last executing test programs: 4.94336343s ago: executing program 0 (id=8790): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0xe, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a8", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x11, 0x2, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.127434452s ago: executing program 0 (id=8795): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x44818) socket$inet6(0xa, 0x3, 0xff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048d1}, 0x20008040) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)="6c1316521f14fb0fce3bd2514afd9f9c238a7813a38ec908f637bab916d434fc16f0f971ad7cc403b60dc4aca11e5f3a8fd9878b9682279a24bd0bc6e9c38d26381ce74a84bafe15e12992e046d864cd9fb5e9a976b32568314c9e73d6ea1d6962d35512709f202b5a1efce1c69131a329dba94a4413d60a11722c785edaa717b049450194319fed07", 0x89) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendmsg$key(r0, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x7}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) 3.675508572s ago: executing program 2 (id=8801): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c000000110006000011000200000a0002000000200000", 0x17) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x9d32f4b2e0c65377}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1e) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000900)="e8700ed16f425954ab3c431fd34e4330729ff15c2240503c412ea74e8478d45f717e010e8f3ceceb1d4b1260b42db628589049508bac07fd2d50da93dc0e33080fd228878d41ac0b73b368de6d3e60976c384cab06aeee054ffd2df674f2a978229affed9072f64db683db59c5b62892dff3d5b94a7c5e4d667ba7de97717bc83a067d", 0x83}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040004}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/81, 0xffffff98}, {&(0x7f00000002c0)=""/94, 0x53}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.511884442s ago: executing program 0 (id=8803): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="140100002300010003000000fcdbdf250101f2800f0018007d3a2e9c5bc85c23277d0000140002000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0de2a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0be816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3580400e900"/264], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x400) 3.359461998s ago: executing program 2 (id=8805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000031c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x4}], 0x1, 0x8000) unshare(0x2c020400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 3.254993251s ago: executing program 0 (id=8807): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x80000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) epoll_create(0x8000a67) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x15, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000005200bf952cbd7000fbdbdf25f5ff0000"], 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0) close(0x3) 2.709954817s ago: executing program 1 (id=8810): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x100, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0xd, 0x9}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.592125618s ago: executing program 0 (id=8812): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/943], 0x264) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$cgroup_devices(r6, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) 2.527014904s ago: executing program 1 (id=8813): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x4, 0x0, 0x7, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe9bd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1, @private1, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)={0x48, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_MODES={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd, 0x5, "b468615afac399005d"}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000001100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02002bbd7000fcdbdf251400000005000b000100000008000a00ba05000005000b000100000008000800faffffff30000180080003000100000008000100", @ANYRES32, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRESDEC=r5, @ANYRESOCT, @ANYRESDEC=r4, @ANYRESOCT=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0600000000000000000000001000000000000900", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000400"/25], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e00), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x1f, &(0x7f0000001500)=ANY=[@ANYBLOB="60b9ec747839cd785a8a585a6bf918002cd6aaf8db879ac19abe1ba8df9141cf699f6b3e35d0ba1b00e4957ba826cdf89e9e42f130b1f73f4aecd7dbcef383879d1a810f7901a258f84626d48f1b1cd1b6930c6f92ca5bab905c13a52e12563825397368e66f70717c65ed6bf75bea635daa7546040c9ce4683a8572c607a321dbc42602aa64151beece736b77afe5f8d78441903103da8158bf3d70e4eb994c3896a8c6d654aab01f", @ANYRES32, @ANYBLOB, @ANYBLOB="e1c535f780312cf902d6ddc64bdc53e3c3538e6b4eba5df0099247b5aad0e0a33841f69659b9215689209854b40a736e9da76b2302b9f5a4ee57f277a1f270ec26f63f0c7be1858f430ccae38c8adaa6f7f670a9765bfa05f8daa816ffb84235322ee9dd3cc30143eedc30aad2c765dbaa1870aae7ccfead8a68e8ade9", @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x200, 0x10, &(0x7f0000000a40)=""/16, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x7, 0x100, 0xd1b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0xffffffffffffffff, r7, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000f00), 0x10, 0x8f}, 0x94) 2.26191721s ago: executing program 0 (id=8815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x1f, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000feffffff18400000ffffffff0000000000000000a1b51800f0ffffff02579a81000000008520000003000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ae00000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000014c0)='X', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) pread64(r7, &(0x7f0000002880)=""/4103, 0x1007, 0x4) 2.245153365s ago: executing program 2 (id=8816): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x6, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0xfffffffe) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000200)='GPL\x00', 0x204080, &(0x7f0000000280)={@align=0x2, {0xfffb, 0x9, 0x9b5, 0x3}}, 0x9, &(0x7f0000000400), &(0x7f0000000440)=0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x40) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) 2.19128168s ago: executing program 1 (id=8817): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 2.138967148s ago: executing program 3 (id=8818): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x5, 0x0) pipe(&(0x7f00000045c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50) socket$inet(0x2, 0x3, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) socket$netlink(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 1.975318983s ago: executing program 3 (id=8820): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.802720876s ago: executing program 3 (id=8821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x3ff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 1.52638557s ago: executing program 2 (id=8823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) r2 = socket$rxrpc(0x21, 0x2, 0x2) socket(0x10, 0x3, 0x0) unshare(0x2a020400) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r4, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) close(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4884}, 0x20000000) listen(r2, 0xa) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r1, 0x3, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x8400) 1.431018226s ago: executing program 4 (id=8824): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2a, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d950300bcb7040008000a001d2964eaed4b32c42b60aa0f3dec0cac6be6edcfe5e83c0c4c429cb5f3898a7375b1c2048f35b52faa372d6affffd054d5a0682974f877b3907ce48915c28c2e982caa01bcda3d12515bcc7af4fd6296d652ea3a6461a8c179fc", @ANYRES32=r6, @ANYBLOB="140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) 1.352880867s ago: executing program 1 (id=8825): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socketpair(0x25, 0x7899bbb01cc2aa14, 0xffff, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff00000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000fefdffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001a80)=[{&(0x7f00000003c0)="1197f57cfef6f85f7179a81fdf92775b6831ebd5d558ae5c6057c9196127995cefcf6a374809043cbd17a09fd5678ae8b9511a75ade7c06704ea5182fe58caa01b6edafdae9f61e8a5117db5ff", 0x4d}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d6163736563000020000280080005000d0000000c0001000001000000000000050003000800000008000500", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 1.234368419s ago: executing program 3 (id=8826): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x1, 0xfa, 0x5, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e"], 0x28}}, 0x0) r3 = socket(0x0, 0x80000, 0x5f3) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x6, 0x3d832047, 0xfff, 0x7, 0x1b8e, 0x0, 0x9, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r7, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004440)={0x10, 0x3d, 0x4, 0x70bd28, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x40040}, 0x24000804) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4e", 0x83}, {&(0x7f00000003c0)="b2d616a9dec7caaae6068e74d8d177dd8b8aa56c5385b89f36796568341b240b37b2b1e3b156fa9213688620ef58c4919387aaccd16c83fdbddf03f729526fa83bd438eff0e768eb0920e0b42e529a", 0x4f}], 0x2}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="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", 0x103}], 0x1}}], 0x2, 0x0) 1.186705578s ago: executing program 2 (id=8827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.016655779s ago: executing program 1 (id=8828): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000010001", 0x7) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000140)="0d000000010001", 0x7) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) read(r1, &(0x7f0000000400)=""/128, 0x80) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) read(r1, &(0x7f0000000400)=""/128, 0x80) close(r1) close(r0) 810.992279ms ago: executing program 2 (id=8829): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) write(r1, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 563.133611ms ago: executing program 4 (id=8830): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="41a22cf71c56a5726a9134731e9218e4af98a929842008704beb18b0241429893785ab0d2a6e3bdc8dda7506ccfb041d9de40118deb098279f05b2a949e9cac7cc8d8b3578af73e374272602a72132f8afbd5a102343f38ae02d5b69a76cae52a954ce86db79ead68879f726bfc482e4628597672d70c9d8ff2dc9d150d563b62fbac4418759ba24d8e48f3932707744e05b1bde6411caaec1bfeca2fad9bca05df4e2123ba583563fb7ed5cac1e", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {0xc, 0x1}, {0x0, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x9b}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x140d, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 385.610035ms ago: executing program 4 (id=8831): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 259.938833ms ago: executing program 3 (id=8832): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x300}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0xfff8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000000a010101000000000000000000000000ac1414bb00000000000000000000000000000400100000000200200084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000400"/108], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="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", 0xfd) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 239.69297ms ago: executing program 4 (id=8833): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00', @ANYRES32, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 126.835051ms ago: executing program 4 (id=8834): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000004840)=0xd2c, 0x4) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x2, 0xa, 0x41, 0x7}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x3, 0x0, 0x0, 0x1000000}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3506, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 67.768306ms ago: executing program 3 (id=8835): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xb9666000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="260085ba4f3f00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x810) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x0, [0x2, 0x1, 0x7, 0x80, 0x100, 0x3], 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 56.087399ms ago: executing program 1 (id=8836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000071105d00000000009500000000000039f8f5e51e"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x3, 0xff, 0x4, 0xe17, 0x2, 0x0, [{0xffffffffffffff00, 0x7f, 0x8, '\x00', 0x880}, {0x8, 0x5, 0x0, '\x00', 0x1}]}) r2 = socket(0x10, 0x803, 0x0) socket$kcm(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) close(r4) syz_genetlink_get_family_id$mptcp(0x0, r3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf4, r6, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x15}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x11}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4040880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 0s ago: executing program 4 (id=8837): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100088018000c8014000b80080009000000000008000a006000"/63], 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r7, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000600), &(0x7f0000000640)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f00000002c0)="6a05848e44b57035b8051a1d05cc6ca5dd7f2f57685e8f5a18e446fe07601a54e200a06aa402495206a603a515f8b35e631709baaaf48abc0382948b9bae7d4c0939e90695f589ba497e9258bcf0c23695bd4f543e5f7dec99c956d379ba8b58cc5925c988d70254b3456e6ebc5b9ec792c62f8d4a0bf02d3bfc6157a6305cf05dc5f4409b64b0daa7e55ad8ab3ba03d496276651818b310b07b743892a404c25004eceb3ce119d117ace6ecdd0b507b6a", &(0x7f00000003c0)=""/138, &(0x7f0000000480)="34e8f9a2a8564c1b58d638bd304155c12674575cca3b75f34f562d3ed9f15cad3a5ef255885720be5687cd8d72f0ac52793cea319972ae3afc766b", &(0x7f00000004c0)="db22baac04568bcb2337d57e", 0x6, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r8, 0x0, 0xd88d02a0}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000380), 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000180)={{r0, &(0x7f0000000000)='nl80211\x00', 0x8100, &(0x7f0000000080)={@_ha_fsid={[0x4]}, {0x7, 0x1, 0x7, 0x488b}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, {[0x8, 0x800, 0x38000000, 0x1000]}, 0xffff, 0x2c, &(0x7f00000005c0)=""/44}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000002c0)={r10, @local, @multicast2}, 0xc) kernel console output (not intermixed with test programs): 65898][T24701] veth2: entered promiscuous mode [ 562.466004][T24701] veth3: entered promiscuous mode [ 562.466103][T24701] veth4: entered promiscuous mode [ 562.466180][T24701] veth5: entered promiscuous mode [ 562.466338][T24701] veth6: entered promiscuous mode [ 562.466434][T24701] veth7: entered promiscuous mode [ 562.466508][T24701] veth8: entered promiscuous mode [ 562.466584][T24701] veth9: entered promiscuous mode [ 562.468016][T24701] bond11: entered promiscuous mode [ 562.468034][T24701] batadv1: entered promiscuous mode [ 562.527542][T24701] veth10: entered promiscuous mode [ 562.534652][T24701] veth11: entered promiscuous mode [ 562.537756][T24701] bridge2: entered promiscuous mode [ 562.548857][T24701] veth12: entered promiscuous mode [ 562.549021][T24701] veth13: entered promiscuous mode [ 562.550579][T24701] erspan2: entered promiscuous mode [ 562.579950][T24701] veth14: entered promiscuous mode [ 562.580141][T24701] veth15: entered promiscuous mode [ 562.580923][T24701] bridge4: entered promiscuous mode [ 562.585487][T24701] bridge5: entered promiscuous mode [ 562.589369][T24701] bridge6: entered promiscuous mode [ 562.594993][T24701] veth16: entered promiscuous mode [ 562.595152][T24701] veth17: entered promiscuous mode [ 562.595289][T24701] mac80211_hwsim hwsim19 wlan2: entered promiscuous mode [ 562.605287][T24701] bond13: entered promiscuous mode [ 562.608627][T24701] gtp2: entered promiscuous mode [ 562.610980][T24701] bridge7: entered promiscuous mode [ 562.616222][T24701] bridge8: entered promiscuous mode [ 562.621808][T24701] bridge9: entered promiscuous mode [ 562.627021][T24701] bridge10: entered promiscuous mode [ 562.628958][T24701] veth18: entered promiscuous mode [ 562.629109][T24701] veth19: entered promiscuous mode [ 562.634332][T24701] bridge11: entered promiscuous mode [ 562.666718][T24701] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 562.670487][T24701] bridge12: entered promiscuous mode [ 562.675009][T24701] bond14: entered promiscuous mode [ 562.676966][T24701] veth20: entered promiscuous mode [ 562.682667][T24701] veth21: entered promiscuous mode [ 562.683717][T24701] bridge0: entered promiscuous mode [ 562.687349][T24701] gre5: entered promiscuous mode [ 562.766498][ T43] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.766534][ T43] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 562.766560][ T43] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.767954][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.767982][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 562.768005][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.768079][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.768102][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 562.768125][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.768211][ T50] netdevsim netdevsim1 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.768234][ T50] netdevsim netdevsim1 €Â: unset [0, 1] type 1 family 0 port 2816 - 0 [ 562.768256][ T50] netdevsim netdevsim1 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.850415][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.955188][T24672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.121436][T24720] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 563.462099][T24724] syzkaller0: entered promiscuous mode [ 563.462122][T24724] syzkaller0: entered allmulticast mode [ 563.773854][T24750] lo: entered promiscuous mode [ 563.775375][T24750] tunl0: entered promiscuous mode [ 563.794982][T24750] gre0: entered promiscuous mode [ 564.650261][T24750] erspan0: entered promiscuous mode [ 564.689714][T24750] ip_vti0: entered promiscuous mode [ 564.690249][T24750] ip6_vti0: entered promiscuous mode [ 564.690627][T24750] sit0: entered promiscuous mode [ 564.757231][T24750] ip6tnl0: entered promiscuous mode [ 564.770201][T24750] ip6gre0: entered promiscuous mode [ 564.783497][T24750] syz_tun: entered promiscuous mode [ 564.804050][T24750] ip6gretap0: entered promiscuous mode [ 564.823936][T24750] bridge0: entered promiscuous mode [ 564.838233][T24750] vcan0: entered promiscuous mode [ 564.846464][T24750] bond0: entered promiscuous mode [ 564.858789][T24750] team0: entered promiscuous mode [ 564.866704][T24750] nlmon0: entered promiscuous mode [ 564.874674][T24750] batadv0: entered promiscuous mode [ 564.881623][T24750] veth0: entered promiscuous mode [ 564.888509][T24750] veth1: entered promiscuous mode [ 564.905109][T24750] wg0: entered promiscuous mode [ 564.916459][T24750] wg1: entered promiscuous mode [ 564.924646][T24750] wg2: entered promiscuous mode [ 564.927751][T24750] veth0_to_bridge: entered promiscuous mode [ 564.933255][T24750] bridge_slave_0: entered promiscuous mode [ 564.935102][T24750] veth1_to_bridge: entered promiscuous mode [ 564.940600][T24750] bridge_slave_1: entered promiscuous mode [ 564.942632][T24750] veth0_to_bond: entered promiscuous mode [ 564.942781][T24750] bond_slave_0: entered promiscuous mode [ 564.946343][T24750] veth1_to_bond: entered promiscuous mode [ 564.948901][T24750] bond_slave_1: entered promiscuous mode [ 564.958259][T24750] veth0_to_team: entered promiscuous mode [ 564.963979][T24750] team_slave_0: entered promiscuous mode [ 564.964298][T24750] veth1_to_team: entered promiscuous mode [ 564.966779][T24750] team_slave_1: entered promiscuous mode [ 564.967046][T24750] veth0_to_batadv: entered promiscuous mode [ 564.971241][T24750] batadv_slave_0: entered promiscuous mode [ 564.973928][T24750] xfrm0: entered promiscuous mode [ 564.975956][T24750] veth0_to_hsr: entered promiscuous mode [ 564.978503][T24750] hsr_slave_0: entered promiscuous mode [ 564.982472][T24750] veth1_virt_wifi: entered promiscuous mode [ 564.985291][T24750] veth0_virt_wifi: entered promiscuous mode [ 564.988868][T24750] virt_wifi0: entered promiscuous mode [ 565.013433][T24750] macvtap0: entered promiscuous mode [ 565.020243][T24750] macsec0: entered promiscuous mode [ 565.027163][T24750] geneve0: entered promiscuous mode [ 565.030996][T24750] geneve1: entered promiscuous mode [ 565.044254][T24750] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 565.058221][T24750] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 565.068771][T24750] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 565.088884][T24750] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 565.109293][T24750] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 565.114988][T24750] vti60: entered promiscuous mode [ 565.116795][T24750] vxlan0: entered promiscuous mode [ 565.118934][T24750] vxlan1: entered promiscuous mode [ 565.121623][T24750] macvlan2: entered promiscuous mode [ 565.126787][T24750] macvlan3: entered promiscuous mode [ 565.127414][T24750] gre1: entered promiscuous mode [ 565.129209][T24750] bridge_slave_1.: entered promiscuous mode [ 565.134680][T24750] syztnl1: entered promiscuous mode [ 565.134799][T24750] n: entered promiscuous mode [ 565.138388][T24750] ip6erspan0: entered promiscuous mode [ 565.142688][T24750] sit1: entered promiscuous mode [ 565.160022][T24750] ip6tnl1: entered promiscuous mode [ 565.174858][T24750] ip6tnl2: entered promiscuous mode [ 565.176675][T24750] sit2: entered promiscuous mode [ 565.194721][T24750] sit3: entered promiscuous mode [ 565.221241][T24750] ipip0: entered promiscuous mode [ 565.222710][T24750] bridge1: entered promiscuous mode [ 565.223718][T24750] veth2: entered promiscuous mode [ 565.223817][T24750] veth3: entered promiscuous mode [ 565.253682][T24750] xfrm1: entered promiscuous mode [ 565.253843][T24750] gre2: entered promiscuous mode [ 565.284943][T24750] macvlan0: entered promiscuous mode [ 565.285049][T24750] macvlan1: entered promiscuous mode [ 565.285134][T24750] veth4: entered promiscuous mode [ 565.285220][T24750] veth5: entered promiscuous mode [ 565.287078][T24750] bond4: entered promiscuous mode [ 565.288403][T24750] vrf0: entered promiscuous mode [ 565.288540][T24750] vrf1: entered promiscuous mode [ 565.291008][T24750] veth6: entered promiscuous mode [ 565.291159][T24750] veth7: entered promiscuous mode [ 565.291293][T24750] veth8: entered promiscuous mode [ 565.291429][T24750] veth9: entered promiscuous mode [ 565.291558][T24750] veth10: entered promiscuous mode [ 565.291687][T24750] veth11: entered promiscuous mode [ 565.316075][T24750] bond5: entered promiscuous mode [ 565.316814][T24750] veth12: entered promiscuous mode [ 565.316959][T24750] veth13: entered promiscuous mode [ 565.317092][T24750] veth14: entered promiscuous mode [ 565.317228][T24750] veth15: entered promiscuous mode [ 565.335260][T24750] vlan0: entered promiscuous mode [ 565.335529][T24750] bridge2: entered promiscuous mode [ 565.339121][T24750] bridge3: entered promiscuous mode [ 565.344645][T24750] gtp0: entered promiscuous mode [ 565.346376][T24750] veth16: entered promiscuous mode [ 565.347690][T24750] veth17: entered promiscuous mode [ 565.348533][T24750] veth18: entered promiscuous mode [ 565.348814][T24750] veth19: entered promiscuous mode [ 565.349086][T24750] gtp1: entered promiscuous mode [ 565.379352][T24750] bond7: entered promiscuous mode [ 565.381527][T24750] veth20: entered promiscuous mode [ 565.381821][T24750] veth21: entered promiscuous mode [ 565.381957][T24750] veth22: entered promiscuous mode [ 565.382089][T24750] veth23: entered promiscuous mode [ 565.389197][T24750] bridge4: entered promiscuous mode [ 565.398071][T24750] bond8: entered promiscuous mode [ 565.402052][T24750] geneve2: entered promiscuous mode [ 565.402223][T24750] veth24: entered promiscuous mode [ 565.402361][T24750] veth25: entered promiscuous mode [ 565.402633][T24750] vlan1: entered promiscuous mode [ 565.403137][T24750] veth26: entered promiscuous mode [ 565.403283][T24750] veth27: entered promiscuous mode [ 565.411542][T24750] bond9: entered promiscuous mode [ 565.415505][T24750] vlan2: entered promiscuous mode [ 565.417296][T24750] geneve3: entered promiscuous mode [ 565.421727][T24750] gre3: entered promiscuous mode [ 565.426793][T24750] gre4: entered promiscuous mode [ 565.427180][T24750] bond10: entered promiscuous mode [ 565.427295][T24750] bond11: entered promiscuous mode [ 565.427405][T24750] gtp2: entered promiscuous mode [ 565.434103][T24750] bridge5: entered promiscuous mode [ 565.441020][T24750] bridge6: entered promiscuous mode [ 565.446949][T24750] bridge7: entered promiscuous mode [ 565.448750][T24750] gre5: entered promiscuous mode [ 565.467698][T24750] bridge8: entered promiscuous mode [ 565.477176][T24750] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 565.482896][T24750] bridge9: entered promiscuous mode [ 565.484939][T24750] bridge10: entered promiscuous mode [ 565.487697][ T9] lo speed is unknown, defaulting to 1000 [ 565.487738][ T9] syz0: Port: 1 Link DOWN [ 565.585852][T24768] tipc: Enabling of bearer rejected, failed to enable media [ 565.599337][ T1195] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.599503][ T1195] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.599727][ T1195] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.599752][ T1195] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.599787][ T1195] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.599810][ T1195] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.599842][ T1195] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.599866][ T1195] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.697374][T24267] lo speed is unknown, defaulting to 1000 [ 565.914729][T24791] syzkaller1: entered promiscuous mode [ 565.914754][T24791] syzkaller1: entered allmulticast mode [ 566.008084][T24797] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 566.008133][T24797] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 566.008544][T24797] tipc: Resetting bearer [ 566.129114][T24799] syzkaller0: entered promiscuous mode [ 566.129137][T24799] syzkaller0: entered allmulticast mode [ 566.364227][T24817] netlink: 'syz.4.7507': attribute type 11 has an invalid length. [ 566.476621][T24819] syzkaller0: entered promiscuous mode [ 566.476643][T24819] syzkaller0: entered allmulticast mode [ 567.099631][T24810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.867850][T24853] syzkaller0: entered promiscuous mode [ 569.867873][T24853] syzkaller0: entered allmulticast mode [ 570.185893][T24882] bond12: option ad_user_port_key: invalid value (65535) [ 570.186360][T24882] bond12: option ad_user_port_key: allowed values 0 - 1023 [ 570.196464][T24882] bond12 (unregistering): Released all slaves [ 570.482155][T24879] ±ÿÇl¡­ˆiý: entered promiscuous mode [ 570.634547][T24879] tunl0: entered promiscuous mode [ 570.649162][T24879] gre0: entered promiscuous mode [ 570.707379][T24879] erspan0: entered promiscuous mode [ 570.711906][T24879] ip_vti0: entered promiscuous mode [ 570.715321][T24879] ip6_vti0: entered promiscuous mode [ 570.717984][T24879] sit0: entered promiscuous mode [ 570.730943][T24879] ip6tnl0: entered promiscuous mode [ 570.734249][T24879] ip6gre0: entered promiscuous mode [ 570.736537][T24879] tipc: Resetting bearer [ 570.750987][T24879] bridge0: entered promiscuous mode [ 570.758362][T24879] vcan0: entered promiscuous mode [ 570.766617][T24879] bond0: entered promiscuous mode [ 570.767696][T24879] team0: entered promiscuous mode [ 570.783617][T24879] dummy0: entered promiscuous mode [ 570.800565][T24879] nlmon0: entered promiscuous mode [ 570.802619][T24879] veth0: entered promiscuous mode [ 570.805920][T24879] veth1: entered promiscuous mode [ 570.828387][T24879] wg0: entered promiscuous mode [ 570.870155][T24879] wg2: entered promiscuous mode [ 570.877726][T24879] veth0_to_bridge: entered promiscuous mode [ 570.901960][T24879] bridge_slave_0: entered promiscuous mode [ 571.006011][T24879] veth1_to_bridge: entered promiscuous mode [ 571.011953][T24879] bridge_slave_1: entered promiscuous mode [ 571.015537][T24879] veth0_to_bond: entered promiscuous mode [ 571.018182][T24879] bond_slave_0: entered promiscuous mode [ 571.021489][T24879] veth0_to_team: entered promiscuous mode [ 571.024903][T24879] team_slave_0: entered promiscuous mode [ 571.028238][T24879] veth1_to_team: entered promiscuous mode [ 571.034088][T24879] team_slave_1: entered promiscuous mode [ 571.034362][T24879] veth0_to_batadv: entered promiscuous mode [ 571.037043][T24879] batadv_slave_0: entered promiscuous mode [ 571.041428][T24879] xfrm0: entered promiscuous mode [ 571.044727][T24879] veth0_to_hsr: entered promiscuous mode [ 571.047223][T24879] hsr_slave_0: entered promiscuous mode [ 571.049149][T24879] veth1_to_hsr: entered promiscuous mode [ 571.054747][T24879] hsr_slave_1: entered promiscuous mode [ 571.057555][T24879] veth1_virt_wifi: entered promiscuous mode [ 571.061977][T24879] veth0_virt_wifi: entered promiscuous mode [ 571.078470][T24879] vlan1: entered promiscuous mode [ 571.092672][T24879] macvlan0: entered promiscuous mode [ 571.098256][T24879] macvlan1: entered promiscuous mode [ 571.107631][T24879] ipvlan1: entered promiscuous mode [ 571.122143][T24879] macvtap0: entered promiscuous mode [ 571.127310][T24879] macsec0: entered promiscuous mode [ 571.139179][T24879] geneve0: entered promiscuous mode [ 571.149146][T24879] geneve1: entered promiscuous mode [ 571.180689][T24879] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 571.235472][T24879] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 571.242665][T24879] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 571.293586][T24879] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 571.319990][T24879] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 571.323328][T24879] macvlan2: entered promiscuous mode [ 571.337200][T24879] ip6erspan0: entered promiscuous mode [ 571.349838][T24879] syztnl2: entered promiscuous mode [ 571.356703][T24879] vxlan0: entered promiscuous mode [ 571.370839][T24879] vlan3: entered promiscuous mode [ 571.377174][T24879] geneve2: entered promiscuous mode [ 571.386362][T24879] vxlan1: entered promiscuous mode [ 571.386582][T24879] gre1: entered promiscuous mode [ 571.403547][T24879] bond1: entered promiscuous mode [ 571.411563][T24879] gretap1: entered promiscuous mode [ 571.414463][T24879] sit1: entered promiscuous mode [ 571.450884][T24879] bond2: entered promiscuous mode [ 571.517198][T24879] gretap2: entered promiscuous mode [ 571.527880][T24879] ip6tnl1: entered promiscuous mode [ 571.527968][T24879] sit2: entered promiscuous mode [ 571.542533][T24879] geneve4: entered promiscuous mode [ 571.548843][T24879] bond3: entered promiscuous mode [ 571.548945][T24879] macvlan3: entered promiscuous mode [ 571.549033][T24879] macvlan4: entered promiscuous mode [ 571.549112][T24879] macvlan5: entered promiscuous mode [ 571.564733][T24879] gre2: entered promiscuous mode [ 571.569847][T24879] vxlan2: entered promiscuous mode [ 571.582349][T24879] bond4: entered promiscuous mode [ 571.583400][T24879] xfrm2: entered promiscuous mode [ 571.592750][T24879] gtp0: entered promiscuous mode [ 571.608845][T24879] erspan1: entered promiscuous mode [ 571.621634][T24879] veth2: entered promiscuous mode [ 571.621771][T24879] veth3: entered promiscuous mode [ 571.623468][T24879] gtp1: entered promiscuous mode [ 571.628497][T24879] ip6gre2: entered promiscuous mode [ 571.657191][T24879] veth4: entered promiscuous mode [ 571.657299][T24879] veth5: entered promiscuous mode [ 571.657445][T24879] gre3: entered promiscuous mode [ 571.705616][T24879] veth6: entered promiscuous mode [ 571.705779][T24879] veth7: entered promiscuous mode [ 571.705895][T24879] sit3: entered promiscuous mode [ 571.706011][T24879] veth8: entered promiscuous mode [ 571.706108][T24879] veth9: entered promiscuous mode [ 571.706212][T24879] gre4: entered promiscuous mode [ 571.706275][T24879] veth10: entered promiscuous mode [ 571.706376][T24879] veth11: entered promiscuous mode [ 571.706465][T24879] veth12: entered promiscuous mode [ 571.706570][T24879] veth13: entered promiscuous mode [ 571.706648][T24879] veth14: entered promiscuous mode [ 571.706742][T24879] veth15: entered promiscuous mode [ 571.706817][T24879] veth16: entered promiscuous mode [ 571.706900][T24879] veth17: entered promiscuous mode [ 571.706995][T24879] veth18: entered promiscuous mode [ 571.707128][T24879] veth19: entered promiscuous mode [ 571.707218][T24879] veth20: entered promiscuous mode [ 571.707294][T24879] veth21: entered promiscuous mode [ 571.723505][T24879] bridge2: entered promiscuous mode [ 571.822748][T24879] bridge3: entered promiscuous mode [ 571.833545][T24879] bond5: entered promiscuous mode [ 571.833790][T24879] gre5: entered promiscuous mode [ 571.871151][T24879] bridge4: entered promiscuous mode [ 571.874956][T24879] : entered promiscuous mode [ 571.879139][T24879] bridge5: entered promiscuous mode [ 571.887132][T24879] bridge6: entered promiscuous mode [ 571.891881][T24879] ipvlan0: entered promiscuous mode [ 571.896999][T24879] ipvlan2: entered promiscuous mode [ 571.897761][T24879] vlan0004: entered promiscuous mode [ 571.898078][T24879] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 571.908000][T24879] bond7: entered promiscuous mode [ 571.918363][T24879] bond8: entered promiscuous mode [ 571.919225][T24879] vlan0: entered promiscuous mode [ 571.927975][T24879] bridge7: entered promiscuous mode [ 571.930732][T24890] syzkaller0: entered promiscuous mode [ 571.930750][T24890] syzkaller0: entered allmulticast mode [ 571.996065][T24906] bridge10: entered promiscuous mode [ 571.996088][T24906] bridge10: entered allmulticast mode [ 571.999169][T24906] team0: Port device bridge10 added [ 572.002276][T24908] bridge0: port 4(team0) entered blocking state [ 572.002365][T24908] bridge0: port 4(team0) entered disabled state [ 572.002491][T24908] team0: entered allmulticast mode [ 572.002506][T24908] team_slave_0: entered allmulticast mode [ 572.002522][T24908] team_slave_1: entered allmulticast mode [ 572.008633][T24908] team0: entered promiscuous mode [ 572.008650][T24908] team_slave_0: entered promiscuous mode [ 572.008803][T24908] team_slave_1: entered promiscuous mode [ 572.312728][T24923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.314400][T24923] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.318167][T24923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.398793][T24285] lo speed is unknown, defaulting to 1000 [ 572.398865][T24285] syz0: Port: 1 Link ACTIVE [ 572.398932][T24285] lo speed is unknown, defaulting to 1000 [ 572.583151][T24935] syzkaller0: entered promiscuous mode [ 572.583174][T24935] syzkaller0: entered allmulticast mode [ 572.681557][ T1195] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.681591][ T1195] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 572.681616][ T1195] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.681641][ T1195] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 40408 - 0 [ 572.681690][ T1195] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.681714][ T1195] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 572.681739][ T1195] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.681763][ T1195] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 40408 - 0 [ 572.681794][ T1195] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.681819][ T1195] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 572.681843][ T1195] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.681867][ T1195] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 40408 - 0 [ 572.681899][ T1195] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.681923][ T1195] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 572.681947][ T1195] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.681971][ T1195] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 40408 - 0 [ 572.682167][T24941] netlink: 'syz.3.7536': attribute type 1 has an invalid length. [ 572.714579][T24941] 8021q: adding VLAN 0 to HW filter on device bond9 [ 572.729064][T24937] veth0_to_bond: left promiscuous mode [ 572.743314][T24937] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 572.800358][T24937] bond9: entered promiscuous mode [ 572.800382][T24937] bond9: entered allmulticast mode [ 573.055571][T24949] syzkaller0: entered promiscuous mode [ 573.055594][T24949] syzkaller0: entered allmulticast mode [ 573.596977][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7549'. [ 573.753419][T24973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 573.800980][T24975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.858850][T24976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.925668][T24975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.597754][T24982] ip_tables: iptables: counters copy to user failed while replacing table [ 576.654949][T24986] netlink: ct family unspecified [ 576.654981][T24986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.665964][T24988] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 576.963520][T15153] lo speed is unknown, defaulting to 1000 [ 576.963624][T15153] syz0: Port: 1 Link DOWN [ 576.963692][T15153] lo speed is unknown, defaulting to 1000 [ 577.370443][T25011] x_tables: duplicate underflow at hook 1 [ 577.516011][T25016] netlink: 'syz.0.7563': attribute type 1 has an invalid length. [ 577.658449][T25016] 8021q: adding VLAN 0 to HW filter on device bond14 [ 577.676711][T25016] bond13: (slave bond14): making interface the new active one [ 577.689524][T25016] bond13: (slave bond14): Enslaving as an active interface with an up link [ 577.802310][T25023] syzkaller0: entered promiscuous mode [ 577.802334][T25023] syzkaller0: entered allmulticast mode [ 578.011415][T25030] netlink: 'syz.0.7569': attribute type 2 has an invalid length. [ 578.011438][T25030] netlink: 11895 bytes leftover after parsing attributes in process `syz.0.7569'. [ 578.859118][T25059] netlink: 'syz.2.7580': attribute type 1 has an invalid length. [ 578.907477][T25059] 8021q: adding VLAN 0 to HW filter on device bond12 [ 578.943934][T25059] bond12: (slave veth29): Enslaving as an active interface with a down link [ 578.955045][T25059] netlink: 'syz.2.7580': attribute type 10 has an invalid length. [ 578.955065][T25059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7580'. [ 579.054327][T25066] geneve1: left allmulticast mode [ 579.054488][T25066] geneve1: left promiscuous mode [ 579.068257][T25066] team0 (unregistering): Port device macvlan0 removed [ 579.564202][T25090] tipc: Enabling of bearer rejected, failed to enable media [ 579.579589][T25093] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1319742198/1319742200 [ 579.579620][T25093] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1319742198/1319742199 [ 579.581222][T25093] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1319742198/1319742200 [ 579.581250][T25093] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1319742198/1319742199 [ 580.496961][T25133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7606'. [ 580.645030][T25136] netlink: 'syz.0.7608': attribute type 1 has an invalid length. [ 580.747454][T25136] 8021q: adding VLAN 0 to HW filter on device bond15 [ 580.825163][T25138] bond15: (slave veth27): Enslaving as an active interface with a down link [ 580.826685][T25136] bond10: (slave macvlan0): Releasing active interface [ 580.892846][T25136] bond15: (slave macvlan0): Enslaving as an active interface with a down link [ 581.014457][T25145] TC_ACT_REPEAT abuse ? [ 581.018507][T25149] bond0 (unregistering): (slave ip6gre2): Releasing backup interface [ 581.018534][T25149] ip6gre2: left promiscuous mode [ 581.019225][T25149] bond0 (unregistering): Released all slaves [ 581.253986][T25155] ip_tables: iptables: counters copy to user failed while replacing table [ 581.766971][T25171] syzkaller0: entered promiscuous mode [ 581.766994][T25171] syzkaller0: entered allmulticast mode [ 581.782872][T25173] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 581.986018][T25188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7627'. [ 582.455118][T25208] tipc: Resetting bearer [ 582.801259][T25226] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2567411572/2567411574 [ 582.801324][T25226] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2567411572/2567411573 [ 582.801875][T25226] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2567411572/2567411574 [ 582.801901][T25226] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2567411572/2567411573 [ 583.502563][T25250] tipc: Resetting bearer [ 583.511206][T25250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.517865][T25250] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.534428][T25250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.647797][T25250] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 583.784525][T25257] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 583.784556][T25257] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 583.784929][T25257] tipc: Resetting bearer [ 584.727736][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7664'. [ 584.904960][T25288] syzkaller0: entered promiscuous mode [ 584.904987][T25288] syzkaller0: entered allmulticast mode [ 585.036349][T25299] netlink: 'syz.4.7671': attribute type 39 has an invalid length. [ 585.469850][T23907] Bluetooth: hci3: command 0x0406 tx timeout [ 587.526741][T25290] syzkaller0: entered promiscuous mode [ 587.526757][T25290] syzkaller0: entered allmulticast mode [ 587.560100][T23907] Bluetooth: hci3: command 0x0406 tx timeout [ 587.666286][T25313] syzkaller0: entered promiscuous mode [ 587.666303][T25313] syzkaller0: entered allmulticast mode [ 587.702056][T25321] netlink: 'syz.0.7676': attribute type 1 has an invalid length. [ 590.226968][T25321] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 590.242644][T25325] bond11: (slave veth0_to_bond): Releasing active interface [ 590.394946][T25337] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 590.667012][T25367] ip_tables: iptables: counters copy to user failed while replacing table [ 590.707534][T25369] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 590.707600][T25369] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 590.708121][T25369] tipc: Resetting bearer [ 590.762844][T25364] tipc: Enabling of bearer rejected, already enabled [ 591.386814][T25377] syzkaller0: entered promiscuous mode [ 591.386877][T25377] syzkaller0: entered allmulticast mode [ 591.650226][T25390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7697'. [ 591.757449][T25390] 8021q: adding VLAN 0 to HW filter on device bond15 [ 591.831628][T25388] syzkaller1: entered allmulticast mode [ 591.890273][T25398] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 591.925161][T25398] bond15: (slave batadv2): Enslaving as an active interface with an up link [ 591.972971][T25390] bond15 (unregistering): (slave batadv2): Releasing backup interface [ 591.977722][T25390] bond15 (unregistering): Released all slaves [ 592.092526][T25391] syzkaller1: entered promiscuous mode [ 592.268425][T25423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7701'. [ 592.394489][T25430] syzkaller1: entered promiscuous mode [ 592.394514][T25430] syzkaller1: entered allmulticast mode [ 592.436998][T25434] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 592.602459][T25441] ip_tables: iptables: counters copy to user failed while replacing table [ 592.691347][T25448] netlink: 'syz.3.7712': attribute type 1 has an invalid length. [ 592.727668][T25448] 8021q: adding VLAN 0 to HW filter on device bond10 [ 592.840778][T25448] bond10: (slave gretap3): making interface the new active one [ 592.846318][T25448] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 592.907413][T25453] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 593.379628][T25457] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 593.461847][T25459] syzkaller0: entered promiscuous mode [ 593.461898][T25459] syzkaller0: entered allmulticast mode [ 593.613987][T25465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7718'. [ 593.623755][ T5624] block nbd2: Receive control failed (result -107) [ 593.840121][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7721'. [ 593.925269][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7721'. [ 594.038215][T25480] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 594.344050][T25498] netlink: 'syz.0.7732': attribute type 83 has an invalid length. [ 594.609107][T25515] pimreg: entered allmulticast mode [ 594.674249][T25515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7736'. [ 594.745084][T25512] pimreg: left allmulticast mode [ 594.788070][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7738'. [ 595.127692][T25535] netlink: 'syz.1.7740': attribute type 1 has an invalid length. [ 595.127715][T25535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7740'. [ 595.489812][T25566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7747'. [ 596.606430][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7757'. [ 596.951813][T25622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.953339][T25622] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.956706][T25622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.040117][T24289] lo speed is unknown, defaulting to 1000 [ 597.040154][T24289] syz0: Port: 1 Link ACTIVE [ 597.040222][T24289] lo speed is unknown, defaulting to 1000 [ 599.056878][T25595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.237401][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7775'. [ 599.361900][T25661] tipc: Resetting bearer [ 599.368748][T25661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.703584][T25680] syzkaller0: entered promiscuous mode [ 600.703608][T25680] syzkaller0: entered allmulticast mode [ 600.723242][T25691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7782'. [ 600.988770][T25706] netlink: ct family unspecified [ 600.988808][T25706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.280037][T25712] netlink: 'syz.2.7788': attribute type 1 has an invalid length. [ 601.280062][T25712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7788'. [ 602.669901][T24273] page_pool_release_retry() stalled pool shutdown: id 303, 1 inflight 60 sec [ 603.467355][T25698] netlink: 'syz.4.7782': attribute type 5 has an invalid length. [ 603.467379][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7782'. [ 603.562312][ T31] audit: type=1804 audit(1790949731.052:16): pid=25728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7792" name="/newroot/1592/cgroup.controllers" dev="tmpfs" ino=8124 res=1 errno=0 [ 603.562362][ T31] audit: type=1800 audit(1790949731.052:17): pid=25728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7792" name="cgroup.controllers" dev="tmpfs" ino=8124 res=0 errno=0 [ 603.709329][T25732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7793'. [ 603.718335][T25721] syzkaller0: entered promiscuous mode [ 603.718357][T25721] syzkaller0: entered allmulticast mode [ 606.119983][T25732] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 606.122006][T25742] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 606.300124][T25756] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 606.300263][T25756] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 609.309326][T25783] batman_adv: batadv0: Adding interface: syzkaller0 [ 609.309343][T25783] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.310792][T25783] batman_adv: batadv0: Interface activated: syzkaller0 [ 609.524515][T25809] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 609.524546][T25809] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 609.524923][T25809] tipc: Resetting bearer [ 609.536413][T25807] syzkaller0: entered promiscuous mode [ 609.536434][T25807] syzkaller0: entered allmulticast mode [ 609.987545][T25837] ip_tables: iptables: counters copy to user failed while replacing table [ 610.074608][T25841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7821'. [ 610.100904][T25841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.124335][T25841] macvtap1: entered allmulticast mode [ 610.136744][T25841] bond0: (slave sit5): refused to change device type [ 610.758853][T25829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.106812][T25861] vlan0: entered promiscuous mode [ 611.106834][T25861] bridge0: entered promiscuous mode [ 611.322087][T25862] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 611.322156][T25862] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 611.322626][T25862] tipc: Resetting bearer [ 611.482345][T25869] syzkaller0: entered promiscuous mode [ 611.482379][T25869] syzkaller0: entered allmulticast mode [ 611.604811][T25874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7834'. [ 611.604833][T25874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7834'. [ 611.606819][T25874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7834'. [ 611.624133][T25874] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7834'. [ 611.975113][T25874] dummy0 (unregistering): left promiscuous mode [ 612.036033][T25887] bridge0: port 1(syz_tun) entered blocking state [ 612.036203][T25887] bridge0: port 1(syz_tun) entered disabled state [ 612.036356][T25887] syz_tun: entered allmulticast mode [ 612.064163][T25891] bridge0: port 1(syz_tun) entered blocking state [ 612.064299][T25891] bridge0: port 1(syz_tun) entered forwarding state [ 612.065063][T25891] bridge0: left promiscuous mode [ 612.067099][T25888] syzkaller0: entered promiscuous mode [ 612.067118][T25888] syzkaller0: entered allmulticast mode [ 612.212973][T25900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7838'. [ 612.289817][T25904] syzkaller0: entered promiscuous mode [ 612.289840][T25904] syzkaller0: entered allmulticast mode [ 612.534593][T25918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7845'. [ 612.534620][T25918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7845'. [ 612.673586][T25922] netlink: 'syz.3.7847': attribute type 1 has an invalid length. [ 612.848643][T25922] bond11: entered promiscuous mode [ 612.849169][T25922] 8021q: adding VLAN 0 to HW filter on device bond11 [ 612.886903][T25925] macvtap1: entered allmulticast mode [ 612.902867][T25927] macvtap2: entered allmulticast mode [ 612.923319][T25930] bond11: (slave bridge8): making interface the new active one [ 612.923342][T25930] bridge8: entered promiscuous mode [ 612.946294][T25930] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 613.119262][T25935] syzkaller1: entered promiscuous mode [ 613.119287][T25935] syzkaller1: entered allmulticast mode [ 613.270156][T25938] syzkaller0: entered promiscuous mode [ 613.270190][T25938] syzkaller0: entered allmulticast mode [ 613.317013][T25938] tipc: Enabled bearer , priority 0 [ 613.331882][T25936] tipc: Resetting bearer [ 613.403493][T25936] tipc: Disabling bearer [ 614.349440][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 614.502156][T25970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 614.502177][T25970] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 614.815618][T25983] IPv6: sit5: Disabled Multicast RS [ 614.887097][T25987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7869'. [ 615.061243][T25993] macvlan2: entered promiscuous mode [ 615.061264][T25993] macvlan2: entered allmulticast mode [ 615.062197][T25993] bond16: entered promiscuous mode [ 615.062885][T25993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 615.065760][T25993] bond16: left promiscuous mode [ 615.119003][T25991] syzkaller0: entered promiscuous mode [ 615.119021][T25991] syzkaller0: entered allmulticast mode [ 616.515319][T26046] __nla_validate_parse: 5 callbacks suppressed [ 616.515341][T26046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7888'. [ 616.607834][T26049] tipc: Resetting bearer [ 616.832646][T26053] tipc: Resetting bearer [ 617.333921][T26078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7896'. [ 619.017286][T26031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.295553][T26091] tipc: Resetting bearer [ 619.305511][T26091] bridge0: port 1(syz_tun) entered disabled state [ 619.375928][T26091] syz_tun (unregistering): left allmulticast mode [ 619.375955][T26091] syz_tun (unregistering): left promiscuous mode [ 619.376053][T26091] bridge0: port 1(syz_tun) entered disabled state [ 619.413162][T26091] tipc: Disabling bearer [ 619.645059][T26108] netlink: 'syz.1.7907': attribute type 1 has an invalid length. [ 619.761859][T26110] bond15: (slave bridge13): Enslaving as a backup interface with an up link [ 619.782405][T26108] macvlan3: entered promiscuous mode [ 619.782419][T26108] macvlan3: entered allmulticast mode [ 619.783844][T26108] bond15: entered promiscuous mode [ 619.783862][T26108] bridge13: entered promiscuous mode [ 619.788077][T26108] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 619.789294][T26108] bond15: left promiscuous mode [ 619.789308][T26108] bridge13: left promiscuous mode [ 619.933790][T26118] syzkaller0: entered promiscuous mode [ 619.933813][T26118] syzkaller0: entered allmulticast mode [ 619.954970][T26120] block nbd0: Unsupported socket: should be TCP or UNIX. [ 620.588216][T26138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7918'. [ 620.588238][T26138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7918'. [ 620.727366][T26145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7921'. [ 620.727394][T26145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7921'. [ 620.879585][T26148] netlink: 'syz.3.7922': attribute type 1 has an invalid length. [ 621.072484][T26148] bond12: (slave bridge9): Enslaving as a backup interface with an up link [ 621.101455][T26148] macvlan6: entered promiscuous mode [ 621.101478][T26148] macvlan6: entered allmulticast mode [ 621.102294][T26148] bond12: entered promiscuous mode [ 621.102314][T26148] bridge9: entered promiscuous mode [ 621.104172][T26148] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 621.105964][T26148] bond12: left promiscuous mode [ 621.105981][T26148] bridge9: left promiscuous mode [ 621.199988][T26159] tipc: Resetting bearer [ 621.273546][T26162] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 621.378430][T26167] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 623.076710][T26218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7946'. [ 623.450624][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7949'. [ 623.450650][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7949'. [ 623.607064][T26223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7948'. [ 623.703861][T26231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7950'. [ 624.312415][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.398594][T26247] nbd1: detected capacity change from 0 to 63 [ 624.399815][T26258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7959'. [ 624.411976][T26252] block nbd1: NBD_DISCONNECT [ 624.413080][T26252] block nbd1: Disconnected due to user request. [ 624.413099][T26252] block nbd1: shutting down sockets [ 624.437939][ T4946] blk_print_req_error: 50 callbacks suppressed [ 624.437975][ T4946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.438010][ T4946] buffer_io_error: 138 callbacks suppressed [ 624.438019][ T4946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 624.442223][ T4946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.442253][ T4946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 624.442364][ T4946] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.442386][ T4946] Buffer I/O error on dev nbd1, logical block 2, async page read [ 624.442473][ T4946] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.442501][ T4946] Buffer I/O error on dev nbd1, logical block 3, async page read [ 624.442603][ T4946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.442625][ T4946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 624.442744][ T4946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.442767][ T4946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 624.444402][ T4946] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.444429][ T4946] Buffer I/O error on dev nbd1, logical block 2, async page read [ 624.444522][ T4946] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.444545][ T4946] Buffer I/O error on dev nbd1, logical block 3, async page read [ 624.444644][ T4946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.444666][ T4946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 624.444749][ T4946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.444771][ T4946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 624.469881][T26255] ldm_validate_partition_table(): Disk read failed. [ 624.474982][T26255] Dev nbd1: unable to read RDB block 0 [ 624.478294][T26255] nbd1: unable to read partition table [ 624.525741][T26255] ldm_validate_partition_table(): Disk read failed. [ 624.535396][T26255] Dev nbd1: unable to read RDB block 0 [ 624.546046][T26255] nbd1: unable to read partition table [ 624.732810][ T5624] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 624.734104][ T5624] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 624.735348][ T5624] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 624.787565][T26262] Bluetooth: ISO socket layer initialized [ 625.597632][T26258] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 625.625014][T26276] netlink: 'syz.1.7964': attribute type 1 has an invalid length. [ 625.625037][T26276] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7964'. [ 625.625067][T26276] netlink: 'syz.1.7964': attribute type 1 has an invalid length. [ 625.625080][T26276] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.7964'. [ 625.628627][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7964'. [ 625.628701][T26276] block nbd1: Unsupported socket: should be TCP or UNIX. [ 625.887290][T26284] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.7966'. [ 626.184721][T26293] 8021q: adding VLAN 0 to HW filter on device bond14 [ 626.223375][T26293] bond14 (unregistering): Released all slaves [ 626.488322][T26313] syzkaller0: entered promiscuous mode [ 626.488350][T26313] syzkaller0: entered allmulticast mode [ 626.522204][T26315] openvswitch: netlink: EtherType 2 is less than min 600 [ 626.542174][T26313] syzkaller0: tun_net_xmit 1280 [ 626.550515][T26313] syzkaller0: create flow: hash 3509663080 index 0 [ 626.630828][T26320] netlink: 'syz.2.7979': attribute type 1 has an invalid length. [ 627.344051][T26350] netlink: 'syz.4.7988': attribute type 1 has an invalid length. [ 629.501872][T26320] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 629.502406][T26321] veth0_to_bond: left promiscuous mode [ 629.507101][T26350] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 629.507404][T26347] smc: net device lo applied user defined pnetid SYZ0 [ 629.541933][T26312] syzkaller0 (unregistered): delete flow: hash 3509663080 index 0 [ 630.036893][T26384] netlink: 'syz.0.7999': attribute type 3 has an invalid length. [ 630.036917][T26384] __nla_validate_parse: 3 callbacks suppressed [ 630.036930][T26384] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.7999'. [ 630.137424][T26389] ipvlan2: entered promiscuous mode [ 630.145108][T26389] team0: Device ipvlan2 failed to register rx_handler [ 630.738533][T26411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8007'. [ 630.878121][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8007'. [ 630.878145][T26411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8007'. [ 630.962576][T26411] veth23: entered allmulticast mode [ 630.968831][T26411] bond13: (slave veth23): Enslaving as an active interface with an up link [ 631.442215][T26428] netlink: 'syz.4.8012': attribute type 1 has an invalid length. [ 631.630425][T26428] bridge18: entered promiscuous mode [ 631.635157][T26428] bond12: (slave bridge18): making interface the new active one [ 631.635635][T26428] bond12: (slave bridge18): Enslaving as an active interface with an up link [ 631.637488][T26433] bond12: option fail_over_mac: unable to set because the bond device has slaves [ 631.963262][T26448] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8016'. [ 631.971879][T26446] tipc: Enabled bearer , priority 0 [ 631.983142][T26442] syzkaller0: entered promiscuous mode [ 631.983178][T26442] syzkaller0: entered allmulticast mode [ 632.002024][T26448] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8016'. [ 632.064441][T26442] tipc: Resetting bearer [ 632.095587][T26441] tipc: Resetting bearer [ 632.181053][T26441] tipc: Disabling bearer [ 632.195141][T26454] syzkaller0: entered promiscuous mode [ 632.195162][T26454] syzkaller0: entered allmulticast mode [ 632.273296][T26460] xt_ipcomp: unknown flags 1D [ 632.388968][T26453] tipc: Enabling of bearer rejected, already enabled [ 632.853692][T26472] netlink: 'syz.2.8024': attribute type 1 has an invalid length. [ 632.873915][T26476] netlink: 'syz.0.8027': attribute type 1 has an invalid length. [ 632.911920][T26472] bond14: entered promiscuous mode [ 632.912337][T26472] 8021q: adding VLAN 0 to HW filter on device bond14 [ 632.980687][T26476] 8021q: adding VLAN 0 to HW filter on device bond17 [ 633.018312][T26484] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 633.035066][T26473] syzkaller0: entered promiscuous mode [ 633.035089][T26473] syzkaller0: entered allmulticast mode [ 633.068665][T26472] bond14: (slave bridge11): making interface the new active one [ 633.068692][T26472] bridge11: entered promiscuous mode [ 633.086490][T26472] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 633.215521][T26491] ip_tables: iptables: counters copy to user failed while replacing table [ 633.345378][T26497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8032'. [ 634.302620][T26525] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 634.402127][T26525] syzkaller0: entered promiscuous mode [ 634.402149][T26525] syzkaller0: entered allmulticast mode [ 634.554639][T26526] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 634.637805][T26546] netlink: 'syz.3.8042': attribute type 1 has an invalid length. [ 634.643006][T26544] netlink: 'syz.2.8041': attribute type 83 has an invalid length. [ 634.767853][T26548] bond14: entered promiscuous mode [ 634.767896][T26548] bond14: entered allmulticast mode [ 634.797898][T26548] 8021q: adding VLAN 0 to HW filter on device bond14 [ 634.948128][T26546] bridge11: entered promiscuous mode [ 634.948307][T26546] bridge11: entered allmulticast mode [ 634.951223][T26546] bond14: (slave bridge11): Enslaving as a backup interface with an up link [ 635.029616][ T61] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 635.054013][T26548] bridge12: entered promiscuous mode [ 635.054188][T26548] bridge12: entered allmulticast mode [ 635.088304][T26548] bond14: (slave bridge12): Enslaving as a backup interface with a down link [ 635.141272][ T1474] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 635.183323][T26548] bridge13: entered promiscuous mode [ 635.183508][T26548] bridge13: entered allmulticast mode [ 635.184264][T26548] bond14: (slave bridge13): Enslaving as a backup interface with a down link [ 636.289732][ T61] nci: nci_rx_work: unknown MT 0x6 [ 636.509899][T23907] Bluetooth: hci3: command 0x0406 tx timeout [ 636.537923][T26617] tipc: Resetting bearer [ 636.668207][T26622] syzkaller0: entered promiscuous mode [ 636.668221][T26622] syzkaller0: entered allmulticast mode [ 636.734605][T26628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8063'. [ 636.864162][T26635] netlink: 'syz.0.8066': attribute type 1 has an invalid length. [ 636.941545][T26635] bridge11: entered promiscuous mode [ 636.941567][T26635] bridge11: entered allmulticast mode [ 636.960667][T26635] bond18: (slave bridge11): making interface the new active one [ 636.968418][T26635] bond18: (slave bridge11): Enslaving as an active interface with an up link [ 636.998696][T26639] TC_ACT_REPEAT abuse ? [ 637.271250][T26647] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 637.271640][T26647] tipc: Resetting bearer [ 637.276732][T26647] tipc: Resetting bearer [ 637.358058][T26649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8071'. [ 638.091354][T26668] netlink: 'syz.1.8078': attribute type 1 has an invalid length. [ 638.115993][T26668] 8021q: adding VLAN 0 to HW filter on device bond16 [ 638.138516][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8078'. [ 638.185828][T26668] bond16: (slave bridge14): making interface the new active one [ 638.186993][T26668] bond16: (slave bridge14): Enslaving as an active interface with an up link [ 638.974117][T26689] syzkaller0: entered promiscuous mode [ 638.974141][T26689] syzkaller0: entered allmulticast mode [ 639.147565][T26598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.265236][T26698] syzkaller0: entered promiscuous mode [ 639.265261][T26698] syzkaller0: entered allmulticast mode [ 639.305238][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8088'. [ 639.396365][T26700] bond15: entered promiscuous mode [ 639.396390][T26700] bond15: entered allmulticast mode [ 639.436374][T26705] syzkaller0: entered promiscuous mode [ 639.436396][T26705] syzkaller0: entered allmulticast mode [ 639.644634][T26714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8092'. [ 639.644658][T26714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8092'. [ 639.838385][T26724] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 639.848043][T26724] tipc: Resetting bearer [ 640.015269][T26736] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.8100'. [ 640.018267][T26736] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.8100'. [ 641.171295][T26773] syzkaller0: entered promiscuous mode [ 641.171318][T26773] syzkaller0: entered allmulticast mode [ 641.396075][T26777] syzkaller0: entered promiscuous mode [ 641.396095][T26777] syzkaller0: entered allmulticast mode [ 641.554257][T26782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8114'. [ 641.554285][T26782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8114'. [ 643.102638][T26739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.486647][T26814] 8021q: adding VLAN 0 to HW filter on device bond17 [ 643.492014][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8124'. [ 643.492034][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8124'. [ 643.509074][T26814] bond0: left promiscuous mode [ 643.525269][T26814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.529336][T26814] bond17: (slave bond0): making interface the new active one [ 643.536267][T26814] bond17: (slave bond0): Enslaving as an active interface with an up link [ 643.541357][T26814] netlink: 'syz.1.8124': attribute type 4 has an invalid length. [ 643.541377][T26814] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8124'. [ 643.550711][T26814] .`: renamed from bond0 (while UP) [ 644.138321][T26799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.953789][T26838] netlink: 'syz.4.8132': attribute type 1 has an invalid length. [ 645.000910][T26838] 8021q: adding VLAN 0 to HW filter on device bond14 [ 645.117551][T26838] bond14: (slave veth15): Enslaving as an active interface with a down link [ 645.167871][T26846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.189166][T26846] bond14: (slave batadv0): making interface the new active one [ 645.204545][T26846] batadv0: entered promiscuous mode [ 645.205079][T26846] bond14: (slave batadv0): Enslaving as an active interface with an up link [ 645.506800][T26838] bond14 (unregistering): (slave veth15): Releasing active interface [ 645.535271][T26838] bond14 (unregistering): (slave batadv0): Releasing active interface [ 645.535356][T26838] batadv0: left promiscuous mode [ 645.551342][T26838] bond14 (unregistering): Released all slaves [ 645.766331][T26858] netlink: 'syz.0.8139': attribute type 1 has an invalid length. [ 645.802528][T26858] 8021q: adding VLAN 0 to HW filter on device bond20 [ 645.859969][T26862] tipc: New replicast peer: 172.20.20.187 [ 645.863432][T26862] tipc: Enabled bearer , priority 10 [ 646.044473][T26867] bridge0: port 3() entered blocking state [ 646.044721][T26867] bridge0: port 3() entered listening state [ 646.045093][T26867] 8021q: adding VLAN 0 to HW filter on device  [ 646.048277][T26867] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.082545][T26867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.157526][T26867] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 646.302155][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.302284][ T50] bridge0: port 1(bridge_slave_0) entered listening state [ 646.307192][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.307318][ T50] bridge0: port 2(bridge_slave_1) entered listening state [ 646.344651][ T50] bridge0: port 4(team0) entered blocking state [ 646.344756][ T50] bridge0: port 4(team0) entered listening state [ 646.632093][T26876] syzkaller0: entered promiscuous mode [ 646.632118][T26876] syzkaller0: entered allmulticast mode [ 647.326579][T26911] ip_tables: iptables: counters copy to user failed while replacing table [ 649.735280][T26928] netlink: 'syz.0.8156': attribute type 8 has an invalid length. [ 650.278974][T26957] netlink: 'syz.0.8168': attribute type 1 has an invalid length. [ 650.415476][T26957] bond21: entered promiscuous mode [ 650.415985][T26957] 8021q: adding VLAN 0 to HW filter on device bond21 [ 650.424599][T26958] macvtap2: entered allmulticast mode [ 650.488209][T26957] bond21: (slave bridge12): making interface the new active one [ 650.488235][T26957] bridge12: entered promiscuous mode [ 650.498565][T26957] bond21: (slave bridge12): Enslaving as an active interface with an up link [ 650.757392][T26964] netlink: 'syz.1.8171': attribute type 1 has an invalid length. [ 651.146053][T26983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8178'. [ 651.357829][T26991] syzkaller0: entered promiscuous mode [ 651.357854][T26991] syzkaller0: entered allmulticast mode [ 651.793889][T27004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8186'. [ 651.995846][T27007] vlan8: entered allmulticast mode [ 651.995870][T27007] bridge13: entered allmulticast mode [ 654.422540][T27012] bridge13: port 1(erspan0) entered blocking state [ 654.422605][T27012] bridge13: port 1(erspan0) entered disabled state [ 654.422707][T27012] erspan0: entered allmulticast mode [ 654.423884][T27012] erspan0: entered promiscuous mode [ 654.424691][T27012] bridge13: port 1(erspan0) entered blocking state [ 654.424797][T27012] bridge13: port 1(erspan0) entered forwarding state [ 654.539735][T27005] syzkaller0: entered promiscuous mode [ 654.539759][T27005] syzkaller0: entered allmulticast mode [ 654.581898][T27021] sctp: [Deprecated]: syz.3.8191 (pid 27021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.581898][T27021] Use struct sctp_sack_info instead [ 654.790986][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8193'. [ 657.141791][T27025] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 657.296449][T27041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8196'. [ 657.354419][T27041] veth31: entered allmulticast mode [ 657.358548][T27041] bond16: (slave veth31): Enslaving as an active interface with an up link [ 657.376237][T27048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'. [ 657.545410][T27053] syzkaller0: entered promiscuous mode [ 657.545433][T27053] syzkaller0: entered allmulticast mode [ 657.581515][T27055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8199'. [ 657.887201][T27067] syzkaller0: entered promiscuous mode [ 657.887215][T27067] syzkaller0: entered allmulticast mode [ 658.455825][T27089] 0: reclassify loop, rule prio 0, protocol 03 [ 658.602821][T27092] syzkaller0: entered promiscuous mode [ 658.602844][T27092] syzkaller0: entered allmulticast mode [ 659.177371][T27098] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 659.511185][T27102] syzkaller0: entered promiscuous mode [ 659.511209][T27102] syzkaller0: entered allmulticast mode [ 659.682310][T27096] syzkaller0: entered promiscuous mode [ 659.682333][T27096] syzkaller0: entered allmulticast mode [ 659.726426][T27105] syzkaller0: entered promiscuous mode [ 659.726447][T27105] syzkaller0: entered allmulticast mode [ 659.929571][T27115] syzkaller0: entered promiscuous mode [ 659.929595][T27115] syzkaller0: entered allmulticast mode [ 660.288994][T27125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8227'. [ 660.336162][T27123] syzkaller0: entered promiscuous mode [ 660.336184][T27123] syzkaller0: entered allmulticast mode [ 660.346393][T27130] netlink: 'syz.4.8229': attribute type 39 has an invalid length. [ 660.391162][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8228'. [ 660.402389][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402411][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402424][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402437][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402450][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402464][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402476][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402490][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.402510][T27129] netlink: 'syz.2.8228': attribute type 1 has an invalid length. [ 660.876493][T27132] syzkaller0: entered promiscuous mode [ 660.876519][T27132] syzkaller0: entered allmulticast mode [ 660.935635][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8234'. [ 663.736104][T27161] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 663.860174][T27184] syzkaller0: entered promiscuous mode [ 663.860199][T27184] syzkaller0: entered allmulticast mode [ 667.262316][T27199] syzkaller0: entered promiscuous mode [ 667.262340][T27199] syzkaller0: entered allmulticast mode [ 667.472167][T24979] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.472202][T24979] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.492970][T27238] validate_nla: 26 callbacks suppressed [ 667.493069][T27238] netlink: 'syz.4.8250': attribute type 10 has an invalid length. [ 667.618384][T27242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8253'. [ 667.681399][T27244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8252'. [ 667.691563][T27249] bond10: option mode: unable to set because the bond device is up [ 667.787740][T27249] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 667.807563][T27249] bond10: (slave macvlan1): Enslaving as an active interface with an up link [ 667.848787][ T1234] veth0_to_bond: entered promiscuous mode [ 667.854935][ T1234] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 667.972265][T27265] netlink: 'syz.3.8259': attribute type 23 has an invalid length. [ 668.044927][T27262] syzkaller0: entered promiscuous mode [ 668.044950][T27262] syzkaller0: entered allmulticast mode [ 668.647221][T27279] netlink: 'syz.4.8266': attribute type 1 has an invalid length. [ 668.726526][T27279] bond14: (slave veth17): Enslaving as an active interface with a down link [ 668.780102][T27279] bond14: (slave veth19): Enslaving as an active interface with a down link [ 669.007150][T27290] netlink: 'syz.0.8270': attribute type 1 has an invalid length. [ 669.158173][T27279] veth21: entered allmulticast mode [ 669.182646][T27279] bond14: (slave veth21): Enslaving as an active interface with a down link [ 669.273514][T27290] 8021q: adding VLAN 0 to HW filter on device bond22 [ 669.437285][T27303] TC_ACT_REPEAT abuse ? [ 669.493993][T27305] tipc: Enabled bearer , priority 0 [ 669.494584][T27305] syzkaller0: entered promiscuous mode [ 669.494596][T27305] syzkaller0: entered allmulticast mode [ 669.518388][T27305] tipc: Resetting bearer [ 669.518695][T27309] syzkaller0: entered promiscuous mode [ 669.518715][T27309] syzkaller0: entered allmulticast mode [ 669.546836][T27304] tipc: Resetting bearer [ 669.584469][T27304] tipc: Disabling bearer [ 669.830976][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8279'. [ 669.905562][T27312] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 670.098409][T27323] syzkaller0: entered promiscuous mode [ 670.098432][T27323] syzkaller0: entered allmulticast mode [ 670.206056][T27342] syzkaller0: entered promiscuous mode [ 670.206070][T27342] syzkaller0: entered allmulticast mode [ 670.383827][T27344] syzkaller0: entered promiscuous mode [ 670.383858][T27344] syzkaller0: entered allmulticast mode [ 670.411700][T27346] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 670.817619][T27353] netlink: 'syz.3.8287': attribute type 12 has an invalid length. [ 670.817641][T27353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8287'. [ 670.817666][T27353] bond0: option primary_reselect: invalid value (22) [ 672.945650][T27325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.125661][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8295'. [ 673.272951][T27380] syzkaller0: entered promiscuous mode [ 673.272993][T27380] syzkaller0: entered allmulticast mode [ 673.288186][T27387] tc_dump_action: action bad kind [ 674.513561][T27425] syzkaller0: entered promiscuous mode [ 674.513585][T27425] syzkaller0: entered allmulticast mode [ 674.727909][T27429] syzkaller0: entered promiscuous mode [ 674.727932][T27429] syzkaller0: entered allmulticast mode [ 675.105632][T27438] netlink: 'syz.3.8314': attribute type 1 has an invalid length. [ 675.153281][T27438] 8021q: adding VLAN 0 to HW filter on device bond15 [ 675.170561][T27438] tipc: Resetting bearer [ 675.184350][T27438] tipc: Resetting bearer [ 675.186305][T27438] tipc: Resetting bearer [ 675.205665][T27438] bond15: (slave syz_tun): Enslaving as a backup interface with an up link [ 675.259576][ T12] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 675.399469][T27379] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 675.547730][T27467] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 675.548271][T27467] tipc: Resetting bearer [ 675.665573][T27471] tipc: Resetting bearer [ 675.666232][T27465] IPVS: Scheduler module ip_vs_sip not found [ 675.798172][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8324'. [ 675.798265][T27473] team0: left allmulticast mode [ 675.798282][T27473] team_slave_0: left allmulticast mode [ 675.798299][T27473] team_slave_1: left allmulticast mode [ 675.798474][T27473] team0: left promiscuous mode [ 675.798487][T27473] team_slave_0: left promiscuous mode [ 675.798764][T27473] team_slave_1: left promiscuous mode [ 675.799402][T27473] bridge0: port 4(team0) entered disabled state [ 675.859306][T27473] : left allmulticast mode [ 675.859925][T27473] bond_slave_0: left allmulticast mode [ 675.860017][T27473] syz_tun: left allmulticast mode [ 675.860134][T27473] : left promiscuous mode [ 675.860148][T27473] bond_slave_0: left promiscuous mode [ 675.860373][T27473] syz_tun: left promiscuous mode [ 675.860737][T27473] bridge0: port 3() entered disabled state [ 675.865089][T27473] bridge_slave_1: left allmulticast mode [ 675.865111][T27473] bridge_slave_1: left promiscuous mode [ 675.865305][T27473] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.868262][T27473] bridge_slave_0: left allmulticast mode [ 675.868284][T27473] bridge_slave_0: left promiscuous mode [ 675.868487][T27473] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.409243][T27482] batman_adv: batadv0: Adding interface: syzkaller0 [ 676.409261][T27482] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.444312][T27482] batman_adv: batadv0: Interface activated: syzkaller0 [ 677.136111][T27482] dummy0: left promiscuous mode [ 677.325957][T27482] ip6gre1: left promiscuous mode [ 677.344109][T27482] geneve1: entered promiscuous mode [ 677.344131][T27482] geneve1: entered allmulticast mode [ 677.344373][T27482] macvlan0: left promiscuous mode [ 677.391765][T27482] bond7: left promiscuous mode [ 677.391787][T27482] gre2: left promiscuous mode [ 677.447292][T27482] 8021q: adding VLAN 0 to HW filter on device bond10 [ 677.464177][T27482] geneve3: left promiscuous mode [ 677.469055][T27482] geneve4: left promiscuous mode [ 677.469079][T27482] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 677.502814][T27484] tipc: Resetting bearer [ 677.503260][T27484] tipc: Resetting bearer [ 677.540816][ T1474] bond15: (slave syz_tun): link status up again after 0 ms [ 677.559519][ T43] bond15: (slave syz_tun): link status up again after 0 ms [ 677.579461][ T43] bond15: (slave syz_tun): link status up again after 0 ms [ 677.580436][T27478] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 677.609492][ T43] bond15: (slave syz_tun): link status up again after 0 ms [ 677.632323][ T1474] bond15: (slave syz_tun): link status up again after 0 ms [ 677.632957][ T1474] bond14: (slave bridge11): link status up again after 0 ms [ 677.636186][T27478] batman_adv: batadv0: Removing interface: syzkaller0 [ 677.659891][ T1474] bond14: (slave bridge11): link status up again after 0 ms [ 677.848215][T27509] netlink: 550 bytes leftover after parsing attributes in process `syz.0.8333'. [ 678.024578][T27516] netlink: 'syz.4.8336': attribute type 16 has an invalid length. [ 678.178823][ T5952] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 678.248369][T27520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.267674][T27528] syzkaller0: entered promiscuous mode [ 678.267695][T27528] syzkaller0: entered allmulticast mode [ 678.505237][T27534] vlan0: entered promiscuous mode [ 678.505436][T27534] vlan0: entered allmulticast mode [ 678.505452][T27534] veth0_vlan: entered allmulticast mode [ 678.540349][T27536] netlink: 'syz.4.8342': attribute type 12 has an invalid length. [ 678.542694][T27536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8342'. [ 678.598932][T27512] syzkaller1: entered promiscuous mode [ 678.598964][T27512] syzkaller1: entered allmulticast mode [ 679.686129][T27562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8350'. [ 679.826164][T27565] can: request_module (can-proto-0) failed. [ 679.953471][ T1474] : (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 680.036427][T27577] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 680.036951][T27577] tipc: Resetting bearer [ 680.289681][ T5952] net_ratelimit: 49 callbacks suppressed [ 680.289702][ T5952] bond15: (slave syz_tun): failed to get link speed/duplex [ 680.289799][ T5952] bond14: (slave bridge11): failed to get link speed/duplex [ 680.402616][ T5952] bond14: (slave bridge11): failed to get link speed/duplex [ 680.402686][ T5952] bond15: (slave syz_tun): failed to get link speed/duplex [ 680.514097][ T5953] bond15: (slave syz_tun): failed to get link speed/duplex [ 680.514169][ T5953] bond14: (slave bridge11): failed to get link speed/duplex [ 680.622083][ T5952] bond14: (slave bridge11): failed to get link speed/duplex [ 680.623007][ T13] bond15: (slave syz_tun): failed to get link speed/duplex [ 680.731808][ T5952] bond15: (slave syz_tun): failed to get link speed/duplex [ 680.731873][ T5952] bond14: (slave bridge11): failed to get link speed/duplex [ 680.858076][T27602] syzkaller0: entered promiscuous mode [ 680.858098][T27602] syzkaller0: entered allmulticast mode [ 681.384860][T27608] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 681.387019][T27608] tipc: Resetting bearer [ 681.924216][T27624] batman_adv: batadv0: Adding interface: macvtap1 [ 681.924236][T27624] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 682.051566][T27630] tipc: Enabled bearer , priority 0 [ 682.052486][T27630] syzkaller0: entered promiscuous mode [ 682.052507][T27630] syzkaller0: entered allmulticast mode [ 682.055523][T27630] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 682.109925][T27630] tipc: Resetting bearer [ 682.112702][T27629] tipc: Resetting bearer [ 682.133305][T27629] tipc: Disabling bearer [ 682.650649][T27647] syzkaller0: entered promiscuous mode [ 682.650673][T27647] syzkaller0: entered allmulticast mode [ 682.798895][T27649] syzkaller0: entered promiscuous mode [ 682.798918][T27649] syzkaller0: entered allmulticast mode [ 683.060396][T27660] bridge13: port 1(erspan0) entered disabled state [ 683.200394][T27660] tipc: Resetting bearer [ 683.630519][T23907] Bluetooth: hci3: command 0x0406 tx timeout [ 683.653923][T27682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8384'. [ 688.101562][T24977] net_ratelimit: 37 callbacks suppressed [ 688.101582][T24977] bond14: (slave bridge11): failed to get link speed/duplex [ 688.101704][T24977] bond15: (slave syz_tun): failed to get link speed/duplex [ 688.209905][ T5953] bond15: (slave syz_tun): failed to get link speed/duplex [ 688.210162][ T5953] bond14: (slave bridge11): failed to get link speed/duplex [ 688.351252][T27718] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8395'. [ 688.417371][T27723] syzkaller0: entered promiscuous mode [ 688.417393][T27723] syzkaller0: entered allmulticast mode [ 688.427750][T27722] syzkaller0: entered promiscuous mode [ 688.427772][T27722] syzkaller0: entered allmulticast mode [ 688.669785][ T13] bond15: (slave syz_tun): failed to get link speed/duplex [ 688.669827][ T13] bond14: (slave bridge11): failed to get link speed/duplex [ 688.790759][T27733] netlink: 'syz.2.8401': attribute type 10 has an invalid length. [ 688.922612][T27737] netlink: 'syz.2.8401': attribute type 10 has an invalid length. [ 689.974470][T27733] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 689.978303][T27733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.996322][T27733] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 689.997693][T27733] team0: Port device netdevsim1 added [ 689.997969][T27737] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 690.026709][T27737] team0: Port device netdevsim1 removed [ 690.032926][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.037198][T27737] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 690.037911][T27737] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 690.070062][T24980] bond14: (slave bridge11): failed to get link speed/duplex [ 690.070108][ T5952] bond15: (slave syz_tun): failed to get link speed/duplex [ 690.150073][T27751] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 690.150591][T27751] tipc: Resetting bearer [ 690.179719][ T5953] bond15: (slave syz_tun): failed to get link speed/duplex [ 690.179798][ T5953] bond14: (slave bridge11): failed to get link speed/duplex [ 690.237380][T27753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8408'. [ 690.237411][T27753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8408'. [ 690.258627][T27753] syzkaller0: entered promiscuous mode [ 690.258648][T27753] syzkaller0: entered allmulticast mode [ 690.354637][T27757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8409'. [ 690.381351][T27759] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 690.381914][T27759] tipc: Resetting bearer [ 691.563058][T27800] syzkaller0: entered promiscuous mode [ 691.563083][T27800] syzkaller0: entered allmulticast mode [ 691.567763][T27808] tipc: Resetting bearer [ 691.578216][T27787] syzkaller0: entered promiscuous mode [ 691.578239][T27787] syzkaller0: entered allmulticast mode [ 691.752751][T27788] tipc: Enabled bearer , priority 0 [ 691.754220][T27781] tipc: Resetting bearer [ 691.760419][T27781] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 692.022268][T27800] tipc: Resetting bearer [ 692.037875][T27786] tipc: Resetting bearer [ 692.078141][T27786] tipc: Disabling bearer [ 692.299182][T27781] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 692.379134][T27834] syzkaller0: entered promiscuous mode [ 692.379159][T27834] syzkaller0: entered allmulticast mode [ 692.407488][T27836] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 692.509427][T23907] Bluetooth: hci3: command 0x0406 tx timeout [ 692.773246][T27847] syzkaller0: entered promiscuous mode [ 692.773269][T27847] syzkaller0: entered allmulticast mode [ 692.776100][T27856] tipc: Enabled bearer , priority 0 [ 692.910493][T27847] tipc: Resetting bearer [ 692.915354][T27846] tipc: Resetting bearer [ 693.029230][T27846] tipc: Disabling bearer [ 693.169969][ T12] net_ratelimit: 13 callbacks suppressed [ 693.169990][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 693.170027][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 693.279483][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 693.279523][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 693.330344][T27868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.393707][ T43] bond15: (slave syz_tun): failed to get link speed/duplex [ 693.393748][ T43] bond14: (slave bridge11): failed to get link speed/duplex [ 693.417493][T27887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.501051][ T43] bond14: (slave bridge11): failed to get link speed/duplex [ 693.501092][ T43] bond15: (slave syz_tun): failed to get link speed/duplex [ 693.619734][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 694.077337][T27919] netlink: 'syz.3.8440': attribute type 1 has an invalid length. [ 694.118060][T27919] veth29: entered allmulticast mode [ 694.126089][T27919] bond16: (slave veth29): Enslaving as an active interface with a down link [ 694.167326][T27919] bond9: (slave veth0_to_bond): Releasing active interface [ 694.209921][T27919] bond16: (slave veth0_to_bond): making interface the new active one [ 694.218058][T27919] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 694.299066][T27919] macvlan6: entered promiscuous mode [ 694.299089][T27919] macvlan6: entered allmulticast mode [ 694.312086][T27919] bond16: entered promiscuous mode [ 694.312108][T27919] veth0_to_bond: entered promiscuous mode [ 694.313020][T27919] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 694.351350][T27919] bond16: (slave macvlan6): the slave hw address is in use by the bond; giving it the hw address of veth29 [ 694.375178][T27919] bond16: left promiscuous mode [ 694.375200][T27919] veth0_to_bond: left promiscuous mode [ 694.549722][T27924] syzkaller0: entered promiscuous mode [ 694.549746][T27924] syzkaller0: entered allmulticast mode [ 694.621186][T27941] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 694.990141][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 695.144609][T27957] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 695.166244][T27957] tipc: Enabling of bearer rejected, already enabled [ 695.195783][T27957] tipc: Resetting bearer [ 695.335452][T27962] netlink: 'syz.1.8449': attribute type 18 has an invalid length. [ 695.437208][T27964] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 695.452402][T27966] tipc: Enabled bearer , priority 0 [ 695.453740][T27966] syzkaller0: entered promiscuous mode [ 695.453762][T27966] syzkaller0: entered allmulticast mode [ 695.456550][T27966] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 695.533774][T27966] tipc: Resetting bearer [ 695.536121][T27965] tipc: Resetting bearer [ 695.605345][T27965] tipc: Disabling bearer [ 696.152774][ T5624] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 696.155047][ T5624] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 696.155143][ T5624] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 697.352106][T28022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.420986][T28032] syzkaller0: entered promiscuous mode [ 697.421010][T28032] syzkaller0: entered allmulticast mode [ 697.721405][T28036] syzkaller0: entered promiscuous mode [ 697.721428][T28036] syzkaller0: entered allmulticast mode [ 697.894265][T28042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8464'. [ 698.061768][T28038] syzkaller0: entered promiscuous mode [ 698.061794][T28038] syzkaller0: entered allmulticast mode [ 698.093086][T28044] syzkaller0: entered promiscuous mode [ 698.093108][T28044] syzkaller0: entered allmulticast mode [ 698.110543][T28044] tipc: Enabled bearer , priority 0 [ 698.125348][T28047] tipc: Resetting bearer [ 698.187115][T28047] tipc: Disabling bearer [ 700.992483][T28053] syzkaller0: entered promiscuous mode [ 700.992506][T28053] syzkaller0: entered allmulticast mode [ 701.126635][ T13] net_ratelimit: 72 callbacks suppressed [ 701.126657][ T13] bond15: (slave syz_tun): failed to get link speed/duplex [ 701.126695][ T13] bond14: (slave bridge11): failed to get link speed/duplex [ 701.167535][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167560][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167573][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167585][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167598][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167610][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167622][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167642][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167655][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167667][T28086] tc action pedit unable to extract header offset for header type (0x5) [ 701.167692][T28086] 0: reclassify loop, rule prio 0, protocol 800 [ 701.349497][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 701.349539][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 701.434828][ T31] audit: type=1804 audit(1790949828.922:18): pid=28092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8474" name="/newroot/1749/cgroup.controllers" dev="tmpfs" ino=8923 res=1 errno=0 [ 701.434880][ T31] audit: type=1800 audit(1790949828.922:19): pid=28092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8474" name="cgroup.controllers" dev="tmpfs" ino=8923 res=0 errno=0 [ 701.455511][T28094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8475'. [ 701.519535][ T5952] bond15: (slave syz_tun): failed to get link speed/duplex [ 701.529137][T28101] vlan0: entered allmulticast mode [ 701.529159][T28101] bridge19: entered allmulticast mode [ 701.556217][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 701.577451][T28096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8476'. [ 701.577498][T28096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8476'. [ 701.596967][T28103] syzkaller0: entered promiscuous mode [ 701.596988][T28103] syzkaller0: entered allmulticast mode [ 701.605213][T28094] bridge19: port 1(erspan0) entered blocking state [ 701.605314][T28094] bridge19: port 1(erspan0) entered disabled state [ 701.605472][T28094] erspan0: entered allmulticast mode [ 701.612866][T28094] erspan0: entered promiscuous mode [ 701.670742][T28096] bridge0: entered promiscuous mode [ 701.670765][T28096] bridge0: entered allmulticast mode [ 701.890397][ T43] bond15: (slave syz_tun): failed to get link speed/duplex [ 701.892187][ T13] bond14: (slave bridge11): failed to get link speed/duplex [ 702.004154][ T43] bond14: (slave bridge11): failed to get link speed/duplex [ 702.965218][T28146] xt_hashlimit: size too large, truncated to 1048576 [ 702.966263][T28148] netlink: 'syz.3.8490': attribute type 8 has an invalid length. [ 702.974765][T28145] syzkaller0: entered promiscuous mode [ 702.974784][T28145] syzkaller0: entered allmulticast mode [ 702.997527][T28145] tipc: Enabled bearer , priority 0 [ 703.013968][T28148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8490'. [ 703.052227][T28148] veth31: entered allmulticast mode [ 703.057587][T28145] tipc: Resetting bearer [ 703.072124][T28143] tipc: Resetting bearer [ 703.144603][T28143] tipc: Disabling bearer [ 703.240869][T28152] syzkaller0: entered promiscuous mode [ 703.240891][T28152] syzkaller0: entered allmulticast mode [ 703.258022][T28152] tipc: Enabled bearer , priority 0 [ 703.288540][T28152] tipc: Resetting bearer [ 703.296464][T28151] tipc: Resetting bearer [ 703.398934][T28151] tipc: Disabling bearer [ 703.755861][T28170] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8495'. [ 703.978525][T28174] netlink: 'syz.0.8497': attribute type 1 has an invalid length. [ 704.043824][T28174] 8021q: adding VLAN 0 to HW filter on device bond23 [ 704.111684][T15153] page_pool_release_retry() stalled pool shutdown: id 371, 1 inflight 60 sec [ 704.113095][T28178] netlink: 'syz.3.8499': attribute type 1 has an invalid length. [ 704.118808][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8497'. [ 704.136836][T28178] bond17: entered promiscuous mode [ 704.137209][T28178] 8021q: adding VLAN 0 to HW filter on device bond17 [ 704.163748][T28178] bond17: (slave bridge14): making interface the new active one [ 704.163771][T28178] bridge14: entered promiscuous mode [ 704.165011][T28178] bond17: (slave bridge14): Enslaving as an active interface with an up link [ 704.240347][T28174] bond23: (slave bridge0): making interface the new active one [ 704.242098][T28174] bond23: (slave bridge0): Enslaving as an active interface with an up link [ 704.256302][T28178] ipvlan3: entered allmulticast mode [ 704.256322][T28178] bond17: entered allmulticast mode [ 704.256335][T28178] bridge14: entered allmulticast mode [ 704.256800][T28178] bond17: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 704.256820][T28178] bond17: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 704.724851][T28196] syzkaller0: entered promiscuous mode [ 704.724874][T28196] syzkaller0: entered allmulticast mode [ 704.795215][T28196] tipc: Enabled bearer , priority 0 [ 704.797905][T28195] tipc: Resetting bearer [ 704.878756][T28195] tipc: Disabling bearer [ 705.397607][T28213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8508'. [ 705.586484][T28221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8509'. [ 706.162366][ T13] net_ratelimit: 73 callbacks suppressed [ 706.162387][ T13] bond15: (slave syz_tun): failed to get link speed/duplex [ 706.162421][ T13] bond14: (slave bridge11): failed to get link speed/duplex [ 706.275362][T24980] bond14: (slave bridge11): failed to get link speed/duplex [ 706.275404][T24980] bond15: (slave syz_tun): failed to get link speed/duplex [ 706.380158][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 706.380200][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 706.489653][ T1474] bond14: (slave bridge11): failed to get link speed/duplex [ 706.489695][ T1474] bond15: (slave syz_tun): failed to get link speed/duplex [ 706.643222][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 706.643264][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 706.868109][T28240] netlink: 'syz.1.8514': attribute type 4 has an invalid length. [ 706.902782][T28240] netlink: 'syz.1.8514': attribute type 4 has an invalid length. [ 707.027016][T28246] netlink: 'syz.4.8517': attribute type 12 has an invalid length. [ 707.215568][T28252] tun0: tun_chr_ioctl cmd 1074025675 [ 707.215590][T28252] tun0: persist disabled [ 707.380633][T28262] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 707.531880][T28263] syzkaller0: entered promiscuous mode [ 707.531903][T28263] syzkaller0: entered allmulticast mode [ 707.852287][T28281] syzkaller0: entered promiscuous mode [ 707.852309][T28281] syzkaller0: entered allmulticast mode [ 707.885162][T28281] simple: /dev/video#_1 [ 707.885184][T28281] simple: /dev/video#_2 [ 707.885194][T28281] simple: /dev/video#_3 [ 707.885203][T28281] simple: /dev/video#_4 [ 707.885211][T28281] simple: /dev/video#_5 [ 707.885220][T28281] simple: /dev/video#_6 [ 707.885229][T28281] simple: /dev/video#_7 [ 707.885238][T28281] simple: /dev/video#_8 [ 707.885248][T28281] simple: /dev/video#_9 [ 707.885257][T28281] simple: /dev/video#_10 [ 707.885266][T28281] simple: /dev/video#_11 [ 707.885273][T28281] simple: /dev/video#_12 [ 707.885281][T28281] simple: /dev/video#_13 [ 707.885290][T28281] simple: /dev/video#_14 [ 707.885298][T28281] simple: /dev/video#_15 [ 707.885307][T28281] simple: /dev/video#_16 [ 707.885315][T28281] simple: /dev/video#_17 [ 707.885324][T28281] simple: /dev/video#_18 [ 707.885333][T28281] simple: /dev/video#_19 [ 707.885342][T28281] simple: /dev/video#_20 [ 707.885352][T28281] simple: /dev/video#_21 [ 707.885361][T28281] simple: /dev/video#_22 [ 707.885370][T28281] simple: /dev/video#_23 [ 707.885381][T28281] simple: /dev/video#_24 [ 707.885391][T28281] simple: /dev/video#_25 [ 707.885400][T28281] simple: /dev/video#_26 [ 707.885410][T28281] simple: /dev/video#_27 [ 707.885419][T28281] simple: /dev/video#_28 [ 707.885429][T28281] simple: /dev/video#_29 [ 707.885447][T28281] simple: /dev/video#_30 [ 707.885457][T28281] simple: /dev/video#_31 [ 707.885466][T28281] simple: /dev/video#_32 [ 708.516316][T28294] batman_adv: batadv0: Adding interface: syzkaller0 [ 708.516432][T28294] batman_adv: batadv0: Interface activated: syzkaller0 [ 708.734607][T28302] lo: left promiscuous mode [ 708.875540][T28302] tunl0: left promiscuous mode [ 708.876181][T28302] gre0: left promiscuous mode [ 708.886576][T28302] erspan0: left promiscuous mode [ 708.905433][T28302] ip_vti0: left promiscuous mode [ 708.906070][T28302] ip6_vti0: left promiscuous mode [ 708.906551][T28302] sit0: left promiscuous mode [ 708.912749][T28302] ip6tnl0: left promiscuous mode [ 708.933278][T28302] ip6gre0: left promiscuous mode [ 708.933810][T28302] syz_tun: left promiscuous mode [ 708.951353][T28302] ip6gretap0: left promiscuous mode [ 708.956617][T28302] bridge0: left promiscuous mode [ 708.959213][T28302] vcan0: left promiscuous mode [ 708.978254][T28302] bond0: left promiscuous mode [ 708.978281][T28302] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 708.997673][T28302] team0: left promiscuous mode [ 709.002195][T28302] nlmon0: left promiscuous mode [ 709.010061][T28302] batadv0: left promiscuous mode [ 709.010871][T28302] wg0: left promiscuous mode [ 709.011464][T28302] wg1: left promiscuous mode [ 709.012027][T28302] wg2: left promiscuous mode [ 709.012600][T28302] veth0_to_bridge: left promiscuous mode [ 709.014730][T28302] bridge_slave_0: left promiscuous mode [ 709.015449][T28302] veth1_to_bridge: left promiscuous mode [ 709.025752][T28302] bond_slave_0: left promiscuous mode [ 709.064454][T28302] veth1_to_bond: left promiscuous mode [ 709.065048][T28302] bond_slave_1: left promiscuous mode [ 709.070822][T28302] veth0_to_team: left promiscuous mode [ 709.071432][T28302] team_slave_0: left promiscuous mode [ 709.072000][T28302] veth1_to_team: left promiscuous mode [ 709.072555][T28302] team_slave_1: left promiscuous mode [ 709.082284][T28302] veth0_to_batadv: left promiscuous mode [ 709.083036][T28302] batadv_slave_0: left promiscuous mode [ 709.087823][T28302] xfrm0: left promiscuous mode [ 709.088774][T28302] veth0_to_hsr: left promiscuous mode [ 709.093945][T28302] hsr_slave_0: left promiscuous mode [ 709.097597][T28302] veth1_macvtap: left promiscuous mode [ 709.103911][T28302] macvtap0: left promiscuous mode [ 709.116657][T28302] veth1_macvtap: entered promiscuous mode [ 709.116861][T28302] macsec0: left promiscuous mode [ 709.170862][T28302] geneve0: left promiscuous mode [ 709.192170][T28302] geneve1: left promiscuous mode [ 709.194327][T28302] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 709.194676][T28302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 709.197151][T28302] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 709.226400][T28302] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 709.228899][T28302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 709.247274][T28302] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 709.255498][T28302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.269194][T28302] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 709.276751][T28302] vti60: left promiscuous mode [ 709.288795][T28302] vxlan0: left promiscuous mode [ 709.294662][T28302] vxlan1: left promiscuous mode [ 709.295552][T28302] macvlan2: left promiscuous mode [ 709.296619][T28302] macvlan3: left promiscuous mode [ 709.297450][T28302] gre1: left promiscuous mode [ 709.685078][T28293] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 709.752975][T28293] batman_adv: batadv0: Removing interface: syzkaller0 [ 709.793094][ T5952] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.793129][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.793285][ T5952] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.793310][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.793340][ T5952] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.793365][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.793396][ T5952] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.793419][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.052872][T28332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8544'. [ 710.481006][T28336] syzkaller0: entered promiscuous mode [ 710.481029][T28336] syzkaller0: entered allmulticast mode [ 710.691080][T28340] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8548'. [ 710.970829][T28358] tipc: Enabling of bearer rejected, failed to enable media [ 710.982712][T28365] syzkaller0: entered promiscuous mode [ 710.982732][T28365] syzkaller0: entered allmulticast mode [ 711.053113][T28369] netlink: 'syz.1.8556': attribute type 1 has an invalid length. [ 711.089618][T28372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8555'. [ 711.090549][T28372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8555'. [ 711.143740][T28369] bond0: (slave geneve3): making interface the new active one [ 711.144736][T28369] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 711.148087][T28369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8556'. [ 711.152368][T28366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8553'. [ 711.213659][T28369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.313703][ T12] net_ratelimit: 53 callbacks suppressed [ 711.313724][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 711.313756][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 711.321719][T27377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.322094][T27377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.322142][T27377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.322177][T27377] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.419547][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 711.419597][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 711.433718][T28379] syzkaller0: entered promiscuous mode [ 711.433740][T28379] syzkaller0: entered allmulticast mode [ 711.443584][T28379] 0: reclassify loop, rule prio 0, protocol 700 [ 711.444036][T28379] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8558'. [ 711.531778][T28361] bond15: (slave syz_tun): failed to get link speed/duplex [ 711.531821][T28361] bond14: (slave bridge11): failed to get link speed/duplex [ 711.639705][T27377] bond14: (slave bridge11): failed to get link speed/duplex [ 711.639746][T27377] bond15: (slave syz_tun): failed to get link speed/duplex [ 711.672693][T28393] tc_dump_action: action bad kind [ 711.749976][ T1483] bond15: (slave syz_tun): failed to get link speed/duplex [ 711.934321][T28398] syzkaller0: entered promiscuous mode [ 711.934343][T28398] syzkaller0: entered allmulticast mode [ 712.567533][T28406] netlink: 'syz.2.8570': attribute type 4 has an invalid length. [ 712.567556][T28406] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8570'. [ 712.708722][T28412] netlink: 'syz.4.8568': attribute type 1 has an invalid length. [ 712.732899][T28410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8572'. [ 712.784954][T28420] xt_TCPMSS: Only works on TCP SYN packets [ 712.806666][T28412] 8021q: adding VLAN 0 to HW filter on device bond15 [ 712.875292][T28419] bond15: (slave veth23): Enslaving as an active interface with a down link [ 712.893206][T28420] ip6gretap1: entered allmulticast mode [ 712.895036][T28420] batman_adv: batadv0: Adding interface: ip6gretap1 [ 712.895169][T28420] batman_adv: batadv0: Interface activated: ip6gretap1 [ 712.934021][T28419] netlink: 'syz.4.8568': attribute type 10 has an invalid length. [ 712.934043][T28419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8568'. [ 712.966946][T28412] bond15: (slave dummy0): making interface the new active one [ 712.974417][T28412] dummy0: entered promiscuous mode [ 712.988439][T28412] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 713.045614][T28419] bond15: (slave dummy0): Releasing active interface [ 713.199960][T28430] netlink: 'syz.4.8579': attribute type 1 has an invalid length. [ 713.298850][T28437] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20004 [ 713.415605][T28439] bond18: option lacp_active: invalid value (5) [ 713.427331][T28439] bond18 (unregistering): Released all slaves [ 713.516581][T28446] dummy0: left promiscuous mode [ 714.191581][T28463] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 714.210928][T28465] syzkaller0: entered promiscuous mode [ 714.210951][T28465] syzkaller0: entered allmulticast mode [ 714.562521][ T31] audit: type=1804 audit(1790949842.052:20): pid=28485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8594" name="/newroot/1549/cgroup.controllers" dev="tmpfs" ino=7912 res=1 errno=0 [ 714.562737][ T31] audit: type=1800 audit(1790949842.052:21): pid=28485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8594" name="cgroup.controllers" dev="tmpfs" ino=7912 res=0 errno=0 [ 714.853170][T28494] netlink: 'syz.0.8595': attribute type 2 has an invalid length. [ 714.951493][T28489] xt_IDLETIMER: label is empty or not nul-terminated [ 715.019997][T28503] netlink: 'syz.2.8598': attribute type 1 has an invalid length. [ 715.354017][T28503] __nla_validate_parse: 7 callbacks suppressed [ 715.354039][T28503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8598'. [ 715.367756][T28505] bond18: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 715.525502][T28496] udevd[28496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 715.536900][T28496] udevd[28496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 715.551341][T28510] veth1: entered promiscuous mode [ 715.558190][T28510] bond18: (slave veth1): Enslaving as a backup interface with a down link [ 715.598210][T28503] 8021q: adding VLAN 0 to HW filter on device bond18 [ 715.781161][T28526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8602'. [ 715.784898][T28518] syzkaller0: entered promiscuous mode [ 715.784921][T28518] syzkaller0: entered allmulticast mode [ 715.835599][T28521] tipc: Enabled bearer , priority 0 [ 715.838319][T28522] xt_CT: No such helper "snmp" [ 715.959455][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 718.568899][T28521] syzkaller0: entered promiscuous mode [ 718.568925][T28521] syzkaller0: entered allmulticast mode [ 718.583600][T28523] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 718.761327][T28537] bridge13: port 1(erspan0) entered disabled state [ 718.848818][T28551] netlink: 'syz.2.8609': attribute type 1 has an invalid length. [ 718.863473][T28549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8607'. [ 718.889068][T23907] block nbd1: Receive control failed (result -32) [ 719.089102][T28538] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 719.106101][T28541] tipc: Resetting bearer [ 719.110175][T28520] tipc: Resetting bearer [ 719.182416][T28520] tipc: Disabling bearer [ 719.276806][T28551] 8021q: adding VLAN 0 to HW filter on device bond19 [ 719.314513][T28554] 8021q: adding VLAN 0 to HW filter on device bond19 [ 719.314908][T28554] bond19: (slave gre6): The slave device specified does not support setting the MAC address [ 719.315720][T28554] bond19: (slave gre6): Error -95 calling set_mac_address [ 719.375100][T28555] gretap1: entered promiscuous mode [ 719.385659][T28555] bond19: (slave gretap1): making interface the new active one [ 719.386180][T28555] bond19: (slave gretap1): Enslaving as an active interface with an up link [ 719.392606][T28364] net_ratelimit: 46 callbacks suppressed [ 719.392622][T28364] bond14: (slave bridge11): failed to get link speed/duplex [ 719.392659][T28364] bond15: (slave syz_tun): failed to get link speed/duplex [ 719.522036][T28556] 8021q: adding VLAN 0 to HW filter on device bond20 [ 719.537873][T28556] bond19: (slave bond20): Enslaving as an active interface with a down link [ 719.613802][T28559] bond19 (unregistering): (slave gretap1): Releasing active interface [ 719.634307][T28559] bond19 (unregistering): (slave bond20): Releasing active interface [ 719.638716][T28559] bond19 (unregistering): Released all slaves [ 719.684838][T28575] netlink: 59 bytes leftover after parsing attributes in process `syz.1.8613'. [ 719.740916][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 719.755259][ T1195] bond15: (slave syz_tun): failed to get link speed/duplex [ 719.879432][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 719.899031][T24978] bond15: (slave syz_tun): failed to get link speed/duplex [ 720.005602][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005616][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005621][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005627][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005632][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005638][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005643][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005648][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005653][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005658][T28581] tc action pedit offset must be on 32 bit boundaries [ 720.005680][T28581] TC_ACT_REPEAT abuse ? [ 720.144521][T28590] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8617'. [ 720.150549][T28364] bond14: (slave bridge11): failed to get link speed/duplex [ 720.150589][T28364] bond15: (slave syz_tun): failed to get link speed/duplex [ 720.259662][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 720.759942][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 721.063161][T28623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8625'. [ 721.116350][T28623] bond18: option lacp_active: invalid value (5) [ 721.142545][T28623] bond18 (unregistering): Released all slaves [ 721.546866][T28637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8628'. [ 721.592567][T28647] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8630'. [ 722.581416][T28683] syzkaller0: entered promiscuous mode [ 722.581440][T28683] syzkaller0: entered allmulticast mode [ 722.735295][T28690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8644'. [ 722.735477][T28692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8646'. [ 722.903277][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8648'. [ 723.185975][T28709] syzkaller0: entered promiscuous mode [ 723.185999][T28709] syzkaller0: entered allmulticast mode [ 723.848017][T28733] lo: left promiscuous mode [ 723.848546][T28733] tunl0: left promiscuous mode [ 723.848819][T28731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8658'. [ 723.850413][T28733] gre0: left promiscuous mode [ 723.851314][T28733] gretap0: left promiscuous mode [ 723.852361][T28733] erspan0: left promiscuous mode [ 723.853372][T28733] ip_vti0: left promiscuous mode [ 723.854428][T28733] ip6_vti0: left promiscuous mode [ 723.855219][T28733] sit0: left promiscuous mode [ 723.857041][T28733] ip6tnl0: left promiscuous mode [ 723.857933][T28733] ip6gre0: left promiscuous mode [ 723.858870][T28733] ip6gretap0: left promiscuous mode [ 723.861844][T28733] vcan0: left promiscuous mode [ 723.865595][T28733] 8021q: adding VLAN 0 to HW filter on device .` [ 723.866377][T28733] team0: left promiscuous mode [ 723.867141][T28733] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.867870][T28733] nlmon0: left promiscuous mode [ 723.868876][T28733] batadv0: left promiscuous mode [ 723.870740][T28733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.871706][T28733] veth0: left promiscuous mode [ 723.872955][T28733] veth1: left promiscuous mode [ 723.873264][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 723.877276][T28733] wg0: left promiscuous mode [ 723.887817][T28733] wg1: left promiscuous mode [ 723.897912][T28733] wg2: left promiscuous mode [ 723.908937][T28733] veth0_to_bridge: left promiscuous mode [ 723.929959][T28733] bridge_slave_0: left promiscuous mode [ 723.963843][T28733] veth1_to_bridge: left promiscuous mode [ 723.964933][T28733] bridge_slave_1: left promiscuous mode [ 723.975264][T28733] veth0_to_bond: left promiscuous mode [ 723.997427][T28733] bond_slave_0: left promiscuous mode [ 723.997990][T28733] veth1_to_bond: left promiscuous mode [ 724.010177][T28733] bond_slave_1: left promiscuous mode [ 724.012682][T28733] veth0_to_team: left promiscuous mode [ 724.013836][T28733] team_slave_0: left promiscuous mode [ 724.017668][T28733] C: left promiscuous mode [ 724.018703][T28733] team_slave_1: left promiscuous mode [ 724.026091][T28733] veth0_to_batadv: left promiscuous mode [ 724.031770][T28733] batadv_slave_0: left promiscuous mode [ 724.037808][T28733] veth1_to_batadv: left promiscuous mode [ 724.038826][T28733] batadv_slave_1: left promiscuous mode [ 724.048957][T28733] xfrm0: left promiscuous mode [ 724.053185][T28733] veth0_to_hsr: left promiscuous mode [ 724.066928][T28733] veth1_to_hsr: left promiscuous mode [ 724.092478][T28733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 724.092502][T28733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.092554][T28733] hsr0: left promiscuous mode [ 724.102817][T28733] veth1_virt_wifi: left promiscuous mode [ 724.105074][T28733] veth0_virt_wifi: left promiscuous mode [ 724.115719][T28733] virt_wifi0: left promiscuous mode [ 724.229104][T28734] vlan1: entered allmulticast mode [ 724.229125][T28734] bridge20: entered allmulticast mode [ 727.026032][T28736] erspan0: left allmulticast mode [ 727.026050][T28736] erspan0: left promiscuous mode [ 727.026243][T28736] bridge19: port 1(erspan0) entered disabled state [ 727.036452][T28743] netlink: 'syz.3.8661': attribute type 1 has an invalid length. [ 727.036478][T28743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8661'. [ 727.036886][T28743] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 727.041021][T27377] net_ratelimit: 46 callbacks suppressed [ 727.041038][T27377] bond15: (slave syz_tun): failed to get link speed/duplex [ 727.041075][T27377] bond14: (slave bridge11): failed to get link speed/duplex [ 727.107169][T28750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8662'. [ 727.162197][ T1483] bond14: (slave bridge11): failed to get link speed/duplex [ 727.162239][ T1483] bond15: (slave syz_tun): failed to get link speed/duplex [ 727.235198][T28754] dvmrp1: entered allmulticast mode [ 727.259158][T28754] syz_tun: left allmulticast mode [ 727.259244][T28754] dvmrp1: left allmulticast mode [ 727.277023][T28760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8665'. [ 727.289138][T28759] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 727.297465][T28759] tipc: Enabling of bearer rejected, failed to enable media [ 727.298682][T28758] syzkaller0: entered promiscuous mode [ 727.298701][T28758] syzkaller0: entered allmulticast mode [ 727.329767][T28364] bond15: (slave syz_tun): failed to get link speed/duplex [ 727.329807][T28364] bond14: (slave bridge11): failed to get link speed/duplex [ 727.456258][T28767] netlink: 'syz.2.8667': attribute type 10 has an invalid length. [ 727.528637][T28767] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.551369][T28767] bond0: (slave team0): Enslaving as an active interface with an up link [ 727.568725][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 727.568764][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 727.672088][T27377] bond14: (slave bridge11): failed to get link speed/duplex [ 727.672155][T27377] bond15: (slave syz_tun): failed to get link speed/duplex [ 727.967717][T28788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8673'. [ 728.005346][T28788] vlan11: entered allmulticast mode [ 728.005363][T28788] bridge14: entered allmulticast mode [ 728.057761][T28790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8672'. [ 728.117904][T23907] Bluetooth: hci2: SCO packet too small [ 728.215716][T28799] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 728.384689][T28792] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8674'. [ 728.457291][T28797] udevd[28797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 728.478759][T28797] udevd[28797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 728.581121][T28814] xt_policy: output policy not valid in PREROUTING and INPUT [ 728.809760][T28820] syzkaller0: entered promiscuous mode [ 728.809782][T28820] syzkaller0: entered allmulticast mode [ 728.855542][T28822] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 728.910788][T28824] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8683'. [ 729.041804][T28827] syzkaller0: entered promiscuous mode [ 729.041827][T28827] syzkaller0: entered allmulticast mode [ 729.153387][T28835] netlink: 'syz.0.8684': attribute type 1 has an invalid length. [ 729.212173][T28835] 8021q: adding VLAN 0 to HW filter on device bond24 [ 729.345421][T28839] bond24: (slave veth31): Enslaving as an active interface with a down link [ 729.383281][T28829] netlink: 'syz.0.8684': attribute type 10 has an invalid length. [ 729.383304][T28829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8684'. [ 729.803850][T28859] syzkaller0: entered promiscuous mode [ 729.803872][T28859] syzkaller0: entered allmulticast mode [ 729.873294][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 730.085653][T28874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8699'. [ 730.099039][T28874] xt_hashlimit: size too large, truncated to 1048576 [ 730.511173][T28879] batadv0: entered promiscuous mode [ 730.512061][T28879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8700'. [ 730.512084][T28879] batadv0: left promiscuous mode [ 730.881860][T28886] 8021q: adding VLAN 0 to HW filter on device  [ 730.883637][T28886] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.886576][T28886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.943843][T28886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 730.944975][T28886] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 731.087335][T28886] netlink: 'syz.0.8703': attribute type 3 has an invalid length. [ 731.104542][T28886] netlink: 'syz.0.8703': attribute type 3 has an invalid length. [ 731.946933][T28919] pim6reg: entered allmulticast mode [ 731.954715][T28919] pim6reg: left allmulticast mode [ 732.181567][T23907] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 732.245326][ T1195] net_ratelimit: 72 callbacks suppressed [ 732.245347][ T1195] bond15: (slave syz_tun): failed to get link speed/duplex [ 732.245394][T24978] bond14: (slave bridge11): failed to get link speed/duplex [ 732.352727][ T1195] bond14: (slave bridge11): failed to get link speed/duplex [ 732.352770][ T1195] bond15: (slave syz_tun): failed to get link speed/duplex [ 732.461052][ T1195] bond15: (slave syz_tun): failed to get link speed/duplex [ 732.461095][ T1195] bond14: (slave bridge11): failed to get link speed/duplex [ 732.495874][T28936] tipc: Resetting bearer [ 732.520601][T28936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.521916][T28936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.523176][T28936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.526775][T28936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.527591][T28936] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 732.530124][T24978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.530216][T24978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.530257][T24978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.530288][T24978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.570036][T24978] bond14: (slave bridge11): failed to get link speed/duplex [ 732.570073][T24978] bond15: (slave syz_tun): link status up again after 0 ms [ 732.570092][T24978] bond15: (slave syz_tun): failed to get link speed/duplex [ 732.912920][T28947] Cannot find set identified by id 0 to match [ 732.955811][T28945] __nla_validate_parse: 6 callbacks suppressed [ 732.955832][T28945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8719'. [ 733.019957][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8722'. [ 733.098276][T28956] syzkaller0: entered promiscuous mode [ 733.098387][T28956] syzkaller0: entered allmulticast mode [ 733.332892][T28966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8727'. [ 733.334816][T28966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8727'. [ 733.710179][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 733.875360][T28982] siw: device registration error -23 [ 734.346024][T29003] netlink: 'syz.3.8739': attribute type 1 has an invalid length. [ 734.458504][T29003] 8021q: adding VLAN 0 to HW filter on device bond18 [ 734.707020][T29015] macvlan6: entered promiscuous mode [ 734.707044][T29015] macvlan6: entered allmulticast mode [ 734.990278][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 735.054217][T29024] syzkaller0: entered promiscuous mode [ 735.054242][T29024] syzkaller0: entered allmulticast mode [ 735.606812][T29037] bond19: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 735.676153][T29037] bond19 (unregistering): Released all slaves [ 736.989491][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 737.299547][T24978] net_ratelimit: 77 callbacks suppressed [ 737.299568][T24978] bond15: (slave syz_tun): failed to get link speed/duplex [ 737.324558][T24978] bond14: (slave bridge11): failed to get link speed/duplex [ 737.409730][T28361] bond15: (slave syz_tun): failed to get link speed/duplex [ 737.430525][T28361] bond14: (slave bridge11): failed to get link speed/duplex [ 737.519588][ T13] bond15: (slave syz_tun): failed to get link speed/duplex [ 737.540689][T28364] bond14: (slave bridge11): failed to get link speed/duplex [ 737.634430][ T1195] bond15: (slave syz_tun): failed to get link speed/duplex [ 737.650604][ T1195] bond14: (slave bridge11): failed to get link speed/duplex [ 737.739487][T27377] bond15: (slave syz_tun): failed to get link speed/duplex [ 737.764684][T28364] bond14: (slave bridge11): failed to get link speed/duplex [ 738.517372][T29146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8769'. [ 738.529073][T29141] tipc: Enabling of bearer rejected, failed to enable media [ 738.536569][T29146] bridge21: port 1(erspan0) entered blocking state [ 738.538220][T29146] bridge21: port 1(erspan0) entered disabled state [ 738.538397][T29146] erspan0: entered allmulticast mode [ 738.544069][T29146] erspan0: entered promiscuous mode [ 738.668589][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8771'. [ 738.720641][T29150] netlink: 388 bytes leftover after parsing attributes in process `syz.2.8771'. [ 738.722244][T29155] netlink: 'syz.4.8773': attribute type 1 has an invalid length. [ 738.770436][ T31] audit: type=1800 audit(1790949866.252:22): pid=29157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8772" name=CB dev="tmpfs" ino=9255 res=0 errno=0 [ 738.785603][T29155] 8021q: adding VLAN 0 to HW filter on device bond16 [ 738.882003][T29155] bond0: (slave veth0_to_bond): Releasing backup interface [ 738.915892][T29155] veth0_to_bond: left promiscuous mode [ 738.948139][T29155] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 738.996064][T29159] bridge22: entered promiscuous mode [ 739.027556][T29159] bond16: (slave bridge22): Enslaving as an active interface with an up link [ 739.196181][T29165] netlink: 'syz.1.8775': attribute type 16 has an invalid length. [ 739.196203][T29165] netlink: 'syz.1.8775': attribute type 17 has an invalid length. [ 739.253703][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8779'. [ 739.309952][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 739.732469][T29195] tipc: Can't bind to reserved service type 2 [ 739.803721][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8785'. [ 739.886963][T29200] netlink: 'syz.4.8781': attribute type 29 has an invalid length. [ 739.886988][T29200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8781'. [ 740.040032][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8786'. [ 740.040059][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8786'. [ 740.066601][T29182] netlink: 'syz.4.8781': attribute type 29 has an invalid length. [ 740.066623][T29182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8781'. [ 741.836838][T29266] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 742.079877][T29279] netlink: 'syz.0.8803': attribute type 3 has an invalid length. [ 742.080050][T29279] netlink: 'syz.0.8803': attribute type 3 has an invalid length. [ 742.131874][T29276] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8803'. [ 742.318617][T29290] syzkaller1: entered promiscuous mode [ 742.318640][T29290] syzkaller1: entered allmulticast mode [ 742.339883][ T12] net_ratelimit: 73 callbacks suppressed [ 742.339905][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 742.339975][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 742.450695][ T1195] bond15: (slave syz_tun): failed to get link speed/duplex [ 742.450764][ T1195] bond14: (slave bridge11): failed to get link speed/duplex [ 742.560040][T24978] bond14: (slave bridge11): failed to get link speed/duplex [ 742.560080][T24978] bond15: (slave syz_tun): failed to get link speed/duplex [ 742.673785][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 742.674529][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 742.781383][T27377] bond14: (slave bridge11): failed to get link speed/duplex [ 742.781861][T24978] bond15: (slave syz_tun): failed to get link speed/duplex [ 742.852954][T29300] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 742.882496][T29302] batman_adv: batadv0: Adding interface: macvtap3 [ 742.882515][T29302] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 742.928254][T29302] batman_adv: batadv0: Removing interface: macvtap3 [ 743.233389][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 743.423578][T29329] netlink: 'syz.4.8819': attribute type 1 has an invalid length. [ 743.557600][T29334] bond18: option arp_validate: invalid value (1048579) [ 743.570052][T29334] bond18 (unregistering): Released all slaves [ 743.611681][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8819'. [ 743.667188][T29324] bond18: option arp_validate: invalid value (1048579) [ 743.681823][T29324] bond18 (unregistering): Released all slaves [ 743.707509][T29329] bridge23: entered promiscuous mode [ 743.854819][T29317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.265302][T29355] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8825'. [ 744.344668][T29355] macsec1: entered promiscuous mode [ 744.344696][T29355] macsec1: entered allmulticast mode [ 744.662477][T29367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8824'. [ 744.829101][T29379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8830'. [ 744.840421][T29379] netlink: 'syz.4.8830': attribute type 1 has an invalid length. [ 744.863124][T29379] 8021q: adding VLAN 0 to HW filter on device bond18 [ 744.890370][T29379] bond18: (slave veth25): Enslaving as an active interface with a down link [ 744.960011][T29379] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 744.961885][T29379] bond18: (slave batadv1): making interface the new active one [ 744.962854][T29379] batadv1: entered promiscuous mode [ 744.963213][T29379] bond18: (slave batadv1): Enslaving as an active interface with an up link [ 744.972849][T29379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8830'. [ 745.210173][T29384] netlink: 165 bytes leftover after parsing attributes in process `syz.3.8832'. [ 745.211797][T29384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8832'. [ 745.253178][T29384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8832'. [ 745.261210][T29384] netlink: 'syz.3.8832': attribute type 3 has an invalid length. [ 745.382793][T29388] netlink: 'syz.4.8834': attribute type 21 has an invalid length. [ 745.436753][T29392] bond18: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 745.453035][T29392] bond18 (unregistering): Released all slaves [ 745.454171][T29394] netlink: 'syz.3.8835': attribute type 4 has an invalid length. [ 745.531587][T29399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8837'. [ 745.610370][T29399] [ 745.612734][T29399] ====================================================== [ 745.619817][T29399] WARNING: possible circular locking dependency detected [ 745.626912][T29399] syzkaller #0 Not tainted [ 745.631328][T29399] ------------------------------------------------------ [ 745.638394][T29399] syz.4.8837/29399 is trying to acquire lock: [ 745.644514][T29399] ffff888026422ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 745.654071][T29399] [ 745.654071][T29399] but task is already holding lock: [ 745.661440][T29399] ffff8880264225a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 745.671724][T29399] [ 745.671724][T29399] which lock already depends on the new lock. [ 745.671724][T29399] [ 745.682136][T29399] [ 745.682136][T29399] the existing dependency chain (in reverse order) is: [ 745.691156][T29399] [ 745.691156][T29399] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 745.699872][T29399] blk_alloc_queue+0x544/0x690 [ 745.705218][T29399] __blk_mq_alloc_disk+0x194/0x390 [ 745.710920][T29399] nbd_dev_add+0x494/0xb60 [ 745.716024][T29399] nbd_init+0x168/0x1f0 [ 745.720798][T29399] do_one_initcall+0x250/0x870 [ 745.726097][T29399] do_initcall_level+0x10a/0x1a0 [ 745.731651][T29399] do_initcalls+0x59/0xa0 [ 745.736517][T29399] kernel_init_freeable+0x29d/0x3e0 [ 745.742240][T29399] kernel_init+0x22/0x1d0 [ 745.747158][T29399] ret_from_fork+0x514/0xb70 [ 745.752310][T29399] ret_from_fork_asm+0x1a/0x30 [ 745.757617][T29399] [ 745.757617][T29399] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 745.764842][T29399] fs_reclaim_acquire+0x71/0x100 [ 745.770331][T29399] __kmalloc_cache_node_noprof+0x66/0x620 [ 745.776581][T29399] create_worker+0x112/0x7c0 [ 745.781738][T29399] workqueue_prepare_cpu+0xe4/0x170 [ 745.787456][T29399] cpuhp_invoke_callback+0x434/0x810 [ 745.793278][T29399] _cpu_up+0x2ce/0x5b0 [ 745.797881][T29399] cpu_up+0x1d2/0x220 [ 745.802385][T29399] cpuhp_bringup_mask+0xb2/0x1a0 [ 745.807909][T29399] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 745.814236][T29399] bringup_nonboot_cpus+0x17/0x30 [ 745.819775][T29399] smp_init+0x32/0x110 [ 745.824413][T29399] kernel_init_freeable+0x27f/0x3e0 [ 745.830143][T29399] kernel_init+0x22/0x1d0 [ 745.834996][T29399] ret_from_fork+0x514/0xb70 [ 745.840116][T29399] ret_from_fork_asm+0x1a/0x30 [ 745.845410][T29399] [ 745.845410][T29399] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 745.853140][T29399] cpus_read_lock+0x42/0x160 [ 745.858267][T29399] static_key_slow_inc+0x12/0x30 [ 745.863761][T29399] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 745.870010][T29399] nbd_genl_foreach_sock+0x265/0x450 [ 745.875829][T29399] nbd_genl_reconfigure+0xbbb/0x1040 [ 745.881672][T29399] genl_family_rcv_msg_doit+0x233/0x340 [ 745.887851][T29399] genl_rcv_msg+0x614/0x7a0 [ 745.892871][T29399] netlink_rcv_skb+0x226/0x4a0 [ 745.898192][T29399] genl_rcv+0x28/0x40 [ 745.902689][T29399] netlink_unicast+0x7bd/0x940 [ 745.908023][T29399] netlink_sendmsg+0x813/0xb40 [ 745.913299][T29399] sock_sendmsg_nosec+0x14e/0x190 [ 745.918896][T29399] ____sys_sendmsg+0x54e/0x850 [ 745.924206][T29399] ___sys_sendmsg+0x2a5/0x360 [ 745.929401][T29399] __x64_sys_sendmsg+0x1b1/0x290 [ 745.934862][T29399] do_syscall_64+0x166/0x520 [ 745.939999][T29399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.946499][T29399] [ 745.946499][T29399] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 745.954157][T29399] __mutex_lock+0x19d/0x1550 [ 745.959276][T29399] nbd_queue_rq+0x373/0xff0 [ 745.964290][T29399] blk_mq_dispatch_rq_list+0x499/0x1990 [ 745.970348][T29399] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 745.977261][T29399] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 745.983753][T29399] blk_mq_run_work_fn+0x16c/0x300 [ 745.989291][T29399] process_scheduled_works+0xc3d/0x1630 [ 745.995353][T29399] worker_thread+0xa47/0xfb0 [ 746.000453][T29399] kthread+0x38b/0x480 [ 746.005036][T29399] ret_from_fork+0x514/0xb70 [ 746.010154][T29399] ret_from_fork_asm+0x1a/0x30 [ 746.015445][T29399] [ 746.015445][T29399] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 746.022657][T29399] __mutex_lock+0x19d/0x1550 [ 746.027775][T29399] nbd_queue_rq+0xc1/0xff0 [ 746.032714][T29399] blk_mq_dispatch_rq_list+0x499/0x1990 [ 746.038777][T29399] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 746.045701][T29399] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 746.052192][T29399] blk_mq_run_work_fn+0x16c/0x300 [ 746.057729][T29399] process_scheduled_works+0xc3d/0x1630 [ 746.063782][T29399] worker_thread+0xa47/0xfb0 [ 746.068890][T29399] kthread+0x38b/0x480 [ 746.073463][T29399] ret_from_fork+0x514/0xb70 [ 746.078580][T29399] ret_from_fork_asm+0x1a/0x30 [ 746.083880][T29399] [ 746.083880][T29399] -> #1 (set->srcu){.+.+}-{0:0}: [ 746.090992][T29399] __synchronize_srcu+0xc9/0x2f0 [ 746.096468][T29399] elevator_switch+0x1e8/0x7b0 [ 746.101737][T29399] elevator_change+0x2fa/0x480 [ 746.107007][T29399] elevator_set_default+0x375/0x440 [ 746.112719][T29399] blk_register_queue+0x3f3/0x4e0 [ 746.118255][T29399] __add_disk+0x6b8/0xdb0 [ 746.123096][T29399] add_disk_fwnode+0x100/0x3a0 [ 746.128373][T29399] nbd_dev_add+0x733/0xb60 [ 746.133295][T29399] nbd_init+0x168/0x1f0 [ 746.137961][T29399] do_one_initcall+0x250/0x870 [ 746.143267][T29399] do_initcall_level+0x10a/0x1a0 [ 746.148723][T29399] do_initcalls+0x59/0xa0 [ 746.153568][T29399] kernel_init_freeable+0x29d/0x3e0 [ 746.159280][T29399] kernel_init+0x22/0x1d0 [ 746.164121][T29399] ret_from_fork+0x514/0xb70 [ 746.169224][T29399] ret_from_fork_asm+0x1a/0x30 [ 746.174501][T29399] [ 746.174501][T29399] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 746.182306][T29399] __lock_acquire+0x164c/0x2de0 [ 746.187664][T29399] lock_acquire+0x115/0x350 [ 746.192676][T29399] __mutex_lock+0x19d/0x1550 [ 746.197781][T29399] elevator_change+0x1af/0x480 [ 746.203051][T29399] elevator_set_none+0xb5/0x140 [ 746.208409][T29399] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 746.214728][T29399] nbd_start_device+0x189/0xb30 [ 746.220086][T29399] nbd_genl_connect+0x167d/0x1cd0 [ 746.225619][T29399] genl_family_rcv_msg_doit+0x233/0x340 [ 746.231676][T29399] genl_rcv_msg+0x614/0x7a0 [ 746.236687][T29399] netlink_rcv_skb+0x226/0x4a0 [ 746.241956][T29399] genl_rcv+0x28/0x40 [ 746.246450][T29399] netlink_unicast+0x7bd/0x940 [ 746.251729][T29399] netlink_sendmsg+0x813/0xb40 [ 746.256999][T29399] sock_sendmsg_nosec+0x14e/0x190 [ 746.262542][T29399] ____sys_sendmsg+0x54e/0x850 [ 746.267817][T29399] ___sys_sendmsg+0x2a5/0x360 [ 746.273011][T29399] __x64_sys_sendmsg+0x1b1/0x290 [ 746.278461][T29399] do_syscall_64+0x166/0x520 [ 746.283566][T29399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.289965][T29399] [ 746.289965][T29399] other info that might help us debug this: [ 746.289965][T29399] [ 746.300174][T29399] Chain exists of: [ 746.300174][T29399] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 746.300174][T29399] [ 746.313965][T29399] Possible unsafe locking scenario: [ 746.313965][T29399] [ 746.321440][T29399] CPU0 CPU1 [ 746.326822][T29399] ---- ---- [ 746.332185][T29399] lock(&q->q_usage_counter(io)#52); [ 746.337558][T29399] lock(fs_reclaim); [ 746.344048][T29399] lock(&q->q_usage_counter(io)#52); [ 746.351931][T29399] lock(&q->elevator_lock); [ 746.356536][T29399] [ 746.356536][T29399] *** DEADLOCK *** [ 746.356536][T29399] [ 746.364663][T29399] locks held by syz.4.8837/29399: 6, last CPU#1: [ 746.371037][T29399] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 746.379251][T29399] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 746.388208][T29399] #2: ffff8880273621c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 746.399600][T29399] #3: ffff8880273620d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 746.410559][T29399] #4: ffff8880264225a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 746.421166][T29399] #5: ffff8880264225d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 746.432040][T29399] [ 746.432040][T29399] stack backtrace: [ 746.437923][T29399] CPU: 1 UID: 0 PID: 29399 Comm: syz.4.8837 Not tainted syzkaller #0 PREEMPT(full) [ 746.447286][T29399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.457381][T29399] Call Trace: [ 746.460662][T29399] [ 746.463582][T29399] dump_stack_lvl+0xe8/0x150 [ 746.468172][T29399] print_circular_bug+0x2e2/0x300 [ 746.473194][T29399] check_noncircular+0x12f/0x150 [ 746.478132][T29399] __lock_acquire+0x164c/0x2de0 [ 746.482995][T29399] lock_acquire+0x115/0x350 [ 746.487494][T29399] ? elevator_change+0x1af/0x480 [ 746.492430][T29399] __mutex_lock+0x19d/0x1550 [ 746.497030][T29399] ? elevator_change+0x1af/0x480 [ 746.501974][T29399] ? rcu_is_watching+0x16/0xb0 [ 746.506757][T29399] ? elevator_change+0x1af/0x480 [ 746.511687][T29399] ? __pfx___mutex_lock+0x10/0x10 [ 746.516712][T29399] ? enable_work+0x17f/0x230 [ 746.521304][T29399] ? lockdep_hardirqs_on+0x7b/0x110 [ 746.526510][T29399] ? __cancel_work_sync+0xf8/0x110 [ 746.531630][T29399] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 746.537091][T29399] elevator_change+0x1af/0x480 [ 746.541856][T29399] elevator_set_none+0xb5/0x140 [ 746.546702][T29399] ? __pfx_elevator_set_none+0x10/0x10 [ 746.552155][T29399] ? xa_load+0x1db/0x210 [ 746.556387][T29399] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 746.562188][T29399] ? kernfs_add_one+0xfc/0x6f0 [ 746.567017][T29399] ? nbd_start_device+0x17d/0xb30 [ 746.572067][T29399] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 746.578318][T29399] ? sysfs_add_file_mode_ns+0x258/0x300 [ 746.583877][T29399] nbd_start_device+0x189/0xb30 [ 746.588735][T29399] ? device_create_file+0xf4/0x1b0 [ 746.593929][T29399] nbd_genl_connect+0x167d/0x1cd0 [ 746.598952][T29399] ? __pfx_nbd_genl_connect+0x10/0x10 [ 746.604323][T29399] ? rcu_is_watching+0x16/0xb0 [ 746.609085][T29399] ? __nla_parse+0x40/0x60 [ 746.613557][T29399] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 746.619884][T29399] genl_family_rcv_msg_doit+0x233/0x340 [ 746.625429][T29399] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 746.631521][T29399] ? __lock_acquire+0x747/0x2de0 [ 746.636450][T29399] genl_rcv_msg+0x614/0x7a0 [ 746.640951][T29399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.645977][T29399] ? __pfx_nbd_genl_connect+0x10/0x10 [ 746.651341][T29399] netlink_rcv_skb+0x226/0x4a0 [ 746.656094][T29399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.661110][T29399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.666385][T29399] ? down_read+0x2be/0x330 [ 746.670790][T29399] genl_rcv+0x28/0x40 [ 746.674765][T29399] netlink_unicast+0x7bd/0x940 [ 746.679528][T29399] netlink_sendmsg+0x813/0xb40 [ 746.684280][T29399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.689556][T29399] ? apparmor_socket_sendmsg+0x98/0x360 [ 746.695179][T29399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.700457][T29399] sock_sendmsg_nosec+0x14e/0x190 [ 746.705493][T29399] ____sys_sendmsg+0x54e/0x850 [ 746.710257][T29399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.715544][T29399] ? import_iovec+0x73/0xa0 [ 746.720047][T29399] ___sys_sendmsg+0x2a5/0x360 [ 746.724722][T29399] ? __lock_acquire+0x747/0x2de0 [ 746.729652][T29399] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.734850][T29399] ? futex_wait+0x2a2/0x390 [ 746.739361][T29399] ? __fget_files+0x2a/0x420 [ 746.743982][T29399] ? __fget_files+0x3a2/0x420 [ 746.748678][T29399] __x64_sys_sendmsg+0x1b1/0x290 [ 746.753631][T29399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.759101][T29399] do_syscall_64+0x166/0x520 [ 746.763697][T29399] ? trace_irq_disable+0x3b/0x140 [ 746.768713][T29399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.774776][T29399] ? clear_bhb_loop+0x70/0xc0 [ 746.779458][T29399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.785355][T29399] RIP: 0033:0x7fd7e0f9e159 [ 746.789762][T29399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.809359][T29399] RSP: 002b:00007fd7e1e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.817775][T29399] RAX: ffffffffffffffda RBX: 00007fd7e1226090 RCX: 00007fd7e0f9e159 [ 746.825736][T29399] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000008 [ 746.833693][T29399] RBP: 00007fd7e103506b R08: 0000000000000000 R09: 0000000000000000 [ 746.841651][T29399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.849606][T29399] R13: 00007fd7e1226128 R14: 00007fd7e1226090 R15: 00007ffd8eb3a068 [ 746.857598][T29399] [ 746.888380][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 746.991090][ T5624] block nbd3: Receive control failed (result -32) [ 746.991152][ T5624] block nbd3: Receive control failed (result -32) [ 747.420033][T27377] net_ratelimit: 50 callbacks suppressed [ 747.420050][T27377] bond15: (slave syz_tun): failed to get link speed/duplex [ 747.420075][T27377] bond14: (slave bridge11): failed to get link speed/duplex [ 747.529791][T27377] bond14: (slave bridge11): failed to get link speed/duplex [ 747.529830][T27377] bond15: (slave syz_tun): failed to get link speed/duplex [ 747.649772][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 747.649816][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 747.760024][ T12] bond14: (slave bridge11): failed to get link speed/duplex [ 747.760066][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 747.870717][ T1195] bond15: (slave syz_tun): failed to get link speed/duplex [ 747.870769][ T1195] bond14: (slave bridge11): failed to get link speed/duplex [ 752.430683][ T12] net_ratelimit: 80 callbacks suppressed [ 752.430705][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 752.452948][T27377] bond14: (slave bridge11): failed to get link speed/duplex [ 752.539462][ T1483] bond15: (slave syz_tun): failed to get link speed/duplex [ 752.559586][ T1483] bond14: (slave bridge11): failed to get link speed/duplex [ 752.649699][T28364] bond15: (slave syz_tun): failed to get link speed/duplex [ 752.670462][ T1483] bond14: (slave bridge11): failed to get link speed/duplex [ 752.759547][ T12] bond15: (slave syz_tun): failed to get link speed/duplex [ 752.789588][T28364] bond14: (slave bridge11): failed to get link speed/duplex [ 752.869824][T28364] bond15: (slave syz_tun): failed to get link speed/duplex [ 752.899518][ T1483] bond14: (slave bridge11): failed to get link speed/duplex