] tipc: Started in network mode [ 569.564496][T21054] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 569.600043][T21054] tipc: Enabling of bearer rejected, failed to enable media [ 569.641231][T21054] syzkaller0: entered promiscuous mode [ 569.662476][T21054] syzkaller0: entered allmulticast mode [ 569.703017][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'. [ 569.714173][T21067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.723086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.739741][T21067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4001'. [ 572.257362][ T5747] net_ratelimit: 5 callbacks suppressed [ 572.257383][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.135807][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.296201][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.964222][T21123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.154162][T21164] __nla_validate_parse: 3 callbacks suppressed [ 574.154181][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 574.243239][T21164] team0: entered promiscuous mode [ 574.262744][T21164] team_slave_0: entered promiscuous mode [ 574.278388][T21164] team_slave_1: entered promiscuous mode [ 574.292346][T21174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.304142][T21164] team0: left promiscuous mode [ 574.312813][T21164] team_slave_0: left promiscuous mode [ 574.322164][T21164] team_slave_1: left promiscuous mode [ 574.335809][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.451605][T21188] netlink: 'syz.0.4033': attribute type 1 has an invalid length. [ 574.466545][T21188] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4033'. [ 574.643463][T21199] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 574.658479][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4037'. [ 574.733254][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4039'. [ 574.940399][T21219] netlink: 'syz.2.4044': attribute type 1 has an invalid length. [ 575.081206][T21230] netlink: 'syz.0.4047': attribute type 12 has an invalid length. [ 575.111095][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'. [ 575.119247][T21219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.157761][T21220] macvlan2: entered promiscuous mode [ 575.171086][T21220] macvlan2: entered allmulticast mode [ 575.188630][T21220] bond2: entered promiscuous mode [ 575.200732][T21220] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 575.233181][T21220] bond2: left promiscuous mode [ 575.259529][T21230] netlink: 'syz.0.4047': attribute type 12 has an invalid length. [ 575.269974][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'. [ 575.375223][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.435297][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'. [ 575.596620][T21254] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 575.605264][T21254] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 575.876608][T21270] netlink: 'syz.4.4060': attribute type 10 has an invalid length. [ 576.112167][T21277] veth1_to_bridge: entered promiscuous mode [ 576.169055][T21288] netlink: 'syz.4.4068': attribute type 2 has an invalid length. [ 576.178051][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.194525][T21288] netlink: 'syz.4.4068': attribute type 2 has an invalid length. [ 576.245584][T21275] veth1_to_bridge: left promiscuous mode [ 576.418300][T21307] netlink: 'syz.2.4073': attribute type 1 has an invalid length. [ 576.640705][T21321] netlink: 'syz.0.4077': attribute type 12 has an invalid length. [ 576.683961][T21321] netlink: 'syz.0.4077': attribute type 29 has an invalid length. [ 576.693238][T21321] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4077'. [ 576.705005][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.715161][T21321] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4077'. [ 576.760592][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.769226][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4079'. [ 576.798281][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.815763][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.853304][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.865671][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.878533][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.891120][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.899564][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.915158][T21324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 577.168662][T21349] veth0_to_team: entered allmulticast mode [ 577.338439][T21358] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 577.361198][T21358] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 577.457192][ T5732] net_ratelimit: 1 callbacks suppressed [ 577.457209][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.482011][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.491543][T21367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.542164][T21378] xt_hl: Unknown Hop Limit match mode: 206 [ 577.567088][T21367] bond3: (slave geneve2): making interface the new active one [ 577.580378][T21367] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 577.590411][T21379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.601476][T21379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.609324][T21379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.616995][T21379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.647126][T21383] lo: entered allmulticast mode [ 577.665116][T21383] tunl0: entered allmulticast mode [ 577.671668][T21383] gre0: entered allmulticast mode [ 577.707125][T21383] gretap0: entered allmulticast mode [ 577.738154][T21383] ip_vti0: entered allmulticast mode [ 577.757432][T21383] ip6_vti0: entered allmulticast mode [ 577.777540][T21383] sit0: entered allmulticast mode [ 577.798884][T21383] ip6tnl0: entered allmulticast mode [ 577.816677][T21383] ip6gre0: entered allmulticast mode [ 577.835062][T21383] syz_tun: entered allmulticast mode [ 577.848817][T21383] bridge0: entered allmulticast mode [ 578.502557][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.672487][T21432] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 578.699841][T21428] h: entered promiscuous mode [ 578.838156][T21428] : entered promiscuous mode [ 579.059135][T21443] sctp: [Deprecated]: syz.1.4112 (pid 21443) Use of int in maxseg socket option. [ 579.059135][T21443] Use struct sctp_assoc_value instead [ 579.159293][T21451] __nla_validate_parse: 44 callbacks suppressed [ 579.159311][T21451] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4113'. [ 579.449541][T21465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.457981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.472070][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4119'. [ 579.511192][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4119'. [ 579.582778][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.609874][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'. [ 579.645948][T21465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.655948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.681801][T16554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.821787][T21477] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4122'. [ 580.034158][T21483] validate_nla: 10 callbacks suppressed [ 580.034176][T21483] netlink: 'syz.0.4124': attribute type 1 has an invalid length. [ 580.172781][T21486] bond5: (slave gretap1): making interface the new active one [ 580.190433][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 580.229328][T21462] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 580.240874][T21486] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 580.250069][T21462] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 580.512383][T21462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.523944][T21462] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 580.592804][T21495] sctp: [Deprecated]: syz.0.4126 (pid 21495) Use of int in max_burst socket option deprecated. [ 580.592804][T21495] Use struct sctp_assoc_value instead [ 580.668263][T21462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.684578][T21462] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 580.775860][T21462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.789387][T21462] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 580.949389][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 581.247684][T21524] netlink: 'syz.3.4133': attribute type 11 has an invalid length. [ 581.273767][T21526] sch_fq: defrate 0 ignored. [ 581.280859][T21524] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4133'. [ 581.473560][T21540] bridge2: entered promiscuous mode [ 581.501853][T21540] bridge2: entered allmulticast mode [ 582.826254][T21408] net_ratelimit: 14 callbacks suppressed [ 582.826275][T21408] Set syz1 is full, maxelem 65536 reached [ 582.909240][T21553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4140'. [ 582.923130][T21553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4140'. [ 584.165749][T21547] syzkaller1: entered promiscuous mode [ 584.171538][T21547] syzkaller1: entered allmulticast mode [ 584.525527][T21579] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 584.642063][T21592] ip6t_rpfilter: unknown options [ 584.872922][T21606] netlink: 'syz.2.4153': attribute type 1 has an invalid length. [ 584.882773][T21607] netlink: 'syz.2.4153': attribute type 1 has an invalid length. [ 585.669466][T21641] xt_bpf: check failed: parse error [ 585.679914][T21645] bond2 (unregistering): Released all slaves [ 585.712533][T21649] bridge0: port 3(vlan2) entered blocking state [ 585.723680][T21649] bridge0: port 3(vlan2) entered disabled state [ 585.732334][T21649] vlan2: entered allmulticast mode [ 585.761851][T21649] vlan2: entered promiscuous mode [ 585.831649][T21652] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.867622][T21652] bridge_slave_1: left allmulticast mode [ 585.875211][T21652] bridge_slave_1: left promiscuous mode [ 585.881849][T21652] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.894311][T21652] bond0: (slave bond_slave_0): Releasing backup interface [ 585.908697][T21652] bond0: (slave bond_slave_1): Releasing backup interface [ 585.933912][T21652] team0: Port device team_slave_0 removed [ 585.951297][T21652] team0: Port device team_slave_1 removed [ 585.963523][T21652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.029194][T21664] tipc: Enabled bearer , priority 0 [ 586.060879][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4170'. [ 586.091130][T21658] syzkaller0: entered promiscuous mode [ 586.097260][T21658] syzkaller0: entered allmulticast mode [ 586.103478][T21658] tipc: Resetting bearer [ 586.121895][T21657] tipc: Resetting bearer [ 586.580625][T21679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4172'. [ 588.025251][T21657] tipc: Disabling bearer [ 588.291018][T21692] netlink: 'syz.4.4177': attribute type 1 has an invalid length. [ 588.309788][T21692] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4177'. [ 588.336606][T21692] netlink: 'syz.4.4177': attribute type 1 has an invalid length. [ 588.401536][T21705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4181'. [ 588.541628][T21714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.713380][T21720] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4186'. [ 588.777304][T21727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4187'. [ 588.869142][T21730] sctp: [Deprecated]: syz.4.4188 (pid 21730) Use of int in max_burst socket option. [ 588.869142][T21730] Use struct sctp_assoc_value instead [ 589.138608][T21747] netlink: 'syz.2.4192': attribute type 1 has an invalid length. [ 589.206281][T21747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 589.224090][T21753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4193'. [ 589.650808][T21773] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 589.666759][T21773] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 589.849463][T21791] netlink: 'syz.3.4204': attribute type 4 has an invalid length. [ 589.903075][T21790] netlink: 'syz.3.4204': attribute type 4 has an invalid length. [ 590.080152][T21806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.149487][ T5732] IPVS: starting estimator thread 0... [ 590.243180][T21818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4214'. [ 590.265026][T21818] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 590.273064][T21809] IPVS: using max 26 ests per chain, 62400 per kthread [ 590.280725][T21818] netlink: 756 bytes leftover after parsing attributes in process `syz.2.4214'. [ 590.589111][T21835] netlink: 'syz.2.4219': attribute type 1 has an invalid length. [ 590.625219][T21840] syzkaller0: entered promiscuous mode [ 590.630888][T21840] syzkaller0: entered allmulticast mode [ 590.934962][T21853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4224'. [ 590.976119][T21853] netlink: 'syz.4.4224': attribute type 7 has an invalid length. [ 591.123178][T21862] __nla_validate_parse: 1 callbacks suppressed [ 591.123196][T21862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4228'. [ 591.336762][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'. [ 591.420437][T21875] veth3: entered allmulticast mode [ 591.542587][ T25] block nbd5: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 30 seconds [ 591.562076][ T25] block nbd5: Possible stuck request ffff888027e601c0: control (read@1024,1024B). Runtime 30 seconds [ 591.574909][ T25] block nbd5: Possible stuck request ffff888027e60380: control (read@2048,1024B). Runtime 30 seconds [ 591.585856][ T25] block nbd5: Possible stuck request ffff888027e60540: control (read@3072,1024B). Runtime 30 seconds [ 591.643664][T21883] xfrm1: entered allmulticast mode [ 591.666802][T21888] batadv_slave_0: entered promiscuous mode [ 591.675166][T21893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4238'. [ 591.684327][T21893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4238'. [ 591.694198][T21893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4238'. [ 591.703500][T21893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4238'. [ 591.713096][T21893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4238'. [ 591.736612][T21888] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4236'. [ 591.791367][T21888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4236'. [ 591.944246][T21887] batadv_slave_0: left promiscuous mode [ 592.263402][T21920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4245'. [ 592.672351][T21942] netlink: 'syz.3.4255': attribute type 2 has an invalid length. [ 592.836399][T21947] netlink: 'syz.2.4258': attribute type 21 has an invalid length. [ 593.130150][T21963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.252832][T21965] syzkaller0: entered promiscuous mode [ 593.270794][T21965] syzkaller0: entered allmulticast mode [ 593.741500][T21989] syzkaller0: entered promiscuous mode [ 593.755321][T21989] syzkaller0: entered allmulticast mode [ 593.782077][T21998] pim6reg: entered allmulticast mode [ 593.933473][T22002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.029710][T22010] netlink: 'syz.0.4280': attribute type 21 has an invalid length. [ 594.057239][T22010] netlink: 'syz.0.4280': attribute type 4 has an invalid length. [ 594.071831][T22010] netlink: 'syz.0.4280': attribute type 5 has an invalid length. [ 594.099601][T22010] netlink: 'syz.0.4280': attribute type 21 has an invalid length. [ 594.117146][T22010] netlink: 'syz.0.4280': attribute type 4 has an invalid length. [ 594.126939][T22010] netlink: 'syz.0.4280': attribute type 5 has an invalid length. [ 594.551667][T22046] tipc: Started in network mode [ 594.561571][T22046] tipc: Node identity 22bdc9a682d9, cluster identity 4711 [ 594.575735][T22046] tipc: Enabled bearer , priority 0 [ 594.589255][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.610843][T22054] syzkaller0: entered promiscuous mode [ 594.630929][T22054] syzkaller0: entered allmulticast mode [ 594.661876][T22046] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 594.759251][T22046] tipc: Resetting bearer [ 594.779073][T22044] tipc: Resetting bearer [ 594.830722][T22044] tipc: Disabling bearer [ 594.945287][T22066] vlan0: entered allmulticast mode [ 594.950585][T22066] gretap0: entered allmulticast mode [ 595.164039][T22079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.476854][T22106] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 595.502791][T22107] netlink: 'syz.3.4308': attribute type 30 has an invalid length. [ 595.553733][T22110] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 595.577808][T22109] syzkaller1: entered promiscuous mode [ 595.593588][T22109] syzkaller1: entered allmulticast mode [ 595.599287][T22110] netlink: 'syz.3.4308': attribute type 3 has an invalid length. [ 595.614787][T22110] NCSI netlink: No device for ifindex 813332851 [ 595.713730][T22107] bond2: option arp_missed_max: invalid value (0) [ 595.738043][T22107] bond2: option arp_missed_max: allowed values 1 - 255 [ 595.752269][T22107] bond2 (unregistering): Released all slaves [ 596.230268][T22140] netlink: 'syz.4.4316': attribute type 1 has an invalid length. [ 596.250119][T22140] __nla_validate_parse: 29 callbacks suppressed [ 596.250136][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 596.371251][T22148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4318'. [ 596.544184][T22163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4325'. [ 596.674231][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4327'. [ 596.689891][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4327'. [ 596.868369][T22181] tunl0: entered promiscuous mode [ 596.881494][T22181] tunl0: left allmulticast mode [ 596.893095][T22181] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4330'. [ 596.949621][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4333'. [ 597.027261][T22183] veth0_macvtap: left promiscuous mode [ 597.167493][T22203] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4337'. [ 597.179168][T22184] syzkaller0: entered promiscuous mode [ 597.185961][T22184] syzkaller0: entered allmulticast mode [ 597.287891][T22206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4339'. [ 597.298220][T22206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4339'. [ 597.779611][T22240] xt_hashlimit: size too large, truncated to 1048576 [ 598.192308][T22230] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 598.232186][T22229] veth3: entered allmulticast mode [ 598.275212][T22248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.303680][T22248] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 598.347006][T22245] team0: Port device geneve1 added [ 598.372045][ T5286] veth1_macvtap: left promiscuous mode [ 599.891294][T22325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.086172][T22341] openvswitch: netlink: Missing key (keys=40, expected=100) [ 600.408539][T22358] pimreg: entered allmulticast mode [ 600.546998][T22366] netlink: zone id is out of range [ 600.573333][T22366] netlink: zone id is out of range [ 600.596807][T22366] netlink: zone id is out of range [ 600.754651][T22371] validate_nla: 8 callbacks suppressed [ 600.754668][T22371] netlink: 'syz.2.4371': attribute type 17 has an invalid length. [ 601.258902][T22394] __nla_validate_parse: 9 callbacks suppressed [ 601.258919][T22394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'. [ 601.346227][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4383'. [ 601.465875][ T5644] block nbd0: Receive control failed (result -32) [ 601.579182][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 601.672172][T22387] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4376'. [ 601.702419][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4376'. [ 602.081254][T22431] macvlan0: entered promiscuous mode [ 602.265364][T22441] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4393'. [ 602.291083][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4393'. [ 602.557034][T22458] tipc: Started in network mode [ 602.567969][T22458] tipc: Node identity e0000001, cluster identity 4711 [ 602.591681][T22458] tipc: Enabling of bearer rejected, failed to enable media [ 602.614318][T22465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4399'. [ 602.665913][T22468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.774710][T22469] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 603.023237][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4407'. [ 603.080960][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4410'. [ 603.129309][T22497] netlink: 'syz.4.4410': attribute type 83 has an invalid length. [ 603.260870][T22509] netlink: 'syz.1.4412': attribute type 1 has an invalid length. [ 603.303493][T22509] netlink: 'syz.1.4412': attribute type 2 has an invalid length. [ 603.529758][T22532] tipc: Enabling of bearer rejected, media not registered [ 603.825781][T22542] syzkaller0: entered promiscuous mode [ 603.837688][T22542] syzkaller0: entered allmulticast mode [ 604.020508][T22567] netlink: 'syz.3.4431': attribute type 5 has an invalid length. [ 604.045666][T22566] batadv1: entered allmulticast mode [ 604.102172][T22571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.476693][T22584] syzkaller0: entered promiscuous mode [ 604.482241][T22584] syzkaller0: entered allmulticast mode [ 604.544132][T22596] netlink: 'syz.3.4440': attribute type 10 has an invalid length. [ 604.597354][T22599] netlink: 'syz.3.4440': attribute type 10 has an invalid length. [ 606.498105][T22598] netlink: 'syz.1.4441': attribute type 1 has an invalid length. [ 606.505921][T22598] netlink: 'syz.1.4441': attribute type 2 has an invalid length. [ 606.517933][T22609] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 606.618703][T22625] __nla_validate_parse: 8 callbacks suppressed [ 606.618721][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'. [ 606.682154][T22625] macvlan0: left promiscuous mode [ 606.710282][T22625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4445'. [ 606.767946][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4447'. [ 606.800712][T22632] xt_hashlimit: size too large, truncated to 1048576 [ 606.813837][T22632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4447'. [ 606.839734][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4450'. [ 606.883873][T22642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 606.892790][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4450'. [ 606.925466][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4451'. [ 606.951785][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 607.463545][T22669] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4460'. [ 607.463635][T22665] batadv_slave_1: entered allmulticast mode [ 608.122493][T22714] netlink: 'syz.2.4474': attribute type 39 has an invalid length. [ 608.186216][T22711] tipc: Enabled bearer , priority 0 [ 608.220807][T22717] 8021q: adding VLAN 0 to HW filter on device bond6 [ 608.251347][T22717] netlink: 'syz.0.4473': attribute type 10 has an invalid length. [ 608.380575][T22711] syzkaller0: entered promiscuous mode [ 608.397950][T22711] syzkaller0: entered allmulticast mode [ 608.431848][T22711] tipc: Resetting bearer [ 608.490495][T22717] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.500886][T22717] bond0: (slave team0): Enslaving as an active interface with an up link [ 608.509957][T22714] netlink: 'syz.2.4474': attribute type 39 has an invalid length. [ 608.518637][T22709] tipc: Resetting bearer [ 610.482541][T22709] tipc: Disabling bearer [ 610.527402][ T5732] tipc: Node number set to 4177933353 [ 610.962447][T22777] netlink: 'syz.2.4485': attribute type 1 has an invalid length. [ 611.087761][T22783] netlink: 'syz.4.4488': attribute type 6 has an invalid length. [ 611.115438][T22779] syzkaller0: entered promiscuous mode [ 611.141146][T22779] syzkaller0: entered allmulticast mode [ 611.211487][T22783] bridge3: entered allmulticast mode [ 611.297953][T22797] bond2: option xmit_hash_policy: invalid value (64) [ 611.321361][T22797] bond2 (unregistering): Released all slaves [ 611.520329][T22805] vlan1: entered allmulticast mode [ 611.687194][T22809] block nbd2: not configured, cannot reconfigure [ 611.712289][T22826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.771379][T22826] __nla_validate_parse: 9 callbacks suppressed [ 611.771399][T22826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4496'. [ 612.182558][T22853] netlink: 684 bytes leftover after parsing attributes in process `syz.0.4501'. [ 612.302572][T22859] pimreg3: entered allmulticast mode [ 612.649561][T22883] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 613.361188][T22902] netlink: 'syz.1.4512': attribute type 3 has an invalid length. [ 614.917792][T22893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.130192][T22908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4514'. [ 615.191162][T22913] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4516'. [ 615.260652][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 615.432395][T22931] : renamed from bond0 (while UP) [ 615.512993][T22937] netlink: 'syz.3.4525': attribute type 1 has an invalid length. [ 615.602134][T22937] ip6gretap0: entered promiscuous mode [ 615.626872][T22937] ip6gretap0: entered allmulticast mode [ 615.681260][T22951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 615.736684][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4527'. [ 615.762941][T22951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 615.772057][T22945] netlink: 'syz.0.4526': attribute type 1 has an invalid length. [ 615.796772][T22951] macvlan1: entered promiscuous mode [ 615.803266][T22951] macvlan1: entered allmulticast mode [ 615.810472][T22951] bond2: entered promiscuous mode [ 615.817854][T22951] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 615.829440][T22951] bond2: left promiscuous mode [ 615.892346][T22961] sch_fq: defrate 0 ignored. [ 616.028970][T22969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 616.369739][T22995] bond0: (slave bond_slave_1): Device is not bonding slave [ 616.389344][T22995] bond0: option active_slave: invalid value (bond_slave_1) [ 616.463010][T22997] netlink: 'syz.4.4540': attribute type 2 has an invalid length. [ 621.615853][ T25] block nbd5: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 60 seconds [ 621.626527][ T25] block nbd5: Possible stuck request ffff888027e601c0: control (read@1024,1024B). Runtime 60 seconds [ 621.637451][ T25] block nbd5: Possible stuck request ffff888027e60380: control (read@2048,1024B). Runtime 60 seconds [ 621.648795][ T25] block nbd5: Possible stuck request ffff888027e60540: control (read@3072,1024B). Runtime 60 seconds [ 622.508653][ T4991] udevd[4991]: worker [6078] /devices/virtual/block/nbd5 is taking a long time [ 643.048803][ T5747] IPVS: starting estimator thread 0... [ 643.124825][T23019] netlink: 'syz.3.4547': attribute type 12 has an invalid length. [ 643.132983][T23019] netlink: 'syz.3.4547': attribute type 29 has an invalid length. [ 643.141359][T23019] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4547'. [ 643.151264][T23019] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4547'. [ 643.160413][T23014] IPVS: using max 26 ests per chain, 62400 per kthread [ 644.091415][T23051] Bluetooth: MGMT ver 1.23 [ 644.098223][T23051] Bluetooth: hci1: too big key_count value 32778 [ 644.138439][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4556'. [ 644.166426][T23053] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4557'. [ 644.341162][T23066] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4561'. [ 644.596601][T23087] tunl0: entered promiscuous mode [ 644.632863][T23087] netlink: 'syz.2.4564': attribute type 3 has an invalid length. [ 644.664052][T23079] xt_CT: No such helper "snmp_trap" [ 644.688861][T23087] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4564'. [ 644.709134][T23094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4567'. [ 645.112695][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4569'. [ 645.126730][T23118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4569'. [ 645.148845][T23118] netlink: 'syz.2.4569': attribute type 12 has an invalid length. [ 645.158291][T23118] netlink: 'syz.2.4569': attribute type 11 has an invalid length. [ 645.346975][T23136] netlink: 'syz.4.4573': attribute type 4 has an invalid length. [ 645.361114][T23136] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4573'. [ 645.421842][T23118] syzkaller0: entered promiscuous mode [ 645.438261][T23118] syzkaller0: entered allmulticast mode [ 645.465607][T23138] netlink: zone id is out of range [ 645.481172][T23138] netlink: del zone limit has 4 unknown bytes [ 646.078380][T23163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.340987][ T29] audit: type=1800 audit(1782778280.875:6): pid=23216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4591" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1463 res=0 errno=0 [ 649.010976][T23237] tipc: Enabled bearer , priority 0 [ 649.037918][T23237] syzkaller0: entered promiscuous mode [ 649.065046][T23237] syzkaller0: entered allmulticast mode [ 649.088881][T23237] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 649.212173][T23237] tipc: Resetting bearer [ 649.249155][T23249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.283806][T23236] tipc: Resetting bearer [ 649.498501][T23260] __nla_validate_parse: 16 callbacks suppressed [ 649.498530][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4604'. [ 649.514576][T23236] tipc: Disabling bearer [ 651.694986][ T25] block nbd5: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 90 seconds [ 651.706140][ T25] block nbd5: Possible stuck request ffff888027e601c0: control (read@1024,1024B). Runtime 90 seconds [ 651.717083][ T25] block nbd5: Possible stuck request ffff888027e60380: control (read@2048,1024B). Runtime 90 seconds [ 651.728067][ T25] block nbd5: Possible stuck request ffff888027e60540: control (read@3072,1024B). Runtime 90 seconds [ 651.972757][ T5739] tipc: Node number set to 1 [ 652.212816][T23274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4609'. [ 652.243162][T23274] tipc: Can't bind to reserved service type 2 [ 652.279835][T23279] netlink: 'syz.1.4610': attribute type 2 has an invalid length. [ 652.388612][T23283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'. [ 652.409429][T23283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'. [ 652.764874][T23315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4620'. [ 652.902712][T23315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4620'. [ 652.937219][T23322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4622'. [ 652.983411][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4622'. [ 653.026538][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4624'. [ 653.029663][ T7497] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.055970][ T7497] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.088520][ T7497] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.119873][ T7497] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.429989][T23357] syzkaller0: entered promiscuous mode [ 653.445428][T23357] syzkaller0: entered allmulticast mode [ 653.470050][T23361] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4632'. [ 653.573461][T23362] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 653.719370][T23370] syzkaller0: entered promiscuous mode [ 653.736931][T23370] syzkaller0: entered allmulticast mode [ 653.869913][T23374] syzkaller0: entered promiscuous mode [ 653.878662][T23374] syzkaller0: entered allmulticast mode [ 653.999275][T23388] GUP no longer grows the stack in syz.1.4639 (23388): 200000003000-20000000a000 (200000001000) [ 654.014601][T23388] CPU: 0 UID: 0 PID: 23388 Comm: syz.1.4639 Not tainted syzkaller #0 PREEMPT(full) [ 654.014630][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.014650][T23388] Call Trace: [ 654.014658][T23388] [ 654.014666][T23388] dump_stack_lvl+0xe8/0x150 [ 654.014745][T23388] __get_user_pages+0x238c/0x2720 [ 654.014795][T23388] ? __gup_longterm_locked+0xc3b/0x15c0 [ 654.014845][T23388] __gup_longterm_locked+0xd52/0x15c0 [ 654.014872][T23388] ? lock_acquire+0x106/0x350 [ 654.014924][T23388] gup_fast_fallback+0x1d8c/0x20e0 [ 654.014977][T23388] ? __pfx_gup_fast_fallback+0x10/0x10 [ 654.015004][T23388] ? is_valid_gup_args+0x11f/0x200 [ 654.015028][T23388] ? get_user_pages_fast+0x4d/0xb0 [ 654.015059][T23388] __iov_iter_get_pages_alloc+0x378/0xa40 [ 654.015177][T23388] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 654.015221][T23388] iov_iter_get_pages2+0x5e/0xa0 [ 654.015245][T23388] __se_sys_vmsplice+0x7b5/0x1660 [ 654.015286][T23388] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 654.015309][T23388] ? __pfx_futex_wait+0x10/0x10 [ 654.015421][T23388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.015461][T23388] do_syscall_64+0x174/0x580 [ 654.015547][T23388] ? trace_irq_disable+0x3b/0x140 [ 654.015572][T23388] ? clear_bhb_loop+0x40/0x90 [ 654.015596][T23388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.015616][T23388] RIP: 0033:0x7fad7979ce59 [ 654.015635][T23388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.015651][T23388] RSP: 002b:00007fad7a67f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 654.015672][T23388] RAX: ffffffffffffffda RBX: 00007fad79a15fa0 RCX: 00007fad7979ce59 [ 654.015687][T23388] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 654.015699][T23388] RBP: 00007fad79832e6f R08: 0000000000000000 R09: 0000000000000000 [ 654.015711][T23388] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 654.015723][T23388] R13: 00007fad79a16038 R14: 00007fad79a15fa0 R15: 00007ffcad20c7e8 [ 654.015755][T23388] [ 654.690695][T23414] netlink: 'syz.1.4646': attribute type 1 has an invalid length. [ 654.802513][T23416] __nla_validate_parse: 1 callbacks suppressed [ 654.802524][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4646'. [ 656.283249][T23414] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 656.370608][T23416] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 656.443181][T23427] netlink: 'syz.2.4648': attribute type 5 has an invalid length. [ 656.798682][T23435] bond7: Unable to set down delay as MII monitoring is disabled [ 656.819534][T23451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4656'. [ 656.844047][T23435] bond7 (unregistering): Released all slaves [ 657.108173][T23468] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4662'. [ 657.135135][T23468] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4662'. [ 657.177228][T23468] xt_ecn: cannot match TCP bits for non-tcp packets [ 657.232089][T23477] xt_hashlimit: size too large, truncated to 1048576 [ 657.790558][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4673'. [ 657.853642][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4674'. [ 657.989264][T23513] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4676'. [ 658.025285][T23517] syzkaller0: entered promiscuous mode [ 658.032445][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4677'. [ 658.033067][T23517] syzkaller0: entered allmulticast mode [ 658.195979][T23527] xt_hashlimit: size too large, truncated to 1048576 [ 658.460372][T23533] nbd: couldn't find device at index 4 [ 658.528419][T23534] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.535663][T23534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.545665][T23534] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.552825][T23534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.624848][T23534] bridge0: entered promiscuous mode [ 658.695480][T23536] netlink: 'syz.4.4681': attribute type 10 has an invalid length. [ 658.862942][T23536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.030280][T23536] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 659.708328][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4687'. [ 659.711395][T23561] netlink: 'syz.2.4687': attribute type 2 has an invalid length. [ 659.773550][T23558] netlink: 'syz.2.4687': attribute type 3 has an invalid length. [ 659.791232][T23558] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4687'. [ 659.807769][T23558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4687'. [ 660.140214][T23575] nbd: couldn't find a device at index 1949724777 [ 660.392298][T23583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4693'. [ 661.012756][T23594] netlink: 'syz.2.4696': attribute type 1 has an invalid length. [ 661.072407][T23594] bond5: entered promiscuous mode [ 661.078732][T23594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 661.919271][T23613] netlink: 'syz.0.4701': attribute type 7 has an invalid length. [ 662.032469][T23613] netlink: 'syz.0.4701': attribute type 7 has an invalid length. [ 662.547962][T23490] Set syz1 is full, maxelem 65536 reached [ 662.687515][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4707'. [ 662.704576][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4707'. [ 662.910392][ T5739] syz1: Port: 1 Link DOWN [ 662.910429][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.933941][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.954222][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 662.969661][T23637] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4708'. [ 663.069665][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.116083][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.147364][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 663.176942][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.202517][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.241759][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 663.272209][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.298855][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.320413][T23654] netlink: 'syz.0.4713': attribute type 1 has an invalid length. [ 663.336471][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 663.433997][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4715'. [ 663.463207][T23661] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4715'. [ 663.674712][T23672] nbd2: detected capacity change from 0 to 25167616 [ 663.730358][ T5644] block nbd2: Receive control failed (result -104) [ 664.251081][T23710] netlink: 'syz.0.4728': attribute type 10 has an invalid length. [ 664.283006][T23710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4728'. [ 664.291551][T23713] openvswitch: netlink: Key type 31 is not supported [ 664.358366][T23710] team0: Port device geneve1 added [ 664.376211][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.394785][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.423562][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.464828][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.678065][T23737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4736'. [ 664.763034][T23737] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 664.787259][ T5739] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 664.890703][T23751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4741'. [ 664.912371][T23751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4741'. [ 664.969508][T23751] geneve3: entered promiscuous mode [ 665.063894][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4743'. [ 665.176026][T23761] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.186009][T23761] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.396407][T23768] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4745'. [ 665.441233][T23777] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4747'. [ 665.451254][T23775] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 665.475639][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4746'. [ 665.495294][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4746'. [ 665.630177][T23775] bond3 (unregistering): Released all slaves [ 666.172351][ T12] tipc: Subscription rejected, illegal request [ 666.600845][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4761'. [ 666.674203][T23852] netlink: 'syz.4.4763': attribute type 2 has an invalid length. [ 667.083723][T23880] syzkaller0: entered promiscuous mode [ 667.116738][T23880] syzkaller0: entered allmulticast mode [ 667.127229][T23883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.153284][T23880] 0: reclassify loop, rule prio 0, protocol 800 [ 667.228570][T23883] netlink: 'syz.4.4770': attribute type 2 has an invalid length. [ 667.269728][T23883] netlink: 'syz.4.4770': attribute type 1 has an invalid length. [ 667.298205][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 667.306503][T23893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'. [ 667.430627][T23898] netlink: 'syz.2.4773': attribute type 1 has an invalid length. [ 667.445140][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.872455][T23928] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 667.901973][T23933] openvswitch: netlink: Message has 12 unknown bytes. [ 667.905136][T23928] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 667.945118][T23933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.021507][T23939] netlink: 'syz.1.4787': attribute type 1 has an invalid length. [ 668.049063][T23943] netlink: 'syz.4.4788': attribute type 21 has an invalid length. [ 668.910967][T23969] bond0: (slave gre0): refused to change device type [ 668.964261][T23969] ksmbd: Unknown IPC event: 1, ignore. [ 669.145461][T23976] netlink: 'syz.4.4797': attribute type 58 has an invalid length. [ 669.492521][T23988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.984880][T23984] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 670.127757][T24006] vethÖ‡vtap: renamed from vlan0 [ 670.598600][T24046] __nla_validate_parse: 5 callbacks suppressed [ 670.598619][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 670.741570][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4820'. [ 670.815607][T24055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4820'. [ 671.134237][T24073] netlink: 'syz.2.4825': attribute type 1 has an invalid length. [ 671.156390][T24073] netlink: 'syz.2.4825': attribute type 1 has an invalid length. [ 671.272979][T24073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 671.293284][T24086] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 671.480634][T24082] bond7: Removing last arp target with arp_interval on [ 671.501967][T24094] netlink: 'syz.3.4829': attribute type 1 has an invalid length. [ 671.524595][T24094] netlink: 'syz.3.4829': attribute type 3 has an invalid length. [ 671.555818][T24094] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4829'. [ 671.592115][T24094] NCSI netlink: No device for ifindex 813332851 [ 671.606785][T24099] syzkaller0: entered promiscuous mode [ 671.612597][T24099] syzkaller0: entered allmulticast mode [ 671.632686][T24099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4831'. [ 671.999693][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4837'. [ 672.012199][T24120] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4838'. [ 672.057299][T24120] openvswitch: netlink: Message has 4 unknown bytes. [ 672.150900][T24120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4838'. [ 672.200139][T24120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4838'. [ 672.417368][T24146] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4844'. [ 672.506207][T24143] lo speed is unknown, defaulting to 1000 [ 672.571208][T24143] lo speed is unknown, defaulting to 1000 [ 672.595923][T24143] lo speed is unknown, defaulting to 1000 [ 673.102202][T24176] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 673.111503][T24176] bond3: option packets_per_slave: allowed values 0 - 65535 [ 673.131428][T24176] bond3 (unregistering): Released all slaves [ 673.230098][T24187] netlink: 'syz.0.4852': attribute type 10 has an invalid length. [ 673.658334][T24217] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 673.666943][T24206] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 673.729828][T24206] bond8 (unregistering): Released all slaves [ 673.740353][T24143] infiniband sz1: set active [ 673.765160][T24143] infiniband sz1: added lo [ 673.878204][T24143] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 673.905307][T24143] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 673.932848][ T5732] lo speed is unknown, defaulting to 1000 [ 673.946391][T24143] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 674.028473][T24143] RDS/IB: sz1: added [ 674.052414][T24225] netlink: 'syz.0.4860': attribute type 1 has an invalid length. [ 674.056034][T24143] smc: adding ib device sz1 with port count 1 [ 674.089561][T24225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 674.102322][T24143] smc: ib device sz1 port 1 has no pnetid [ 674.112822][T18595] lo speed is unknown, defaulting to 1000 [ 674.166461][T24143] lo speed is unknown, defaulting to 1000 [ 674.343857][T24246] bridge: RTM_NEWNEIGH with invalid ether address [ 674.392406][T24249] netlink: 'syz.1.4867': attribute type 5 has an invalid length. [ 674.409380][T24246] netlink: 'syz.4.4866': attribute type 4 has an invalid length. [ 674.441402][T24246] .`: renamed from bond0 (while UP) [ 674.703005][T24262] netlink: 'syz.3.4872': attribute type 1 has an invalid length. [ 674.710953][T24262] netlink: 'syz.3.4872': attribute type 1 has an invalid length. [ 674.756908][T24260] bond0: Removing last arp target with arp_interval on [ 674.789242][T24143] lo speed is unknown, defaulting to 1000 [ 675.039505][ T154] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 675.076417][ T154] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.096477][ T154] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.118690][ T154] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.423273][T24292] tunl0: entered promiscuous mode [ 675.477782][T24143] lo speed is unknown, defaulting to 1000 [ 675.758718][T24309] __nla_validate_parse: 15 callbacks suppressed [ 675.758736][T24309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4882'. [ 676.125942][T24143] lo speed is unknown, defaulting to 1000 [ 676.432012][T17558] IPVS: starting estimator thread 0... [ 676.438616][T24330] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 676.454856][T24330] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4888'. [ 676.535505][T24334] IPVS: using max 31 ests per chain, 74400 per kthread [ 676.667816][T24347] validate_nla: 2 callbacks suppressed [ 676.667835][T24347] netlink: 'syz.1.4894': attribute type 21 has an invalid length. [ 676.743730][T24143] lo speed is unknown, defaulting to 1000 [ 676.925989][T24363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4899'. [ 677.074233][T24366] netlink: 684 bytes leftover after parsing attributes in process `syz.3.4900'. [ 677.256020][T24382] vlan1: entered allmulticast mode [ 677.261350][T24382] veth1_virt_wifi: entered allmulticast mode [ 677.376240][T24143] lo speed is unknown, defaulting to 1000 [ 677.386698][T24388] netlink: 'syz.4.4908': attribute type 2 has an invalid length. [ 677.427157][T24389] vlan2: entered promiscuous mode [ 677.437274][T24389] bridge0: entered promiscuous mode [ 677.530667][T24395] netlink: 'syz.0.4910': attribute type 2 has an invalid length. [ 677.822780][T24413] netlink: 'syz.2.4915': attribute type 3 has an invalid length. [ 677.830922][ T5638] block nbd6: Receive control failed (result -107) [ 677.836470][T24413] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4915'. [ 677.867207][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4916'. [ 677.880286][T24402] nbd6: detected capacity change from 0 to 63 [ 677.983223][ T5644] block nbd6: Receive control failed (result -104) [ 678.215545][T24436] openvswitch: netlink: IP tunnel dst address not specified [ 678.331229][T24451] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4926'. [ 678.357256][T24452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4925'. [ 678.387981][T24454] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 678.663213][T24459] [ 678.665586][T24459] ====================================================== [ 678.672601][T24459] WARNING: possible circular locking dependency detected [ 678.679621][T24459] syzkaller #0 Not tainted [ 678.684029][T24459] ------------------------------------------------------ [ 678.691039][T24459] syz.3.4929/24459 is trying to acquire lock: [ 678.697097][T24459] ffff888050407ae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 678.708621][T24459] [ 678.708621][T24459] but task is already holding lock: [ 678.715980][T24459] ffff888050bfa7e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 678.725072][T24459] [ 678.725072][T24459] which lock already depends on the new lock. [ 678.725072][T24459] [ 678.735458][T24459] [ 678.735458][T24459] the existing dependency chain (in reverse order) is: [ 678.744458][T24459] [ 678.744458][T24459] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 678.752195][T24459] lock_sock_nested+0x41/0x100 [ 678.757586][T24459] smc_listen_out+0x105/0x3c0 [ 678.762766][T24459] smc_listen_work+0x81d/0x1410 [ 678.768121][T24459] process_scheduled_works+0xa8e/0x14e0 [ 678.774183][T24459] worker_thread+0xa47/0xfb0 [ 678.779283][T24459] kthread+0x388/0x470 [ 678.783854][T24459] ret_from_fork+0x514/0xb70 [ 678.788976][T24459] ret_from_fork_asm+0x1a/0x30 [ 678.794247][T24459] [ 678.794247][T24459] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 678.804393][T24459] __lock_acquire+0x1520/0x2cf0 [ 678.809749][T24459] lock_acquire+0x106/0x350 [ 678.814756][T24459] __flush_work+0x74c/0xca0 [ 678.819775][T24459] __cancel_work_sync+0xbe/0x110 [ 678.825219][T24459] smc_clcsock_release+0x60/0xf0 [ 678.830725][T24459] __smc_release+0x64e/0x7c0 [ 678.835823][T24459] smc_close_non_accepted+0xd5/0x1f0 [ 678.841618][T24459] smc_close_active+0xb42/0xf30 [ 678.846970][T24459] __smc_release+0x9c/0x7c0 [ 678.851980][T24459] smc_release+0x2c5/0x550 [ 678.856904][T24459] sock_close+0xad/0x220 [ 678.861709][T24459] __fput+0x418/0xa50 [ 678.866206][T24459] task_work_run+0x1d9/0x270 [ 678.871311][T24459] exit_to_user_mode_loop+0x1fa/0x730 [ 678.877206][T24459] do_syscall_64+0x353/0x580 [ 678.882324][T24459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.888719][T24459] [ 678.888719][T24459] other info that might help us debug this: [ 678.888719][T24459] [ 678.898923][T24459] Possible unsafe locking scenario: [ 678.898923][T24459] [ 678.906383][T24459] CPU0 CPU1 [ 678.911747][T24459] ---- ---- [ 678.917129][T24459] lock(sk_lock-AF_SMC/1); [ 678.922598][T24459] lock((work_completion)(&new_smc->smc_listen_work)); [ 678.932054][T24459] lock(sk_lock-AF_SMC/1); [ 678.939073][T24459] lock((work_completion)(&new_smc->smc_listen_work)); [ 678.945998][T24459] [ 678.945998][T24459] *** DEADLOCK *** [ 678.945998][T24459] [ 678.954120][T24459] 3 locks held by syz.3.4929/24459: [ 678.959471][T24459] #0: ffff888057d7cd00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 678.969658][T24459] #1: ffff888050bfa7e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 678.979060][T24459] #2: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 678.988272][T24459] [ 678.988272][T24459] stack backtrace: [ 678.994151][T24459] CPU: 0 UID: 0 PID: 24459 Comm: syz.3.4929 Not tainted syzkaller #0 PREEMPT(full) [ 678.994168][T24459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 678.994178][T24459] Call Trace: [ 678.994186][T24459] [ 678.994194][T24459] dump_stack_lvl+0xe8/0x150 [ 678.994212][T24459] print_circular_bug+0x2e1/0x300 [ 678.994233][T24459] check_noncircular+0x12e/0x150 [ 678.994252][T24459] __lock_acquire+0x1520/0x2cf0 [ 678.994273][T24459] ? do_raw_spin_unlock+0xf5/0x210 [ 678.994293][T24459] ? __flush_work+0x101/0xca0 [ 678.994306][T24459] lock_acquire+0x106/0x350 [ 678.994322][T24459] ? __flush_work+0x101/0xca0 [ 678.994340][T24459] ? __flush_work+0x101/0xca0 [ 678.994353][T24459] __flush_work+0x74c/0xca0 [ 678.994366][T24459] ? __flush_work+0x101/0xca0 [ 678.994379][T24459] ? __flush_work+0x101/0xca0 [ 678.994392][T24459] ? __pfx___flush_work+0x10/0x10 [ 678.994406][T24459] ? __pfx_wq_barrier_func+0x10/0x10 [ 678.994432][T24459] ? __cancel_work_sync+0x5c/0x110 [ 678.994453][T24459] __cancel_work_sync+0xbe/0x110 [ 678.994468][T24459] smc_clcsock_release+0x60/0xf0 [ 678.994485][T24459] __smc_release+0x64e/0x7c0 [ 678.994505][T24459] smc_close_non_accepted+0xd5/0x1f0 [ 678.994526][T24459] smc_close_active+0xb42/0xf30 [ 678.994541][T24459] ? __pfx_sock_def_readable+0x10/0x10 [ 678.994562][T24459] __smc_release+0x9c/0x7c0 [ 678.994579][T24459] ? __local_bh_enable_ip+0xd0/0x130 [ 678.994628][T24459] smc_release+0x2c5/0x550 [ 678.994648][T24459] sock_close+0xad/0x220 [ 678.994666][T24459] ? __pfx_sock_close+0x10/0x10 [ 678.994682][T24459] __fput+0x418/0xa50 [ 678.994698][T24459] task_work_run+0x1d9/0x270 [ 678.994716][T24459] ? __pfx_task_work_run+0x10/0x10 [ 678.994735][T24459] exit_to_user_mode_loop+0x1fa/0x730 [ 678.994750][T24459] ? rcu_is_watching+0x15/0xb0 [ 678.994767][T24459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.994783][T24459] do_syscall_64+0x353/0x580 [ 678.994797][T24459] ? clear_bhb_loop+0x40/0x90 [ 678.994813][T24459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.994828][T24459] RIP: 0033:0x7f787099ce59 [ 678.994843][T24459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.994856][T24459] RSP: 002b:00007ffc8ef139c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 678.994871][T24459] RAX: 0000000000000000 RBX: 00007ffc8ef13ab0 RCX: 00007f787099ce59 [ 678.994881][T24459] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 678.994890][T24459] RBP: 00000000000a5a4c R08: 0000000000000001 R09: 0000000000000000 [ 678.994899][T24459] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007ffc8ef13af0 [ 678.994908][T24459] R13: 00007f7870c15fac R14: 00000000000a5b0f R15: 00007f7870c15fa0 [ 678.994924][T24459] [ 681.776745][ T25] block nbd5: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 120 seconds [ 681.787524][ T25] block nbd5: Possible stuck request ffff888027e601c0: control (read@1024,1024B). Runtime 120 seconds [ 681.798611][ T25] block nbd5: Possible stuck request ffff888027e60380: control (read@2048,1024B). Runtime 120 seconds [ 681.810121][ T25] block nbd5: Possible stuck request ffff888027e60540: control (read@3072,1024B). Runtime 120 seconds