last executing test programs: 7.224071733s ago: executing program 2 (id=5646): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x3}, 0xff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x28, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 7.186979097s ago: executing program 2 (id=5647): getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0xc) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xfdee}, {&(0x7f0000000180)="b842f1ec7f87b9929128ba418085188f827317fbaa1e858087709336ea11830e390f9a426329a8e323843983", 0x2c}], 0x2) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3e, &(0x7f00000040c0)=0x3, 0x4) (async) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f00000000c0)={@local, 0x4b, r8}) sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x8014) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 6.576262642s ago: executing program 4 (id=5653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$inet(0x2, 0xa, 0xd) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x5, 0xf, 0x9, 0x9}, {0x7, 0x1, 0x30}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) socket$inet(0x2, 0xa, 0xd) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x5, 0xf, 0x9, 0x9}, {0x7, 0x1, 0x30}]}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_netdev_private(r0, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") (async) 6.456168601s ago: executing program 3 (id=5655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.324808257s ago: executing program 3 (id=5656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r6, 0x80000003) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000380)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000045c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000004380)=ANY=[@ANYBLOB="1800000008000000000000000900200018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001836000005000000000000000000000085100000ffffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000004440)='syzkaller\x00', 0x7, 0x32, &(0x7f0000004480)=""/50, 0x41100, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000044c0)={0x2, 0xc, 0x200, 0xffff0000}, 0x10, 0x75a7, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000004500)=[{0x3, 0x5, 0xc, 0x2}, {0x2, 0x3, 0x0, 0x4}, {0x0, 0x1, 0xf, 0xa}, {0x4, 0x5, 0xd, 0x1}, {0x1, 0x2, 0x2, 0x6}, {0x1, 0x5, 0xa, 0x7}, {0x1, 0x3, 0x5, 0x6}, {0x5, 0x3, 0xf, 0x2}, {0x1, 0x1, 0xd, 0x7}], 0x10, 0x1}, 0x94) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000640)={@l2tp6={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0x0}, 0x0, 0x59}, 0xa0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r10, 0x215eb000) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFT_BATCH(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a140000000b0a01020000000000000000030000072c000000080a05000000000000000000030000010c000d8008000140000088080c0006400000000000000001140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x2605c0d0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005940)={r9, 0x0, 0xf6, 0xc3, &(0x7f0000004680)="02ad2dea12788152b0b2bd1f589513eb217d36215e01426e2fdcd7788e077cce735806c3d9c95cfd01ed0bd68a423e2751f8fbcd0c294620e99e0b1abcf89744d30d1f30b947e660d32cfab167a976140ffa8c14e76c92b9b9b3941db862f93e70085f16d7c0df8f245a69bc2954f6d41a27e2cc069ae568d0a6235c894aaaeea09952e30141e2f4ea79697c99fcf12b1a22f7bc1aeb5318a040edfffd0edaaeff98302f4806478df5bba771de57b0703804d6defc86356d276752d4b2e9b8f6ccffbfd899207c653bab63dfd27045462505f34e14ee9b235dbcd3d01936b899c09f9cb96edc34bb7909e051160c7d8ed040b7a035fd", &(0x7f0000004780)=""/195, 0xd0, 0x0, 0x9d, 0x1000, &(0x7f0000004880)="813d31cb1936dee5b903466a78c83d9e90433c08e8ca0d1b680a18783a953985bc6bb72f37ba1559f2f1aaaecb95c3a06a3ad23d04fd138b253b4a1f6587ab148555028c650361d6fb1f3aa7c1c9f4a7181c6c5f46058263a162e43398bd67bd07521e0379a02affeb132678f17f88b353faedaadf8c4adf0e680065df2a25ea0f7c75589040649fdb86812b2bfb96489316e25de9851e0c9d8b9092f8", &(0x7f0000004940)="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", 0x5, 0x0, 0x72}, 0x50) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf253600000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4990}, 0x40040) recvmmsg(r4, &(0x7f0000004280)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/1, 0x1}, {&(0x7f00000004c0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f0000000700)=""/216, 0xd8}], 0x6, &(0x7f0000000900)=""/70, 0x46}, 0x80}, {{&(0x7f0000000980)=@ax25={{0x3, @default}, [@bcast, @remote, @remote, @remote, @netrom, @netrom, @null, @rose]}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/162, 0xa2}, {&(0x7f0000003b80)=""/192, 0xc0}], 0x6, &(0x7f0000003cc0)}, 0x7f}, {{&(0x7f0000003d00)=@caif=@dgm, 0x80, &(0x7f0000004140)=[{&(0x7f0000003d80)=""/229, 0xe5}, {&(0x7f0000003e80)}, {&(0x7f0000003ec0)=""/22, 0x16}, {&(0x7f0000003f00)=""/13, 0xd}, {&(0x7f0000003f40)=""/242, 0xf2}, {&(0x7f0000004040)=""/193, 0xc1}], 0x6, &(0x7f00000041c0)=""/173, 0xad}, 0x2}], 0x3, 0x103, &(0x7f0000004340)={0x0, 0x989680}) socket$nl_netfilter(0x10, 0x3, 0xc) 5.932169479s ago: executing program 1 (id=5660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040004850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.835296657s ago: executing program 1 (id=5661): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f0000000240)="cd8ee5266496af69b1b9117e0cc1cd2b80a59ce5554aee4187aab18130ef8deb86840affc5aae78d84914a29bbcde4ea5836c56c26e6c5635f86c68548b47569eb966ecd99276f99f6487d12eab0800a45f37b4a2a9c1e3b14566f9d3e8d229af0c5ea3710bb252d14fbd3e93c3d00f671e4ec0e0cb837ed44cbde09a5665bda145ee11284cd1eb702e915c984b11a8697", &(0x7f0000000500)=""/195, &(0x7f0000000600)="6f0cd9f8a46748e23b8734dd343e7cb436cc4adbac47f2699adeb9fc8c43170624f499ac2b83df80b6ef3e67e3b92d4bb886dbab70c2df35e97d787bf37b4ee2d70228d4d18e90a42c3f4560f73332b08737bd7b12eeeebdd0ce81dfffc9f4f7a8b84cfcf2d0427a2bbcbeffcb3b0a024ff7cc71061fe87d5adbe3c5bd0f94ad4b7d26e2adf6720c098c", &(0x7f00000006c0)="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", 0xb, r0, 0x4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000006f00)=[{{&(0x7f0000002800)={0xa, 0x4e20, 0xd, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002f00)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x30}}], 0x1, 0x8000090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="5800000072c7000000000000060000001811708ae9a2cd9b577bd71255fc3089c9b2c1fa754e9026079fca030e79b49a97abdfe86d327b2b457e8e0296ffc8a41159b89297cf7e273db7746ecf22bec5e0000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf09fffffcffffff0139080008000000185a000000000000000000000000000018210000", @ANYRES32, @ANYBLOB="000000000900000095000000000000000d630800080000000d20ad030400000085000000bd000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0), 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f0000000240)="cd8ee5266496af69b1b9117e0cc1cd2b80a59ce5554aee4187aab18130ef8deb86840affc5aae78d84914a29bbcde4ea5836c56c26e6c5635f86c68548b47569eb966ecd99276f99f6487d12eab0800a45f37b4a2a9c1e3b14566f9d3e8d229af0c5ea3710bb252d14fbd3e93c3d00f671e4ec0e0cb837ed44cbde09a5665bda145ee11284cd1eb702e915c984b11a8697", &(0x7f0000000500)=""/195, &(0x7f0000000600)="6f0cd9f8a46748e23b8734dd343e7cb436cc4adbac47f2699adeb9fc8c43170624f499ac2b83df80b6ef3e67e3b92d4bb886dbab70c2df35e97d787bf37b4ee2d70228d4d18e90a42c3f4560f73332b08737bd7b12eeeebdd0ce81dfffc9f4f7a8b84cfcf2d0427a2bbcbeffcb3b0a024ff7cc71061fe87d5adbe3c5bd0f94ad4b7d26e2adf6720c098c", &(0x7f00000006c0)="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", 0xb, r0, 0x4}, 0x38) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r6, &(0x7f0000006f00)=[{{&(0x7f0000002800)={0xa, 0x4e20, 0xd, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002f00)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x30}}], 0x1, 0x8000090) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="5800000072c7000000000000060000001811708ae9a2cd9b577bd71255fc3089c9b2c1fa754e9026079fca030e79b49a97abdfe86d327b2b457e8e0296ffc8a41159b89297cf7e273db7746ecf22bec5e0000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf09fffffcffffff0139080008000000185a000000000000000000000000000018210000", @ANYRES32, @ANYBLOB="000000000900000095000000000000000d630800080000000d20ad030400000085000000bd000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) 5.662191863s ago: executing program 1 (id=5662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000300)={0x62, 0x1, '\x00', [@generic={0xf}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x7ff}]}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c0300004100010029bd700004000000030000000400478064030180600310805c0308"], 0x37c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x2, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x10760, 0x40, 0xfffffffb, 0x7}}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_delneigh={0x38, 0x1d, 0x20, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, r3, 0x80, 0x8, 0x9}, [@NDA_CACHEINFO={0x14, 0x3, {0x9, 0xd, 0x1b2b, 0x6}}, @NDA_FLAGS_EXT={0x8}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 5.439341029s ago: executing program 1 (id=5663): r0 = socket(0x1d, 0x2, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x7ca8e000) (async) setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x20000000, 0x2) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x4000, 0x40000000, {0x7, r7}}, 0xfffffffffffffc9c}}, 0x24008000) 5.436890613s ago: executing program 1 (id=5664): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x88044}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x17}, @in6={0xa, 0x4e20, 0xa4f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe04}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, @in={0x2, 0x4e20, @multicast2}], 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 5.264087789s ago: executing program 0 (id=5665): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='geneve1\x00', 0x10) 4.321992327s ago: executing program 0 (id=5666): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="e062dcb8eaf4dd5de38a0b8a85000000ad0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f00000002c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x232b3e7b}, 0x94) accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000300)=0x10, 0x0) 4.212083787s ago: executing program 0 (id=5667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x4000080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a9c1f0b8e2bc7472985d300adeaf6d9c262afd66", @ANYRES16=r5, @ANYBLOB="020029bd7000fcdbdf251f00000008000100350000000800010010000000200022801c000080080007000900000008000400080000000800050001000000080001002b0000000500920001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4081) 2.102598326s ago: executing program 2 (id=5668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x64, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x3e}]}, 0x64}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000a80)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.085217275s ago: executing program 4 (id=5669): getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r0, 0x2}, &(0x7f00000000c0)=0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000100)="2d2c45bd69c3d6480196d36d5c94f344781a795dffbaa78fa02b51502d49532a7b384700b9a3d07478eda878a5e582f2b787d77e56888f0eb6d8475a0c32be8b1d79cd7a7160b2f5a6bd0294e77479") r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r1, 0x9}, &(0x7f00000001c0)=0x8) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x0, 'vlan0\x00', {0x3}, 0x3e}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000280)="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") bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0x3, 0x4}, 0x6) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000003c0)=0x3, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000000400)) ioctl$XFS_IOC_READLINK_BY_HANDLE(r5, 0xc038586c, &(0x7f0000000580)={r4, &(0x7f0000000480)='vlan0\x00', 0x60140, &(0x7f00000004c0)={@align=0xd6a0, {0x1, 0x5, 0x33, 0xffffffffffffffcf}}, 0xf, &(0x7f0000000500), &(0x7f0000000540)=0x401}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000005c0)={0x5}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0xf1d, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x67, @mcast1, 0x5}], 0xac) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000780)={@rand_addr, 0x0}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@newneigh={0x2c, 0x1c, 0x300, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, r8, 0x10, 0x41, 0x1}, [@NDA_MASTER={0x8, 0x9, 0x5}, @NDA_PROTOCOL={0x5, 0xc, 0x1b}]}, 0x2c}}, 0x20040041) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r0, 0x5a0e}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000900), &(0x7f0000000980)=0x68) r9 = accept(r6, &(0x7f00000009c0)=@ax25={{0x3, @rose}, [@default, @default, @netrom, @bcast, @bcast, @default, @default, @netrom]}, &(0x7f0000000a40)=0x80) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x1405, 0x400, 0x70bd29, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0xb13}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002c00)={r7, 0x20, &(0x7f0000002bc0)={&(0x7f0000000bc0)=""/4096, 0x1000, 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002c40)=r10, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002cc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, r12, 0x2e8cc51320b41925, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000400}, 0x40080) 1.816136756s ago: executing program 3 (id=5670): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0xd, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x4, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x200}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 1.6535978s ago: executing program 3 (id=5671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008004850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.594686094s ago: executing program 3 (id=5672): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000012c0)={{r1, &(0x7f0000000080)='\x00', 0x1, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x32]}, {0xb394, 0x7, 0x7fffffff, 0x4}}, 0x27f30566, &(0x7f0000001200)={@_ha_fsid}, &(0x7f0000001240)=0x3}, {[0x6, 0x8, 0xfffffffd, 0x7fffffff]}, 0x8, 0x31, &(0x7f0000001280)=""/49}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001340)={0x6, {{0x2, 0x4e20, @local}}, 0x1, 0x4, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x290) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x24004881, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback, 0x879}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="f1bef637000000000000000000000000631128000000000095003dc1d3479e2a"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 940.319307ms ago: executing program 1 (id=5673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002900)={@local, 0x4, 0x0, 0x3, 0xc, 0x8, 0x9}, &(0x7f0000002940)=0x20) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @dev}, &(0x7f0000000040)=0xc) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e24, 0x34c2, 0x4e22, 0x5, 0xa, 0x20, 0x0, 0x1, r3, r4}, {0x3, 0x9, 0x7, 0x100000000, 0x7, 0x0, 0x5, 0x1}, {0x7fff, 0x6, 0x7f, 0x7e3}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x0, 0x1f, 0x9, 0x9, 0x515}}, 0xe8) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 939.081007ms ago: executing program 4 (id=5674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000044010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff000000000000000000000000000000000000000000000000030000000000000020010000000000000000000000000001000000002b00000002000000fe880000000000000000000000000001000000000400"/436], 0x1fc}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x8, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000841}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000044010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff000000000000000000000000000000000000000000000000030000000000000020010000000000000000000000000001000000002b00000002000000fe880000000000000000000000000001000000000400"/436], 0x1fc}}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x8, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000841}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) (async) 930.492662ms ago: executing program 0 (id=5675): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x230, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x44080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x230, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x44080) (async) 914.686026ms ago: executing program 2 (id=5676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="08020000", @ANYRES16=r3, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb6a459a44139fd9d}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x20008040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r7, 0x16842e9bd142d0d5}], 0x1, 0x94) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000200)=r9, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r11 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$packet_int(r11, 0x107, 0xe, &(0x7f00000000c0)=0xfffffffd, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d538906dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r10, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@getaddr={0x14, 0x16, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x40) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 843.626295ms ago: executing program 4 (id=5677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)=r6}, 0x20) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000840)={{r8}, "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"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000540)={r7, &(0x7f0000000240)='().$*-[\x00', 0x600000, &(0x7f0000000280)={@align=0x1, {0xf7da, 0x6, 0xc, 0x41}}, 0x8, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x3}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 781.69997ms ago: executing program 4 (id=5679): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x4, 0x0, 0x6, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r4) r7 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd4, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @device_a, @device_b}}, @NL80211_ATTR_FRAME={0x5e, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xe}, @device_a, @device_b, @random="4e68af737776", {0xe, 0x3}, @value=@ver_80211n={0x0, 0x7ff8, 0x3, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x10, 0x28, @default, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x40, 0x9}}, [{0xdd, 0x1a, "12de022c1e7c077bfacd19a49bb18c949205d15b9ad1e9fa216d"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x76bd}, @device_a, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 740.761226ms ago: executing program 0 (id=5680): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd80}}, 0x2004c880) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "2ea101ab090c0a75e57de560ecd9e9980fa794b73644cc05cd4d079809556e06", "777f7aef52eb9fa85d4b788af65280a2d857f95d446f1ee8049e26b9751e9b78", "4db01cdef103294f3acb7a7dfed1411e139c0e05d8c80fa87a21705be3111664", "2bd1f1e94cf5344e6dc0d0b93043a7096d44905b996ba7c55518eac44aaa3163", "e0f569720c553c0a577f8f99e81dd584822ed1f66d1024ba5d75fdc1591cab2d", "68fc0fe43b73999d43efb405", 0x2, 0xe, 0x4, 0x200, 0x7}}) (async) r4 = socket(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x2, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@deltaction={0x78, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x78}}, 0x0) 644.448949ms ago: executing program 3 (id=5681): socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a30000000000400074014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xfffffff4}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x7fffffffffffffff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB="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"]}, 0x296) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1f, 0xa, 0xffffff81) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001c00)={&(0x7f00000000c0), 0xc, &(0x7f0000001bc0)={&(0x7f0000000800)={0x13a4, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc7, 0x4, "1215811c6d97e1ff3de2dc68890512b6c952864419705a30e6a98b3038ec3488393d95a35d6ffd63b073799f0a7eaf0ebda3ada69fd792f2e023e99b11579dbfe8cef96bc909c82e9d2be907622c2560c57e9fc832b9fd77d8698cc75fb024de49a5943829cb54f8f6246d547021fe29967cfe40e3ec04a01dc8b303d5c551924c2acb9cf549a5094b82ae7d4c9fb38d445cc07eaacb9bd88f270bc06b3eccf43ac78a85f49264aadc1b7ece48e80cc8bfdfdbeeeb8ef84139cc90ffe8c5d96f8f66ea"}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "13f2e34967dfde2ccf65d1e3429b9f131a502a2f0dcc3b88"}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "4e04c45edb378dba8ad4be83efa85c3f9120169fbf305e2cc4c60c279ea0afe9cfffdc3f24f5afc3d926bcf6b18a82ee3b1e5d5253c2a71d82a4f55e04dc7c1e10812de7517a78b288376f0308a8e9952cd0e116fdbc18e566f7fc5f31fd0f5fd3ed8941b74e9c866b65064b38759f933496e22b883ee45963b643cbee88111f49868cf40baa08dd00ae8bd6fabd51839aa26bbd26681c5ab6"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-\xdb(}[]#\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x86e}]}, @ETHTOOL_A_WOL_SOPASS={0x1a, 0x3, "3e0fdd4e2f0644771a2cfc040d9fcc0ff77adfd229b2"}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x44, 0x3, "017d16ea256dca96f77be057803808287ba8dcbd71cd37d4e2ee048532863100684098476494e633ed8b99deb9d82c01f0dff41b8c2d2c1d5e25b3aacc3c2555"}, @ETHTOOL_A_WOL_SOPASS={0xb8, 0x3, "637121a640cd176b916a8644964048c94efd3153ce09cf1fb3a919eab6854076f8d1c6341f394d062574c19da84652833414748907796833309d06d5cf10c103c9da22ed5c1db7ceaa206e3c6d72482f49e76fdf93dfa9bac74017373b97f7c4a51b39a44aa9d52992a9792d49021098d6fe1d27b6eec75ec4dc7aecd035e41e291f3d83aa93db16ac809647325ca4d98b1ab6a0b2857340198655caeb6ec432ca59bef0ca76c97f054d9f7399174f6b4df1e8e2"}, @ETHTOOL_A_WOL_SOPASS={0xc6, 0x3, "9ad0aebf619fe8ae5a0e297c6ab9e8290306e066623d42dd5cf7ecf27552b5d1766be7d88f962bee0712a08ee62d2e698ccb56180eb78cf4d936917d5ea7c511a86f732f3a01ad9d129c4cd62a1ce075f18c1676268a9112d15dc3669764d834ff368cf4d12f1e4f6f19b81fe0e0a2d64df168fca994b907f82ea2dbe84ad3bf0d048b927a23e3330a48e906b4a04b90fa19af5360976f56589dbbced56bccefbec73be549d94b82cfcb4a16515f55b5b9e61a4ea2f36f9f70505204a7234cc43f33"}]}, 0x13a4}, 0x1, 0x0, 0x0, 0x4008000}, 0xc841) 268.80367ms ago: executing program 2 (id=5682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000005850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 107.003982ms ago: executing program 4 (id=5683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x9, 0x6, 0x104, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2d}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000000000000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x800) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001140000001100010091930000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 418.5Вµs ago: executing program 2 (id=5684): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630000dd000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008040) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x28, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r2) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0xc8, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_VF_PORTS={0xa0, 0x18, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bdbc7d7fdf0d9decb899d4ffc37bdc57"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a776aba5d88d4157930140d583e90552"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6192bdb383b29b41be9f7fd44e59265c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7f528a0373fafad8d8bf25bbf33684c9"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c4a7af457117b57740560efb3c78b0f4"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "691d8e96e050ce5d2ef240fb1050bd78"}]}]}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xc8}}, 0x800) 0s ago: executing program 0 (id=5685): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x1a09}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x36b045c7, 0xa18, 0x2, 0x8, 0x8}, 0x522, 0x0, 0x9, 0x8, 0xfff, 0xf, 0x14, 0x4, 0x1, 0x8, {0x81, 0x0, 0x5, 0x8, 0x8b8e, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) kernel console output (not intermixed with test programs): ing max 34 ests per chain, 81600 per kthread [ 569.153200][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 569.273641][T20215] veth1_to_bond: entered allmulticast mode [ 569.403452][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 569.419836][T20212] syzkaller1: entered promiscuous mode [ 569.430926][T20212] syzkaller1: entered allmulticast mode [ 569.474876][T20213] veth1_to_bond: left allmulticast mode [ 569.487780][T20212] __nla_validate_parse: 2 callbacks suppressed [ 569.487836][T20212] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3852'. [ 569.503985][T20223] Bluetooth: MGMT ver 1.23 [ 569.532733][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 569.652562][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 569.681118][T20225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.749364][T20225] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 569.792357][T20225] bond4 (unregistering): Released all slaves [ 569.854914][T20234] ip6tnl0: Caught tx_queue_len zero misconfig [ 570.052907][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 570.172370][T20250] vcan0: entered allmulticast mode [ 570.213333][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 570.352982][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 570.730061][T20270] netlink: 'syz.0.3869': attribute type 1 has an invalid length. [ 570.760280][T20272] netlink: 'syz.0.3869': attribute type 1 has an invalid length. [ 570.852050][T20274] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.008363][T20279] syzkaller0: entered promiscuous mode [ 571.013911][T20279] syzkaller0: entered allmulticast mode [ 571.194524][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3877'. [ 571.614352][T20311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3885'. [ 571.689104][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3886'. [ 571.715285][T20319] xt_bpf: check failed: parse error [ 571.733302][T20320] xt_bpf: check failed: parse error [ 571.919737][T20335] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3891'. [ 572.062986][T20345] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3896'. [ 572.075515][T20333] syzkaller0: entered promiscuous mode [ 572.081029][T20333] syzkaller0: entered allmulticast mode [ 575.471636][T20346] smc: net device team0 applied user defined pnetid SYZ2 [ 575.733760][T20360] x_tables: duplicate underflow at hook 1 [ 575.761907][T20360] netlink: 'syz.0.3899': attribute type 11 has an invalid length. [ 575.814088][ T48] net_ratelimit: 11 callbacks suppressed [ 575.814111][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 575.830000][T20364] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3900'. [ 575.904738][T20367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.933381][T20367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.963443][T20373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3901'. [ 575.977472][T20367] bond0 (unregistering): Released all slaves [ 576.167594][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 576.352407][T20380] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 576.364914][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3909'. [ 576.373898][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 576.402625][T20380] bond0 (unregistering): Released all slaves [ 576.414651][T20385] netlink: 'syz.3.3909': attribute type 15 has an invalid length. [ 576.452167][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3909'. [ 576.461090][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 576.463440][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 576.470074][T20385] netlink: 'syz.3.3909': attribute type 15 has an invalid length. [ 576.486582][T19010] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 576.522127][T20386] ip6t_srh: unknown srh match flags 5F28 [ 576.535852][T20393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.536148][T19010] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 576.539045][T20393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3908'. [ 576.546843][T19010] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 576.575707][T19010] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 576.617201][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 576.635984][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3912'. [ 576.647270][T20393] bond0: ARP target 8.4.0.0 is already present [ 576.653493][T20393] bond0: option arp_ip_target: invalid value (1032) [ 576.712305][T20400] netlink: 'syz.1.3913': attribute type 7 has an invalid length. [ 576.733556][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 576.912217][T20406] veth3: entered allmulticast mode [ 576.975302][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 577.001982][T20414] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3919'. [ 577.108262][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 577.306619][T20432] netlink: 'syz.1.3926': attribute type 8 has an invalid length. [ 577.333297][T20436] IPVS: ip_vs_edit_dest(): server weight less than zero [ 577.335131][T20432] netlink: 'syz.1.3926': attribute type 1 has an invalid length. [ 577.341403][T20436] veth0_to_bond: Caught tx_queue_len zero misconfig [ 577.395069][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 577.506235][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 577.683224][T20451] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3933'. [ 577.754408][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 578.048338][T20465] netlink: 'syz.4.3938': attribute type 7 has an invalid length. [ 578.057700][T20465] netlink: 'syz.4.3938': attribute type 8 has an invalid length. [ 578.953838][T20504] tc action pedit offset must be on 32 bit boundaries [ 578.963689][T20504] tc action pedit offset must be on 32 bit boundaries [ 578.970892][T20504] tc action pedit offset must be on 32 bit boundaries [ 578.977910][T20504] tc action pedit offset must be on 32 bit boundaries [ 578.984760][T20504] tc action pedit offset must be on 32 bit boundaries [ 578.991550][T20504] tc action pedit offset must be on 32 bit boundaries [ 578.998391][T20504] tc action pedit offset must be on 32 bit boundaries [ 579.005420][T20504] tc action pedit offset must be on 32 bit boundaries [ 579.012315][T20504] tc action pedit offset must be on 32 bit boundaries [ 579.019191][T20504] tc action pedit offset must be on 32 bit boundaries [ 579.616005][T20526] netlink: 'syz.3.3956': attribute type 8 has an invalid length. [ 579.672210][T20529] tc_dump_action: action bad kind [ 579.789366][T20540] netlink: 'syz.1.3960': attribute type 1 has an invalid length. [ 579.841331][T20540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.872150][T20540] bond0: (slave geneve3): making interface the new active one [ 579.883241][T20540] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 579.957676][T20549] x_tables: duplicate entry at hook 1 [ 580.073837][T20549] syzkaller1: entered promiscuous mode [ 580.097748][T20549] syzkaller1: entered allmulticast mode [ 580.413734][T20561] xt_hashlimit: size too large, truncated to 1048576 [ 580.839145][ T48] net_ratelimit: 24 callbacks suppressed [ 580.839172][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 580.914086][T20597] bridge0: port 3(syz_tun) entered blocking state [ 580.920820][T20597] bridge0: port 3(syz_tun) entered disabled state [ 580.973280][T20597] syz_tun: entered allmulticast mode [ 580.993387][T20597] syz_tun: entered promiscuous mode [ 580.999430][T20597] bridge0: port 3(syz_tun) entered blocking state [ 581.005991][T20597] bridge0: port 3(syz_tun) entered forwarding state [ 581.033492][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 581.167886][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 581.217977][T20609] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 581.243572][T20609] syzkaller1: group set to 0 [ 581.296728][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 581.325681][T20613] __nla_validate_parse: 5 callbacks suppressed [ 581.325704][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 581.398928][T20619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3983'. [ 581.514035][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 581.535869][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3985'. [ 581.544882][T20623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3985'. [ 581.555477][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3985'. [ 581.567006][T20623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3985'. [ 581.626621][T20623] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3985'. [ 581.675415][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 581.899652][T20646] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 582.068639][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 582.193054][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 582.296754][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'. [ 582.356273][T20673] syzkaller0: entered promiscuous mode [ 582.372834][T20673] syzkaller0: entered allmulticast mode [ 582.424545][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 582.850629][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 583.013049][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 583.523857][T20718] IPVS: set_ctl: invalid protocol: 92 172.20.20.30:20003 [ 583.714353][T20730] xt_hashlimit: size too large, truncated to 1048576 [ 584.039140][T20735] syzkaller0: entered promiscuous mode [ 584.048491][T20735] syzkaller0: entered allmulticast mode [ 584.096933][T20730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.113090][T20730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.126727][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4016'. [ 584.129647][T20730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.137729][T20758] validate_nla: 1 callbacks suppressed [ 584.137746][T20758] netlink: 'syz.2.4016': attribute type 14 has an invalid length. [ 584.158521][T20758] netlink: 'syz.2.4016': attribute type 13 has an invalid length. [ 584.166885][T20730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.329913][T20758] ip6erspan0: entered promiscuous mode [ 584.337751][T20758] netlink: 'syz.2.4016': attribute type 8 has an invalid length. [ 584.540028][T20771] netlink: 'syz.0.4018': attribute type 50 has an invalid length. [ 585.229508][T20813] netlink: 'syz.1.4027': attribute type 32 has an invalid length. [ 585.335858][T20813] bond3: option coupled_control: invalid value (192) [ 585.361758][T20813] bond3 (unregistering): Released all slaves [ 585.382532][T20824] netlink: 'syz.3.4032': attribute type 10 has an invalid length. [ 585.479572][T20818] syzkaller0: entered promiscuous mode [ 585.485793][T20818] syzkaller0: entered allmulticast mode [ 585.858480][ T14] net_ratelimit: 17 callbacks suppressed [ 585.858503][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 585.962768][T20852] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 586.068969][T20867] netlink: 'syz.3.4043': attribute type 1 has an invalid length. [ 586.160723][T20867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.203163][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 586.272572][T20877] gre1: entered promiscuous mode [ 586.277986][T20877] gre1: entered allmulticast mode [ 586.364891][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 586.437029][T20885] __nla_validate_parse: 9 callbacks suppressed [ 586.437051][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 586.458454][T20883] netlink: 'syz.1.4048': attribute type 2 has an invalid length. [ 586.497415][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 586.545648][T20883] : entered promiscuous mode [ 586.555942][T20888] netlink: 'syz.4.4051': attribute type 22 has an invalid length. [ 586.574095][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 586.654790][T20888] netlink: 'syz.4.4051': attribute type 22 has an invalid length. [ 586.655335][T20893] veth0_macvtap: Caught tx_queue_len zero misconfig [ 586.684980][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 586.712554][ T8786] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.723030][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 586.756742][ T8786] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.773452][ T8786] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.782325][ T8786] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.896543][T20900] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 586.955351][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 586.970546][T20909] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4058'. [ 587.077805][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4060'. [ 587.089753][T20915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4060'. [ 587.153412][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 587.176518][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'. [ 587.293218][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 587.402137][T20928] bond3 (unregistering): Released all slaves [ 587.498417][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 587.995849][T20965] bridge2: entered promiscuous mode [ 588.001119][T20965] bridge2: entered allmulticast mode [ 588.009496][T20965] team0: Port device bridge2 added [ 588.037093][T20955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.079984][T20955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.165419][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'. [ 588.189484][T20971] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 588.218780][T20971] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 588.226658][T20971] gretap2: entered promiscuous mode [ 588.231902][T20971] gretap2: entered allmulticast mode [ 588.673483][T20996] xt_hashlimit: size too large, truncated to 1048576 [ 588.919394][T21007] syzkaller0: entered promiscuous mode [ 588.925015][T21007] syzkaller0: entered allmulticast mode [ 589.000847][T21007] tipc: Enabled bearer , priority 0 [ 589.076548][T21007] tipc: Resetting bearer [ 589.163910][T21006] tipc: Resetting bearer [ 589.360174][T21006] tipc: Disabling bearer [ 589.413350][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4098'. [ 589.449769][T21029] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.4098'. [ 589.641932][T21041] validate_nla: 3 callbacks suppressed [ 589.641957][T21041] netlink: 'syz.2.4100': attribute type 1 has an invalid length. [ 589.655813][T21041] netlink: 'syz.2.4100': attribute type 1 has an invalid length. [ 589.663616][T21041] netlink: 'syz.2.4100': attribute type 2 has an invalid length. [ 590.276078][T21063] netlink: 'syz.3.4106': attribute type 1 has an invalid length. [ 590.351603][T21051] syzkaller0: entered promiscuous mode [ 590.357133][T21051] syzkaller0: entered allmulticast mode [ 590.374748][T21066] netlink: 'syz.1.4108': attribute type 1 has an invalid length. [ 590.517216][T21075] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 590.828844][T21095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.840654][T21095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.895789][ T14] net_ratelimit: 19 callbacks suppressed [ 590.895827][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 591.025713][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 591.086179][T21114] tipc: Enabling of bearer rejected, failed to enable media [ 591.124578][T21107] syzkaller0: entered promiscuous mode [ 591.130201][T21107] syzkaller0: entered allmulticast mode [ 591.171045][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 591.280942][T21125] netlink: 'syz.3.4126': attribute type 1 has an invalid length. [ 591.476485][T21128] team0: entered promiscuous mode [ 591.486530][T21128] team_slave_0: entered promiscuous mode [ 591.503516][T21128] team_slave_1: entered promiscuous mode [ 591.513491][T21128] erspan0: entered promiscuous mode [ 591.523453][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 591.644078][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 591.785897][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 592.000317][T21142] bond2: entered promiscuous mode [ 592.005675][T21142] bond2: entered allmulticast mode [ 592.013470][T21142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 592.110370][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 592.343418][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 592.391727][T21161] __nla_validate_parse: 7 callbacks suppressed [ 592.391749][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4140'. [ 592.408841][T21161] netlink: 50 bytes leftover after parsing attributes in process `syz.0.4140'. [ 592.453396][T21161] netlink: 50 bytes leftover after parsing attributes in process `syz.0.4140'. [ 592.547001][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 592.668444][ T8785] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 592.763555][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 592.809902][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 592.829860][T21194] x_tables: duplicate entry at hook 2 [ 595.478912][T21163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.856159][T21218] pim6reg: entered allmulticast mode [ 595.902347][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4155'. [ 595.983321][ T8786] net_ratelimit: 27 callbacks suppressed [ 595.983344][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 596.056483][T21227] syzkaller0: entered promiscuous mode [ 596.062005][T21227] syzkaller0: entered allmulticast mode [ 596.271621][T21244] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 596.333470][T21234] netlink: 'syz.4.4163': attribute type 1 has an invalid length. [ 596.380318][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 596.582177][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 596.591888][T21260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4170'. [ 596.600885][T21260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4170'. [ 596.711823][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 596.762654][T21269] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 596.816991][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 596.895126][T21281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4177'. [ 596.940371][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 597.038758][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 597.047064][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4180'. [ 597.061014][T21289] netlink: 'syz.2.4179': attribute type 1 has an invalid length. [ 597.068790][T21289] netlink: 16130 bytes leftover after parsing attributes in process `syz.2.4179'. [ 597.077263][T21291] netlink: 'syz.4.4180': attribute type 12 has an invalid length. [ 597.122794][T21291] netlink: 'syz.4.4180': attribute type 12 has an invalid length. [ 597.134100][T21296] xt_nfacct: accounting object `syz1' does not exist [ 597.267893][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 597.361543][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 597.404429][T21312] netlink: 'syz.2.4187': attribute type 9 has an invalid length. [ 597.508002][T21312] netlink: 'syz.2.4187': attribute type 9 has an invalid length. [ 597.665261][T21312] netlink: 'syz.2.4187': attribute type 9 has an invalid length. [ 597.776037][T21312] netlink: 'syz.2.4187': attribute type 9 has an invalid length. [ 597.877537][T21312] netlink: 'syz.2.4187': attribute type 9 has an invalid length. [ 598.064129][T21346] __nla_validate_parse: 2 callbacks suppressed [ 598.064150][T21346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4196'. [ 598.129370][T21312] netlink: 'syz.2.4187': attribute type 9 has an invalid length. [ 598.291631][T21358] ipvlan2: entered promiscuous mode [ 598.301899][T21358] veth1_to_bond: Caught tx_queue_len zero misconfig [ 598.968975][T21393] veth7: entered allmulticast mode [ 599.017999][T21403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4214'. [ 599.029025][T21399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 599.124663][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4216'. [ 599.147513][T21405] FAULT_INJECTION: forcing a failure. [ 599.147513][T21405] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 599.164876][T21405] CPU: 1 UID: 0 PID: 21405 Comm: syz.0.4215 Not tainted syzkaller #0 PREEMPT(full) [ 599.164907][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.164918][T21405] Call Trace: [ 599.164927][T21405] [ 599.164936][T21405] dump_stack_lvl+0xe8/0x150 [ 599.165047][T21405] should_fail_ex+0x40c/0x560 [ 599.165081][T21405] _copy_to_iter+0x59c/0x1810 [ 599.165126][T21405] ? __pfx__copy_to_iter+0x10/0x10 [ 599.165156][T21405] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.165186][T21405] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.165215][T21405] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.165242][T21405] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 599.165271][T21405] __skb_datagram_iter+0xf8/0x980 [ 599.165292][T21405] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 599.165323][T21405] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 599.165354][T21405] skb_copy_datagram_iter+0xb5/0x240 [ 599.165377][T21405] netlink_recvmsg+0x2b9/0xa50 [ 599.165438][T21405] ? __pfx_netlink_recvmsg+0x10/0x10 [ 599.165465][T21405] ? __lock_acquire+0x683/0x2cf0 [ 599.165485][T21405] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.165513][T21405] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 599.165538][T21405] ? security_socket_recvmsg+0x7e/0x2c0 [ 599.165566][T21405] ? __pfx_netlink_recvmsg+0x10/0x10 [ 599.165589][T21405] sock_recvmsg+0x196/0x1e0 [ 599.165619][T21405] ____sys_recvmsg+0x1e6/0x4a0 [ 599.165650][T21405] ? __pfx_____sys_recvmsg+0x10/0x10 [ 599.165687][T21405] ? import_iovec+0x73/0xa0 [ 599.165711][T21405] ___sys_recvmsg+0x213/0x5a0 [ 599.165739][T21405] ? __pfx____sys_recvmsg+0x10/0x10 [ 599.165765][T21405] ? __fget_files+0x2a/0x420 [ 599.165802][T21405] ? __fget_files+0x3a2/0x420 [ 599.165831][T21405] do_recvmmsg+0x31a/0x7f0 [ 599.165861][T21405] ? __pfx_do_recvmmsg+0x10/0x10 [ 599.165894][T21405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 599.165925][T21405] ? __fget_files+0x3a2/0x420 [ 599.165954][T21405] __x64_sys_recvmmsg+0x198/0x250 [ 599.165979][T21405] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 599.166010][T21405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.166032][T21405] do_syscall_64+0x174/0x580 [ 599.166050][T21405] ? trace_irq_disable+0x3b/0x140 [ 599.166069][T21405] ? clear_bhb_loop+0x40/0x90 [ 599.166093][T21405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.166113][T21405] RIP: 0033:0x7f13e079de59 [ 599.166169][T21405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.166186][T21405] RSP: 002b:00007f13e1617028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 599.166208][T21405] RAX: ffffffffffffffda RBX: 00007f13e0a25fa0 RCX: 00007f13e079de59 [ 599.166222][T21405] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000003 [ 599.166234][T21405] RBP: 00007f13e1617090 R08: 0000000000000000 R09: 0000000000000000 [ 599.166246][T21405] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 599.166258][T21405] R13: 00007f13e0a26038 R14: 00007f13e0a25fa0 R15: 00007fff6e4d4ca8 [ 599.166288][T21405] [ 599.193055][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'. [ 599.364396][T21409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4216'. [ 599.653044][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4224'. [ 599.757191][T21430] bond5: Setting coupled_control to off (0) [ 599.988208][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4228'. [ 600.217239][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'. [ 600.246822][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'. [ 600.261240][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'. [ 600.289793][T21449] FAULT_INJECTION: forcing a failure. [ 600.289793][T21449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.307430][T21449] CPU: 1 UID: 0 PID: 21449 Comm: syz.4.4230 Not tainted syzkaller #0 PREEMPT(full) [ 600.307460][T21449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 600.307471][T21449] Call Trace: [ 600.307479][T21449] [ 600.307488][T21449] dump_stack_lvl+0xe8/0x150 [ 600.307519][T21449] should_fail_ex+0x40c/0x560 [ 600.307552][T21449] _copy_to_iter+0x59c/0x1810 [ 600.307606][T21449] ? __pfx__copy_to_iter+0x10/0x10 [ 600.307634][T21449] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 600.307661][T21449] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.307690][T21449] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 600.307716][T21449] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 600.307746][T21449] __skb_datagram_iter+0xf8/0x980 [ 600.307768][T21449] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 600.307796][T21449] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 600.307828][T21449] skb_copy_datagram_iter+0xb5/0x240 [ 600.307855][T21449] netlink_recvmsg+0x2b9/0xa50 [ 600.307964][T21449] ? __pfx_netlink_recvmsg+0x10/0x10 [ 600.307991][T21449] ? __lock_acquire+0x683/0x2cf0 [ 600.308011][T21449] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.308038][T21449] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 600.308063][T21449] ? security_socket_recvmsg+0x7e/0x2c0 [ 600.308090][T21449] ? __pfx_netlink_recvmsg+0x10/0x10 [ 600.308112][T21449] sock_recvmsg+0x196/0x1e0 [ 600.308142][T21449] ____sys_recvmsg+0x1e6/0x4a0 [ 600.308173][T21449] ? __pfx_____sys_recvmsg+0x10/0x10 [ 600.308209][T21449] ? import_iovec+0x73/0xa0 [ 600.308234][T21449] ___sys_recvmsg+0x213/0x5a0 [ 600.308261][T21449] ? __pfx____sys_recvmsg+0x10/0x10 [ 600.308285][T21449] ? __fget_files+0x2a/0x420 [ 600.308333][T21449] ? __fget_files+0x3a2/0x420 [ 600.308362][T21449] do_recvmmsg+0x31a/0x7f0 [ 600.308392][T21449] ? __pfx_do_recvmmsg+0x10/0x10 [ 600.308426][T21449] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 600.308457][T21449] ? __fget_files+0x3a2/0x420 [ 600.308486][T21449] __x64_sys_recvmmsg+0x198/0x250 [ 600.308510][T21449] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 600.308542][T21449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.308564][T21449] do_syscall_64+0x174/0x580 [ 600.308581][T21449] ? trace_irq_disable+0x3b/0x140 [ 600.308607][T21449] ? clear_bhb_loop+0x40/0x90 [ 600.308633][T21449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.308652][T21449] RIP: 0033:0x7f8b0f19de59 [ 600.308672][T21449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.308688][T21449] RSP: 002b:00007f8b10027028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 600.308709][T21449] RAX: ffffffffffffffda RBX: 00007f8b0f425fa0 RCX: 00007f8b0f19de59 [ 600.308724][T21449] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000003 [ 600.308736][T21449] RBP: 00007f8b10027090 R08: 0000000000000000 R09: 0000000000000000 [ 600.308747][T21449] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 600.308759][T21449] R13: 00007f8b0f426038 R14: 00007f8b0f425fa0 R15: 00007ffcee573f68 [ 600.308790][T21449] [ 601.344146][ T14] net_ratelimit: 22 callbacks suppressed [ 601.344170][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 601.523490][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 601.644598][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 601.796723][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 601.944736][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 602.061359][T21519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.142185][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 602.331350][T21541] team0: left allmulticast mode [ 602.336391][T21541] team_slave_0: left allmulticast mode [ 602.341895][T21541] team_slave_1: left allmulticast mode [ 602.353934][T21541] team0: left promiscuous mode [ 602.372437][T21541] team_slave_0: left promiscuous mode [ 602.398552][T21541] team_slave_1: left promiscuous mode [ 602.428313][T21541] bridge0: port 3(team0) entered disabled state [ 602.548260][T21541] bridge_slave_1: left allmulticast mode [ 602.597885][T21541] bridge_slave_1: left promiscuous mode [ 602.605296][T21541] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.672639][T21541] bridge_slave_0: left allmulticast mode [ 602.679236][T21541] bridge_slave_0: left promiscuous mode [ 602.770681][T21541] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.889459][ T5288] veth0_vlan: left promiscuous mode [ 602.950396][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 602.963139][ T7895] veth0_vlan: entered promiscuous mode [ 603.428905][T21597] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 603.477903][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 603.581209][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 603.605854][T21603] __nla_validate_parse: 12 callbacks suppressed [ 603.605877][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 604.113577][T21638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4271'. [ 604.318722][T21638] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4271'. [ 604.494535][T21656] validate_nla: 5 callbacks suppressed [ 604.494558][T21656] netlink: 'syz.0.4277': attribute type 4 has an invalid length. [ 604.530398][T21656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.618554][T21661] syzkaller0: entered promiscuous mode [ 604.630247][T21658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4278'. [ 604.649697][T21661] syzkaller0: entered allmulticast mode [ 604.670232][T21661] netlink: 'syz.2.4273': attribute type 2 has an invalid length. [ 604.727325][T21661] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4273'. [ 604.921389][T21679] xt_ecn: cannot match TCP bits for non-tcp packets [ 605.744328][T21708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4294'. [ 606.129357][T21725] syzkaller0: entered promiscuous mode [ 606.147994][T21725] syzkaller0: entered allmulticast mode [ 606.180498][T21725] netlink: 'syz.2.4298': attribute type 1 has an invalid length. [ 606.274961][T21725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 606.369328][T21730] bond2: (slave geneve3): making interface the new active one [ 606.387344][T21730] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 606.540068][T21743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4304'. [ 606.555973][T21743] netlink: 'syz.0.4304': attribute type 3 has an invalid length. [ 606.572573][T21743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4304'. [ 606.581983][T21746] can: request_module (can-proto-4) failed. [ 606.588336][T21743] netlink: 'syz.0.4304': attribute type 3 has an invalid length. [ 606.617410][ T8777] net_ratelimit: 21 callbacks suppressed [ 606.617438][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 606.743997][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 606.905453][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 607.057109][ T14] bond4: (slave dummy0): failed to get link speed/duplex [ 607.155285][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 607.181068][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4310'. [ 607.192050][T21770] IPv6: NLM_F_CREATE should be specified when creating new route [ 607.203644][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 607.315276][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 607.514650][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 607.645248][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 607.763510][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 607.897555][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 608.011392][T21814] bond3: entered promiscuous mode [ 608.021192][T21814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 608.090259][T21818] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 608.388881][T21843] xt_TCPMSS: Only works on TCP SYN packets [ 608.398606][T21843] netlink: 'syz.4.4331': attribute type 19 has an invalid length. [ 608.446206][T21843] netlink: 'syz.4.4331': attribute type 19 has an invalid length. [ 608.606621][T21860] xt_connbytes: Forcing CT accounting to be enabled [ 608.632485][T21860] Cannot find set identified by id 65534 to match [ 608.902729][T21881] syzkaller0: entered promiscuous mode [ 608.908274][T21881] syzkaller0: entered allmulticast mode [ 610.233025][T21930] __nla_validate_parse: 2 callbacks suppressed [ 610.233073][T21930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4354'. [ 610.270883][T21932] veth0_macvtap: left promiscuous mode [ 611.046613][T21962] syzkaller0: entered promiscuous mode [ 611.071665][T21962] syzkaller0: entered allmulticast mode [ 615.917454][T21989] syzkaller0: entered promiscuous mode [ 615.923228][T21989] syzkaller0: entered allmulticast mode [ 615.936153][T21989] netlink: 'syz.3.4370': attribute type 1 has an invalid length. [ 615.944076][T21989] netlink: 'syz.3.4370': attribute type 2 has an invalid length. [ 615.995442][ T8786] net_ratelimit: 26 callbacks suppressed [ 615.995479][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 616.051287][T21998] tipc: Enabled bearer , priority 0 [ 616.093670][T21998] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4370'. [ 616.119255][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 616.192716][T21998] tipc: Resetting bearer [ 616.207204][T22007] syzkaller0: entered promiscuous mode [ 616.224009][T22007] syzkaller0: entered allmulticast mode [ 616.335138][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 616.347361][T22014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4376'. [ 616.409933][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 616.432168][T22021] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4380'. [ 616.492178][T22021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4380'. [ 616.553472][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 616.640437][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 616.655068][T22034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 616.674709][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 616.742445][T21986] tipc: Resetting bearer [ 616.797235][T21986] tipc: Disabling bearer [ 616.841331][T22034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4383'. [ 616.844397][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 616.900117][T22034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4383'. [ 616.963719][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 617.057847][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'. [ 617.065087][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 617.178523][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 617.287102][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 617.476958][T22082] veth1_to_bridge: entered promiscuous mode [ 617.578320][T22091] veth0: entered promiscuous mode [ 617.599668][T22088] veth0: left promiscuous mode [ 618.568828][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.577713][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.605998][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.631402][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.976274][T22178] syzkaller1: entered promiscuous mode [ 619.014068][T22178] syzkaller1: entered allmulticast mode [ 619.138706][T22188] gre1: entered promiscuous mode [ 619.144306][T22188] gre1: entered allmulticast mode [ 619.175109][T22177] vxcan1 speed is unknown, defaulting to 1000 [ 619.185081][T22178] syzkaller0: entered promiscuous mode [ 619.204045][T22178] syzkaller0: entered allmulticast mode [ 619.719658][T22204] syzkaller0: entered promiscuous mode [ 619.725187][T22204] syzkaller0: entered allmulticast mode [ 619.896919][T22215] nbd: must specify at least one socket [ 620.213499][T22226] syzkaller0: entered promiscuous mode [ 620.219315][T22226] syzkaller0: entered allmulticast mode [ 620.406945][T22220] netlink: 'syz.1.4432': attribute type 1 has an invalid length. [ 621.030788][ T8773] net_ratelimit: 23 callbacks suppressed [ 621.030812][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 621.135514][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 621.143270][T22254] netdevsim netdevsim1 netdevsim2: IPsec offload requires 128 bit authentication [ 621.293909][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 621.378986][T22270] nbd: nbd1 already in use [ 621.443730][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 621.568321][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 621.591655][T22274] netlink: 'syz.4.4446': attribute type 4 has an invalid length. [ 621.621857][T22274] netlink: 'syz.4.4446': attribute type 4 has an invalid length. [ 621.690063][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 621.898161][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 622.011769][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 622.115821][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 622.176418][T22306] __nla_validate_parse: 11 callbacks suppressed [ 622.176441][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 622.191854][T22306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4455'. [ 622.201034][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 622.209922][T22306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4455'. [ 622.246093][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 622.369116][T22314] x_tables: unsorted entry at hook 2 [ 622.871816][T22343] netlink: 'syz.4.4467': attribute type 39 has an invalid length. [ 623.044235][T22346] nbd: couldn't find a device at index 0 [ 623.345674][T22349] bridge0: entered promiscuous mode [ 623.351190][T22349] bridge0: entered allmulticast mode [ 623.494922][T22358] dummy0: entered promiscuous mode [ 623.513112][T22358] dummy0: entered allmulticast mode [ 623.967378][T22349] netlink: 'syz.3.4469': attribute type 9 has an invalid length. [ 623.998999][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4478'. [ 624.009613][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4478'. [ 624.404436][T22402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.738415][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4488'. [ 624.799242][T22421] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4487'. [ 624.854582][T22429] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4490'. [ 625.010325][T22441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4494'. [ 625.620136][T22473] syzkaller0: entered promiscuous mode [ 625.647318][T22473] syzkaller0: entered allmulticast mode [ 625.923485][T22501] tipc: Failed to remove unknown binding: 66,0,0/0:3181236911/3181236912 [ 628.760116][ T1316] net_ratelimit: 20 callbacks suppressed [ 628.760142][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 629.807181][T22500] __nla_validate_parse: 8 callbacks suppressed [ 629.807207][T22500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'. [ 629.822469][T22500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4509'. [ 629.894427][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 629.988214][T22540] bridge0: port 3(syz_tun) entered disabled state [ 629.997799][T22540] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.005295][T22540] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.276815][T22553] netlink: 'syz.2.4520': attribute type 64 has an invalid length. [ 630.278715][T22540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.301781][T22553] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4520'. [ 630.311549][T22540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.346408][T22557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4520'. [ 630.564764][T22554] geneve2: entered promiscuous mode [ 630.570532][T22554] geneve2: entered allmulticast mode [ 630.588312][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 630.605226][T19011] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.617126][T19011] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.631284][T19011] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 630.643960][T19011] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.657567][T19011] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.699703][T19011] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 630.725426][T19011] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.734555][T19011] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.743528][T19011] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 630.752346][T19011] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.761236][T19011] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.770199][T19011] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 630.824791][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 630.953522][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 631.118440][T22576] pimreg3: entered allmulticast mode [ 631.143646][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 631.270628][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 631.446481][T22590] syzkaller0: entered promiscuous mode [ 631.452109][T22590] syzkaller0: entered allmulticast mode [ 631.475566][T22595] netlink: 'syz.0.4532': attribute type 10 has an invalid length. [ 631.554251][T22599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.570160][T22599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.606675][T22599] bond0 (unregistering): Released all slaves [ 631.790502][T22589] infiniband syz1: set active [ 631.830641][T22589] infiniband syz1: added bridge_slave_0 [ 631.853575][T22589] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 631.868683][T22589] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 631.885921][T22589] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 631.978308][T22589] RDS/IB: syz1: added [ 631.990532][T22589] smc: adding ib device syz1 with port count 1 [ 632.017570][T22589] smc: ib device syz1 port 1 has no pnetid [ 635.922168][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 635.943643][T22629] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4543'. [ 635.963639][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4543'. [ 635.974415][T22629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4543'. [ 636.046253][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 636.134150][T22637] netlink: 'syz.3.4544': attribute type 1 has an invalid length. [ 636.149124][T22637] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.4544'. [ 636.174705][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 636.300155][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 636.405745][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 636.564525][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 636.687701][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 636.695403][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 636.748548][T22657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4551'. [ 636.759251][T22656] bridge0: entered allmulticast mode [ 636.952980][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 637.159473][T22660] syzkaller0: entered promiscuous mode [ 637.165473][T22660] syzkaller0: entered allmulticast mode [ 637.185028][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 637.262222][T22685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4557'. [ 637.281067][T22685] xfrm1: entered promiscuous mode [ 637.291176][T22685] xfrm1: entered allmulticast mode [ 637.349851][T22688] netlink: 'syz.0.4558': attribute type 2 has an invalid length. [ 637.360363][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 637.457150][T22694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4558'. [ 637.466334][T22694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4558'. [ 638.270942][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4562'. [ 641.628817][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4559'. [ 641.644514][T22718] hsr_slave_0: left promiscuous mode [ 641.651646][T22718] hsr_slave_1: left promiscuous mode [ 641.736119][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 641.875035][T22730] bond4: option lp_interval: invalid value (0) [ 641.881322][T22730] bond4: option lp_interval: allowed values 1 - 2147483647 [ 641.890204][T22730] bond4 (unregistering): Released all slaves [ 641.955727][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 642.063727][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 642.164945][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 642.301524][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 642.325125][T22743] netlink: 'syz.4.4567': attribute type 1 has an invalid length. [ 642.388196][T22743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 642.412582][T22749] bond4: (slave geneve2): making interface the new active one [ 642.457079][T22749] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 642.471116][T22748] veth0_to_bond: mtu less than device minimum [ 642.503931][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 642.646636][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 642.674616][T22760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.684152][T22760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.769727][T22766] vcan0: entered allmulticast mode [ 642.804550][T22763] Cannot find add_set index 2 as target [ 642.884198][T22759] syzkaller0: entered promiscuous mode [ 642.892089][T22759] syzkaller0: entered allmulticast mode [ 643.510439][T22786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4581'. [ 646.924487][T22785] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 647.174509][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 647.182152][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4585'. [ 647.287175][ T8773] bond4: (slave dummy0): failed to get link speed/duplex [ 647.337429][T22821] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 647.596106][T22830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4595'. [ 647.645016][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4598'. [ 647.660567][T22835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4598'. [ 647.818971][T22840] syzkaller0: entered promiscuous mode [ 647.856918][T22840] syzkaller0: entered allmulticast mode [ 647.876639][T22830] pim6reg1: entered promiscuous mode [ 647.882028][T22830] pim6reg1: entered allmulticast mode [ 647.892987][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 648.004791][T22852] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.154540][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 652.323931][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 652.348729][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4607'. [ 652.401315][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4607'. [ 652.413237][T22876] netlink: 7427 bytes leftover after parsing attributes in process `syz.4.4607'. [ 652.434662][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 652.544687][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 652.601420][T22899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4606'. [ 652.625824][T22899] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 652.651143][T22902] netlink: get zone limit has 4 unknown bytes [ 652.663310][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 652.772905][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 652.893243][T22910] tc action pedit 'at' offset 6 out of bounds [ 652.904389][ T8777] bond4: (slave dummy0): failed to get link speed/duplex [ 653.023446][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 653.153336][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 653.179348][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4618'. [ 653.188753][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 655.308945][T22874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.365491][T22888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4606'. [ 655.520886][T22921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4619'. [ 655.533201][T22921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4619'. [ 655.751798][T22937] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 655.937483][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4631'. [ 655.998559][T22958] netlink: 'syz.4.4631': attribute type 10 has an invalid length. [ 656.102546][T22948] team0 (unregistering): Port device team_slave_0 removed [ 656.193424][T22948] team0 (unregistering): Port device team_slave_1 removed [ 656.217729][T22974] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 656.217729][T22974] Please contact the netfilter-devel mailing list or update your nftables rules. [ 656.268690][T22975] netlink: 'syz.1.4638': attribute type 1 has an invalid length. [ 656.325431][T22975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.397880][T22975] bond4: (slave dummy0): making interface the new active one [ 656.409308][T22975] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 656.435495][T22975] : renamed from dummy0 (while UP) [ 656.739165][T22995] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 656.770009][T22994] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 656.845644][T22998] syzkaller0: entered promiscuous mode [ 656.851263][T22998] syzkaller0: entered allmulticast mode [ 657.123778][T23013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.154972][T23015] netlink: 'syz.0.4650': attribute type 9 has an invalid length. [ 657.381509][ T48] net_ratelimit: 32 callbacks suppressed [ 657.381535][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 657.485536][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 657.595402][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 657.616350][T23030] __nla_validate_parse: 3 callbacks suppressed [ 657.616374][T23030] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4656'. [ 657.805972][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 657.934524][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 658.054281][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 658.099808][T23045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.174167][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 658.294126][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 658.416076][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 658.435801][T23065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4667'. [ 658.609187][T23065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4667'. [ 659.412297][T23126] netlink: 'syz.3.4682': attribute type 2 has an invalid length. [ 659.456780][T23126] netlink: 'syz.3.4682': attribute type 2 has an invalid length. [ 659.461898][T23129] netlink: 'syz.1.4683': attribute type 12 has an invalid length. [ 659.606437][T23138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4686'. [ 659.639658][T23138] nbd: must specify at least one socket [ 660.694540][T23190] syzkaller0: entered promiscuous mode [ 660.717897][T23190] syzkaller0: entered allmulticast mode [ 660.856536][T23203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4704'. [ 661.473936][T23234] netlink: 'syz.2.4712': attribute type 2 has an invalid length. [ 661.490204][T23203] syzkaller0: entered promiscuous mode [ 661.506251][T23203] syzkaller0: entered allmulticast mode [ 665.463381][T23233] syzkaller1: entered promiscuous mode [ 665.468926][T23233] syzkaller1: entered allmulticast mode [ 665.480484][T23256] veth0_macvtap: entered allmulticast mode [ 665.508784][T23256] net_ratelimit: 19 callbacks suppressed [ 665.508810][T23256] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 665.638816][T23272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4719'. [ 665.674811][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 665.704125][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4723'. [ 665.784844][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 665.786343][T23285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4723'. [ 665.859556][T23285] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 665.933549][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 666.052543][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 666.156994][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 666.266770][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 666.383435][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 666.493066][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 666.602774][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 670.523514][ T8779] net_ratelimit: 34 callbacks suppressed [ 670.523542][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 670.643511][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 670.752723][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 670.862647][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 670.983745][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 671.093464][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 671.202587][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 671.313233][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 671.423649][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 671.532709][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 675.602817][ T3311] net_ratelimit: 35 callbacks suppressed [ 675.602846][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 675.723246][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 675.833662][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 675.942737][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 676.052820][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 676.163640][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 676.292692][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 676.403370][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 676.512518][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 676.623207][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 680.702642][ T8785] net_ratelimit: 35 callbacks suppressed [ 680.702686][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 680.825022][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 680.942673][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 681.053404][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 681.162526][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 681.273183][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 681.384928][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 681.503634][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 681.612719][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 681.722661][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 685.813007][ T3311] net_ratelimit: 35 callbacks suppressed [ 685.813031][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 685.932596][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 686.042559][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 686.153395][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 686.263387][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 686.372651][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 686.483356][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 686.602967][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 686.712964][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 686.823264][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 690.834005][ T8785] net_ratelimit: 36 callbacks suppressed [ 690.834059][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 690.963096][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 691.073429][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 691.182917][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 691.292526][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 691.403584][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 691.512614][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 691.624044][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 691.733502][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 691.843212][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 695.873605][ T8785] net_ratelimit: 35 callbacks suppressed [ 695.873640][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 695.993466][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 696.102768][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 696.212734][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 696.329543][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 696.443532][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 696.552505][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 696.662740][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 696.773383][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 696.882790][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 700.893197][ T8786] net_ratelimit: 35 callbacks suppressed [ 700.893252][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 701.012927][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 701.123422][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 701.232986][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 701.342892][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 701.453555][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 701.562563][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 701.672943][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 701.784048][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 701.914467][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 705.983801][ T8786] net_ratelimit: 35 callbacks suppressed [ 705.983827][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 706.103495][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 706.212632][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 706.322641][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 706.433483][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 706.543122][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 706.652615][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 706.763445][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 706.872707][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 706.984198][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 710.993480][ T36] net_ratelimit: 35 callbacks suppressed [ 710.993535][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 711.113453][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 711.223812][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 711.332841][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 711.443616][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 711.553777][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 711.663342][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 711.773510][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 711.883056][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 711.992547][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 716.012963][ T3311] net_ratelimit: 35 callbacks suppressed [ 716.013029][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 716.143327][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 716.252566][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 716.363433][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 716.472671][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 716.583461][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 716.693379][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 716.802789][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 716.912764][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 717.023396][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 720.202039][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4741'. [ 721.097903][ T3311] net_ratelimit: 35 callbacks suppressed [ 721.097930][ T3311] bond4: (slave dummy0): failed to get link speed/duplex [ 721.254900][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 721.464803][T23392] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4753'. [ 721.480245][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 721.495395][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'. [ 721.588370][T23397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4753'. [ 721.604508][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 721.683268][T23398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4755'. [ 721.727153][T23408] xt_l2tp: unknown flags: 10 [ 721.762471][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 721.992174][T23424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4761'. [ 722.013602][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4760'. [ 722.043085][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4760'. [ 722.055648][T23425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4760'. [ 722.075008][T23421] veth0_macvtap: entered allmulticast mode [ 722.223517][T23436] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 722.304196][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 722.431622][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 722.513997][T23455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4769'. [ 722.525106][T23450] set match dimension is over the limit! [ 722.574056][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 722.717524][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 722.919193][T19011] bond4: (slave dummy0): failed to get link speed/duplex [ 723.331710][T23491] netlink: 'syz.1.4781': attribute type 3 has an invalid length. [ 723.772324][T23515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.829036][T23515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.488595][T23555] netlink: 'syz.3.4798': attribute type 15 has an invalid length. [ 724.497521][T23555] netlink: 'syz.3.4798': attribute type 15 has an invalid length. [ 724.631148][T23567] vcan0: tx address claim with dest, not broadcast [ 724.804773][T23572] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.089606][T23590] netlink: 'syz.2.4808': attribute type 3 has an invalid length. [ 725.124593][T23592] nbd: illegal input index -8454144 [ 725.277950][T23600] netlink: 'syz.4.4809': attribute type 4 has an invalid length. [ 725.285757][T23600] __nla_validate_parse: 15 callbacks suppressed [ 725.285780][T23600] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4809'. [ 725.305045][T23578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4804'. [ 725.867479][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4817'. [ 726.134172][ T8785] net_ratelimit: 23 callbacks suppressed [ 726.134215][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 726.273215][ T48] bond4: (slave dummy0): failed to get link speed/duplex [ 726.315045][T23636] tap0: tun_chr_ioctl cmd 1074025676 [ 726.336985][T23636] tap0: owner set to 0 [ 726.353926][T23636] netlink: 'syz.3.4820': attribute type 3 has an invalid length. [ 726.422766][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 726.557740][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 726.713408][ T8785] bond4: (slave dummy0): failed to get link speed/duplex [ 726.843376][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 726.987838][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 727.120979][T23667] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4829'. [ 727.153563][ T8779] bond4: (slave dummy0): failed to get link speed/duplex [ 727.196026][T23670] macsec1: entered allmulticast mode [ 727.215303][T23670] bond0: entered allmulticast mode [ 727.225398][T23670] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 727.255029][T23670] bond0: left allmulticast mode [ 727.354833][T23667] macsec1: entered allmulticast mode [ 727.368067][T23667] bond0: entered allmulticast mode [ 727.391526][T23667] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 727.417204][T23667] bond0: left allmulticast mode [ 727.673278][ T8786] bond4: (slave dummy0): failed to get link speed/duplex [ 727.815182][T19010] bond4: (slave dummy0): failed to get link speed/duplex [ 727.890526][T23702] netlink: 'syz.0.4837': attribute type 12 has an invalid length. [ 727.927382][T23702] netlink: 'syz.0.4837': attribute type 29 has an invalid length. [ 727.952656][T23702] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4837'. [ 727.987791][T23702] netlink: 'syz.0.4837': attribute type 1 has an invalid length. [ 728.014501][T23696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4835'. [ 728.028886][T23702] netlink: 'syz.0.4837': attribute type 2 has an invalid length. [ 728.064847][T23702] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4837'. [ 728.276891][T23721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4842'. [ 728.351182][T23721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4842'. [ 728.383315][T23721] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4842'. [ 728.565247][T23737] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 728.690384][T23748] netlink: 'syz.3.4851': attribute type 2 has an invalid length. [ 728.774563][T23748] : entered promiscuous mode [ 729.070325][T23773] IPv6: Can't replace route, no match found [ 729.080820][T23773] IPv6: Can't replace route, no match found [ 729.097129][T23774] яяяяяя: renamed from virt_wifi0 [ 729.176723][T23776] tunl0: Caught tx_queue_len zero misconfig [ 730.244181][T23824] nbd: must specify a device to reconfigure [ 730.480704][T23828] __nla_validate_parse: 5 callbacks suppressed [ 730.480758][T23828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4873'. [ 730.508316][ T5634] IPVS: starting estimator thread 0... [ 730.518811][T23828] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4873'. [ 730.555653][T23828] syzkaller0: entered promiscuous mode [ 730.561179][T23828] syzkaller0: entered allmulticast mode [ 730.846159][T23842] IPVS: using max 33 ests per chain, 79200 per kthread [ 731.504140][ T8786] bridge_slave_1: left allmulticast mode [ 731.509852][ T8786] bridge_slave_1: left promiscuous mode [ 731.521273][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.541662][ T8786] dvmrp8: left allmulticast mode [ 731.946672][T23917] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 732.178452][ T8786] bond1 (unregistering): (slave geneve2): Releasing active interface [ 732.260428][ T8786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.279509][ T8786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.291624][ T8786] bond0 (unregistering): (slave team0): Releasing backup interface [ 732.304212][ T8786] bond0 (unregistering): Released all slaves [ 732.317851][ T8786] bond1 (unregistering): Released all slaves [ 732.341564][ T8786] bond2 (unregistering): (slave lo): Releasing backup interface [ 732.350119][ T8786] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 732.449564][ T8786] bond2 (unregistering): Released all slaves [ 732.468018][ T8786] bond3 (unregistering): Released all slaves [ 732.501440][ T8786] bond4 (unregistering): (slave dummy0): Removing an active aggregator [ 732.515358][ T8786] bond4 (unregistering): (slave dummy0): Releasing backup interface [ 732.536306][ T8786] bond4 (unregistering): Released all slaves [ 732.555664][ T8786] bond5 (unregistering): Released all slaves [ 732.570822][ T8786] bond6 (unregistering): Released all slaves [ 732.595093][ T8786] bond7 (unregistering): Released all slaves [ 732.616219][ T8786] bond8 (unregistering): Released all slaves [ 732.630239][ T8786] bond9 (unregistering): Released all slaves [ 732.648520][ T8786] bond10 (unregistering): (slave veth5): Releasing active interface [ 732.658497][ T8786] bond10 (unregistering): Released all slaves [ 732.676458][ T8786] bond11 (unregistering): Released all slaves [ 732.690062][ T8786] bond12 (unregistering): Released all slaves [ 732.797133][T23932] netlink: 'syz.1.4892': attribute type 21 has an invalid length. [ 732.805123][T23932] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4892'. [ 732.815497][T23932] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4892'. [ 733.102814][T23940] syzkaller1: entered promiscuous mode [ 733.142987][T23940] syzkaller1: entered allmulticast mode [ 733.353520][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4896'. [ 733.598444][ T8786] tipc: Disabling bearer [ 733.610903][ T8786] tipc: Left network mode [ 733.615481][T23949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4897'. [ 733.921121][T23965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4903'. [ 734.114650][ T8786] IPVS: stopping backup sync thread 8052 ... [ 734.335857][T23980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4908'. [ 734.384488][T23977] netlink: 'syz.2.4907': attribute type 21 has an invalid length. [ 734.431295][T23977] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.450616][T23981] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4907'. [ 734.454287][T23977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.469559][T23977] IPv6: NLM_F_CREATE should be set when creating new route [ 734.476868][T23977] IPv6: NLM_F_CREATE should be set when creating new route [ 734.484155][T23977] IPv6: NLM_F_CREATE should be set when creating new route [ 734.503440][T23983] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 734.511691][T23983] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 734.527924][T23981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4907'. [ 734.537199][T23983] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 735.488014][T24015] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.4916'. [ 735.556033][T24015] 0ЄX№¦Dц»: renamed from gretap0 (while UP) [ 735.648805][T24015] 0ЄX№¦Dц»: entered allmulticast mode [ 736.314986][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4921'. [ 736.381771][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4921'. [ 736.413441][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4922'. [ 736.502082][T24048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4926'. [ 736.583584][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4925'. [ 736.605369][T24051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4925'. [ 736.683382][T24049] 0ЄX№¦Dц»: left allmulticast mode [ 736.815627][T24053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4925'. [ 736.956229][T24049] net_ratelimit: 19 callbacks suppressed [ 736.956244][T24049] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 737.034950][ T8786] hsr_slave_0: left promiscuous mode [ 737.048115][ T8786] hsr_slave_1: left promiscuous mode [ 737.087609][ T8786] veth0_macvtap: left promiscuous mode [ 737.101542][ T8786] veth1_vlan: left promiscuous mode [ 737.113285][ T8786] veth0_vlan: left promiscuous mode [ 737.534751][ T8786] team0 (unregistering): Port device team_slave_1 removed [ 737.560299][ T8786] team0 (unregistering): Port device team_slave_0 removed [ 738.174996][T24090] veth0: entered promiscuous mode [ 738.393337][T24095] veth1_macvtap: left promiscuous mode [ 738.398972][T24095] macsec0: entered promiscuous mode [ 738.405664][T24098] sctp: [Deprecated]: syz.2.4939 (pid 24098) Use of int in max_burst socket option deprecated. [ 738.405664][T24098] Use struct sctp_assoc_value instead [ 738.445833][T24089] veth0: left promiscuous mode [ 738.493011][T24103] sit2: entered promiscuous mode [ 738.495959][T24107] netlink: 'syz.2.4939': attribute type 19 has an invalid length. [ 738.514051][T24103] sit2: entered allmulticast mode [ 738.523705][T24105] netlink: 'syz.2.4939': attribute type 19 has an invalid length. [ 738.558135][T24106] netlink: 756 bytes leftover after parsing attributes in process `syz.0.4938'. [ 738.597813][T24100] can: request_module (can-proto-0) failed. [ 738.656157][T24113] netlink: 'syz.1.4941': attribute type 1 has an invalid length. [ 738.826716][ T8786] IPVS: stop unused estimator thread 0... [ 738.926612][T24122] netlink: 'syz.4.4943': attribute type 4 has an invalid length. [ 738.974472][T24122] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4943'. [ 739.346184][T24151] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 739.526756][T24149] veth1_to_bond: entered allmulticast mode [ 739.637039][T24143] veth1_to_bond: left allmulticast mode [ 739.861328][T24170] netlink: 'syz.1.4954': attribute type 21 has an invalid length. [ 740.114699][T24189] netlink: 'syz.3.4958': attribute type 12 has an invalid length. [ 740.507853][T24212] tipc: Enabling of bearer rejected, failed to enable media [ 740.772280][T24229] __nla_validate_parse: 4 callbacks suppressed [ 740.787445][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4971'. [ 740.837972][T24231] netlink: 'syz.2.4972': attribute type 13 has an invalid length. [ 740.845840][T24231] netlink: 'syz.2.4972': attribute type 58 has an invalid length. [ 740.856438][T24231] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4972'. [ 740.896299][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4971'. [ 740.952637][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4974'. [ 741.006940][T24240] netlink: 'syz.1.4974': attribute type 1 has an invalid length. [ 741.133536][T24239] macvlan2: entered promiscuous mode [ 741.138858][T24239] macvlan2: entered allmulticast mode [ 741.145302][T24239] bond6: entered promiscuous mode [ 741.150850][T24239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 741.157945][T24245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4976'. [ 741.259268][T24239] bond6: left promiscuous mode [ 741.737641][T24276] netlink: 'syz.3.4985': attribute type 2 has an invalid length. [ 742.060735][T24289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.108372][T24301] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000 [ 742.208347][T24307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4995'. [ 742.229597][T24307] ipt_ECN: cannot use operation on non-tcp rule [ 742.415902][T24316] x_tables: duplicate entry at hook 3 [ 742.503980][T24322] xt_hashlimit: invalid rate [ 742.806549][T24345] syzkaller0: entered promiscuous mode [ 742.812240][T24345] syzkaller0: entered allmulticast mode [ 742.821811][T24343] netlink: 'syz.3.5008': attribute type 39 has an invalid length. [ 742.930593][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5009'. [ 743.124268][T24351] vxcan1 speed is unknown, defaulting to 1000 [ 743.146382][T24356] sctp: [Deprecated]: syz.1.5011 (pid 24356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 743.146382][T24356] Use struct sctp_sack_info instead [ 743.195831][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5011'. [ 743.237884][T24356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5011'. [ 743.442583][T24367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5012'. [ 743.698868][T24372] xt_hashlimit: size too large, truncated to 1048576 [ 744.164472][T24394] xt_l2tp: missing protocol rule (udp|l2tpip) [ 744.170043][T24396] pim6reg: entered allmulticast mode [ 744.208471][T24402] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 744.255589][T24396] pim6reg: left allmulticast mode [ 744.434362][T24418] netlink: 'syz.1.5027': attribute type 1 has an invalid length. [ 744.446132][T24418] netlink: 'syz.1.5027': attribute type 2 has an invalid length. [ 744.461024][T24418] bond4: (slave ): Releasing active interface [ 745.147784][T24446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.261937][T24449] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 745.473656][T24462] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 745.503017][T24462] syzkaller0: entered promiscuous mode [ 745.508550][T24462] syzkaller0: entered allmulticast mode [ 745.716605][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.723257][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.729560][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.737222][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.747453][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.765813][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.777860][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.784864][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.802185][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.809762][T24477] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.851533][T24479] __nla_validate_parse: 9 callbacks suppressed [ 745.851631][T24479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5047'. [ 745.974507][T24491] netlink: 'syz.1.5052': attribute type 1 has an invalid length. [ 746.029154][T24494] netlink: 'syz.1.5052': attribute type 1 has an invalid length. [ 746.039952][T24497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5053'. [ 746.165536][T24511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5057'. [ 746.624880][T24542] sctp: [Deprecated]: syz.2.5068 (pid 24542) Use of int in max_burst socket option. [ 746.624880][T24542] Use struct sctp_assoc_value instead [ 746.891717][T24558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5073'. [ 746.965841][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5076'. [ 747.382791][T24589] netlink: 'syz.3.5082': attribute type 5 has an invalid length. [ 747.402003][T24595] veth0: entered promiscuous mode [ 747.424067][T24590] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5081'. [ 747.585744][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'. [ 747.685395][T24587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5083'. [ 747.956170][T24594] veth0: left promiscuous mode [ 748.674828][T24653] team0: Device gtp0 is up. Set it down before adding it as a team port [ 748.810966][T24660] bond6: (slave gretap0): Device is not bonding slave [ 748.818784][T24660] bond6: option active_slave: invalid value (gretap0) [ 748.829717][T24660] bond6 (unregistering): Released all slaves [ 749.031406][T24681] bond5: option resend_igmp: invalid value (32767) [ 749.038154][T24681] bond5: option resend_igmp: allowed values 0 - 255 [ 749.045750][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5105'. [ 749.046865][T24681] bond5 (unregistering): Released all slaves [ 749.083310][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5105'. [ 749.206014][T24692] netlink: 'syz.1.5107': attribute type 1 has an invalid length. [ 749.226489][T24695] netlink: 'syz.2.5108': attribute type 1 has an invalid length. [ 749.234589][T24696] netlink: 'syz.2.5108': attribute type 1 has an invalid length. [ 749.299328][T24692] bond7: entered promiscuous mode [ 749.308082][T24692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 749.359752][T24697] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 749.396590][T24692] ipvlan2: entered allmulticast mode [ 749.412204][T24692] bond7: entered allmulticast mode [ 749.483384][T24695] veth5: entered promiscuous mode [ 749.506099][T24695] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 749.522661][T24702] netlink: 'syz.3.5111': attribute type 12 has an invalid length. [ 749.542996][T24692] bond7: (slave bridge4): making interface the new active one [ 749.550529][T24692] bridge4: entered promiscuous mode [ 749.568933][T24692] bridge4: entered allmulticast mode [ 749.582498][T24692] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 749.593793][T24696] 8021q: adding VLAN 0 to HW filter on device bond4 [ 749.620787][T19011] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 749.812707][T19011] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 750.034259][T24734] syzkaller1: entered promiscuous mode [ 750.039787][T24734] syzkaller1: entered allmulticast mode [ 750.525442][T24762] macvtap1: entered promiscuous mode [ 750.533634][T24762] macvtap1: entered allmulticast mode [ 750.539134][T24762] veth1_vlan: entered allmulticast mode [ 750.880907][T24788] __nla_validate_parse: 6 callbacks suppressed [ 750.880929][T24788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5134'. [ 751.122970][T24805] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5134'. [ 751.156719][T24789] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5134'. [ 751.247570][T24816] netlink: 'syz.3.5139': attribute type 1 has an invalid length. [ 751.263280][T24817] netlink: 'syz.3.5139': attribute type 1 has an invalid length. [ 751.306705][T24789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5134'. [ 751.315729][T24789] nbd: device at index 64 is going down [ 751.470462][T24816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.491445][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5140'. [ 751.553962][T24817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.611779][T23787] udevd[23787]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 751.628282][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 751.650691][T23315] udevd[23315]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 751.695819][T24830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 751.770428][T24836] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.987550][T24845] syzkaller1: entered promiscuous mode [ 751.995147][T24845] syzkaller1: entered allmulticast mode [ 752.311738][T24873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 752.331810][T24873] netlink: 'syz.4.5156': attribute type 3 has an invalid length. [ 752.479531][T24882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5159'. [ 752.609400][T24887] bridge_slave_0: left allmulticast mode [ 752.619612][T24887] bridge_slave_0: left promiscuous mode [ 752.642723][T24887] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.684990][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5162'. [ 752.698633][T24887] bridge_slave_1: left allmulticast mode [ 752.704577][T24887] bridge_slave_1: left promiscuous mode [ 752.711358][T24887] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.814422][T24906] netlink: 'syz.0.5163': attribute type 1 has an invalid length. [ 752.831600][T24887] bond0: (slave bond_slave_0): Releasing backup interface [ 752.926470][T24887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.933914][T24887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.958908][T24887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.960919][T24914] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5164'. [ 753.001954][T24887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 753.071702][T24895] batman_adv: batadv0: Adding interface: wlan0 [ 753.077934][T24895] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.194290][T24895] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 753.421463][T24923] siw: device registration error -23 [ 753.747079][T24926] tipc: Started in network mode [ 753.801022][T24926] tipc: Node identity 4aaaadfb0f28, cluster identity 4711 [ 753.808548][T24926] tipc: Enabled bearer , priority 0 [ 753.885339][T24944] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 754.005455][T24915] tipc: Disabling bearer [ 754.156969][T24957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5174'. [ 754.300297][T24965] bond0: left promiscuous mode [ 754.711169][T24984] netlink: 'syz.4.5182': attribute type 58 has an invalid length. [ 755.006756][T24994] xt_cgroup: xt_cgroup: no path or classid specified [ 755.090019][T25002] netlink: 'syz.1.5188': attribute type 11 has an invalid length. [ 755.891168][T25044] syzkaller0: entered promiscuous mode [ 755.897021][T25044] syzkaller0: entered allmulticast mode [ 759.510638][T25065] netlink: 'syz.1.5206': attribute type 22 has an invalid length. [ 759.528249][T25065] __nla_validate_parse: 8 callbacks suppressed [ 759.528299][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5206'. [ 759.567150][T25070] bridge3: entered promiscuous mode [ 759.580142][T25070] bridge3: entered allmulticast mode [ 759.603206][T25074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5208'. [ 759.619842][T25074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5208'. [ 759.692376][T25079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5210'. [ 759.940139][T25105] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5217'. [ 760.032751][T25065] netlink: 'syz.1.5206': attribute type 22 has an invalid length. [ 760.055123][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5206'. [ 760.073614][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5218'. [ 760.132095][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5218'. [ 760.269919][T25121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5221'. [ 760.327330][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5221'. [ 760.364912][T25126] bond7: Removing last arp target with arp_interval on [ 760.480334][T25136] sctp: [Deprecated]: syz.0.5226 (pid 25136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.480334][T25136] Use struct sctp_sack_info instead [ 761.194484][T25190] xt_bpf: check failed: parse error [ 761.728135][T25228] openvswitch: netlink: Missing valid actions attribute. [ 761.735475][T25228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.817044][T25233] pim6reg: entered allmulticast mode [ 761.824264][T25233] pim6reg: left allmulticast mode [ 762.011369][T25241] vxcan1 speed is unknown, defaulting to 1000 [ 762.166640][T25254] netlink: 'syz.1.5258': attribute type 64 has an invalid length. [ 762.346009][T25260] netlink: 'syz.3.5260': attribute type 2 has an invalid length. [ 762.355820][T25244] netlink: 'syz.2.5254': attribute type 3 has an invalid length. [ 762.647182][T25284] netlink: 'syz.0.5265': attribute type 1 has an invalid length. [ 762.692414][T25284] netlink: 'syz.0.5265': attribute type 1 has an invalid length. [ 763.105002][T25307] netlink: 'syz.3.5270': attribute type 2 has an invalid length. [ 763.126505][T25309] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.138755][T25309] team0: Cannot enslave team device to itself [ 763.898630][T25347] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 764.027911][T25356] xt_socket: unknown flags 0x50 [ 764.639885][T25375] __nla_validate_parse: 15 callbacks suppressed [ 764.639909][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5295'. [ 764.692504][T25375] hsr_slave_1 (unregistering): left promiscuous mode [ 764.756424][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5296'. [ 764.866669][T25380] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5296'. [ 764.905800][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5296'. [ 764.940307][T25380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5296'. [ 765.040262][T25380] macsec1: entered promiscuous mode [ 765.056361][T25380] bridge0: entered promiscuous mode [ 765.078252][T25380] macsec1: entered allmulticast mode [ 765.099530][T25388] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.5297'. [ 765.108350][T25380] bridge0: entered allmulticast mode [ 765.121645][T25380] bridge0: port 4(macsec1) entered blocking state [ 765.132883][T25380] bridge0: port 4(macsec1) entered disabled state [ 765.154358][T25380] bridge0: left allmulticast mode [ 765.159435][T25380] bridge0: left promiscuous mode [ 765.191380][T25391] erspan2: entered allmulticast mode [ 765.210545][T25389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5299'. [ 765.447156][T25415] netlink: 'syz.4.5308': attribute type 33 has an invalid length. [ 765.457081][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5308'. [ 765.459528][T25409] syzkaller1: entered promiscuous mode [ 765.516207][T25409] syzkaller1: entered allmulticast mode [ 765.673869][T25422] netlink: 'syz.3.5311': attribute type 27 has an invalid length. [ 765.682009][T25422] netlink: 'syz.3.5311': attribute type 4 has an invalid length. [ 765.701613][T25424] sctp: [Deprecated]: syz.4.5310 (pid 25424) Use of int in max_burst socket option deprecated. [ 765.701613][T25424] Use struct sctp_assoc_value instead [ 765.714094][T25422] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5311'. [ 765.844206][T25431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5314'. [ 765.852510][T25428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.860670][T25428] IPv6: NLM_F_CREATE should be set when creating new route [ 766.391136][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.412056][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.430163][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.446632][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.484534][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.550005][T25469] bridge6: entered promiscuous mode [ 766.557281][T25469] bridge6: entered allmulticast mode [ 766.566266][T25469] team0: Port device bridge6 added [ 766.571634][T25470] bridge0: port 1(team0) entered blocking state [ 766.580863][T25470] bridge0: port 1(team0) entered disabled state [ 766.588013][T25470] team0: entered allmulticast mode [ 766.593995][T25470] team_slave_0: entered allmulticast mode [ 766.599831][T25470] team_slave_1: entered allmulticast mode [ 766.607674][T25470] team0: entered promiscuous mode [ 766.612901][T25470] team_slave_0: entered promiscuous mode [ 766.618847][T25470] team_slave_1: entered promiscuous mode [ 766.626159][T25470] bridge0: port 1(team0) entered blocking state [ 766.634372][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.647325][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.658048][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.682926][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.707718][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.721101][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.733397][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.745057][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.756510][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.777155][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.799371][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.843719][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.873752][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.898272][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.917858][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.949579][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.964708][T25483] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 766.980549][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 766.993911][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.089289][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.099878][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.110601][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.136727][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.153593][T25499] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 767.189341][T25497] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 767.206952][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.217379][T25464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.326355][T25500] bridge0: port 3(syz_tun) entered blocking state [ 767.332962][T25500] bridge0: port 3(syz_tun) entered forwarding state [ 767.368463][T25502] netlink: 'syz.2.5334': attribute type 10 has an invalid length. [ 767.383997][T25465] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 767.959093][T25540] 8021q: adding VLAN 0 to HW filter on device bond7 [ 768.411545][T25563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.444921][T25564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.490261][T25626] tipc: Enabling of bearer rejected, failed to enable media [ 769.729980][T25642] __nla_validate_parse: 13 callbacks suppressed [ 769.730004][T25642] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5375'. [ 769.952224][T25652] netlink: 'syz.3.5378': attribute type 39 has an invalid length. [ 770.027518][T25657] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5377'. [ 770.284889][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'. [ 770.460102][T25669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5383'. [ 770.496252][T25669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5383'. [ 770.516498][T25669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5383'. [ 770.709751][T25689] netlink: 'syz.1.5388': attribute type 11 has an invalid length. [ 770.821394][T25695] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 770.892113][T25698] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5390'. [ 771.036811][T25705] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 771.348327][T25720] netlink: 'syz.3.5396': attribute type 1 has an invalid length. [ 771.368321][T25725] netlink: 'syz.2.5397': attribute type 10 has an invalid length. [ 771.431977][T25725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.439709][T25725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.448030][T25725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.477514][T25725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.743860][T25744] openvswitch: netlink: Key type 153 is out of range max 32 [ 771.934451][T25754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5404'. [ 772.138509][T25765] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5407'. [ 772.278708][T25775] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5410'. [ 773.854571][T25838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.914752][T25851] syzkaller0: entered promiscuous mode [ 773.941029][T25851] syzkaller0: entered allmulticast mode [ 774.222089][T25872] Bluetooth: MGMT ver 1.23 [ 774.233250][T25872] Bluetooth: hci1: too big key_count value 32778 [ 774.236563][T25854] x_tables: duplicate underflow at hook 1 [ 774.420474][T25884] tipc: Invalid UDP bearer configuration [ 774.420533][T25884] tipc: Enabling of bearer rejected, failed to enable media [ 774.456790][T25884] Bluetooth: MGMT ver 1.23 [ 774.910945][T25915] syz.3.5449: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 774.925668][T25915] CPU: 1 UID: 0 PID: 25915 Comm: syz.3.5449 Not tainted syzkaller #0 PREEMPT(full) [ 774.925696][T25915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 774.925709][T25915] Call Trace: [ 774.925719][T25915] [ 774.925729][T25915] dump_stack_lvl+0xe8/0x150 [ 774.925787][T25915] warn_alloc+0x24c/0x270 [ 774.925831][T25915] ? stack_depot_save_flags+0x33/0x800 [ 774.925865][T25915] ? __pfx_warn_alloc+0x10/0x10 [ 774.925893][T25915] ? kasan_save_track+0x3e/0x80 [ 774.925911][T25915] ? __kasan_kmalloc+0x93/0xb0 [ 774.925930][T25915] ? xsk_setsockopt+0x52a/0x960 [ 774.926010][T25915] ? do_sock_setsockopt+0x17c/0x1b0 [ 774.926031][T25915] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 774.926047][T25915] ? do_syscall_64+0x174/0x580 [ 774.926064][T25915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.926095][T25915] __vmalloc_node_range_noprof+0x12c/0x1730 [ 774.926149][T25915] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 774.926181][T25915] ? __kasan_kmalloc+0x93/0xb0 [ 774.926202][T25915] ? __kmalloc_cache_noprof+0x32d/0x660 [ 774.926230][T25915] ? __kmalloc_cache_noprof+0x150/0x660 [ 774.926262][T25915] vmalloc_user_noprof+0xad/0xe0 [ 774.926291][T25915] ? xskq_create+0xbf/0x170 [ 774.926316][T25915] xskq_create+0xbf/0x170 [ 774.926343][T25915] xsk_init_queue+0x8a/0xe0 [ 774.926370][T25915] xsk_setsockopt+0x52a/0x960 [ 774.926391][T25915] ? __fget_files+0x2a/0x420 [ 774.926420][T25915] ? __pfx_xsk_setsockopt+0x10/0x10 [ 774.926442][T25915] ? __pfx_aa_sk_perm+0x10/0x10 [ 774.926469][T25915] ? aa_sock_opt_perm+0xff/0x1a0 [ 774.926495][T25915] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 774.926521][T25915] ? __pfx_xsk_setsockopt+0x10/0x10 [ 774.926548][T25915] do_sock_setsockopt+0x17c/0x1b0 [ 774.926572][T25915] __x64_sys_setsockopt+0x13d/0x1b0 [ 774.926592][T25915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.926609][T25915] do_syscall_64+0x174/0x580 [ 774.926627][T25915] ? trace_irq_disable+0x3b/0x140 [ 774.926648][T25915] ? clear_bhb_loop+0x40/0x90 [ 774.926673][T25915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.926692][T25915] RIP: 0033:0x7fda59f9de59 [ 774.926711][T25915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.926727][T25915] RSP: 002b:00007fda5af3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 774.926748][T25915] RAX: ffffffffffffffda RBX: 00007fda5a225fa0 RCX: 00007fda59f9de59 [ 774.926761][T25915] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 774.926784][T25915] RBP: 00007fda5a033e6f R08: 0000000000000004 R09: 0000000000000000 [ 774.926796][T25915] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.926807][T25915] R13: 00007fda5a226038 R14: 00007fda5a225fa0 R15: 00007ffc855ef688 [ 774.926839][T25915] [ 774.926848][T25915] Mem-Info: [ 774.951333][T25917] Cannot find set identified by id 65534 to match [ 774.952500][T25915] active_anon:8645 inactive_anon:0 isolated_anon:0 [ 774.952500][T25915] active_file:17 inactive_file:43262 isolated_file:0 [ 774.952500][T25915] unevictable:768 dirty:98 writeback:0 [ 774.952500][T25915] slab_reclaimable:12595 slab_unreclaimable:123579 [ 774.952500][T25915] mapped:32143 shmem:4044 pagetables:1493 [ 774.952500][T25915] sec_pagetables:0 bounce:0 [ 774.952500][T25915] kernel_misc_reclaimable:0 [ 774.952500][T25915] free:1296267 free_pcp:10543 free_cma:0 [ 774.952555][T25915] Node 0 active_anon:34580kB inactive_anon:0kB active_file:68kB inactive_file:172852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128572kB dirty:392kB writeback:0kB shmem:14640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14984kB pagetables:5828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.952610][T25915] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.958557][T25917] __nla_validate_parse: 11 callbacks suppressed [ 774.958574][T25917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5450'. [ 774.961542][T25915] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.979581][T25917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5450'. [ 775.070655][T25915] lowmem_reserve[]: [ 775.242966][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5445'. [ 775.289620][T25915] 0 2491 2492 2492 2492 [ 775.435405][T25915] Node 0 DMA32 free:1228100kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35100kB inactive_anon:0kB active_file:68kB inactive_file:172852kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2551436kB mlocked:0kB bounce:0kB free_pcp:40172kB local_pcp:17752kB free_cma:0kB [ 775.496048][T25915] lowmem_reserve[]: 0 0 0 0 0 [ 775.500942][T25915] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.546515][T25915] lowmem_reserve[]: 0 0 0 0 0 [ 775.557079][T25915] Node 1 Normal free:3942996kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.595673][T25915] lowmem_reserve[]: 0 0 0 0 0 [ 775.601179][T25915] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 775.615002][T25915] Node 0 DMA32: 342*4kB (UE) 91*8kB (UM) 215*16kB (UME) 409*32kB (UME) 177*64kB (UME) 98*128kB (UME) 26*256kB (UM) 11*512kB (UM) 6*1024kB (UME) 8*2048kB (UM) 281*4096kB (UM) = 1228288kB [ 775.639494][T25915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 775.657700][T25915] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 13*16kB (UM) 7*32kB (UM) 4*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3942996kB [ 775.676336][T25915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.687272][T25915] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 775.697632][T25915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.733009][T25915] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 775.744361][T25915] 44589 total pagecache pages [ 775.749284][T25915] 0 pages in swap cache [ 775.755001][T25915] Free swap = 124996kB [ 775.768847][T25915] Total swap = 124996kB [ 775.777825][T25915] 2097051 pages RAM [ 775.781752][T25915] 0 pages HighMem/MovableOnly [ 775.787088][T25915] 427421 pages reserved [ 775.791468][T25915] 0 pages cma reserved [ 776.145850][T25960] netlink: 'syz.1.5458': attribute type 2 has an invalid length. [ 776.159821][T25960] syzkaller1: entered promiscuous mode [ 776.165344][T25960] syzkaller1: entered allmulticast mode [ 776.178607][T25960] bridge0: port 2(veth1_to_bridge) entered blocking state [ 776.185916][T25960] bridge0: port 2(veth1_to_bridge) entered disabled state [ 776.193551][T25960] veth1_to_bridge: entered allmulticast mode [ 776.201437][T25960] veth1_to_bridge: entered promiscuous mode [ 776.208937][T25960] bridge0: port 2(veth1_to_bridge) entered blocking state [ 776.303995][T25966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5460'. [ 776.318696][T25966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5460'. [ 776.460678][T25975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.722025][T25993] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 776.872109][T25999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5472'. [ 777.019601][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5473'. [ 777.057772][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5473'. [ 777.311907][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5476'. [ 778.200184][T26067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5490'. [ 778.268044][T26067] bond11: entered promiscuous mode [ 778.273728][T26067] 8021q: adding VLAN 0 to HW filter on device bond11 [ 778.490596][T26090] netlink: 'syz.3.5495': attribute type 49 has an invalid length. [ 778.919058][T26114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 778.950346][T26114] hsr_slave_0: left promiscuous mode [ 779.117351][T26129] netlink: 'syz.3.5509': attribute type 1 has an invalid length. [ 779.336890][T26129] bond8: entered promiscuous mode [ 779.342579][T26129] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.028089][T26176] syzkaller0: entered promiscuous mode [ 780.033614][T26176] syzkaller0: entered allmulticast mode [ 780.085629][T26164] netlink: 'syz.0.5517': attribute type 3 has an invalid length. [ 782.349821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.504345][T26187] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 783.765299][T26217] __nla_validate_parse: 11 callbacks suppressed [ 783.765339][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5533'. [ 784.036660][T26217] macvtap2: entered promiscuous mode [ 784.042225][T26217] vlan0: entered promiscuous mode [ 784.049182][T26217] macvtap2: entered allmulticast mode [ 784.061464][T26217] vlan0: entered allmulticast mode [ 784.070492][T26217] veth0_vlan: entered allmulticast mode [ 784.465770][T26254] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5541'. [ 784.730242][T26274] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5547'. [ 784.789622][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5546'. [ 784.875075][T26275] syzkaller0: entered promiscuous mode [ 784.880843][T26275] syzkaller0: entered allmulticast mode [ 784.896639][T26279] dvmrp0: entered allmulticast mode [ 784.962406][ T8785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.973542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.598899][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5551'. [ 788.659519][T26298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5552'. [ 788.671190][T26299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5553'. [ 788.736486][T26301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.785322][T26303] netlink: 'syz.3.5554': attribute type 12 has an invalid length. [ 788.877146][T26304] netlink: 'syz.3.5554': attribute type 12 has an invalid length. [ 789.544623][T26334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5562'. [ 789.709583][T26338] syzkaller0: entered promiscuous mode [ 789.738969][T26338] syzkaller0: entered allmulticast mode [ 789.757429][T26345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5566'. [ 789.841152][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 789.859076][T26349] No such timeout policy "syz1" [ 789.908246][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 789.915288][T26349] No such timeout policy "syz1" [ 789.920816][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 789.927801][T26349] No such timeout policy "syz1" [ 789.933333][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 789.955642][T26349] No such timeout policy "syz1" [ 789.961012][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 789.978971][T26355] netlink: 'syz.0.5570': attribute type 1 has an invalid length. [ 790.001621][T26349] No such timeout policy "syz1" [ 790.007008][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 790.013863][T26349] No such timeout policy "syz1" [ 790.019383][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 790.026327][T26349] No such timeout policy "syz1" [ 790.031499][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 790.038505][T26349] No such timeout policy "syz1" [ 790.043939][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 790.051007][T26349] No such timeout policy "syz1" [ 790.056386][T26349] xt_hashlimit: max too large, truncated to 1048576 [ 790.063364][T26349] No such timeout policy "syz1" [ 790.667852][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.676505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.525086][T26355] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 793.556432][T26358] vlan3: entered allmulticast mode [ 793.603185][T26358] veth1_virt_wifi: entered allmulticast mode [ 793.836097][T26381] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 793.977575][T26388] syz_tun: refused to change device tx_queue_len [ 793.991903][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5580'. [ 794.020632][T26389] veth1_macvtap: entered promiscuous mode [ 794.041322][T26389] macsec1: entered promiscuous mode [ 794.083833][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5582'. [ 794.189372][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5583'. [ 794.355700][T26407] syzkaller0: entered promiscuous mode [ 794.361291][T26407] syzkaller0: entered allmulticast mode [ 795.262705][T26424] netlink: 'syz.3.5591': attribute type 1 has an invalid length. [ 795.270650][T26424] netlink: 'syz.3.5591': attribute type 3 has an invalid length. [ 795.272836][T26425] netlink: 'syz.0.5590': attribute type 1 has an invalid length. [ 795.278451][T26424] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5591'. [ 795.295283][T26424] NCSI netlink: No device for ifindex 813332851 [ 798.509651][T26425] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 798.518139][T26426] gretap3: entered promiscuous mode [ 798.633667][T26440] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5593'. [ 798.669355][T26441] netlink: 'syz.3.5594': attribute type 12 has an invalid length. [ 798.699285][T26440] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5593'. [ 798.878208][T26446] netlink: 'syz.0.5597': attribute type 64 has an invalid length. [ 798.905788][T26446] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5597'. [ 799.084573][T26461] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 799.158918][T26463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5599'. [ 799.236952][T26467] bridge_slave_1: entered promiscuous mode [ 799.323468][T26470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.601462][T26476] syzkaller0: entered promiscuous mode [ 799.614046][T26476] syzkaller0: entered allmulticast mode [ 799.630073][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5603'. [ 799.688432][T26479] syzkaller0: entered promiscuous mode [ 799.694268][T26479] syzkaller0: entered allmulticast mode [ 799.713933][T26479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5606'. [ 803.359554][T26515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 803.371345][T26515] netlink: 'syz.0.5615': attribute type 1 has an invalid length. [ 803.453204][T26515] bond4: entered promiscuous mode [ 803.472744][T26515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 803.825284][T26539] tipc: Enabling of bearer rejected, media not registered [ 803.954269][T26554] syzkaller0: entered promiscuous mode [ 803.959808][T26554] syzkaller0: entered allmulticast mode [ 803.996272][T26560] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5627'. [ 804.184994][T26570] netlink: 'syz.3.5630': attribute type 1 has an invalid length. [ 804.199341][T26570] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5630'. [ 804.437637][T26585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5633'. [ 807.595670][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5634'. [ 807.671049][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5636'. [ 807.680916][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5636'. [ 807.695503][T26596] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5635'. [ 807.765900][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5638'. [ 807.824015][T26609] debugfs: '1ща^!' already exists in 'ieee80211' [ 807.827966][T26612] netlink: zone id is out of range [ 807.888871][T26612] netlink: zone id is out of range [ 807.925871][T26612] netlink: zone id is out of range [ 807.972954][T26612] netlink: zone id is out of range [ 808.143204][T26633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5645'. [ 808.351243][T26642] syzkaller0: entered promiscuous mode [ 808.369905][T26642] syzkaller0: entered allmulticast mode [ 808.390403][T26638] tipc: Enabled bearer , priority 0 [ 808.464243][T26638] tipc: Resetting bearer [ 808.979437][T26671] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5654'. [ 809.011824][T26671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'. [ 809.583805][T26692] xt_cluster: node mask cannot exceed total number of nodes [ 809.771509][T26698] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 809.914119][T26706] block nbd1: reconnected socket [ 810.717979][ T5641] block nbd1: Receive control failed (result -32) [ 813.078722][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 813.145439][T26638] tipc: Disabling bearer [ 813.156928][ T5768] tipc: Node number set to 1099751145 [ 813.241753][T19011] hsr0: left promiscuous mode [ 813.254190][T19011] bridge0: port 1(hsr0) entered disabled state [ 813.327772][T19011] dvmrp8: left allmulticast mode [ 813.346455][T19011] batman_adv: batadv0: Interface deactivated: gretap1 [ 813.453536][T26732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5668'. [ 813.685615][T19011] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 813.696563][T19011] ip6gre1 (unregistering): left promiscuous mode [ 813.938796][T19011] batman_adv: batadv0: Removing interface: gretap1 [ 813.971730][T19011] bond5 (unregistering): (slave geneve4): Releasing active interface [ 813.985910][T19011] bond1 (unregistering): (slave geneve3): Releasing active interface [ 814.070583][T19011] bond4 (unregistering): (slave bridge3): Releasing active interface [ 814.086822][T19011] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 814.099190][T19011] bridge5 (unregistering): left promiscuous mode [ 814.140543][T19011] bond0 (unregistering): Released all slaves [ 814.155656][T19011] bond1 (unregistering): Released all slaves [ 814.169312][T19011] bond2 (unregistering): Released all slaves [ 814.185461][T19011] bond3 (unregistering): Released all slaves [ 814.203512][T19011] bond4 (unregistering): Released all slaves [ 814.235611][T19011] bond5 (unregistering): Released all slaves [ 814.260340][T19011] bond6 (unregistering): Released all slaves [ 814.274031][T19011] bond7 (unregistering): Released all slaves [ 814.295822][T26724] IPv6: sit1: Disabled Multicast RS [ 814.313573][T26731] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5668'. [ 814.606264][T26759] netlink: 'syz.0.5680': attribute type 10 has an invalid length. [ 814.614220][T26759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5680'. [ 815.131814][T26781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 815.151439][T26781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 815.162743][T26781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 815.194429][T26781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 815.230524][T26781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 815.339431][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 815.355131][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 815.368845][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 815.381399][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 815.391836][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 815.404101][ T5641] [ 815.406499][ T5641] ====================================================== [ 815.413579][ T5641] WARNING: possible circular locking dependency detected [ 815.420626][ T5641] syzkaller #0 Not tainted [ 815.425068][ T5641] ------------------------------------------------------ [ 815.432085][ T5641] kworker/u9:5/5641 is trying to acquire lock: [ 815.438298][ T5641] ffff88801be9d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 815.448911][ T5641] [ 815.448911][ T5641] but task is already holding lock: [ 815.456293][ T5641] ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 815.465724][ T5641] [ 815.465724][ T5641] which lock already depends on the new lock. [ 815.465724][ T5641] [ 815.476214][ T5641] [ 815.476214][ T5641] the existing dependency chain (in reverse order) is: [ 815.485215][ T5641] [ 815.485215][ T5641] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 815.493444][ T5641] down_write+0x96/0x200 [ 815.498202][ T5641] kernfs_add_one+0x41/0x5e0 [ 815.503305][ T5641] kernfs_create_dir_ns+0x1a1/0x230 [ 815.509011][ T5641] internal_create_group+0x440/0x1180 [ 815.514890][ T5641] cpuhp_invoke_callback+0x434/0x810 [ 815.520684][ T5641] cpuhp_issue_call+0x3f0/0x750 [ 815.526052][ T5641] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 815.532633][ T5641] __cpuhp_setup_state+0x3f/0x60 [ 815.538085][ T5641] do_one_initcall+0x250/0x870 [ 815.543373][ T5641] do_initcall_level+0x10a/0x1a0 [ 815.549047][ T5641] do_initcalls+0x59/0xa0 [ 815.553895][ T5641] kernel_init_freeable+0x29d/0x3e0 [ 815.559607][ T5641] kernel_init+0x1d/0x1d0 [ 815.564472][ T5641] ret_from_fork+0x514/0xb70 [ 815.569591][ T5641] ret_from_fork_asm+0x1a/0x30 [ 815.574872][ T5641] [ 815.574872][ T5641] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 815.582691][ T5641] [ 815.582691][ T5641] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 815.590419][ T5641] cpus_read_lock+0x42/0x160 [ 815.595535][ T5641] static_key_slow_inc+0x12/0x30 [ 815.600993][ T5641] nbd_genl_reconfigure+0x1301/0x1e80 [ 815.606965][ T5641] genl_family_rcv_msg_doit+0x233/0x340 [ 815.613044][ T5641] genl_rcv_msg+0x614/0x7a0 [ 815.618248][ T5641] netlink_rcv_skb+0x226/0x4a0 [ 815.623624][ T5641] genl_rcv+0x28/0x40 [ 815.628128][ T5641] netlink_unicast+0x7bb/0x940 [ 815.633409][ T5641] netlink_sendmsg+0x813/0xb40 [ 815.638708][ T5641] sock_sendmsg_nosec+0x13a/0x180 [ 815.644266][ T5641] ____sys_sendmsg+0x54e/0x850 [ 815.649572][ T5641] ___sys_sendmsg+0x2a5/0x360 [ 815.654773][ T5641] __x64_sys_sendmsg+0x1b1/0x290 [ 815.660236][ T5641] do_syscall_64+0x174/0x580 [ 815.665357][ T5641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.671954][ T5641] [ 815.671954][ T5641] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 815.679636][ T5641] __mutex_lock+0x19d/0x1550 [ 815.684760][ T5641] nbd_queue_rq+0x373/0x1150 [ 815.689959][ T5641] blk_mq_dispatch_rq_list+0x499/0x1990 [ 815.696039][ T5641] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 815.702885][ T5641] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 815.709379][ T5641] blk_mq_run_work_fn+0x16c/0x300 [ 815.714929][ T5641] process_scheduled_works+0xa8e/0x14e0 [ 815.721003][ T5641] worker_thread+0xa47/0xfb0 [ 815.726118][ T5641] kthread+0x388/0x470 [ 815.730724][ T5641] ret_from_fork+0x514/0xb70 [ 815.735840][ T5641] ret_from_fork_asm+0x1a/0x30 [ 815.741306][ T5641] [ 815.741306][ T5641] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 815.748522][ T5641] __mutex_lock+0x19d/0x1550 [ 815.753628][ T5641] nbd_queue_rq+0xc1/0x1150 [ 815.758654][ T5641] blk_mq_dispatch_rq_list+0x499/0x1990 [ 815.764728][ T5641] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 815.771580][ T5641] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 815.778082][ T5641] blk_mq_run_work_fn+0x16c/0x300 [ 815.783723][ T5641] process_scheduled_works+0xa8e/0x14e0 [ 815.789800][ T5641] worker_thread+0xa47/0xfb0 [ 815.795003][ T5641] kthread+0x388/0x470 [ 815.799587][ T5641] ret_from_fork+0x514/0xb70 [ 815.804725][ T5641] ret_from_fork_asm+0x1a/0x30 [ 815.810009][ T5641] [ 815.810009][ T5641] -> #4 (set->srcu){.+.+}-{0:0}: [ 815.817143][ T5641] __synchronize_srcu+0xc9/0x2f0 [ 815.822617][ T5641] elevator_switch+0x1e8/0x7b0 [ 815.827928][ T5641] elevator_change+0x2fa/0x480 [ 815.833232][ T5641] elevator_set_default+0x375/0x440 [ 815.838963][ T5641] blk_register_queue+0x3f3/0x4e0 [ 815.844507][ T5641] __add_disk+0x6cb/0xe30 [ 815.849352][ T5641] add_disk_fwnode+0xfb/0x4b0 [ 815.854551][ T5641] nbd_dev_add+0x733/0xb60 [ 815.859569][ T5641] nbd_init+0x15f/0x1e0 [ 815.864309][ T5641] do_one_initcall+0x250/0x870 [ 815.869607][ T5641] do_initcall_level+0x10a/0x1a0 [ 815.875085][ T5641] do_initcalls+0x59/0xa0 [ 815.880110][ T5641] kernel_init_freeable+0x29d/0x3e0 [ 815.885840][ T5641] kernel_init+0x1d/0x1d0 [ 815.890874][ T5641] ret_from_fork+0x514/0xb70 [ 815.896022][ T5641] ret_from_fork_asm+0x1a/0x30 [ 815.901315][ T5641] [ 815.901315][ T5641] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 815.909136][ T5641] __mutex_lock+0x19d/0x1550 [ 815.914248][ T5641] elevator_change+0x1af/0x480 [ 815.919541][ T5641] elevator_set_none+0xb5/0x140 [ 815.925003][ T5641] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 815.931326][ T5641] nbd_start_device+0x189/0xb30 [ 815.936691][ T5641] nbd_genl_connect+0x1597/0x1c10 [ 815.942232][ T5641] genl_family_rcv_msg_doit+0x233/0x340 [ 815.948301][ T5641] genl_rcv_msg+0x614/0x7a0 [ 815.953319][ T5641] netlink_rcv_skb+0x226/0x4a0 [ 815.958596][ T5641] genl_rcv+0x28/0x40 [ 815.963095][ T5641] netlink_unicast+0x7bb/0x940 [ 815.968372][ T5641] netlink_sendmsg+0x813/0xb40 [ 815.973654][ T5641] sock_sendmsg_nosec+0x13a/0x180 [ 815.979284][ T5641] ____sys_sendmsg+0x54e/0x850 [ 815.984556][ T5641] ___sys_sendmsg+0x2a5/0x360 [ 815.989779][ T5641] __x64_sys_sendmsg+0x1b1/0x290 [ 815.995228][ T5641] do_syscall_64+0x174/0x580 [ 816.000332][ T5641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.006741][ T5641] [ 816.006741][ T5641] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 816.015373][ T5641] blk_alloc_queue+0x544/0x690 [ 816.020668][ T5641] __blk_mq_alloc_disk+0x194/0x390 [ 816.026302][ T5641] nbd_dev_add+0x494/0xb60 [ 816.031326][ T5641] nbd_init+0x15f/0x1e0 [ 816.036088][ T5641] do_one_initcall+0x250/0x870 [ 816.041370][ T5641] do_initcall_level+0x10a/0x1a0 [ 816.046828][ T5641] do_initcalls+0x59/0xa0 [ 816.051682][ T5641] kernel_init_freeable+0x29d/0x3e0 [ 816.057434][ T5641] kernel_init+0x1d/0x1d0 [ 816.062382][ T5641] ret_from_fork+0x514/0xb70 [ 816.067535][ T5641] ret_from_fork_asm+0x1a/0x30 [ 816.072889][ T5641] [ 816.072889][ T5641] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 816.080102][ T5641] fs_reclaim_acquire+0x71/0x100 [ 816.085565][ T5641] kmem_cache_alloc_noprof+0x64/0x5f0 [ 816.091461][ T5641] __kernfs_iattrs+0xdd/0x380 [ 816.096651][ T5641] kernfs_iop_setattr+0xe6/0x3f0 [ 816.102099][ T5641] notify_change+0xbba/0xea0 [ 816.107207][ T5641] do_truncate+0x1c2/0x250 [ 816.112140][ T5641] path_openat+0x2fed/0x3830 [ 816.117260][ T5641] do_file_open+0x23e/0x4a0 [ 816.122288][ T5641] do_sys_openat2+0x115/0x200 [ 816.127481][ T5641] __x64_sys_openat+0x138/0x170 [ 816.132928][ T5641] do_syscall_64+0x174/0x580 [ 816.138042][ T5641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.144620][ T5641] [ 816.144620][ T5641] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 816.153130][ T5641] __lock_acquire+0x1520/0x2cf0 [ 816.158498][ T5641] lock_acquire+0x106/0x350 [ 816.163516][ T5641] down_write+0x96/0x200 [ 816.168275][ T5641] kernfs_link_sibling+0x4c7/0x5a0 [ 816.173920][ T5641] kernfs_add_one+0x1d2/0x5e0 [ 816.179116][ T5641] kernfs_create_dir_ns+0x1a1/0x230 [ 816.184946][ T5641] sysfs_create_dir_ns+0x12f/0x2a0 [ 816.190575][ T5641] kobject_add_internal+0x622/0xcd0 [ 816.196299][ T5641] kobject_add+0x163/0x240 [ 816.201320][ T5641] device_add+0x3fa/0xb80 [ 816.206168][ T5641] hci_conn_add_sysfs+0xd5/0x210 [ 816.212137][ T5641] hci_conn_complete_evt+0x8a8/0x1350 [ 816.218033][ T5641] hci_event_packet+0x6cd/0xf10 [ 816.223409][ T5641] hci_rx_work+0x3ee/0x1020 [ 816.228433][ T5641] process_scheduled_works+0xa8e/0x14e0 [ 816.234496][ T5641] worker_thread+0xa47/0xfb0 [ 816.239692][ T5641] kthread+0x388/0x470 [ 816.244294][ T5641] ret_from_fork+0x514/0xb70 [ 816.249406][ T5641] ret_from_fork_asm+0x1a/0x30 [ 816.254684][ T5641] [ 816.254684][ T5641] other info that might help us debug this: [ 816.254684][ T5641] [ 816.264903][ T5641] Chain exists of: [ 816.264903][ T5641] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 816.264903][ T5641] [ 816.279362][ T5641] Possible unsafe locking scenario: [ 816.279362][ T5641] [ 816.286820][ T5641] CPU0 CPU1 [ 816.292249][ T5641] ---- ---- [ 816.297616][ T5641] lock(&root->kernfs_rwsem); [ 816.302375][ T5641] lock(cpuhp_state_mutex); [ 816.309477][ T5641] lock(&root->kernfs_rwsem); [ 816.316758][ T5641] lock(&root->kernfs_iattr_rwsem); [ 816.322049][ T5641] [ 816.322049][ T5641] *** DEADLOCK *** [ 816.322049][ T5641] [ 816.330196][ T5641] 4 locks held by kworker/u9:5/5641: [ 816.335504][ T5641] #0: ffff888030e64940 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 816.346484][ T5641] #1: ffffc9000393fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 816.358499][ T5641] #2: ffff8880474ac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 816.368341][ T5641] #3: ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 816.378181][ T5641] [ 816.378181][ T5641] stack backtrace: [ 816.384148][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 816.384168][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.384181][ T5641] Workqueue: hci3 hci_rx_work [ 816.384202][ T5641] Call Trace: [ 816.384211][ T5641] [ 816.384221][ T5641] dump_stack_lvl+0xe8/0x150 [ 816.384244][ T5641] print_circular_bug+0x2e1/0x300 [ 816.384269][ T5641] check_noncircular+0x12e/0x150 [ 816.384293][ T5641] __lock_acquire+0x1520/0x2cf0 [ 816.384319][ T5641] ? __lock_acquire+0x683/0x2cf0 [ 816.384339][ T5641] ? kernfs_link_sibling+0x4c7/0x5a0 [ 816.384357][ T5641] lock_acquire+0x106/0x350 [ 816.384372][ T5641] ? kernfs_link_sibling+0x4c7/0x5a0 [ 816.384395][ T5641] down_write+0x96/0x200 [ 816.384415][ T5641] ? kernfs_link_sibling+0x4c7/0x5a0 [ 816.384431][ T5641] ? __pfx_down_write+0x10/0x10 [ 816.384447][ T5641] ? kernfs_root+0x1c/0x230 [ 816.384462][ T5641] ? kernfs_root+0x1c/0x230 [ 816.384476][ T5641] ? kernfs_root+0x1c/0x230 [ 816.384492][ T5641] ? kernfs_root+0x1ea/0x230 [ 816.384508][ T5641] kernfs_link_sibling+0x4c7/0x5a0 [ 816.384530][ T5641] kernfs_add_one+0x1d2/0x5e0 [ 816.384549][ T5641] kernfs_create_dir_ns+0x1a1/0x230 [ 816.384568][ T5641] sysfs_create_dir_ns+0x12f/0x2a0 [ 816.384595][ T5641] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 816.384621][ T5641] ? do_raw_spin_unlock+0xf5/0x210 [ 816.384646][ T5641] kobject_add_internal+0x622/0xcd0 [ 816.384667][ T5641] kobject_add+0x163/0x240 [ 816.384688][ T5641] ? __pfx_kobject_add+0x10/0x10 [ 816.384727][ T5641] ? get_device_parent+0x366/0x3a0 [ 816.384750][ T5641] device_add+0x3fa/0xb80 [ 816.384769][ T5641] hci_conn_add_sysfs+0xd5/0x210 [ 816.384797][ T5641] hci_conn_complete_evt+0x8a8/0x1350 [ 816.384817][ T5641] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 816.384844][ T5641] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 816.384861][ T5641] ? skb_pull_data+0xf0/0x200 [ 816.384884][ T5641] hci_event_packet+0x6cd/0xf10 [ 816.384903][ T5641] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 816.384920][ T5641] ? __pfx_hci_event_packet+0x10/0x10 [ 816.384939][ T5641] ? audit_trim_trees+0x280/0x7e0 [ 816.384962][ T5641] ? hci_send_to_monitor+0xe2/0x590 [ 816.384985][ T5641] hci_rx_work+0x3ee/0x1020 [ 816.385005][ T5641] ? process_scheduled_works+0xa20/0x14e0 [ 816.385027][ T5641] process_scheduled_works+0xa8e/0x14e0 [ 816.385060][ T5641] ? __pfx_process_scheduled_works+0x10/0x10 [ 816.385085][ T5641] ? assign_work+0x3cf/0x5d0 [ 816.385109][ T5641] worker_thread+0xa47/0xfb0 [ 816.385137][ T5641] ? __kthread_parkme+0x71/0x1f0 [ 816.385164][ T5641] kthread+0x388/0x470 [ 816.385181][ T5641] ? __pfx_worker_thread+0x10/0x10 [ 816.385204][ T5641] ? __pfx_kthread+0x10/0x10 [ 816.385219][ T5641] ret_from_fork+0x514/0xb70 [ 816.385240][ T5641] ? __pfx_ret_from_fork+0x10/0x10 [ 816.385256][ T5641] ? __switch_to+0xc89/0x1420 [ 816.385282][ T5641] ? __pfx_kthread+0x10/0x10 [ 816.385299][ T5641] ret_from_fork_asm+0x1a/0x30 [ 816.385346][ T5641] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 816.888161][T26804] tipc: Enabled bearer , priority 0 [ 816.895685][T26804] syzkaller0: entered promiscuous mode [ 816.901271][T26804] syzkaller0: entered allmulticast mode [ 816.909097][T26804] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 817.675369][T26804] bridge0: port 3(syz_tun) entered disabled state [ 817.755880][T26804] syz_tun (unregistering): left allmulticast mode [ 817.781217][T26804] syz_tun (unregistering): left promiscuous mode [ 817.790801][T26804] bridge0: port 3(syz_tun) entered disabled state [ 817.950289][T19011] hsr_slave_0: left promiscuous mode [ 817.966100][T19011] hsr_slave_1: left promiscuous mode [ 818.150282][T19010] smc: removing ib device syz2 [ 818.169985][T19010] smbdirect: ib_dev[syz2] removed [ 818.255315][T26804] tipc: Resetting bearer [ 818.267460][T26804] tipc: Disabling bearer [ 818.317614][ T5768] tipc: Node number set to 1166192123 [ 818.905730][T19011] IPVS: stop unused estimator thread 0... [ 819.054186][T19011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 819.123871][T19011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 819.200961][T19011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 819.281142][T19011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 819.370009][T19011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.381827][T19011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36901 - 0 [ 819.447763][T19011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.459023][T19011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36901 - 0 [ 819.519356][T19011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.531179][T19011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36901 - 0 [ 819.694680][T19011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.706388][T19011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.741869][T19011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.754719][T19011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.781364][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 819.894840][T19011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.907065][T19011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.967690][T19011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.979096][T19011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.096476][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 820.161685][T19011] bridge_slave_1: left allmulticast mode [ 820.172824][T19011] bridge_slave_1: left promiscuous mode [ 820.179066][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.190486][T19011] bridge_slave_0: left allmulticast mode [ 820.198112][T19011] bridge_slave_0: left promiscuous mode [ 820.204711][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.223707][T19011] pim6reg: left allmulticast mode [ 820.232233][T19011] bridge_slave_1: left promiscuous mode [ 820.238984][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.259034][T19011] bridge_slave_0: left allmulticast mode [ 820.265611][T19011] bridge_slave_0: left promiscuous mode [ 820.271806][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.293446][T19011] dvmrp0: left allmulticast mode [ 820.678310][T19011] team0: Port device bridge2 removed [ 820.708881][T19011] bond1 (unregistering): Released all slaves [ 820.722072][T19011] bond2 (unregistering): Released all slaves [ 820.738675][T19011] bond3 (unregistering): Released all slaves [ 820.751888][T19011] bond0 (unregistering): Released all slaves [ 820.764151][T19011] bond4 (unregistering): Released all slaves [ 820.799717][T19011] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 820.815325][T19011] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 820.827468][T19011] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ba:17:49:ca:ae:35 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 820.878008][T19011] erspan0 (unregistering): left promiscuous mode [ 820.898673][T19011] bond2 (unregistering): (slave geneve3): Releasing active interface [ 820.953428][T19011]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.964097][T19011]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.979478][T19011]  (unregistering): Released all slaves [ 820.988792][T19011] bond1 (unregistering): Released all slaves [ 821.000731][T19011] bond0 (unregistering): Released all slaves [ 821.012796][T19011] bond2 (unregistering): Released all slaves [ 821.024785][T19011] bond3 (unregistering): Released all slaves [ 821.037826][T19011] bond4 (unregistering): (slave veth5): Releasing backup interface [ 821.047610][T19011] bond4 (unregistering): Released all slaves [ 821.072619][T19011] bond5 (unregistering): Released all slaves [ 821.084577][T19011] bond6 (unregistering): Released all slaves [ 821.096186][T19011] bond7 (unregistering): Released all slaves [ 821.252689][T19011] bond4 (unregistering): (slave geneve2): Releasing active interface [ 821.307551][T19011] bond0 (unregistering): Released all slaves [ 821.329155][T19011] bond1 (unregistering): Released all slaves [ 821.341145][T19011] bond2 (unregistering): Released all slaves [ 821.356404][T19011] bond3 (unregistering): Released all slaves [ 821.369336][T19011] bond4 (unregistering): Released all slaves [ 821.382473][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 821.601311][T19011] tipc: Left network mode [ 821.624967][T19011] tipc: Left network mode [ 821.762215][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 822.288423][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 822.591483][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 822.982106][T19011] hsr_slave_0: left promiscuous mode [ 822.989249][T19011] hsr_slave_1: left promiscuous mode [ 823.001374][T19011] team0: left promiscuous mode [ 823.007232][T19011] team_slave_0: left promiscuous mode [ 823.018539][T19011] team_slave_1: left promiscuous mode [ 823.030571][T19011] hsr_slave_0: left promiscuous mode [ 823.037668][T19011] hsr_slave_1: left promiscuous mode [ 823.048778][T19011] hsr_slave_0: left promiscuous mode [ 823.056290][T19011] hsr_slave_1: left promiscuous mode [ 823.074836][T19011] vlan0: left allmulticast mode [ 823.080122][T19011] veth0_vlan: left allmulticast mode [ 823.086874][T19011] vlan0: left promiscuous mode [ 823.092935][T19011] veth1_vlan: left allmulticast mode [ 823.098989][T19011] veth1_macvtap: left promiscuous mode [ 823.106107][T19011] veth0_macvtap: left promiscuous mode [ 823.112170][T19011] veth1_vlan: left promiscuous mode [ 823.118922][T19011] veth0_vlan: left promiscuous mode [ 823.126321][T19011] veth1_macvtap: left promiscuous mode [ 823.132227][T19011] veth0_macvtap: left promiscuous mode [ 823.138662][T19011] veth1_vlan: left promiscuous mode [ 823.144386][T19011] veth0_vlan: left promiscuous mode [ 824.173517][T19011] team0 (unregistering): Port device team_slave_1 removed [ 824.186179][T19011] team0 (unregistering): Port device team_slave_0 removed [ 824.462429][T19011] team0 (unregistering): Port device team_slave_1 removed [ 824.475237][T19011] team0 (unregistering): Port device team_slave_0 removed [ 824.509998][ T36] smc: removing ib device syz1 [ 824.742160][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 824.754177][ T5634] syz1: Port: 1 Link DOWN [ 824.780844][ T36] smbdirect: ib_dev[syz1] removed