last executing test programs: 6.453510636s ago: executing program 2 (id=5366): socket$packet(0x11, 0x3, 0x300) 6.294499391s ago: executing program 2 (id=5369): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fb, 0x1}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x7fff, 0x0, 0x0, 0x5, 0xbe, 0xc000, 0x9, 0x6, 0x1, 0x9, 'syz1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0, 0xfffffffffffffffd], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0xcbd, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r5, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 5.561143814s ago: executing program 2 (id=5374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x15) r4 = epoll_create1(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r5], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) 5.454211141s ago: executing program 2 (id=5376): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) close(r1) r2 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000080), 0x0}, 0x20) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7810, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000006100)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bind$tipc(r2, 0x0, 0x0) 5.076337674s ago: executing program 2 (id=5380): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x4}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x410) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r6 = socket$unix(0x1, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x30, r7, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x30}}, 0xd5b4ea420496f25a) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r8, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0x9c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f00000001c0)={0x5, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r13, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000001080009000d0000", 0x23) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d, r12}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x2, 0x1, 0x1}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8, 0xfffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffff8b}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="08002abd7000fedbdf250200000008000400010000000800050007000000"], 0x24}, 0x1, 0x0, 0x0, 0x18}, 0x4004000) 4.633386333s ago: executing program 2 (id=5383): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x150, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000000806010100000000000000000200000000000000000800000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0000000ed0304002b25205de1bcf5bd5e7082aa6b1584b55872730684108c1b9c1da63459236f378bb32fc1634a44607d0d4ea28b2e80248e0a467cbc447ca7492f27c03dd60c8d7ee2a5683743b007ac0bb1ebb26e1ad2daf427911d6b357022b6d4f80c9f7e8f14be674bf7e0bafdf3b1a2c679e70e23ba20437e6c67988d3812da316504bb1ba067116be45a95673356168586f41e1ba08107f789762ab026c4f99473f2db33ad9c4057250bfa37727089fd2c1c456e429664e39ad06e4b7e9424f7432954e7bd2d6043bf8e416f9489a7a81fdec6eca22a08dc72000000"], 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x44005) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 3.165498039s ago: executing program 4 (id=5396): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4000000}, 0x10}, 0x94) 2.949424427s ago: executing program 4 (id=5399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e6400"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304ff0700"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x8000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.504563454s ago: executing program 0 (id=5402): socket(0x11, 0x3, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8930, &(0x7f0000000140)={'netdevsim0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r3) close(r4) 1.734703635s ago: executing program 4 (id=5405): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @union={0x1, 0x3, 0x0, 0x5, 0x0, 0xff, [{0x0, 0x3, 0x4000}, {0xd, 0x3, 0xf}, {0x6, 0x5, 0x200}]}, @volatile={0x6}, @float={0x0, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/19, 0x6f, 0x13, 0x1, 0xe94, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000010000febfa30000000000000703000030feffff720af0fff8ffffff79a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d00000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.621355321s ago: executing program 1 (id=5407): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x43}, @local, 0x1, "3c3f6db29d0d8f33a59b67c02d964c2fdd127c4180d47efa4c41671ac4bac700", 0xad, 0x9f, 0x7, 0x3ff}, 0x3c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000000)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f00000005c0)=0x20000, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80083, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 1.575392297s ago: executing program 4 (id=5408): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'netpci0\x00', 0x1000}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'pimreg\x00'}) pselect6(0x40, &(0x7f0000000000)={0x5e8, 0x100, 0x0, 0x9aa2, 0x5, 0xfffffffffffffff7, 0x6, 0x100}, &(0x7f0000000080)={0x9, 0x1, 0x5, 0x7, 0xfffffffffffeffff, 0x22, 0x8000, 0x1400000000}, &(0x7f00000000c0)={0xa, 0x3, 0x832, 0x7fff, 0x15b2ca9e, 0x9, 0x1, 0x10001}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x3]}, 0x8}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffffe}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x107}, 0x1c) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0, @ANYBLOB="0004b1540000000000100b00000008000300", @ANYRES32=0x0, @ANYRES64=r4], 0x1c}}, 0x20004c11) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.361499333s ago: executing program 0 (id=5410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.265302501s ago: executing program 3 (id=5411): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x406c810) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14098, 0x10400}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r8 = socket(0x2d, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000002c0)='hybla', 0x5) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000c6a6", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7}, &(0x7f0000000080), &(0x7f0000000a00)}, 0x20) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.18668904s ago: executing program 0 (id=5412): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYBLOB="4db3530edbefe6cec77673fa4a205b28982dcdb9164743d017d249cb8a4e8455fcab21aecdd69c73aaac68ed1d56b1e9", @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="54f8de9a84e48e4ab0d166a47a33c526955403d3ec40d3f37cd0f67741e28ded2660fcabe2eb929cf9fcec58e42048b1c92b9928623adec50f5fc10505ffd3435453d247643d9a3f54394752455f69f41305"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf0ffffff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.120448749s ago: executing program 1 (id=5413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000190001090000000020000000021800000002fd010400000008000100ac141400080005006401010008000400", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200d0000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018010000786c6c2500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000100)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000080)={0x40, 0x1, 0x2, 0x8001, 0x0}, &(0x7f00000000c0)=0x10) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x1, 0x2, 0x10001}, {0x7, 0xd9, 0x9, 0xfffffff7}, {0x84, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000140)={r11, 0x2}, &(0x7f0000000180)=0x8) 1.053217609s ago: executing program 3 (id=5414): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="fc9480fd00b47e17d19b25cb3a29cbf896e3f6d7f0465061986a23362aeed7624078000b9f510d", 0x27}, {&(0x7f0000000100)="6a69d62ba3ab97db9518a3c5c8d2ac8d5a593b0655290956dea9107065bcb64d820ac6f3952ce72242dcd8ce5a55628f6586e30b15a4904763e441f7ebdd08b59e47e2f6bc5c944729d750066c4f28b366c7fff453ae568969652380fd5bd84bad25cf25f6ded79b4a89f3f2860dc123c0e071658b0d74ac6a20d88af85c0096688d2cefce451e9da70784b99ab1742e28a125da4f77", 0x96}, {&(0x7f0000000200)="07e7becfd04b1c66e226b34964d35e284841c72f95baf954eaa5b8c66265e8ebb20fa9ab42c31450b6f0d2657f16", 0x2e}, {&(0x7f0000000240)="5c7ea76ed89f30f76aaa076411efea3553979fee0759985941b97eb8eb3acb383ba9b2ffc70582ade4a8e8dc7a0fc3e2f937b68ca697e1663c1c6e62b1b99cece5cbabaa43b98fc1cc28bede939b8c371a4ff893f472020cf495b5b8cf6f3063bba1fe5e1c8e8597705acd41421fe80a96fbd7e1a01352632be9f1bf124ecb7ab7fbea43121604ac47256502de93bc17fd64d2490c11e74a0b67df1373072f0195567580a410a6235e60c5", 0xab}, {&(0x7f0000000340)}, {&(0x7f0000000380)="21b1a8514913b37c6c6d0c6ec9f391a24a5bcdabe5aa03d42789e4200873793f1a14", 0x22}, {&(0x7f0000000400)="2850a0c386fcf9d5dc227962d9729b4b24236060b7197d50bac740046d7fa54932c3c736b1f65d24353c48e4ff3990dbd4649563181dacd3976f033a7595fbff0312d8ce58ce0ac41481f3b6a926eb8c472d82e84eb055ce63c4a8111859f39dd76a84c077fdc7777a8022af49e59c491baf337bf1b850f470656cf326bb0bfcbbfc687b430e42a236d3ac8eaef8c18cdd95fe47bcb24c4f6d31183ab8d0f9425ac0c13b53642438f7d851e75c6f4bc44a7c52034c323713596bccc41483da7c7fdad7ead0fddd73ac5fddc6377ed6666a22516191e96951b13f72fb132cce271b6d16f48dac1bc8bc3b477c761338b7d0", 0xf1}], 0x7, 0x0, 0x0, 0x60488c4}, 0x20000000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 951.872367ms ago: executing program 0 (id=5415): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x70bd29, 0x1000, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8885}, 0x0) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000040)={0xfd}) 600.133514ms ago: executing program 3 (id=5416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 597.067402ms ago: executing program 4 (id=5417): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xb, 0x70bd2b, 0x25dfdbfb, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xf45}, @TCA_CT_ACTION={0x6, 0x3, 0x2d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000800008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) getsockopt$WPAN_SECURITY(r8, 0x0, 0x1, 0x0, &(0x7f0000000140)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0x3ff) ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 557.50307ms ago: executing program 0 (id=5418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) unshare(0x20380) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028000000240fffffff80800014000000016080003400000000008000440ffffffff0900010073797a30000000000900020073797a32000000001400000011000100000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRESHEX=r0], 0x33) sendfile(r4, r3, 0x0, 0x10000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f00000002c0), 0x10000000000002ad, 0x4008005, 0x80) close(r7) socket$kcm(0x29, 0x2, 0x0) sendfile(r7, r6, 0x0, 0xf03a0005) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000400)=@caif=@dgm={0x25, 0x8, 0x2}, 0x80, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000a40)="5d0365bc0cffddcd22e6a2d0da46ccca1bbe05392a8ec7670960721838516816532abe2349aa6884c4fd26dd664a7ddf6b4ec7d76d040cda08a80da9f83aadb3ec9c8c121b341e43d5a993156892f4aff83b45b0e6ee792b23d8aa7ea0fde3cf2cfe0199edb46ef6b785c8ac5c36c416f3387b5480d0b5da840dfec3496925b2f1f478cdfa539434eeab6aaaa929d510dc798dab7af5b3f79d1255a0ba803bdf9eddcd013769d9b1730c13ebf75d6f7c400b063bbc51d73e2030e3cbb4f138d336877362e0a1e736eb6f1e454db36d04b4b969dbba4b23421ad81e081b1fa0b5fb34aa8fe21963e672", 0xe9}], 0x2}}], 0x1, 0x4008041) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES64, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xc800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) 493.388788ms ago: executing program 1 (id=5419): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="f73bdc0bc0dc418616cf4a2bd022", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 378.046182ms ago: executing program 1 (id=5420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt(r1, 0x9, 0x5a, &(0x7f0000000240)="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", 0x1000) 263.558771ms ago: executing program 3 (id=5421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$tipc(r1, &(0x7f0000001bc0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000080)="bd69771b6dcc8853faf1f224950dab66d2f8e52ed09dbf07b421743bf6647eba9f64f9cd69ddd3aa3a45cb40", 0x2c}, {&(0x7f0000000480)="6c4303f0c8e3fbf481f61832e40b1a8009020000007b39a834787d4011b2f95affffffff000000000b42eee70375d1faf8c6eb6e6a8cf7d7ba31353f7a4ca438932ee91309d00000239367484e7e291e59e42ac69f6b15543275a18dd940630000000000006d17f90de115240507e84d14b299088f2f1ed1635ce5944f16c7a1390adb30f5a70ae0ec4ac66ba1d5020e777c6649cef2498af8bf320ba10acf09fc354b4ee0f8feb884a17a24ea6882e43bb78a3d8ecd2a1c18e7c4bbd211d9289d00732309067ee0595918", 0xcb}, {&(0x7f0000001c00)="487dd3b9a1e2b899fa5d52933a205fe9b73f65c25c61189f668ba31762474174d6292a0ad9b654405f9c77ad5ce8e0e482d50e4b2358b153329fa3d73d451a364ace02433ca3d87e45caacc58fdc2895eb7a7dbb25139520602a0cf5d4a7b692fdd637146eef8a0d8f0d81fbef6dee231c5a746451148683e26e75752f93228328bfc672e07d1598eaffb64e181373e8c9f741bed44ec4491c0432cbc144f952d4282e857e828250b5d02a5659b8dee3ddb8a53da747ad3f22019cefef679160f356e0df05af8ad73b5ff4a978d1e3336492c6adcc767c6bd83300fec803006fea9f3d5ba57037d8beefa167d694de252ff17f25b5a0bd27e4331a1201e33baae16e2f5d87324376ced031b7db498036c8f4b579b1e283b6466869d64f2a00a87f2be00438fedc9911fd9fefa5f0e58d4111a1395baf6cb4a987c27d40d56d10672e312a86ba76027237c54ede2bf5bc3afbb7a1c000968f22766004cd30c26456e1f5e274d0c074ddccb171256a60fa5c40a09540ea3ae59e505d490ddbd1ae89c00bb668172dd35858ddc5323ecd5050039b76eaf1ca64c570a5ba27bf0fa82a1a74a61b29c49f919550ebe40a81b57b5a9251597517d8adcc583460f6ac6239846c1a334daedba7e8d8dddbab944eca6b714eac8d0384c82e848ab62438b62b4ac0964a8c7d308d4d6ef66346bda0d3e46ca738781b7221e53041773400222820b96321d18e8ad0606cc3467a617cbc93678a0b07d5ae050c5fbec21e38683a3ec5b07178cef120d36040908160113274b35b50dc376fa90d378889f61ecea04f3ab6547e42d4fdf805ec9b9ab998d6079a077eb830188f4c7829faf19f3e3a0eb55983799a90ec75099b242c197aa4bba451438d6f26ff81e414b967de3723864b7a4c952a998116fdba32eebf5383980c2f0e1a6a5f72fb2f1a0b4d74181e5346d71ac370102e723535965055fb22a7d599b9b14a24c99e8b25929a9d7e8cb26f0041e383a7e52fc747a24f1ac9bcaee8bd2fb9d0904a1d5d0870fd2fbc0e91dd52cbc226ed837f7c9c9e2a0c02ae6c0994e50fd59a35bf19303b5c9891c80169eb2abac9d0424b3b89f95518dedace5e60aace11b18c6c4f5b2ad8db54d29c726d3995de110ef9b6d790a6519dfa00eb9226ede4a72521d1284391f04bb070cf58cb88b5f55f4a740d1c681c4ebf1f75f05611a52607180a07cfd6459b060664213ac22ffee9c10353737a286832ef87673c072fe1f9564b58c524d598a684c0dc501f2681239f7189059ef41f48c5c0a629b94ad42044933e8f9ffe2681b5c393e9851cdd9738490d450009ae14d5f407d8b05292868f76036559b4abdc178a4a69792628f17b10b18ff394f9bf2c48afeb7bc921f84378d52273fea48ac86550d45c8c28e827e290463e4e7fc0aa07c8439626eb5d2839a45cadd2371d221324bea9ae673085abfd3bbc1114ec5b52c3604292769d9a809c80a6b7526247e891ae59a9b89a654a2a07be26a6bf43eb1ffa3c19a73f92846dfbc85d7ce7ba97361ea41e71f49418346e0131c32f1c1807d1e7fad6db908ceb421c8a456e798396c2e59c768773db51823052012e6e9070290f71340b4880c672abe263a6f8a0f9df0af950b45997dcd92635080c59df10b9878fcf8e5a27fa80246c956f837b14246b8d47cd26302ed94937d52e1bbd414c199eac290f6144ffe53e43bdc92e788073403e078f2a9b307ed458678169ced7d9a025a9d590c9186e2ab87f0ba6954516144b38f6feaac3e2c6813d96f7736a3fbbff241842edddba566cd20681228bb3a6555e935dd0f4b1a9f5dff3bbccd608ce7805bbab3e98d93b9dc75b5c94a7e3e978a565e223ec9b6f74004a05174a7ee9f3d6f86dbb28367b34379d96b7e120299d26bc2f229808ca0be9f04f7c45f43e53310ec554900793fac5990743c29ab83d22171a85405afa6513ccda2d64d39628e2d6cf06295d85249da1dbca0508217f2ec120106dc348dc64928ac6e7c3b11e728581db6dca71e579dcb2ab996e7def1a026843639c722cb5e473d225ca92945fd82e00051ee43edc923cf7047b18876e2d63d5bf274e713345306b7fb054399453e8f0bf05167add275dbaeefd5ac3c41b5f95680d8e737e40b1d04e8feb358fcc348d4ac20948370029e1f9871c52386e2588eee7696a42c70d5ad2dd462de4d596c229a85d860d693d2546fc31c0f4156d3a312dd3faca100b470f7105e1bc1e3a0596ea40f93d659bd974d7a6d21bb888b3f976b63bde3f65d94d070c87c55f608bcf6a3fe72dfc150d26f45b6ed9dd0c0110a21c7f55185d6885551155d8a2b39b2bf8ac5dadfc5e88860e8c318e2d01d7c55003446889c0d6061eaf6112b22f1cd9ca403097fbc8a96a0535a6b38ab9f0dc9f8da10291e383939344587fa6eeaa60eee2e1a5387b35b8c24019083b29b031571f13ac6d02660776b023d0eef3d580a28af569d33e1075780108932c30c216f40d23d4bd3817427dcde91eeb16dfb9d4a2fdf6fa54d63cdcd6b85cc0fb0ed682983763f44275fb973346619ab2246d2d2b2734713f8ecd121c4ebc0f70c641fe01c507773714fee622da9684df85a85ce6530570a5505e24bc3ed7bac9fee85d6c7d9035d906192fd6caea5da6666e50e388426061f08df45d6b1b232f553d78601fdae9c9ec16f46d602a841ba4da4c40e3dab2ac044c6eceb7bbbac5a0369b6dada7b214a80670026229fbe8290d40843be1fe40a1f630bbd51d41d4c724a4d52921e6770e9da85967b579de4af76f99523a0ad5a61e4bd0666f992c2f045b53f6ad7f65df094feb23f0d841530eb67cbdb58837086e28f6dee5f1fe6098c97fee87f49a25d42797738e15079e8c88da87ff8669d185bf6de7eb872f797c2b0158e16acd7aa1ce7036908bc1002cbac074caa0ec46f1131fa173c56f724cbc9e5e6c65dcbe3f224cb1a2a5ff2fcc5778dfed6431251158aae6f6f519479336cf6593b741f4e0495a4c0a0c4813c1f1a5a37dba16d28d36820e3810e5944dd8bb254f50bb33ced4214240b2e559fd9aff6d89170e0fe847b4617697bf4cd2ae470af3e6fabb7551508bd5f5bf5c8a7794aa13438c8880ad431d1bb1afe2a0c37c637a47d88da903b881347ecda432648c032636f49e02f9173244c17aefed13efef6a97725afc2fa1a80923345828b1b801f20c07ecee96807950f1af06a311fae446755e3d271d890891140dd82bd9f916ea509e042a09ce4bfe4805e33d1a29dc18e30afc65ca18ec8eda318f675e0ca7905da0853ce1e87971b93cf2574bce6de1cd06f4bca137f090679aef14d6b10832aa755237402be0ddd2681624da7a4d9d257c74a3de41c9d20cd5d21c3634c65fe78e7dd1b602b70d051a1e9659290998bf2f126ac17de4a8eb3453c178fff0968fde8946ea22dd51b0792657ff6006e4c12c0cf60b224be5561c68a9b8014d7b993758e0328f27459ef4a7b9f7f524dfec49a5b856772e7ac1171e33834cbfc4dc386681066ed3a464d30a1d928467edef230b926f5941b75f66553b2df7caa1179cbec9cae65c63cfc36bf3955e60b307b40e5df0f8a975391bbd47284cdce38717556ee3f2a74a66db327c00021bfd625e3cad837183c4dc92fc53d76d63e7ee89294836318886ba0a36eabb54ba26f63caad42805d951b20d4aa8d40983f519d5741cb3801ce18fc733b994c539fdcccf4a79cfb4b9f5e471f59efe617ad406f7013410c62d50018551fe1e8e16312d612f4c41ed9243ce0546d956cef3aa850621258963f0a9175e800f5fd76b55734e1eab939bc48351df457ed0df4d6b16e73d65a0f11840ff9db09f781d9505bc8e17a23b7e99348db2b5995f9a73def6bfd6dc3a65b03e605565f6eea89c0f8010063aa348ae858abdd1a51c000d7ffbff0b5347d1d0d877ac38038337ebb09cd311101955bc52222c4ee3883f71a33f8f35bba00d135b241cbb81c38bc723bc15c15826642626170b0e9708042952f2006035c4b6b5443ecc7f1042c7d7fb5a488558e9de3aacbb1332e7a2bc47c62ee22b4055a256ca01b8b05ca3b850f95357fc91a6bb1130ef67f20cb3abb0899cd1fa53481ab201fac8af0fc8db7a5dde025ccb4cfd54088190edaf0bc51e73d1b29e1135bb5e4c7fc05d92a7c4b0c1b179c3c25c79f35743077257c1680916cbc5855ed6747997ec680320f91d7c73e78a8a1ca769c42415d2bae6d33f7d7c93395fcea4f28b9f4eac490ec26833330e082998591f0d9c73b316ddf6de3f2cee0956f15d809a5fffb114d10522e5ceab08f5167692b726f5df56f105d0b385e7f4b3449f419b5b46cae645d8ac1f5eece5488b32cf88d473424f3ece8350a35c2297c7c7fa098af92128a01b6ff11875fe93d08f056e15aa9408ad080c69ee971812503f45420a6f2706c74602704e7b3c401b38ff178fe5bfffd8a9809cd710a8c5e0844e05780c22e4f30ecea912e8d87e7dc5ccde8f94f71b867c2cc268e7074a93fdd5840f12b87aa804c6eb14b07b87c7160e0d1159c969319c2ab9c99725967642795b821f76c0061dfa66d6e5153f541290695e08e107028173f1826ae8bf9be2d5b9c6aa67d0d875e970aadec386a1bb373559a595869fddb612b8392f2eb2fb4ac825faf3c376b56134b27a0cb5ea8d2204eb3efadd4f0d528efbb5e86e7fcf0e9ad56f14ff97eec23975290efc6445e04b8b151dc3c183f0e30de82ad8393de76a93d0b3625d3a1076809348cbc645a129efec178152dba160dde5c2e3978be5f4bc05c1a9292ba5fb986536be0a8e07b8a5b0deb0f7e1294c5a3caba140c36470a458ecd201eb44ab741c831bb9ecf838209b13490e42347b111d5b13085e4e54271cb16d60347237813f22449f1d654b8c1af7dbbbdd696cd80eca09260ceaec240d2093b73d3254a94bea128373b1cd8402a7e069876fc4916426b7f0cfddfbd1d085c7b40c9936de3b579717dc9d945d415d7dd4bb5d1a83b51a02282d638d78c332fdf28b2ceea20c2d6d4b84dfbe78ff78ff6b8c5e06baf054426528022cc67586400515ffcdb3e9887f8c530e8c1768a973cd3be14ed9c4d5570ba3f4137e9a1e465b1ba2fe80819c40b62f1c269681da0a54bbbbabd57f445d9ccb6886f79af50d98c86d5887d2c519d49d5b9879a4fa75edc96d4057de2f1c03e23b26169195263c2ab0b121ce7efbdf0e46b413007a839ac9e54d366e3dacbcd55ce950959aa61a9d48a291bcb164c1106ab743bf35c3bda07ab442f167290ce61fd59a085738f7f4dc81fcbececae1cf8c87c334b5e5743c8b37ccb66dce0692425ae06cda265e2e544d53255b423e6dfba064b8d8d05ab2e11d46f0f3d13f1ba289a90dbde444eac96a2cdc7e8334c4581d560fe9c97434048871c183ed74697f45955e14b7547d1cc864c2d15b44e69cf4af305e45dbe7ebb9935e505957013d7e37f62c2f15897317a87e5a5bf6e8dec1ccb8ca4cf956656b247a755fb76b9150d9118e8ff4e1ddbf9614c474424c1ef681ad8363a3a157410f4c7844e8e33731088da39164b003e36a65db9462e32ec73c335457a92d0ebe994ba7b738c779da85c762d8bdaa3f65e17e3904fe2587549f49efa60427bd05685fef639c121978af71b8139ec58578b94f19204136bda7600e8d463f30dfb006b7d1b8e7ff5450d127bafeca62f6f3b6e86992a9656baf3964a08cc123bd15253804cce9635d683593eea5672fa400000000000000", 0xff6}, {&(0x7f0000001b00)="c1ae57a279f6e6a4901fb17c2a77a3a106a688aed45bd40661263603473d3e7e3fc342ae2c8a7ac22a22e26dc435f81351751ec9f4eaf56735f5959ac0947300ea72a3f6ccc28082895a755685ffb5bcd82645077851e7c0e3962a09505111f91b53e798b0ea56299d4479e46b08ed8879a26e0b2a98cb0497", 0x79}], 0x4}, 0x24008815) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000007000000270a06000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000190001000000000010000000e00000010000000000000000000000000a0101000000000000000000000000004e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x80c4) 164.372991ms ago: executing program 1 (id=5422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000400)=0xf0000000, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @rand_addr, 0x8}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) shutdown(r0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x138, 0xb, 0x148, 0x138, 0x148, 0x250, 0x230, 0x242, 0x250, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff, {0xfffffffffffffff7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x5, 0x5, 0x0, 0x1], 0x2, 0x6}, {0x1, [0x1, 0x2, 0x6, 0x6, 0x2, 0x4], 0x4, 0x1}}}}, {{@uncond, 0xec010000, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x20}, {0xfd7, 0x7, 0x1, 0x8000, 0x80000008, 0x2, 0x82}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x5, 0x2, 0x1, 0x2, 0xc], 0x1, 0x1}, {0x2, [0x0, 0x5, 0x1, 0x4, 0x2], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'ctr-aes-neonbs-sync\x00'}}}, 0xe0}}, 0xc002) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) r7 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) 126.731365ms ago: executing program 3 (id=5423): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) (async) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4048841) (async) sendto(r2, &(0x7f00000021c0)="7456a082ccc40030", 0x8, 0x20000000, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x2}}], 0x1, 0x12102, 0x0) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0xffff, 0x9, 0x1, 0x400, 0x4, 0x0, [{0x6, 0x6, 0x2, '\x00', 0x808}, {0x100000001, 0x100000000, 0x6, '\x00', 0x4082}, {0xfffffffffffffcaf, 0xf, 0x6, '\x00', 0x406}, {0x6, 0x6, 0x68a, '\x00', 0x200}]}) 123.0554ms ago: executing program 0 (id=5424): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendfile(r0, r3, 0x0, 0x20000000002) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={&(0x7f00000000c0)="f9e884088e0584e0fa626c7d1857f7325e5a21d9b81ee2039a1ee1c678bae1d8e5664dea4bbfbcd17f18735bc07fa75a38625d919e6b88c273df4c70476bba", &(0x7f0000000240)=""/178, &(0x7f0000000440)="b8ad5531468522955c8b80dab65ca53348df5ed3fc48b5c2d054a78859a686cd3f7d833997af51e48ac1eb001646387b4b1b4ead827c7b514e937851c3229ec8c4edfcc63fe10f09f2748c5e3ce5d711b012d6b6f20eb28bc3cdd0d678f140ca0bf4f73bc1dea5d068a69a503b1ffa211ce5e50fc6e2cfbdb6ab8f0ba2c8f68e153f193a1bfa0c75ef6b2aa94462adb719e8626dd0c67a42953bc79df278a9d78754d77c79d1efc3ae393c1c4f682098ff4c0eca0e905c204f69406b252c45bdfb86ec", &(0x7f0000000540)="cf956d7ee961d876e127f6063c4dec900e420871b91e6e3d239de035531b09d2dd6f1db1d029e5224b45391ec2bd278e65ef4cdf424a1297dffdd1f4354db45bc47d2b9921efce5cf087a0ae54f34045678e0c92beedadd2779e18d1cc2909a278359c3bb444512b4a2bd840d8c1255c323c195ca88795594cebf80d1a88cc4286e6b72a3588e3c2", 0x3, r5, 0x4}, 0x38) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1, &(0x7f00000006c0)=@raw=[@generic={0xa, 0x8, 0x0, 0x8, 0x1000}], &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="151b00ba8d13cdea2aac8a25ec05", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x94, 0xffffffffffffff34, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f0000000100)='\x00', 0x0}, 0x48) 56.622846ms ago: executing program 3 (id=5425): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r0, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x508001}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)=@newqdisc={0x118, 0x24, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x4, 0x1}, {0xf, 0x2}, {0x2, 0xb}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x6, 0xfff7, 0x7d, 0x2, 0xda, 0xffffffff, 0x2}}, {0x8, 0x2, [0xe, 0xfffd]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9445, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7fffffff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0x1}}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xff, 0x1977, 0x1, 0x2, 0x7fffffff, 0x401, 0x3}}, {0xa, 0x2, [0xe, 0x12, 0x57a]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x666, 0x6, 0x0, 0x1ff, 0x3, 0x4}}, {0xc, 0x2, [0x2, 0xa10, 0x310, 0x8]}}, {{0x1c, 0x1, {0xb, 0x4, 0x38, 0x64c, 0x0, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0xa0, 0x3, 0x3]}}]}]}, 0x118}}, 0x4048000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}]}}]}, 0x3c}}, 0x20004055) r1 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x10f, 0xd, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x40000000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f00000001c0)=0x81, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r9, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x9733, 0xfffb, 0x6}, {0xff, 0x2, 0x3, 0xf252, 0x7, 0xd7a0}, 0x7, 0x6, 0x22e5}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0xb65985fb09fab4be, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, 0x0, 0x0, 0x0) 5.401882ms ago: executing program 1 (id=5426): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg$unix(r2, 0x0, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r7, 0x11, 0x70bd2d, 0x25dfdbfc, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c890}, 0x1000c810) sendto$inet6(r0, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 0s ago: executing program 4 (id=5427): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) (async) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 1360] syzkaller1: entered promiscuous mode [ 583.383839][T21360] syzkaller1: entered allmulticast mode [ 583.402307][T21360] netlink: 'syz.1.3717': attribute type 1 has an invalid length. [ 583.627738][T21360] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.669218][T21360] bond4: (slave bond5): making interface the new active one [ 583.704120][T21360] bond4: (slave bond5): Enslaving as an active interface with an up link [ 583.986191][T21383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3724'. [ 584.033860][T21383] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3724'. [ 584.068426][T21383] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3724'. [ 584.140230][T21388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3726'. [ 584.478866][T21408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.643137][T21415] lo speed is unknown, defaulting to 1000 [ 584.708074][T21419] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 584.964091][T21428] tipc: Started in network mode [ 584.984611][T21428] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711 [ 585.020648][T21428] tipc: Enabling of bearer rejected, failed to enable media [ 585.118529][T21415] lo speed is unknown, defaulting to 1000 [ 585.126200][T21440] netlink: 'syz.0.3740': attribute type 3 has an invalid length. [ 585.137168][T21415] lo speed is unknown, defaulting to 1000 [ 585.372130][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.386450][T21456] nbd: nbd1 already in use [ 585.391035][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.391079][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.391114][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.418100][T21456] block nbd1: NBD_DISCONNECT [ 585.444586][T21456] block nbd1: Send disconnect failed -32 [ 585.691552][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 585.756149][T21466] syzkaller1: entered promiscuous mode [ 585.782982][T21466] syzkaller1: entered allmulticast mode [ 585.834470][T21473] siw: device registration error -23 [ 586.448668][ T138] bridge_slave_1: left allmulticast mode [ 586.466227][ T138] bridge_slave_1: left promiscuous mode [ 586.488249][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.516734][ T138] bridge_slave_0: left allmulticast mode [ 586.522894][ T138] bridge_slave_0: left promiscuous mode [ 586.533212][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.771897][T21519] __nla_validate_parse: 1 callbacks suppressed [ 586.771917][T21519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3758'. [ 587.413770][T21532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3760'. [ 587.834389][ T138] bridge0: left allmulticast mode [ 587.843254][ T138] dvmrp0: left allmulticast mode [ 588.181411][ T138] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 588.415241][ T138] batman_adv: batadv0: Removing interface: gretap1 [ 588.472999][ T138] bond0 (unregistering): (slave geneve5): Releasing backup interface [ 588.497933][ T138] batman_adv: batadv0: Interface deactivated: veth1_macvtap [ 588.515627][ T138] batman_adv: batadv0: Removing interface: veth1_macvtap [ 588.630943][ T138] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 588.644158][ T138] bond13 (unregistering): (slave bridge5): Releasing active interface [ 588.678989][ T138] bond17 (unregistering): (slave bridge7): Releasing backup interface [ 588.717461][ T138] bond0 (unregistering): Released all slaves [ 588.746191][ T138] bond1 (unregistering): Released all slaves [ 588.765456][ T138] bond2 (unregistering): Released all slaves [ 588.784070][ T138] bond3 (unregistering): Released all slaves [ 588.798559][ T138] bond4 (unregistering): Released all slaves [ 588.816696][ T138] bond5 (unregistering): Released all slaves [ 588.837226][ T138] bond6 (unregistering): Released all slaves [ 588.852109][ T138] bond7 (unregistering): Released all slaves [ 588.868062][ T138] bond8 (unregistering): Released all slaves [ 588.892888][ T138] bond9 (unregistering): Released all slaves [ 588.906570][ T138] bond10 (unregistering): Released all slaves [ 588.924707][ T138] bond11 (unregistering): Released all slaves [ 588.939802][ T138] bond12 (unregistering): (slave veth5): Releasing active interface [ 588.948860][ T138] bond12 (unregistering): Released all slaves [ 588.970757][ T138] bond13 (unregistering): Released all slaves [ 588.992091][ T138] bond14 (unregistering): Released all slaves [ 589.008085][ T138] bond15 (unregistering): Released all slaves [ 589.025451][ T138] bond16 (unregistering): (slave veth9): Releasing backup interface [ 589.034616][ T138] bond16 (unregistering): Released all slaves [ 589.053912][ T138] bond17 (unregistering): Released all slaves [ 589.068557][ T138] bond18 (unregistering): Released all slaves [ 589.087572][ T138] bond19 (unregistering): Released all slaves [ 589.109969][ T138] bond20 (unregistering): (slave veth0_to_bond): Releasing active interface [ 589.122022][ T138] bond20 (unregistering): Released all slaves [ 589.136619][ T138] bond21 (unregistering): Released all slaves [ 589.316817][T21531] lo speed is unknown, defaulting to 1000 [ 589.599330][T21551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 589.968291][T21537] lo speed is unknown, defaulting to 1000 [ 589.971615][T21531] lo speed is unknown, defaulting to 1000 [ 589.989269][T21531] lo speed is unknown, defaulting to 1000 [ 590.000639][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 590.473900][T21537] lo speed is unknown, defaulting to 1000 [ 590.483244][T21537] lo speed is unknown, defaulting to 1000 [ 591.022147][T21590] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.3768'. [ 591.138108][T21597] netlink: 'syz.4.3770': attribute type 1 has an invalid length. [ 591.140558][T21583] batadv_slave_0: entered promiscuous mode [ 591.147191][T21596] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3768'. [ 591.312762][T21597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3770'. [ 591.501561][T21611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3773'. [ 591.586039][T21612] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3773'. [ 591.610796][T21616] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3773'. [ 591.715491][T21581] batadv_slave_0: left promiscuous mode [ 592.379292][T21648] Cannot find add_set index 2 as target [ 592.574227][T21655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3781'. [ 592.776813][T21664] netlink: 'syz.2.3782': attribute type 74 has an invalid length. [ 592.803823][T21664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3782'. [ 593.221467][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3792'. [ 593.417844][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3794'. [ 593.439124][T21695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.450300][T21695] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.575081][T21695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.602042][T21695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.636134][T21695] veth1_vlan: left promiscuous mode [ 593.652535][T21695] veth0_vlan: left promiscuous mode [ 593.670102][T21695] veth0_vlan: entered promiscuous mode [ 593.683500][T21695] veth1_vlan: entered promiscuous mode [ 593.702371][T21695] veth1_macvtap: left promiscuous mode [ 593.703020][T21706] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3795'. [ 593.709527][T21695] veth0_macvtap: left promiscuous mode [ 593.724750][T21695] veth0_macvtap: entered promiscuous mode [ 593.726574][T21706] netlink: del zone limit has 4 unknown bytes [ 593.732119][T21695] veth1_macvtap: entered promiscuous mode [ 593.756791][T21695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.765101][T21695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.775054][T21695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 593.784164][T21695] geneve0: entered promiscuous mode [ 593.791429][T21695] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.802696][T21695] 8021q: adding VLAN 0 to HW filter on device eth0 [ 593.812128][T21695] 8021q: adding VLAN 0 to HW filter on device eth1 [ 593.820991][T21695] 8021q: adding VLAN 0 to HW filter on device eth2 [ 593.829192][T21695] 8021q: adding VLAN 0 to HW filter on device eth3 [ 593.936119][ T1028] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.946622][ T1028] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.007702][ T138] hsr_slave_0: left promiscuous mode [ 594.026955][ T138] hsr_slave_1: left promiscuous mode [ 594.039867][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.059107][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.365337][T21740] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 594.882819][ T1028] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.916004][ T1028] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.015071][ T1178] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.046341][ T1178] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.070463][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.156653][ T6613] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.201338][ T6613] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.219536][T21768] netlink: 'syz.3.3806': attribute type 40 has an invalid length. [ 595.638477][ T138] IPVS: stop unused estimator thread 0... [ 595.684006][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3811'. [ 595.826305][T21800] 8021q: VLANs not supported on ipvlan1 [ 596.479484][T21828] xt_l2tp: v2 sid > 0xffff: 262144 [ 596.561230][T21834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3815'. [ 596.572532][T21823] veth3: entered promiscuous mode [ 596.607938][T21823] veth3: entered allmulticast mode [ 596.642625][T21823] team0: Port device veth3 added [ 597.195227][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3819'. [ 597.255376][T21847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.295046][T21847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.316916][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 598.597078][T21897] lo speed is unknown, defaulting to 1000 [ 598.687753][T21915] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3831'. [ 598.824930][T21923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3832'. [ 598.880638][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 598.963298][ T1676] block nbd4: Possible stuck request ffff8880271fe000: control (read@0,1024B). Runtime 300 seconds [ 598.974435][ T1676] block nbd4: Possible stuck request ffff8880271fe1c0: control (read@1024,1024B). Runtime 300 seconds [ 599.140760][T21897] lo speed is unknown, defaulting to 1000 [ 599.148919][T21897] lo speed is unknown, defaulting to 1000 [ 599.409727][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 599.833887][ T29] audit: type=1804 audit(1783370539.962:13): pid=21955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3840" name="/newroot/183/cgroup.controllers" dev="tmpfs" ino=965 res=1 errno=0 [ 599.868549][T21960] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3838'. [ 599.897220][T21956] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 599.913830][ T29] audit: type=1800 audit(1783370539.962:14): pid=21955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3840" name="cgroup.controllers" dev="tmpfs" ino=965 res=0 errno=0 [ 600.112080][T21960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 600.148022][T21967] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 600.158413][T21967] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3843'. [ 601.368625][T21967] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 601.514164][T21967] bridge1: left allmulticast mode [ 601.552135][T21967] bond2: left promiscuous mode [ 601.559172][T21967] bond2: left allmulticast mode [ 601.593658][T21967] vlan2: left promiscuous mode [ 601.603106][T21967] bridge0: left promiscuous mode [ 601.626296][T21967] bond4: left promiscuous mode [ 601.633944][T21967] bond4: left allmulticast mode [ 601.641311][T21967] bond5: left promiscuous mode [ 601.684223][ T1028] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.715102][ T1028] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.737823][ T1028] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.776978][ T1028] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.833533][T22006] netlink: 'syz.3.3853': attribute type 10 has an invalid length. [ 601.895957][T22006] team0: Device dummy0 is of different type [ 601.903611][T22010] netlink: 'syz.3.3853': attribute type 10 has an invalid length. [ 602.009609][T22010] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 602.025450][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'. [ 602.059241][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'. [ 602.183476][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3859'. [ 602.209930][T22020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.223641][T22030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.333088][T22032] lo speed is unknown, defaulting to 1000 [ 602.704187][T22060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3867'. [ 602.884407][T22057] lo speed is unknown, defaulting to 1000 [ 602.891610][T22032] lo speed is unknown, defaulting to 1000 [ 602.906574][T22032] lo speed is unknown, defaulting to 1000 [ 603.432611][T22057] lo speed is unknown, defaulting to 1000 [ 603.442153][T22057] lo speed is unknown, defaulting to 1000 [ 603.486910][T22080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3873'. [ 604.169813][T22094] lo speed is unknown, defaulting to 1000 [ 604.854921][T22111] netlink: 'syz.4.3881': attribute type 13 has an invalid length. [ 604.978308][T22112] __nla_validate_parse: 1 callbacks suppressed [ 604.978329][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3881'. [ 605.189111][T22116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.244966][T22094] lo speed is unknown, defaulting to 1000 [ 605.313595][T22094] lo speed is unknown, defaulting to 1000 [ 605.329158][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3882'. [ 605.543251][ T29] audit: type=1804 audit(1783370545.692:15): pid=22120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3883" name="/newroot/144/memory.events" dev="tmpfs" ino=758 res=1 errno=0 [ 605.582255][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 605.606836][ T29] audit: type=1800 audit(1783370545.712:16): pid=22120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3883" name="memory.events" dev="tmpfs" ino=758 res=0 errno=0 [ 605.651583][ T29] audit: type=1804 audit(1783370545.712:17): pid=22120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3883" name="/newroot/144/memory.events" dev="tmpfs" ino=758 res=1 errno=0 [ 605.702672][T22132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.899654][T22142] netlink: 'syz.1.3886': attribute type 22 has an invalid length. [ 605.924573][T22144] netlink: 'syz.1.3886': attribute type 22 has an invalid length. [ 605.940094][T22144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3886'. [ 605.959220][T22142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3886'. [ 606.061475][T22148] nbd: must specify a device to reconfigure [ 606.168481][ T5642] Bluetooth: hci3: command 0x0406 tx timeout [ 607.280721][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 608.942552][T22184] netlink: 'syz.0.3890': attribute type 1 has an invalid length. [ 608.970372][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3890'. [ 609.244470][T22193] netlink: 'syz.0.3892': attribute type 6 has an invalid length. [ 609.311821][T22158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.503736][T22202] nbd: nbd0 already in use [ 609.627166][T22208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3894'. [ 609.640990][T22210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3895'. [ 609.808665][T22210] ipvlan1: entered promiscuous mode [ 609.879746][T22210] ipvlan1: left promiscuous mode [ 609.952397][T22208] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 609.997341][T22208] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 610.106778][T22232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3898'. [ 610.106809][T22231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3898'. [ 610.183424][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3900'. [ 610.242788][T22240] hsr_slave_0: left promiscuous mode [ 610.271542][T22240] hsr_slave_1: left promiscuous mode [ 610.574295][T22245] vti1: entered promiscuous mode [ 610.819172][T22259] syzkaller0: entered promiscuous mode [ 610.840677][T22259] syzkaller0: entered allmulticast mode [ 611.339219][T22297] netlink: 'syz.4.3913': attribute type 1 has an invalid length. [ 611.913645][T22320] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 612.062934][T22323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3916'. [ 612.076263][T22323] netlink: 'syz.0.3916': attribute type 4 has an invalid length. [ 616.918146][T22297] 8021q: adding VLAN 0 to HW filter on device bond6 [ 616.971896][T22298] veth5: entered promiscuous mode [ 616.977199][T22298] veth5: entered allmulticast mode [ 617.003372][T22298] bond6: (slave veth5): Enslaving as an active interface with an up link [ 617.048169][T22301] bond6 (unregistering): (slave veth5): Releasing backup interface [ 617.066064][T22352] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3919'. [ 617.076978][T22352] openvswitch: netlink: Message has 512 unknown bytes. [ 617.096202][T22301] bond6 (unregistering): Released all slaves [ 617.124389][T22320] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 617.165185][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'. [ 617.334337][T22352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3919'. [ 617.371990][T22355] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.437828][T22313] lo speed is unknown, defaulting to 1000 [ 617.465937][T22365] IPv6: Can't replace route, no match found [ 617.509023][T22365] IPv6: Can't replace route, no match found [ 618.359163][T22313] lo speed is unknown, defaulting to 1000 [ 618.390080][T22313] lo speed is unknown, defaulting to 1000 [ 618.496395][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 618.583387][T22414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3932'. [ 618.771656][T22417] netlink: 'syz.1.3934': attribute type 1 has an invalid length. [ 619.325393][T22427] 8021q: adding VLAN 0 to HW filter on device bond7 [ 619.428013][T22427] bond6: (slave bond7): making interface the new active one [ 619.472825][T22427] bond6: (slave bond7): Enslaving as an active interface with an up link [ 619.691575][T22430] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 619.963207][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.089914][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'. [ 620.249182][T22460] bond6: entered promiscuous mode [ 620.273284][T22460] bond6: entered allmulticast mode [ 620.294879][T22460] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.505335][T22479] netlink: 'syz.4.3944': attribute type 4 has an invalid length. [ 620.624556][T22478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3943'. [ 620.668522][T22479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3944'. [ 620.704419][T22486] syzkaller0: entered promiscuous mode [ 620.733047][T22486] syzkaller0: entered allmulticast mode [ 620.899484][T22496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3947'. [ 620.938454][T22496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3947'. [ 621.046365][T22483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.086954][T22483] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.245999][T22483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 621.280224][T22483] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 621.346208][T19637] lo speed is unknown, defaulting to 1000 [ 621.358506][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.360579][T19637] syz : Port: 1 Link ACTIVE [ 621.365874][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.394138][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.401408][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.735925][T22511] block nbd4: NBD_DISCONNECT [ 621.741301][T22511] block nbd4: Send disconnect failed -32 [ 621.788753][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.798074][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 621.832601][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.842361][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 621.852072][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 621.862270][ T1676] Buffer I/O error on dev nbd4, logical block 0, async page read [ 621.870802][ T1676] Buffer I/O error on dev nbd4, logical block 1, async page read [ 621.879021][ T1676] Buffer I/O error on dev nbd4, logical block 2, async page read [ 621.887633][ T1676] Buffer I/O error on dev nbd4, logical block 3, async page read [ 621.898439][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 621.908476][ T1676] Buffer I/O error on dev nbd4, logical block 0, async page read [ 621.916686][ T1676] Buffer I/O error on dev nbd4, logical block 1, async page read [ 621.925717][ T1676] Buffer I/O error on dev nbd4, logical block 2, async page read [ 621.934022][ T1676] Buffer I/O error on dev nbd4, logical block 3, async page read [ 621.943037][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 621.953354][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 621.964376][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 621.975180][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 621.984925][T13074] ldm_validate_partition_table(): Disk read failed. [ 621.992035][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 622.002720][ T1676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.014347][T13074] Dev nbd4: unable to read RDB block 0 [ 622.030165][T13074] nbd4: unable to read partition table [ 622.067956][ T4988] udevd[4988]: worker [13074] terminated by signal 9 (Killed) [ 622.144261][ T4988] udevd[4988]: worker [13074] failed while handling '/devices/virtual/block/nbd4' [ 622.237264][ T1028] dvmrp0: left allmulticast mode [ 622.554082][T22531] __nla_validate_parse: 3 callbacks suppressed [ 622.554120][T22531] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3957'. [ 622.797355][ T1028] bond13 (unregistering): (slave bridge5): Releasing backup interface [ 622.820824][ T1028] bridge5 (unregistering): left promiscuous mode [ 622.847035][ T1028] bond1 (unregistering): Released all slaves [ 622.867097][ T1028] bond2 (unregistering): Released all slaves [ 622.890380][ T1028] bond3 (unregistering): Released all slaves [ 622.919395][ T1028] bond4 (unregistering): Released all slaves [ 622.938931][ T1028] bond0 (unregistering): Released all slaves [ 622.975883][ T1028] bond5 (unregistering): Released all slaves [ 622.999536][ T1028] bond6 (unregistering): (slave veth3): Releasing active interface [ 623.010268][ T1028] batadv0: entered promiscuous mode [ 623.026653][ T1028] bond6 (unregistering): (slave batadv0): Releasing active interface [ 623.037407][ T1028] bond6 (unregistering): Released all slaves [ 623.057896][ T1028] bond7 (unregistering): Released all slaves [ 623.078346][ T1028] bond8 (unregistering): Released all slaves [ 623.113342][ T1028] bond9 (unregistering): (slave bond10): Releasing backup interface [ 623.123951][ T1028] bond9 (unregistering): Released all slaves [ 623.145513][ T1028] bond10 (unregistering): Released all slaves [ 623.165431][ T1028] bond11 (unregistering): Released all slaves [ 623.193914][ T1028] bond12 (unregistering): Released all slaves [ 623.216628][ T1028] bond13 (unregistering): Released all slaves [ 623.238889][ T1028] bond14 (unregistering): Released all slaves [ 623.303649][T22532] smc: net device wlan0 applied user defined pnetid SYZ0 [ 623.345253][T22533] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3957'. [ 623.543949][T22542] netlink: 'syz.2.3959': attribute type 1 has an invalid length. [ 623.591915][T22542] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 623.616019][T22544] netlink: 'syz.0.3958': attribute type 75 has an invalid length. [ 623.625582][T22545] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.626455][T22545] netlink: 'syz.1.3960': attribute type 1 has an invalid length. [ 623.675843][ T1028] : left promiscuous mode [ 623.806992][T22555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 623.921228][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 623.929072][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 624.112927][T22545] 8021q: adding VLAN 0 to HW filter on device bond8 [ 624.184148][ T1028] tipc: Left network mode [ 624.278696][T22544] lo speed is unknown, defaulting to 1000 [ 624.287341][T22560] "syz.0.3958" (22560) uses obsolete ecb(arc4) skcipher [ 624.612599][T22575] netlink: 'syz.1.3964': attribute type 13 has an invalid length. [ 624.744420][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 625.205575][T22550] lo speed is unknown, defaulting to 1000 [ 625.213564][T22544] lo speed is unknown, defaulting to 1000 [ 625.232947][T22544] lo speed is unknown, defaulting to 1000 [ 625.343482][T22586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3968'. [ 626.047906][T22550] lo speed is unknown, defaulting to 1000 [ 626.056964][T22550] lo speed is unknown, defaulting to 1000 [ 626.960723][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 627.087441][T22624] netlink: 'syz.2.3980': attribute type 2 has an invalid length. [ 627.122810][T22624] : entered promiscuous mode [ 627.562567][T22622] syzkaller0: entered promiscuous mode [ 627.588716][T22622] syzkaller0: entered allmulticast mode [ 633.053471][ T1028] veth1_macvtap: left promiscuous mode [ 633.071477][ T1028] veth0_macvtap: left promiscuous mode [ 633.677620][T22681] bond9: invalid ARP target 0.0.0.0 specified for addition [ 633.686629][T22681] bond9: option arp_ip_target: invalid value (0) [ 633.705999][T22681] bond9 (unregistering): Released all slaves [ 634.023751][T22685] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3994'. [ 634.043129][T22685] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 634.235821][T22697] netlink: 'syz.4.3998': attribute type 2 has an invalid length. [ 634.244937][T22697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3998'. [ 634.249672][T22685] 8021q: adding VLAN 0 to HW filter on device bond9 [ 634.374031][T22690] bond9: (slave veth3): Enslaving as a backup interface with a down link [ 634.483918][T22700] gtp1: entered promiscuous mode [ 634.496048][T22700] gtp1: entered allmulticast mode [ 634.528100][T22690] netlink: 'syz.1.3994': attribute type 10 has an invalid length. [ 634.553040][T22690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3994'. [ 634.606360][T22695] netlink: get zone limit has 4 unknown bytes [ 634.679784][T22711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4001'. [ 634.690740][T22685] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 634.732409][T22690] dummy0: entered promiscuous mode [ 634.743919][ T1169] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 634.768930][ T1028] IPVS: stop unused estimator thread 0... [ 634.790394][T22690] bond9: (slave dummy0): Removing an active aggregator [ 634.826745][T22690] bond9: (slave dummy0): Releasing backup interface [ 635.125745][T22718] syzkaller0: entered promiscuous mode [ 635.144631][T22718] syzkaller0: entered allmulticast mode [ 635.318889][T22731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4004'. [ 640.473048][T22755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4010'. [ 640.491715][T22754] tipc: Started in network mode [ 640.498866][T22754] tipc: Node identity 8a2d8176bfd4, cluster identity 4711 [ 640.520243][T22754] tipc: Enabled bearer , priority 0 [ 640.532316][T22754] syzkaller0: entered promiscuous mode [ 640.544880][T22754] syzkaller0: entered allmulticast mode [ 640.560001][T22757] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 640.878081][T22777] sctp: [Deprecated]: syz.0.4018 (pid 22777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.878081][T22777] Use struct sctp_sack_info instead [ 640.908424][T22762] bond4: (slave veth4): Enslaving as an active interface with a down link [ 640.945946][T22765] tipc: Resetting bearer [ 640.993935][T22766] bond4: (slave veth6): Enslaving as an active interface with a down link [ 641.007177][T22782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4020'. [ 641.038917][T22782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4020'. [ 641.068793][T22782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4020'. [ 641.097150][T22782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4020'. [ 641.127413][T22754] tipc: Resetting bearer [ 641.168670][T22754] tipc: Disabling bearer [ 641.199500][T22792] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 641.407792][T22800] netlink: 'syz.3.4024': attribute type 26 has an invalid length. [ 641.548334][T22804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.660990][T22804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.707028][T22804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.739999][T22804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.749864][T22804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.851884][T22827] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 641.998523][T22829] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4033'. [ 642.050285][T22832] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4033'. [ 642.108827][T22831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'. [ 642.223286][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'. [ 642.246434][T22844] netlink: 'syz.4.4036': attribute type 5 has an invalid length. [ 642.277049][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4036'. [ 642.430375][T22851] syzkaller0: entered promiscuous mode [ 642.438236][T22851] syzkaller0: entered allmulticast mode [ 643.363189][T22871] macsec1: entered promiscuous mode [ 643.899908][T22888] netlink: 'syz.2.4049': attribute type 2 has an invalid length. [ 643.949845][T22882] bond7: entered promiscuous mode [ 643.956501][T22882] bond7: entered allmulticast mode [ 643.965120][T22882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 644.956412][T22916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.058661][T22918] tipc: Started in network mode [ 645.087106][T22918] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 645.118377][T22918] tipc: Enabled bearer , priority 10 [ 645.506741][T22933] __nla_validate_parse: 4 callbacks suppressed [ 645.506793][T22933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4066'. [ 645.731920][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 646.230700][ T5719] tipc: Node number set to 10463914 [ 646.638876][T22987] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4084'. [ 646.880946][T23000] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 0, id = 0 [ 646.896207][T22997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4089'. [ 646.923466][T22997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4089'. [ 647.394370][T23019] netlink: 'syz.1.4092': attribute type 13 has an invalid length. [ 647.545159][T23023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4092'. [ 648.073431][T23049] netlink: 'syz.3.4100': attribute type 13 has an invalid length. [ 648.182298][T23056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4100'. [ 648.389680][T23067] can: request_module (can-proto-0) failed. [ 648.698139][T23081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 648.755775][T23085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4108'. [ 648.824636][T23083] team0: Device vlan0 failed to register rx_handler [ 648.995414][T23092] tipc: New replicast peer: 255.255.255.255 [ 649.073582][T23092] tipc: Enabled bearer , priority 10 [ 649.114064][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 649.419824][T23107] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 649.694874][T23120] netlink: 'syz.1.4120': attribute type 5 has an invalid length. [ 650.032268][ T42] tipc: Node number set to 3461135860 [ 650.223816][T23142] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 650.367074][T23144] bond5: (slave veth8): Enslaving as an active interface with a down link [ 650.439998][T23142] bond5: (slave veth10): Enslaving as an active interface with a down link [ 650.652185][T23156] __nla_validate_parse: 5 callbacks suppressed [ 650.652219][T23156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4131'. [ 650.692819][T23161] netlink: 'syz.2.4134': attribute type 1 has an invalid length. [ 650.887244][T23168] syzkaller0: entered promiscuous mode [ 650.899788][T23168] syzkaller0: entered allmulticast mode [ 651.251709][T23188] netlink: 430 bytes leftover after parsing attributes in process `syz.2.4142'. [ 651.580912][T23203] atomic_op ffff88804bb5a198 conn xmit_atomic 0000000000000000 [ 651.671656][T23197] lo speed is unknown, defaulting to 1000 [ 651.905832][T23210] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 651.924046][T23210] netlink: 'syz.0.4150': attribute type 2 has an invalid length. [ 652.498026][T23244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4158'. [ 652.582238][T23248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4159'. [ 652.701249][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4158'. [ 652.745469][T23249] netlink: 'syz.0.4158': attribute type 1 has an invalid length. [ 652.784037][T23197] lo speed is unknown, defaulting to 1000 [ 652.812277][T23197] lo speed is unknown, defaulting to 1000 [ 653.098475][T23256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.139200][T23254] netlink: 'syz.2.4161': attribute type 2 has an invalid length. [ 653.167204][T23254] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 653.207771][T23254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 653.255162][T23254] nbd: illegal input index -120127480 [ 653.638757][T23270] netlink: 'syz.2.4166': attribute type 1 has an invalid length. [ 653.879131][T23273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4167'. [ 653.975148][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 654.270603][T23284] syzkaller0: entered promiscuous mode [ 654.283103][T23284] syzkaller0: entered allmulticast mode [ 654.437978][T23291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.493887][T23294] dvmrp0: entered allmulticast mode [ 654.547980][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 654.583588][T23299] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4175'. [ 654.654949][T23302] netlink: 'syz.2.4175': attribute type 2 has an invalid length. [ 655.244832][T23323] lo speed is unknown, defaulting to 1000 [ 655.391712][T23336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.746191][T23323] lo speed is unknown, defaulting to 1000 [ 655.768123][T23323] lo speed is unknown, defaulting to 1000 [ 655.819605][T23345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.948660][T23343] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.961480][T23343] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.070302][T23353] __nla_validate_parse: 4 callbacks suppressed [ 656.070320][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4191'. [ 656.258819][T23349] lo speed is unknown, defaulting to 1000 [ 656.409587][T23364] syzkaller0: entered promiscuous mode [ 656.427299][T23364] syzkaller0: entered allmulticast mode [ 656.532444][T23368] xt_hashlimit: size too large, truncated to 1048576 [ 656.707928][T23373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.966031][T23377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4199'. [ 657.021117][T23382] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4202'. [ 657.042674][T23381] ip6t_rpfilter: unknown options [ 657.076431][T23383] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 657.200845][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.338097][T23395] lo speed is unknown, defaulting to 1000 [ 657.343063][T23349] lo speed is unknown, defaulting to 1000 [ 657.369889][T23349] lo speed is unknown, defaulting to 1000 [ 657.514193][T23408] netlink: 'syz.4.4210': attribute type 10 has an invalid length. [ 657.525185][T23408] geneve1: entered promiscuous mode [ 657.552224][T23408] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 657.623664][T13701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.633290][T13701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.838329][T13701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.877552][T13701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.897589][T23416] nftables ruleset with unbound chain [ 657.951327][T23413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.162404][T23395] lo speed is unknown, defaulting to 1000 [ 658.207764][T23428] gretap1: entered allmulticast mode [ 658.285796][T23395] lo speed is unknown, defaulting to 1000 [ 659.327117][T23464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.517307][T23462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4222'. [ 659.534768][T23468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 659.645737][T23462] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4222'. [ 659.696224][T23462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4222'. [ 660.269903][T23475] sch_tbf: burst 4 is lower than device lo mtu (18) ! [ 660.676004][T23492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4232'. [ 660.707307][T23492] vlan3: entered promiscuous mode [ 660.717699][T23492] bridge0: entered promiscuous mode [ 660.732423][T23492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 660.750413][T23499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.008611][T23511] netlink: 'syz.1.4239': attribute type 12 has an invalid length. [ 661.038615][T23511] netlink: 'syz.1.4239': attribute type 5 has an invalid length. [ 661.103217][T23518] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4236'. [ 661.146470][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4236'. [ 661.287379][T23525] syzkaller1: entered promiscuous mode [ 661.302484][T23525] syzkaller1: entered allmulticast mode [ 661.559957][T23544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4247'. [ 662.248732][T23574] openvswitch: netlink: IP tunnel dst address not specified [ 662.815982][T23620] netlink: 'syz.0.4269': attribute type 2 has an invalid length. [ 662.978316][T23630] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 663.644102][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'. [ 663.700706][T23665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4281'. [ 663.764165][T23665] openvswitch: netlink: Flow key attr not present in new flow. [ 663.792363][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4279'. [ 663.808606][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4282'. [ 663.823352][T23662] sch_fq: defrate 8 ignored. [ 664.218722][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4278'. [ 664.514621][T23695] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4287'. [ 664.969964][T23703] IPVS: Scheduler module ip_vs_sip not found [ 665.173678][T23719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4291'. [ 665.521693][T23728] IPv6: addrconf: prefix option has invalid lifetime [ 665.856512][T23732] netlink: 'syz.2.4297': attribute type 11 has an invalid length. [ 665.892268][T23732] netlink: 'syz.2.4297': attribute type 13 has an invalid length. [ 666.137666][T23737] 8021q: adding VLAN 0 to HW filter on device bond9 [ 666.516219][T23762] __nla_validate_parse: 3 callbacks suppressed [ 666.516258][T23762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4300'. [ 666.702927][T23772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4307'. [ 666.757235][T23770] netlink: 'syz.1.4305': attribute type 13 has an invalid length. [ 667.079460][T23779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4307'. [ 667.232871][T23793] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 668.213550][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4319'. [ 668.239478][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4319'. [ 668.271885][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4319'. [ 668.292815][T23839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4321'. [ 668.433819][T23842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4323'. [ 668.495122][T23842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4323'. [ 668.603147][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4323'. [ 668.637487][T23842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 668.644864][T23842] IPv6: NLM_F_CREATE should be set when creating new route [ 668.652312][T23842] IPv6: NLM_F_CREATE should be set when creating new route [ 668.763457][T23856] pimreg1: renamed from bridge0 [ 668.776636][T23856] pimreg1: entered allmulticast mode [ 668.805157][T23856] bond0: (slave pimreg1): Releasing backup interface [ 668.855139][T23856] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 669.150311][T23859] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 669.274079][T23877] ip6tnl3: entered allmulticast mode [ 669.409367][T23887] netlink: 'syz.2.4335': attribute type 4 has an invalid length. [ 669.462419][T23885] SET target dimension over the limit! [ 669.477713][ T42] lo speed is unknown, defaulting to 1000 [ 669.495606][ T42] syz1: Port: 1 Link DOWN [ 669.519695][ T42] lo speed is unknown, defaulting to 1000 [ 669.535306][T23883] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 669.555542][T23887] Cannot find del_set index 2 as target [ 670.056325][T23904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.064269][T23904] IPv6: NLM_F_CREATE should be set when creating new route [ 670.188159][T23916] gretap0: entered promiscuous mode [ 670.223106][T23916] vlan0: entered promiscuous mode [ 670.298937][T10981] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 670.343615][T10981] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 670.352558][ T6612] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 670.494154][ T6612] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 670.670346][T23928] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 670.711107][ T6612] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 670.744292][T23930] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 670.913495][T23941] syzkaller0: entered promiscuous mode [ 670.970651][T23941] syzkaller0: entered allmulticast mode [ 670.986060][T23946] syzkaller0: Caught tx_queue_len zero misconfig [ 671.661187][T23990] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 671.703789][T23998] netlink: 'syz.2.4361': attribute type 13 has an invalid length. [ 671.778843][T23988] lo speed is unknown, defaulting to 1000 [ 671.904955][T24001] __nla_validate_parse: 8 callbacks suppressed [ 671.904975][T24001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4361'. [ 671.970737][T24005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4362'. [ 672.469397][T23988] lo speed is unknown, defaulting to 1000 [ 672.494224][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 672.516170][T23988] lo speed is unknown, defaulting to 1000 [ 672.663991][T24030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4368'. [ 672.891180][T24037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4369'. [ 672.903039][T24036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4370'. [ 673.062627][T24037] bond_slave_0: entered promiscuous mode [ 673.090676][T24037] bond_slave_0: entered allmulticast mode [ 673.397448][T24048] siw: device registration error -23 [ 673.734290][T24058] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 674.080861][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 674.222442][T24074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4380'. [ 674.913286][T24101] tipc: Failed to remove unknown binding: 66,0,0/0:980676534/980676535 [ 675.007002][T24101] tipc: Enabled bearer , priority 0 [ 675.049579][T24101] tipc: Failed to remove unknown binding: 66,0,0/0:980676534/980676535 [ 675.228983][T24100] tipc: Disabling bearer [ 675.547444][T24122] netlink: 'syz.0.4388': attribute type 5 has an invalid length. [ 675.770860][T24137] lo: Caught tx_queue_len zero misconfig [ 676.035360][T24148] ip6gre0: Caught tx_queue_len zero misconfig [ 676.063771][T24148] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 676.238639][T24158] netlink: 'syz.1.4398': attribute type 1 has an invalid length. [ 676.473283][T24172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4403'. [ 676.644401][T24178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4405'. [ 676.688507][T24178] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4405'. [ 676.847057][T24188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.928802][T24186] lo speed is unknown, defaulting to 1000 [ 677.033911][T24198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4409'. [ 677.072477][T24198] bridge0: entered allmulticast mode [ 677.599502][T24230] netlink: 'syz.3.4416': attribute type 322 has an invalid length. [ 678.089506][T24242] sctp: [Deprecated]: syz.0.4421 (pid 24242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.089506][T24242] Use struct sctp_sack_info instead [ 678.398339][T24186] lo speed is unknown, defaulting to 1000 [ 678.922646][T24186] lo speed is unknown, defaulting to 1000 [ 679.447288][T24266] syzkaller0: entered promiscuous mode [ 679.455894][T24266] syzkaller0: entered allmulticast mode [ 679.491927][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4429'. [ 679.504152][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4429'. [ 679.559908][T24277] netlink: 'syz.4.4430': attribute type 21 has an invalid length. [ 679.569610][T24277] IPv6: NLM_F_CREATE should be specified when creating new route [ 679.579079][T24277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 679.586634][T24277] IPv6: NLM_F_CREATE should be set when creating new route [ 679.593973][T24277] IPv6: NLM_F_CREATE should be set when creating new route [ 679.601470][T24277] IPv6: NLM_F_CREATE should be set when creating new route [ 681.520801][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 685.190900][T24328] netlink: 'syz.0.4438': attribute type 9 has an invalid length. [ 685.243007][T24328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4438'. [ 685.431984][T24338] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 685.488258][T24342] x_tables: duplicate entry at hook 3 [ 685.715679][T24355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4446'. [ 686.600079][T24417] netlink: 'syz.3.4461': attribute type 13 has an invalid length. [ 686.692246][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4462'. [ 686.722660][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4461'. [ 686.759229][T24420] syzkaller0: entered promiscuous mode [ 686.764942][T24420] syzkaller0: entered allmulticast mode [ 686.852687][T24422] 8021q: adding VLAN 0 to HW filter on device bond10 [ 686.880516][T24420] TC_ACT_REPEAT abuse ? [ 687.109393][T24398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4459'. [ 687.824862][T24474] lo speed is unknown, defaulting to 1000 [ 687.892029][T24487] xt_hashlimit: size too large, truncated to 1048576 [ 687.976834][T24478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4475'. [ 688.008171][T24478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4475'. [ 688.090976][T24483] netlink: 'syz.4.4477': attribute type 1 has an invalid length. [ 688.147743][T24483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4477'. [ 688.244733][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4477'. [ 688.366874][T24506] syzkaller0: entered promiscuous mode [ 688.389382][T24506] syzkaller0: entered allmulticast mode [ 688.585231][T24518] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4480'. [ 688.910132][T24525] xfrm0: entered allmulticast mode [ 688.918211][T24474] lo speed is unknown, defaulting to 1000 [ 688.935118][T24525] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 688.975500][T24474] lo speed is unknown, defaulting to 1000 [ 689.779926][T24556] netlink: 'syz.3.4488': attribute type 1 has an invalid length. [ 689.873619][T24556] 8021q: adding VLAN 0 to HW filter on device bond11 [ 689.946004][T24561] bond11: (slave veth3): Enslaving as an active interface with a down link [ 689.987736][T24556] vlan4: entered allmulticast mode [ 689.997191][T24556] veth0_to_bond: entered allmulticast mode [ 690.003955][T24556] veth0_to_bond: entered promiscuous mode [ 690.017040][T24556] veth0_to_bond: left promiscuous mode [ 690.029524][T24556] bond11: (slave vlan4): making interface the new active one [ 690.082622][T24556] veth0_to_bond: entered promiscuous mode [ 690.092967][T24556] vlan4: entered promiscuous mode [ 690.106438][T24556] bond11: (slave vlan4): Enslaving as an active interface with an up link [ 690.226201][T24561] bond12: option updelay: invalid value (18446744073709518847) [ 690.258856][T24561] bond12: option updelay: allowed values 0 - 2147483647 [ 690.285610][T24561] bond12 (unregistering): Released all slaves [ 690.404134][T24583] syzkaller0: entered promiscuous mode [ 690.414168][T24583] syzkaller0: entered allmulticast mode [ 690.712684][T24586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.405878][T24616] __nla_validate_parse: 1 callbacks suppressed [ 695.405898][T24616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4499'. [ 695.462084][T24616] netlink: 'syz.4.4499': attribute type 21 has an invalid length. [ 695.480827][T24616] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4499'. [ 695.569615][T24624] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4502'. [ 695.583869][T24618] bond12 (unregistering): Released all slaves [ 695.663342][T24616] netlink: 'syz.4.4499': attribute type 4 has an invalid length. [ 695.680239][T24616] netlink: 'syz.4.4499': attribute type 5 has an invalid length. [ 695.692824][T24616] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4499'. [ 695.788226][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4505'. [ 696.066639][T24645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4508'. [ 696.155743][T24657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4510'. [ 696.241105][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 696.249829][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 696.585013][T24680] tipc: Enabling of bearer rejected, failed to enable media [ 696.629110][T24679] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4514'. [ 696.917697][T24695] netlink: 'syz.2.4518': attribute type 33 has an invalid length. [ 697.047830][T24697] netlink: 78 bytes leftover after parsing attributes in process `syz.4.4520'. [ 697.064005][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'. [ 697.136804][T24711] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 697.203850][T24711] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 697.584366][T24731] syzkaller0: entered promiscuous mode [ 697.589985][T24731] syzkaller0: entered allmulticast mode [ 697.816539][T24741] syzkaller0: entered promiscuous mode [ 697.838737][T24741] syzkaller0: entered allmulticast mode [ 698.065364][T24744] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 698.459230][T24772] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 698.963948][T24792] syzkaller1: entered promiscuous mode [ 698.993368][T24792] syzkaller1: entered allmulticast mode [ 699.513869][T24824] netlink: 'syz.3.4548': attribute type 49 has an invalid length. [ 699.533216][T24817] bond7: entered promiscuous mode [ 699.551587][T24826] xt_hashlimit: size too large, truncated to 1048576 [ 699.570857][T24817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 699.662238][T24821] xt_CT: No such helper "snmp_trap" [ 699.871801][T24816] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 699.917753][T24816] netlink: 'syz.4.4551': attribute type 2 has an invalid length. [ 699.958235][T24824] ip6gretap0: entered promiscuous mode [ 699.991012][T24824] ip6gretap0: entered allmulticast mode [ 699.996050][T24842] unsupported nlmsg_type 40 [ 700.269034][T24853] netlink: 'syz.4.4555': attribute type 3 has an invalid length. [ 700.314464][T24851] sctp: [Deprecated]: syz.2.4554 (pid 24851) Use of int in max_burst socket option deprecated. [ 700.314464][T24851] Use struct sctp_assoc_value instead [ 700.501989][T24863] dummy0: Caught tx_queue_len zero misconfig [ 700.872935][T24883] netlink: 'syz.1.4561': attribute type 1 has an invalid length. [ 700.980013][T24893] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20003 [ 701.295824][T24919] __nla_validate_parse: 12 callbacks suppressed [ 701.295844][T24919] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4565'. [ 701.775669][T24916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 701.914100][T10981] vlan4: left promiscuous mode [ 702.107637][T24956] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4572'. [ 702.155320][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4572'. [ 702.214464][T24959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4572'. [ 702.515385][T24963] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.526229][T24963] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.789491][T24963] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 702.807407][T24978] Cannot find del_set index 8192 as target [ 702.843148][T24963] bridge1: left promiscuous mode [ 702.849357][T24963] bridge1: left allmulticast mode [ 702.865382][T24963] bond2: left promiscuous mode [ 702.870911][T24963] bond2: left allmulticast mode [ 702.877572][T24963] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 702.886053][T24963] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 702.937469][T24963] bond7: left promiscuous mode [ 702.949735][T10981] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.965997][T10981] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.989088][T10981] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.015372][T10981] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.060566][T10981] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.086539][T10981] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.144795][T10981] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.160886][T10981] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.320332][T24998] netlink: 'syz.2.4581': attribute type 1 has an invalid length. [ 703.332641][T24997] syzkaller1: entered promiscuous mode [ 703.338255][T24997] syzkaller1: entered allmulticast mode [ 703.408120][T24999] lo speed is unknown, defaulting to 1000 [ 703.534897][T24972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.752672][T25013] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4587'. [ 703.803261][T25015] netlink: 'syz.3.4586': attribute type 1 has an invalid length. [ 703.828318][T24999] lo speed is unknown, defaulting to 1000 [ 703.835905][T24999] lo speed is unknown, defaulting to 1000 [ 704.013559][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4586'. [ 704.051341][T25022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4590'. [ 706.151647][T25079] lo speed is unknown, defaulting to 1000 [ 706.224632][T25087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4607'. [ 706.287734][T25089] pimreg1: renamed from bridge0 (while UP) [ 706.381997][T25089] pimreg1: entered allmulticast mode [ 706.397123][T25089] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 706.814504][T25104] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4612'. [ 706.915025][T25106] syzkaller0: entered promiscuous mode [ 706.952838][T25106] syzkaller0: entered allmulticast mode [ 706.980018][T25108] tipc: Enabled bearer , priority 0 [ 707.009424][T25106] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4613'. [ 707.198827][T25104] lo speed is unknown, defaulting to 1000 [ 707.221527][T25079] lo speed is unknown, defaulting to 1000 [ 707.231807][T25117] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 707.259763][T25117] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4615'. [ 707.261803][T25105] tipc: Resetting bearer [ 707.361591][T25119] netlink: 'syz.4.4615': attribute type 2 has an invalid length. [ 707.428538][T25105] tipc: Disabling bearer [ 707.443065][T25079] lo speed is unknown, defaulting to 1000 [ 707.549245][T25119] : entered promiscuous mode [ 707.696148][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4617'. [ 707.769371][T25104] lo speed is unknown, defaulting to 1000 [ 707.797213][T25104] lo speed is unknown, defaulting to 1000 [ 707.858185][T25127] lo speed is unknown, defaulting to 1000 [ 708.223238][T25137] syzkaller0: entered promiscuous mode [ 708.232837][T25137] syzkaller0: entered allmulticast mode [ 708.564795][T25127] lo speed is unknown, defaulting to 1000 [ 708.588255][T25127] lo speed is unknown, defaulting to 1000 [ 708.964686][T25147] pimreg1: left allmulticast mode [ 708.996143][T25147] netlink: 'syz.4.4623': attribute type 1 has an invalid length. [ 709.034273][T25147] netlink: 'syz.4.4623': attribute type 2 has an invalid length. [ 709.562051][T25175] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4630'. [ 709.625023][T25177] netlink: 'syz.1.4631': attribute type 1 has an invalid length. [ 709.633162][T25177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4631'. [ 709.825829][T25185] ipt_REJECT: TCP_RESET invalid for non-tcp [ 710.024560][T25195] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4633'. [ 710.366923][T25204] syzkaller0: entered promiscuous mode [ 710.376091][T25204] syzkaller0: entered allmulticast mode [ 710.425336][T25209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4640'. [ 710.622582][T25212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4641'. [ 710.640062][T25217] tipc: Enabled bearer , priority 30 [ 710.700057][T25213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4641'. [ 711.629082][T25252] tipc: MTU too low for tipc bearer [ 711.663452][ T24] tipc: Node number set to 905544054 [ 711.835260][T25259] __nla_validate_parse: 6 callbacks suppressed [ 711.835277][T25259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4655'. [ 712.099080][T25275] gre0: entered promiscuous mode [ 712.117255][T25275] gre0: entered allmulticast mode [ 712.148494][T25275] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 712.186501][T25275] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4658'. [ 712.199112][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4659'. [ 712.278793][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4660'. [ 712.567001][T25297] netlink: 'syz.3.4663': attribute type 1 has an invalid length. [ 712.578393][T25301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4665'. [ 712.612649][T25300] ip6gre1: entered promiscuous mode [ 712.619789][T25303] netlink: 'syz.0.4666': attribute type 3 has an invalid length. [ 712.629884][T25300] ip6gre1: entered allmulticast mode [ 712.636632][T25303] netlink: 'syz.0.4666': attribute type 1 has an invalid length. [ 712.648882][ T1169] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.660370][T25300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.680733][ T1169] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.688799][ T6612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.711391][T25303] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4666'. [ 712.750791][T25304] netlink: 'syz.0.4666': attribute type 3 has an invalid length. [ 712.760794][ T6612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.777667][T25304] netlink: 'syz.0.4666': attribute type 1 has an invalid length. [ 712.793556][T25304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4666'. [ 712.813788][T25308] netlink: 'syz.3.4663': attribute type 1 has an invalid length. [ 713.072324][T25317] netlink: 'syz.2.4670': attribute type 12 has an invalid length. [ 713.117792][T25316] syzkaller0: entered promiscuous mode [ 713.135389][T25316] syzkaller0: entered allmulticast mode [ 713.144945][T25322] sctp: [Deprecated]: syz.4.4672 (pid 25322) Use of int in max_burst socket option deprecated. [ 713.144945][T25322] Use struct sctp_assoc_value instead [ 713.440685][ T5719] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 713.668516][T25336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 713.691285][T25344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 714.229442][T25330] xfrm0: left allmulticast mode [ 714.455810][T25352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4679'. [ 714.635251][T25330] pimreg1: left allmulticast mode [ 714.688462][T25330] geneve0: left promiscuous mode [ 714.729716][T25358] netlink: 'syz.1.4681': attribute type 1 has an invalid length. [ 714.811196][T25330] vlan3: left promiscuous mode [ 714.816298][T25330] pimreg1: left promiscuous mode [ 714.856024][T25330] vlan4: left allmulticast mode [ 714.862081][T25330] veth0_to_bond: left allmulticast mode [ 714.887359][T25336] netlink: 'syz.4.4675': attribute type 2 has an invalid length. [ 714.907244][T25344] netlink: 'syz.4.4675': attribute type 2 has an invalid length. [ 714.931221][ T391] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.955149][ T391] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.095347][T25358] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 715.111156][ T391] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.161237][ T138] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.363046][T25381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 715.377570][T25381] bond1: (slave bond2): making interface the new active one [ 715.391606][T25381] bond1: (slave bond2): Enslaving as an active interface with an up link [ 715.516320][T25369] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 716.560670][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.640609][T25445] block nbd0: NBD_DISCONNECT [ 716.646545][T25445] block nbd0: Send disconnect failed -32 [ 716.664651][T25445] block nbd0: Send disconnect failed -32 [ 716.672724][T25447] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 716.700413][T25445] block nbd0: Send disconnect failed -32 [ 716.762067][T25445] block nbd0: shutting down sockets [ 716.970122][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.018196][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.073767][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.094708][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.183513][T25481] __nla_validate_parse: 10 callbacks suppressed [ 717.183533][T25481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4705'. [ 717.307820][T25467] nbd0: detected capacity change from 0 to 63 [ 717.659190][ T51] block nbd0: Receive control failed (result -104) [ 717.664971][T25500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4709'. [ 718.051109][T25533] simple: basic_2 [ 718.055577][T25533] simple: basic_4 [ 718.059269][T25533] simple: basic_6 [ 718.067023][T25533] simple: basic_8 [ 718.070743][T25533] simple: basic_10 [ 718.074554][T25533] simple: basic_12 [ 718.082728][T25533] simple: basic_14 [ 718.086691][T25533] simple: basic_16 [ 718.090545][T25533] simple: basic_18 [ 718.097063][T25533] simple: basic_20 [ 718.100925][T25533] simple: basic_22 [ 718.104670][T25533] simple: basic_24 [ 718.111050][T25533] simple: basic_26 [ 718.115129][T25533] simple: basic_28 [ 718.119157][T25533] simple: basic_30 [ 718.125893][T25533] simple: basic_32 [ 718.129674][T25533] simple: basic_34 [ 718.133605][T25533] 0: reclassify loop, rule prio 0, protocol 800 [ 718.192813][T25541] syzkaller1: entered promiscuous mode [ 718.204203][T25541] syzkaller1: entered allmulticast mode [ 718.223469][ T29] audit: type=1804 audit(1783370658.372:18): pid=25542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4714" name="/newroot/318/cgroup.controllers" dev="tmpfs" ino=1645 res=1 errno=0 [ 718.304899][ T29] audit: type=1800 audit(1783370658.372:19): pid=25542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4714" name="cgroup.controllers" dev="tmpfs" ino=1645 res=0 errno=0 [ 718.340052][ T29] audit: type=1804 audit(1783370658.372:20): pid=25542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4714" name="/newroot/318/cgroup.controllers" dev="tmpfs" ino=1645 res=1 errno=0 [ 718.495745][T25552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4719'. [ 718.541286][T25552] validate_nla: 3 callbacks suppressed [ 718.541360][T25552] netlink: 'syz.1.4719': attribute type 1 has an invalid length. [ 718.589411][T25552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4719'. [ 718.640168][T25557] xt_hashlimit: size too large, truncated to 1048576 [ 718.710367][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'. [ 718.741677][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'. [ 718.749646][T25567] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20001 [ 719.402581][T25601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4730'. [ 719.630624][T25617] netlink: 'syz.0.4730': attribute type 4 has an invalid length. [ 719.668264][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'. [ 719.734223][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4735'. [ 719.753493][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4735'. [ 719.809171][T25628] syzkaller0: entered promiscuous mode [ 719.833241][T25628] syzkaller0: entered allmulticast mode [ 720.025057][T25637] netlink: 'syz.3.4739': attribute type 1 has an invalid length. [ 720.037272][T25640] x_tables: duplicate underflow at hook 2 [ 720.186619][T25642] bond6: (slave veth0_to_bond): Releasing backup interface [ 720.329867][T25648] netlink: 'syz.4.4741': attribute type 1 has an invalid length. [ 720.964489][T25684] team_slave_1: Caught tx_queue_len zero misconfig [ 721.181647][T25695] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 721.232758][T25701] x_tables: duplicate entry at hook 1 [ 721.368167][T25708] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 721.750921][T25727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.851818][T25732] bond0: (slave ip6tnl0): refused to change device type [ 721.909267][T25733] syzkaller1: entered promiscuous mode [ 721.945871][T25733] syzkaller1: entered allmulticast mode [ 722.612498][T25765] __nla_validate_parse: 9 callbacks suppressed [ 722.612518][T25765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4773'. [ 722.712410][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4771'. [ 722.729904][T25765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4773'. [ 722.779098][T25760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 722.857529][T25765] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.272941][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4778'. [ 723.323648][T25788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4776'. [ 723.336224][T25792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4778'. [ 724.050101][T25825] lo speed is unknown, defaulting to 1000 [ 724.071576][T25828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4788'. [ 724.139055][T25828] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 724.346744][T25836] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 724.400663][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 724.600198][T25841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4790'. [ 724.684851][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'. [ 724.854958][T25844] tunl0: Caught tx_queue_len zero misconfig [ 724.887323][T25848] netlink: 'syz.2.4792': attribute type 13 has an invalid length. [ 724.959204][T25825] lo speed is unknown, defaulting to 1000 [ 724.987217][T25849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4792'. [ 725.217929][T25825] lo speed is unknown, defaulting to 1000 [ 725.517203][T25864] netlink: 'syz.1.4796': attribute type 12 has an invalid length. [ 725.541595][T25864] netlink: 'syz.1.4796': attribute type 29 has an invalid length. [ 725.549947][T25864] netlink: 'syz.1.4796': attribute type 1 has an invalid length. [ 725.574606][T25864] netlink: 'syz.1.4796': attribute type 2 has an invalid length. [ 726.212451][T25884] batadv_slave_0: Caught tx_queue_len zero misconfig [ 726.864177][T25906] lo speed is unknown, defaulting to 1000 [ 727.099423][T25912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.699748][T25906] lo speed is unknown, defaulting to 1000 [ 727.707719][T25906] lo speed is unknown, defaulting to 1000 [ 727.858714][T10981] bridge_slave_1: left allmulticast mode [ 727.871230][T10981] bridge_slave_1: left promiscuous mode [ 727.878027][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.889823][T10981] bridge_slave_0: left allmulticast mode [ 727.902570][T10981] bridge_slave_0: left promiscuous mode [ 727.908834][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.340023][T10981] veth0_to_bond: left allmulticast mode [ 728.346163][T10981] bridge7: port 2(veth0_to_bond) entered disabled state [ 728.390916][T10981] veth11: left allmulticast mode [ 728.396728][T10981] veth11: left promiscuous mode [ 728.401961][T10981] bridge7: port 1(veth11) entered disabled state [ 728.664927][T10981] erspan0 (unregistering): left promiscuous mode [ 728.694547][T10981] gretap0 (unregistering): left promiscuous mode [ 728.918464][T10981] bond2 (unregistering): (slave bridge3): Releasing active interface [ 728.942350][T10981] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 729.007039][T10981] bond0 (unregistering): left allmulticast mode [ 729.013726][T10981] bond_slave_0: left allmulticast mode [ 729.026788][T10981] team0: Port device bond0 removed [ 729.041463][T10981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.053380][T10981] bond_slave_0: left promiscuous mode [ 729.061113][T10981] bond0 (unregistering): Released all slaves [ 729.074788][T10981] bond1 (unregistering): Released all slaves [ 729.102533][T10981] bond2 (unregistering): Released all slaves [ 729.129972][T10981] bond3 (unregistering): Released all slaves [ 729.150877][T10981] bond4 (unregistering): Released all slaves [ 729.177618][T10981] bond5 (unregistering): Released all slaves [ 729.192816][T10981] bond6 (unregistering): (slave veth3): Releasing active interface [ 729.203108][T10981] bond6 (unregistering): Released all slaves [ 729.222088][T10981] bond7 (unregistering): (slave veth5): Releasing active interface [ 729.236320][T10981] bond7 (unregistering): (slave veth7): Releasing active interface [ 729.246272][T10981] bond7 (unregistering): Released all slaves [ 729.268118][T10981] bond8 (unregistering): (slave veth9): Releasing active interface [ 729.278502][T10981] bond8 (unregistering): Released all slaves [ 729.294195][T10981] bond9 (unregistering): Released all slaves [ 729.312245][T10981] bond10 (unregistering): (slave veth13): Releasing active interface [ 729.325777][T10981] bond10 (unregistering): Released all slaves [ 729.525288][T10981] : left promiscuous mode [ 729.677265][T10981] tipc: Disabling bearer [ 729.698521][T10981] tipc: Left network mode [ 730.311991][T10981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.319889][T10981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.524522][T10981] ±ÿþ€ (unregistering): left allmulticast mode [ 730.532154][T10981] team0 (unregistering): Port device 26±ÿþ€ removed [ 731.030225][T10981] IPVS: stop unused estimator thread 0... [ 739.760753][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.444093][ T1676] block nbd0: Possible stuck request ffff888040635080: control (read@0,1024B). Runtime 30 seconds [ 747.455385][ T1676] block nbd0: Possible stuck request ffff888040635240: control (read@1024,1024B). Runtime 30 seconds [ 747.466715][ T1676] block nbd0: Possible stuck request ffff888040635400: control (read@2048,1024B). Runtime 30 seconds [ 747.479085][ T1676] block nbd0: Possible stuck request ffff8880406355c0: control (read@3072,1024B). Runtime 30 seconds [ 768.560814][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.521645][ T1676] block nbd0: Possible stuck request ffff888040635080: control (read@0,1024B). Runtime 60 seconds [ 777.532501][ T1676] block nbd0: Possible stuck request ffff888040635240: control (read@1024,1024B). Runtime 60 seconds [ 777.543719][ T1676] block nbd0: Possible stuck request ffff888040635400: control (read@2048,1024B). Runtime 60 seconds [ 777.554780][ T1676] block nbd0: Possible stuck request ffff8880406355c0: control (read@3072,1024B). Runtime 60 seconds [ 779.405502][ T4988] udevd[4988]: worker [24841] /devices/virtual/block/nbd0 is taking a long time [ 806.428640][T25952] __nla_validate_parse: 7 callbacks suppressed [ 806.428656][T25952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4816'. [ 806.552980][T25960] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:1 [ 806.776196][T25968] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4821'. [ 806.802637][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4822'. [ 806.825389][T25970] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4822'. [ 807.078946][T25961] team0: Device vxcan1 is of different type [ 807.163785][T25973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4823'. [ 807.476340][T25982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4824'. [ 807.490576][T25980] team0: Port device syz_tun added [ 807.501890][T25978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4824'. [ 807.507287][T25983] netlink: 'syz.0.4826': attribute type 23 has an invalid length. [ 807.592216][T25982] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 807.610708][ T1676] block nbd0: Possible stuck request ffff888040635080: control (read@0,1024B). Runtime 90 seconds [ 807.621646][ T1676] block nbd0: Possible stuck request ffff888040635240: control (read@1024,1024B). Runtime 90 seconds [ 807.634262][ T1676] block nbd0: Possible stuck request ffff888040635400: control (read@2048,1024B). Runtime 90 seconds [ 807.645699][ T1676] block nbd0: Possible stuck request ffff8880406355c0: control (read@3072,1024B). Runtime 90 seconds [ 807.948616][T25993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.021660][T25993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.037958][T25993] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 808.093951][T25993] bond0 (unregistering): Released all slaves [ 808.140823][ T14] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.152518][ T14] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.209493][ T14] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.224955][ T14] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.376390][T26016] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 808.498580][T26020] lo speed is unknown, defaulting to 1000 [ 809.446386][T26020] lo speed is unknown, defaulting to 1000 [ 809.461680][T26020] lo speed is unknown, defaulting to 1000 [ 809.558180][T26043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4840'. [ 810.012405][T26051] netlink: 'syz.1.4842': attribute type 13 has an invalid length. [ 810.094391][T26052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4842'. [ 810.224186][T26057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4844'. [ 810.784716][T26069] syzkaller0: entered promiscuous mode [ 810.816460][T26069] syzkaller0: entered allmulticast mode [ 811.320279][T26093] nbd3: detected capacity change from 0 to 63 [ 811.332408][T26094] block nbd3: NBD_DISCONNECT [ 811.338141][T26094] block nbd3: Disconnected due to user request. [ 811.364217][ T1654] blk_print_req_error: 26 callbacks suppressed [ 811.364236][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.365499][T26094] block nbd3: shutting down sockets [ 811.386288][ T1654] buffer_io_error: 52 callbacks suppressed [ 811.386365][ T1654] Buffer I/O error on dev nbd3, logical block 0, async page read [ 811.405647][ T1654] Buffer I/O error on dev nbd3, logical block 1, async page read [ 811.419273][ T1654] Buffer I/O error on dev nbd3, logical block 2, async page read [ 811.427285][ T1654] Buffer I/O error on dev nbd3, logical block 3, async page read [ 811.443420][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.456897][ T1654] Buffer I/O error on dev nbd3, logical block 0, async page read [ 811.465005][ T1654] Buffer I/O error on dev nbd3, logical block 1, async page read [ 811.478246][ T1654] Buffer I/O error on dev nbd3, logical block 2, async page read [ 811.486329][ T1654] Buffer I/O error on dev nbd3, logical block 3, async page read [ 811.498519][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.508053][ T1654] Buffer I/O error on dev nbd3, logical block 0, async page read [ 811.521130][ T1654] Buffer I/O error on dev nbd3, logical block 1, async page read [ 811.529550][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.565160][ T1676] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.575247][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.589112][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.603010][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.618654][T24848] ldm_validate_partition_table(): Disk read failed. [ 811.629143][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.642007][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 811.655947][T24848] Dev nbd3: unable to read RDB block 0 [ 811.673965][T24848] nbd3: unable to read partition table [ 811.714948][T24848] ldm_validate_partition_table(): Disk read failed. [ 811.729799][T24848] Dev nbd3: unable to read RDB block 0 [ 811.741150][T24848] nbd3: unable to read partition table [ 811.783168][T26112] netlink: 'syz.0.4855': attribute type 21 has an invalid length. [ 811.800466][T26112] IPv6: NLM_F_CREATE should be specified when creating new route [ 811.954882][T26119] __nla_validate_parse: 2 callbacks suppressed [ 811.954900][T26119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4858'. [ 811.967144][T26118] syzkaller0: entered promiscuous mode [ 811.979319][T26118] syzkaller0: entered allmulticast mode [ 812.073339][T26124] xt_hashlimit: size too large, truncated to 1048576 [ 812.180396][T26130] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4860'. [ 812.252838][T26132] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4862'. [ 812.279990][T26132] netlink: 'syz.3.4862': attribute type 9 has an invalid length. [ 812.296201][T26132] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4862'. [ 812.340653][T26132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4862'. [ 812.801958][T26151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4868'. [ 812.910613][T26160] bond0 (unregistering): Released all slaves [ 813.131619][T26177] bridge_slave_0: left allmulticast mode [ 813.146706][T26177] bridge_slave_0: left promiscuous mode [ 813.156586][T26177] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.181191][T26184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4878'. [ 813.211662][T26177] bridge_slave_1: left allmulticast mode [ 813.234472][T26177] bridge_slave_1: left promiscuous mode [ 813.251016][T26177] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.284895][T26177] bond0: (slave bond_slave_0): Releasing backup interface [ 813.317250][T26196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 813.330257][T26177] bond0: (slave bond_slave_1): Releasing backup interface [ 813.360554][ T29] audit: type=1804 audit(1783370753.502:21): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4876" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2020 res=1 errno=0 [ 813.361116][T26177] team0: Port device team_slave_0 removed [ 813.422545][ T29] audit: type=1800 audit(1783370753.502:22): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4876" name="cgroup.controllers" dev="tmpfs" ino=2020 res=0 errno=0 [ 813.447177][ T29] audit: type=1804 audit(1783370753.502:23): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4876" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2020 res=1 errno=0 [ 813.486035][T26177] team0: Port device team_slave_1 removed [ 813.509582][T26177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 813.548216][T26194] tipc: Started in network mode [ 813.566933][T26194] tipc: Node identity 080211000001, cluster identity 4711 [ 813.577818][T26194] tipc: Enabled bearer , priority 0 [ 813.589994][T26189] syzkaller1: entered promiscuous mode [ 813.596032][T26189] syzkaller1: entered allmulticast mode [ 813.606248][T26188] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 813.620399][T26188] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 813.707640][T26194] tipc: Resetting bearer [ 813.788882][T26212] ±ÿ: renamed from lo [ 814.153620][T26234] netlink: 'syz.1.4889': attribute type 4 has an invalid length. [ 814.199757][T26234] netlink: 'syz.1.4889': attribute type 4 has an invalid length. [ 814.218644][T19633] lo speed is unknown, defaulting to 1000 [ 814.231147][T19633] syz : Port: 1 Link DOWN [ 814.238139][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'. [ 814.275580][T19633] lo speed is unknown, defaulting to 1000 [ 814.283938][T26234] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4889'. [ 814.304039][T19633] syz : Port: 1 Link ACTIVE [ 814.309143][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4892'. [ 814.349950][T26245] bond0: entered promiscuous mode [ 814.360868][T26257] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 814.383453][T26257] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 814.396650][T26257] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 814.482984][T26244] bond10: entered promiscuous mode [ 814.580699][ T24] tipc: Node number set to 134418688 [ 815.267967][T26316] netlink: 'syz.2.4912': attribute type 12 has an invalid length. [ 815.303676][T26316] netlink: 'syz.2.4912': attribute type 14 has an invalid length. [ 815.361300][T26323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 815.614937][T26330] netlink: 'syz.2.4917': attribute type 7 has an invalid length. [ 816.180941][T26355] tipc: Enabling of bearer rejected, failed to enable media [ 816.253887][T26351] netlink: zone id is out of range [ 816.301219][T26351] netlink: zone id is out of range [ 816.336889][T26351] netlink: zone id is out of range [ 816.342502][T26351] netlink: del zone limit has 4 unknown bytes [ 816.643788][T26380] bond11: Unable to set up delay as MII monitoring is disabled [ 816.659668][T26380] bond11 (unregistering): Released all slaves [ 817.064608][T26410] __nla_validate_parse: 9 callbacks suppressed [ 817.064630][T26410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4938'. [ 817.126499][T26410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 817.262360][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'. [ 817.359892][T26425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4940'. [ 817.384599][T26422] ip6tnl3: entered allmulticast mode [ 817.410358][T26425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4940'. [ 817.427738][T26422] netlink: 36764 bytes leftover after parsing attributes in process `syz.3.4939'. [ 817.446020][T26422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'. [ 817.582237][T26438] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 817.599796][T26438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4942'. [ 817.662754][T26440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4943'. [ 817.699502][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4942'. [ 818.120362][T26460] netlink: 'syz.4.4949': attribute type 40 has an invalid length. [ 818.339620][T26470] IPVS: set_ctl: invalid protocol: 64 0.0.0.0:0 [ 818.376779][T26470] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 818.590255][T26485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4956'. [ 818.863913][T26506] batadv_slave_1: Caught tx_queue_len zero misconfig [ 818.989587][T26518] netlink: 'syz.1.4963': attribute type 8 has an invalid length. [ 819.067033][ T391] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.076900][T26518] netlink: 'syz.1.4963': attribute type 8 has an invalid length. [ 819.098811][ T391] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.128476][ T391] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.165262][T26529] netlink: 'syz.2.4960': attribute type 6 has an invalid length. [ 819.217948][T26523] netlink: 'syz.1.4963': attribute type 8 has an invalid length. [ 819.259379][T26523] netlink: 'syz.1.4963': attribute type 8 has an invalid length. [ 819.770284][T26548] syzkaller0: entered promiscuous mode [ 819.776397][T26548] syzkaller0: entered allmulticast mode [ 820.431231][T24848] udevd[24848]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 825.631640][T26575] veth4: entered allmulticast mode [ 825.822236][T26594] : renamed from bridge_slave_0 [ 825.868659][T26598] netlink: 'syz.4.4978': attribute type 1 has an invalid length. [ 825.936129][T26599] __nla_validate_parse: 11 callbacks suppressed [ 825.936149][T26599] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4979'. [ 826.270318][T26622] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4984'. [ 826.287965][T26622] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4984'. [ 826.307770][T26623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4983'. [ 826.403092][T26627] dummy0: left promiscuous mode [ 826.556925][T26637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4988'. [ 826.617040][T26639] ±ÿ speed is unknown, defaulting to 1000 [ 826.985283][ T24] lo speed is unknown, defaulting to 1000 [ 827.207885][T26639] lo speed is unknown, defaulting to 1000 [ 827.215572][T26639] lo speed is unknown, defaulting to 1000 [ 827.482817][T26639] ±ÿ speed is unknown, defaulting to 1000 [ 827.526463][T26686] ip6tnl0: Caught tx_queue_len zero misconfig [ 827.712762][T26683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.953234][T26639] lo speed is unknown, defaulting to 1000 [ 827.989828][T26639] lo speed is unknown, defaulting to 1000 [ 828.466431][T26723] netlink: 'syz.0.5012': attribute type 21 has an invalid length. [ 828.551210][T26723] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5012'. [ 828.637926][T26727] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5015'. [ 828.682431][T26723] netlink: 'syz.0.5012': attribute type 5 has an invalid length. [ 828.700582][T26723] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5012'. [ 828.877408][T26737] netlink: 'syz.3.5018': attribute type 1 has an invalid length. [ 828.892164][T26737] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5018'. [ 828.994637][T26744] syzkaller1: entered promiscuous mode [ 829.036305][T26744] syzkaller1: entered allmulticast mode [ 829.376531][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.388096][T26747] veth16: entered promiscuous mode [ 829.522624][T26759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5024'. [ 830.264238][T26779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 830.739701][T26805] openvswitch: netlink: IPv4 tunnel dst address is zero [ 831.034890][T26816] 8021q: adding VLAN 0 to HW filter on device bond13 [ 831.181200][T26823] __nla_validate_parse: 3 callbacks suppressed [ 831.181221][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5042'. [ 831.204623][T26823] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5042'. [ 831.693953][T26868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5055'. [ 831.707591][T26867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5054'. [ 831.802170][T26868] 8021q: adding VLAN 0 to HW filter on device bond14 [ 832.075042][T26890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5061'. [ 832.150156][T26890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5061'. [ 832.312936][T26895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.336789][T26899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5064'. [ 832.365119][T26901] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5065'. [ 832.427744][T26895] sctp: [Deprecated]: syz.0.5063 (pid 26895) Use of int in max_burst socket option. [ 832.427744][T26895] Use struct sctp_assoc_value instead [ 832.744318][T26911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5067'. [ 832.747356][T26912] xt_CT: No such helper "syz0" [ 833.455386][T26919] netlink: 'syz.1.5070': attribute type 1 has an invalid length. [ 833.899638][T26929] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5073'. [ 834.001782][T26938] ipt_REJECT: TCP_RESET invalid for non-tcp [ 834.030264][T26938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 834.037736][T26938] IPv6: NLM_F_CREATE should be set when creating new route [ 834.045103][T26938] IPv6: NLM_F_CREATE should be set when creating new route [ 834.480680][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 834.973897][T26972] sch_fq: defrate 7 ignored. [ 835.173801][T26976] sctp: [Deprecated]: syz.4.5087 (pid 26976) Use of int in max_burst socket option deprecated. [ 835.173801][T26976] Use struct sctp_assoc_value instead [ 835.716687][T26995] netlink: 'syz.1.5091': attribute type 1 has an invalid length. [ 835.733006][T26996] macsec1: entered promiscuous mode [ 835.738368][T26996] erspan0: entered promiscuous mode [ 835.744086][T26996] macsec1: entered allmulticast mode [ 835.770854][T26996] erspan0: entered allmulticast mode [ 835.787010][T26996] erspan0: left allmulticast mode [ 835.792435][T26996] erspan0: left promiscuous mode [ 835.857239][T26995] 8021q: adding VLAN 0 to HW filter on device bond15 [ 835.870864][T26991] bridge0: port 3(batadv0) entered blocking state [ 835.890897][T26991] bridge0: port 3(batadv0) entered disabled state [ 835.897643][T26991] batadv0: entered allmulticast mode [ 835.929873][T26991] batadv0: entered promiscuous mode [ 835.971994][T26997] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 836.104265][T27004] netlink: 'syz.0.5093': attribute type 4 has an invalid length. [ 836.112958][T27001] syzkaller0: entered promiscuous mode [ 836.124569][T27001] syzkaller0: entered allmulticast mode [ 836.315674][T27006] __nla_validate_parse: 7 callbacks suppressed [ 836.315705][T27006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5094'. [ 836.381601][T13709] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 836.392827][T13709] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 836.500714][T27009] syzkaller0: entered promiscuous mode [ 836.526340][T27009] syzkaller0: entered allmulticast mode [ 836.586206][T27024] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5100'. [ 837.285446][T27066] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5110'. [ 837.295542][T27066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5110'. [ 837.409698][T27073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5115'. [ 837.533325][T27080] xt_ecn: cannot match TCP bits for non-tcp packets [ 837.574940][T27073] 8021q: adding VLAN 0 to HW filter on device bond8 [ 837.628152][T27077] bond8: (slave batadv1): Opening slave failed [ 837.655171][T27075] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5118'. [ 837.674866][T27085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5120'. [ 837.685827][ T1676] block nbd0: Possible stuck request ffff888040635080: control (read@0,1024B). Runtime 120 seconds [ 837.703237][ T1676] block nbd0: Possible stuck request ffff888040635240: control (read@1024,1024B). Runtime 120 seconds [ 837.715322][ T1676] block nbd0: Possible stuck request ffff888040635400: control (read@2048,1024B). Runtime 120 seconds [ 837.729718][ T1676] block nbd0: Possible stuck request ffff8880406355c0: control (read@3072,1024B). Runtime 120 seconds [ 837.813993][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5120'. [ 837.907996][T27095] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5124'. [ 838.225298][T27115] netlink: 'syz.4.5129': attribute type 2 has an invalid length. [ 838.270368][T27115] netlink: 'syz.4.5129': attribute type 2 has an invalid length. [ 838.287951][T27115] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.5129'. [ 838.300001][T27115] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 838.419684][T27115] xt_CT: No such helper "netbios-ns" [ 838.569725][T27130] netlink: 'syz.4.5134': attribute type 1 has an invalid length. [ 838.723745][T27130] 8021q: adding VLAN 0 to HW filter on device bond13 [ 838.780003][T27130] bond13: (slave geneve3): making interface the new active one [ 838.826937][T27130] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 838.861578][ T14] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.886200][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.919259][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.944791][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.326924][T27166] netlink: 'syz.0.5142': attribute type 10 has an invalid length. [ 839.468243][T27170] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 839.656763][T27186] 8021q: adding VLAN 0 to HW filter on device bond14 [ 840.043549][T27196] netlink: 'syz.4.5150': attribute type 1 has an invalid length. [ 840.079410][T27196] 8021q: adding VLAN 0 to HW filter on device bond15 [ 840.545845][T27224] vlan0: entered promiscuous mode [ 840.568243][T27224] syzkaller0: entered promiscuous mode [ 840.573775][T27224] syzkaller0: entered allmulticast mode [ 840.777783][T27235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 841.028127][T27253] netlink: 'syz.4.5166': attribute type 1 has an invalid length. [ 841.356525][T27271] __nla_validate_parse: 17 callbacks suppressed [ 841.356544][T27271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5172'. [ 841.461724][T27271] 8021q: adding VLAN 0 to HW filter on device bond9 [ 841.465982][T27273] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 841.731488][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 842.018992][T27302] netlink: 'syz.1.5177': attribute type 4 has an invalid length. [ 842.370880][T27316] macvtap1: entered promiscuous mode [ 842.376386][T27316] vlan0: entered promiscuous mode [ 842.401475][T27316] vlan0: left promiscuous mode [ 842.684028][T27324] tipc: Resetting bearer [ 843.789853][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.796957][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.803653][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.809816][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.817292][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.827671][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.833922][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.840678][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.846396][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.852736][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.858554][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.864759][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.870884][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 843.877234][T27338] netpci0: tun_chr_ioctl cmd 1074025673 [ 844.332656][T27282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.716665][T27357] netlink: 'syz.3.5193': attribute type 1 has an invalid length. [ 844.728879][T27355] IPVS: set_ctl: invalid protocol: 58 172.30.1.2:20002 [ 844.742162][T27357] bond0: (slave dummy0): Releasing backup interface [ 844.808354][T27357] team0: Port device xfrm0 removed [ 844.812943][T27364] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5196'. [ 844.822314][T27357] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 845.032356][T27373] netlink: 'syz.4.5198': attribute type 4 has an invalid length. [ 845.075150][T27382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5199'. [ 845.126026][T27382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5199'. [ 845.221271][T27373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.232065][T27373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.244848][T27373] veth1_vlan: left promiscuous mode [ 845.252502][T27373] vlan0: left promiscuous mode [ 845.260495][T27373] veth1_vlan: entered promiscuous mode [ 845.263477][T27392] netlink: 'syz.1.5203': attribute type 2 has an invalid length. [ 845.270433][T27373] tipc: Resetting bearer [ 845.279943][T27373] tipc: Resetting bearer [ 845.287358][T27373] veth1_macvtap: left promiscuous mode [ 845.294332][T27373] veth0_macvtap: left promiscuous mode [ 845.301204][T27373] veth0_macvtap: entered promiscuous mode [ 845.308530][T27373] veth1_macvtap: entered promiscuous mode [ 845.317102][T27373] geneve1: left promiscuous mode [ 845.323995][T27373] 8021q: adding VLAN 0 to HW filter on device €Â [ 845.331886][T27373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.340049][T27373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.348156][T27373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.356128][T27373] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 845.384748][T15888] pimreg1: port 1(bridge_slave_0) entered blocking state [ 845.392853][T15888] pimreg1: port 1(bridge_slave_0) entered listening state [ 845.407384][T15888] pimreg1: port 2(bridge_slave_1) entered blocking state [ 845.415243][T15888] pimreg1: port 2(bridge_slave_1) entered listening state [ 845.580808][T27396] gre0: left allmulticast mode [ 845.690823][ C0] Dropped outbound packet type=88ca [ 845.807242][T27412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5209'. [ 845.877628][T27412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5209'. [ 845.930069][T27421] netlink: 'syz.2.5212': attribute type 1 has an invalid length. [ 845.941196][T27423] x_tables: duplicate underflow at hook 1 [ 845.972805][T27421] 8021q: adding VLAN 0 to HW filter on device bond10 [ 846.088867][T27426] bond10: (slave geneve2): making interface the new active one [ 846.146761][T27426] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 846.220553][ C0] Dropped outbound packet type=88ca [ 846.391683][T27442] syzkaller1: entered promiscuous mode [ 846.403630][T27442] syzkaller1: entered allmulticast mode [ 847.280761][ C0] Dropped outbound packet type=88ca [ 847.425800][T27484] Cannot find set identified by id 0 to match [ 848.170298][T27523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5236'. [ 848.320632][ C0] Dropped outbound packet type=88ca [ 848.473999][T27536] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5238'. [ 849.000005][T27547] ±ÿ speed is unknown, defaulting to 1000 [ 849.321942][T27588] veth1_to_bond: entered promiscuous mode [ 849.328524][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5251'. [ 849.362406][ C0] Dropped outbound packet type=88ca [ 849.362602][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5251'. [ 849.485600][T27596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5250'. [ 849.647579][T27596] veth1_to_bond (unregistering): left promiscuous mode [ 849.746121][T27547] lo speed is unknown, defaulting to 1000 [ 849.757601][T27547] lo speed is unknown, defaulting to 1000 [ 849.811634][T27611] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.5257'. [ 850.063962][T27615] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5258'. [ 850.176322][T27615] syzkaller0: entered promiscuous mode [ 850.182211][T27615] syzkaller0: entered allmulticast mode [ 850.228211][T27623] tipc: Resetting bearer [ 850.400653][ C0] Dropped outbound packet type=88ca [ 851.441875][ C0] Dropped outbound packet type=88ca [ 851.607316][T27644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5264'. [ 851.619802][T27644] netlink: 'syz.0.5264': attribute type 2 has an invalid length. [ 851.627573][T27644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5264'. [ 852.480673][ C0] Dropped outbound packet type=88ca [ 853.533040][ C0] Dropped outbound packet type=88ca [ 854.573085][ C0] Dropped outbound packet type=88ca [ 855.473931][T27651] netlink: 'syz.2.5267': attribute type 1 has an invalid length. [ 855.582110][T27651] 8021q: adding VLAN 0 to HW filter on device bond11 [ 855.601589][ C0] Dropped outbound packet type=88ca [ 855.638200][T27662] tipc: New replicast peer: 255.255.255.255 [ 855.655856][T27662] tipc: Enabled bearer , priority 10 [ 855.692120][T27656] netlink: 'syz.1.5269': attribute type 1 has an invalid length. [ 855.743292][T27661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5268'. [ 855.775134][T27659] bond11: (slave veth18): Enslaving as an active interface with a down link [ 855.815029][T27651] gre0: left promiscuous mode [ 855.820122][T27651] gretap0: left promiscuous mode [ 855.893589][T27662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5269'. [ 855.967426][T27651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.991564][T27651] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.104941][T27651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 856.115338][T27651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 856.146090][T27651] veth1_vlan: left promiscuous mode [ 856.153345][T27651] veth0_vlan: left promiscuous mode [ 856.215256][T27651] veth0_vlan: entered promiscuous mode [ 856.222591][T27651] veth1_vlan: entered promiscuous mode [ 856.238377][T27651] veth1_macvtap: left promiscuous mode [ 856.252304][T27651] veth0_macvtap: left promiscuous mode [ 856.260296][T27651] veth0_macvtap: entered promiscuous mode [ 856.268891][T27651] veth1_macvtap: entered promiscuous mode [ 856.296724][T27651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.314995][T27651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.328747][T27651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.342304][T27651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.350236][T27651] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 856.377274][T27667] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 856.387057][T27667] bond11: (slave batadv1): making interface the new active one [ 856.400010][T27667] batadv1: entered promiscuous mode [ 856.407083][T27667] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 856.430058][ T24] ±ÿ speed is unknown, defaulting to 1000 [ 856.437196][ T24] syz1: Port: 1 Link ACTIVE [ 856.443460][T13701] bridge0: port 1(1) entered blocking state [ 856.449710][T13701] bridge0: port 1(1) entered listening state [ 856.499723][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.507101][T13701] bridge0: port 2(bridge_slave_1) entered listening state [ 856.613215][ T5354] ±ÿ speed is unknown, defaulting to 1000 [ 856.640642][ C0] Dropped outbound packet type=88ca [ 856.659149][T27680] netlink: 'syz.4.5273': attribute type 12 has an invalid length. [ 856.670962][T27676] syzkaller1: entered promiscuous mode [ 856.685042][T27687] x_tables: duplicate underflow at hook 3 [ 856.685966][T27676] syzkaller1: entered allmulticast mode [ 856.740148][T27692] netlink: 'syz.1.5278': attribute type 1 has an invalid length. [ 856.789666][T19632] tipc: Node number set to 769 [ 856.895036][T27700] 8021q: adding VLAN 0 to HW filter on device bond17 [ 856.909217][T27700] bond16: (slave bond17): making interface the new active one [ 856.919641][T27700] bond16: (slave bond17): Enslaving as an active interface with an up link [ 856.966282][T27688] sit0: entered promiscuous mode [ 857.005964][T27688] netlink: 'syz.0.5276': attribute type 1 has an invalid length. [ 857.022292][T27688] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5276'. [ 857.073786][T27697] syzkaller0: entered promiscuous mode [ 857.079330][T27697] syzkaller0: entered allmulticast mode [ 857.120729][T27683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5276'. [ 857.268622][T27704] ±ÿ speed is unknown, defaulting to 1000 [ 857.468860][T27730] x_tables: unsorted entry at hook 3 [ 857.680777][ C0] Dropped outbound packet type=88ca [ 857.689313][T27704] lo speed is unknown, defaulting to 1000 [ 857.702241][T27704] lo speed is unknown, defaulting to 1000 [ 858.236353][T27723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.489494][T27753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5292'. [ 858.590879][T27758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5292'. [ 858.604570][T27758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.654252][T27754] syzkaller0: entered promiscuous mode [ 858.666287][T27754] syzkaller0: entered allmulticast mode [ 858.691275][T27752] syzkaller1: entered promiscuous mode [ 858.720922][ C0] Dropped outbound packet type=88ca [ 858.726570][T27752] syzkaller1: entered allmulticast mode [ 859.769753][ C0] Dropped outbound packet type=88ca [ 860.726204][ C0] pimreg1: port 2(bridge_slave_1) entered learning state [ 860.736878][ C0] pimreg1: port 1(bridge_slave_0) entered learning state [ 860.801801][ C0] Dropped outbound packet type=88ca [ 861.856782][ C0] Dropped outbound packet type=88ca [ 862.487440][T27800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5305'. [ 862.886210][ C0] Dropped outbound packet type=88ca [ 863.934424][ C0] Dropped outbound packet type=88ca [ 864.961560][ C0] Dropped outbound packet type=88ca [ 865.720427][T27798] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 865.847508][T27798] syzkaller0: left allmulticast mode [ 865.858710][T27798] ip6tnl3: left allmulticast mode [ 865.949381][ T5719] lo speed is unknown, defaulting to 1000 [ 865.959874][ T5719] syz : Port: 1 Link DOWN [ 865.999270][T27829] bond16: option xmit_hash_policy: invalid value (10) [ 866.000621][ C0] Dropped outbound packet type=88ca [ 866.015387][T27829] bond16 (unregistering): Released all slaves [ 866.052671][ T1169] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.071009][ T1169] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.080363][ T1169] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.098097][ T1169] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.150189][ T1169] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.159478][ T1169] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.241789][ T5354] lo speed is unknown, defaulting to 1000 [ 866.262305][T27844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5314'. [ 866.527052][T27842] ip6erspan0: entered allmulticast mode [ 866.552267][T27857] ±ÿ speed is unknown, defaulting to 1000 [ 866.703182][T27859] tipc: Resetting bearer [ 866.727414][T27859] tipc: Resetting bearer [ 866.777634][ T9] lo speed is unknown, defaulting to 1000 [ 866.815397][T27860] tipc: Resetting bearer [ 866.830297][ T138] tipc: Resetting bearer [ 866.841635][T27857] lo speed is unknown, defaulting to 1000 [ 866.849192][T27857] lo speed is unknown, defaulting to 1000 [ 867.030687][T27877] sch_fq: defrate 7 ignored. [ 867.040740][ C0] Dropped outbound packet type=88ca [ 867.115324][T27877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5321'. [ 867.214528][T27880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5321'. [ 867.506749][T27888] Bluetooth: MGMT ver 1.23 [ 867.581542][T27893] x_tables: duplicate entry at hook 1 [ 867.761469][ T1676] block nbd0: Possible stuck request ffff888040635080: control (read@0,1024B). Runtime 150 seconds [ 867.772438][ T1676] block nbd0: Possible stuck request ffff888040635240: control (read@1024,1024B). Runtime 150 seconds [ 867.783662][ T1676] block nbd0: Possible stuck request ffff888040635400: control (read@2048,1024B). Runtime 150 seconds [ 867.794816][ T1676] block nbd0: Possible stuck request ffff8880406355c0: control (read@3072,1024B). Runtime 150 seconds [ 867.985986][T27903] ±ÿ speed is unknown, defaulting to 1000 [ 868.080618][ C0] Dropped outbound packet type=88ca [ 868.163499][T13701] batadv1: left promiscuous mode [ 868.186522][T27910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5330'. [ 868.251477][T27912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5332'. [ 868.512551][T27903] lo speed is unknown, defaulting to 1000 [ 868.541984][T27903] lo speed is unknown, defaulting to 1000 [ 868.600026][T27925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.644091][T27929] netlink: 'syz.3.5337': attribute type 1 has an invalid length. [ 868.655972][T27926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.754098][T27929] 8021q: adding VLAN 0 to HW filter on device bond12 [ 868.785637][T27936] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 868.889904][T27932] bond12: (slave veth7): Enslaving as an active interface with a down link [ 868.972038][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 868.981657][T27946] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5340'. [ 869.008603][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 869.046484][T27946] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5340'. [ 869.115608][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 869.120864][ C0] Dropped outbound packet type=88ca [ 869.247096][T27929] bond13: option updelay: invalid value (18446744073709518847) [ 869.262606][T27929] bond13: option updelay: allowed values 0 - 2147483647 [ 869.271719][T27952] xt_time: unknown flags 0xf4 [ 869.278210][T27929] bond13 (unregistering): Released all slaves [ 869.757623][T27982] openvswitch: netlink: Unknown key attributes 20 [ 870.160753][ C0] Dropped outbound packet type=88ca [ 870.251125][T28002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5354'. [ 870.521039][T28011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5353'. [ 870.837740][T28019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5357'. [ 871.172296][T28030] sctp: [Deprecated]: syz.3.5360 (pid 28030) Use of int in max_burst socket option. [ 871.172296][T28030] Use struct sctp_assoc_value instead [ 871.200904][ C0] Dropped outbound packet type=88ca [ 871.299363][T28034] openvswitch: netlink: Message has 4 unknown bytes. [ 871.306643][T28034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.318846][T28034] syzkaller0: entered promiscuous mode [ 871.324679][T28034] syzkaller0: entered allmulticast mode [ 871.601048][ C0] bridge0: port 1(1) entered learning state [ 871.613412][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 872.241390][ C0] Dropped outbound packet type=88ca [ 873.233425][T28004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 873.280788][ C0] Dropped outbound packet type=88ca [ 873.719277][T28060] __nla_validate_parse: 3 callbacks suppressed [ 873.719298][T28060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5370'. [ 874.320616][ C0] Dropped outbound packet type=88ca [ 874.480658][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5377'. [ 874.524718][T28093] xt_CT: No such helper "syz0" [ 875.042069][T28120] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 875.091094][T28120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5381'. [ 875.261840][T28127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5383'. [ 875.360878][ C0] Dropped outbound packet type=88ca [ 875.363983][T28132] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5385'. [ 875.880365][T28143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5389'. [ 875.895156][T28144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5388'. [ 876.033799][T28123] infiniband syz0: set active [ 876.038625][T28123] infiniband syz0: added bond_slave_0 [ 876.064499][T28123] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 876.080923][ C0] pimreg1: port 1(bridge_slave_0) entered forwarding state [ 876.080995][ C0] pimreg1: topology change detected, propagating [ 876.081468][ C0] pimreg1: port 2(bridge_slave_1) entered forwarding state [ 876.081486][ C0] pimreg1: topology change detected, propagating [ 876.210136][T28123] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 876.251589][T28123] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 876.397400][T28123] RDS/IB: syz0: added [ 876.401707][ C0] Dropped outbound packet type=88ca [ 876.455262][T28123] smc: adding ib device syz0 with port count 1 [ 876.480714][T28123] smc: ib device syz0 port 1 has no pnetid [ 876.917400][T28178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5399'. [ 876.975490][T28178] bond16: entered promiscuous mode [ 877.159294][T28183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5400'. [ 877.298139][T28178] pimreg1: port 2(bridge_slave_1) entered disabled state [ 877.305884][T28178] pimreg1: port 1(bridge_slave_0) entered disabled state [ 877.397187][T28178] bond1: (slave ): Releasing active interface [ 877.440776][ C0] Dropped outbound packet type=88ca [ 877.542303][T28178] bridge_slave_0: left allmulticast mode [ 877.548314][T28178] bridge_slave_0: left promiscuous mode [ 877.554747][T28178] pimreg1: port 1(bridge_slave_0) entered disabled state [ 877.581195][T28178] bridge_slave_1: left allmulticast mode [ 877.587167][T28178] bridge_slave_1: left promiscuous mode [ 877.593298][T28178] pimreg1: port 2(bridge_slave_1) entered disabled state [ 877.682106][T28178] team0: Port device team_slave_0 removed [ 877.714596][T28178] team0: Port device team_slave_1 removed [ 877.787518][T28178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 877.927235][T28190] syzkaller1: entered promiscuous mode [ 877.932859][T28190] syzkaller1: entered allmulticast mode [ 877.970440][T28200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5404'. [ 877.982056][T28176] bond16: left promiscuous mode [ 877.994883][T28198] syzkaller0: entered allmulticast mode [ 878.480612][ C0] Dropped outbound packet type=88ca [ 878.655832][T28228] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 878.943077][T28242] netlink: 'syz.0.5415': attribute type 4 has an invalid length. [ 879.326529][T28250] __nla_validate_parse: 1 callbacks suppressed [ 879.326549][T28250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5417'. [ 879.350969][T28251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'. [ 879.378027][T28251] xt_TCPMSS: Only works on TCP SYN packets [ 879.520853][ C0] Dropped outbound packet type=88ca [ 879.838493][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5424'. [ 880.255529][ T51] block nbd1: Receive control failed (result -1) [ 880.264923][ T51] [ 880.267821][ T51] ====================================================== [ 880.275094][ T51] WARNING: possible circular locking dependency detected [ 880.282649][ T51] syzkaller #0 Not tainted [ 880.287703][ T51] ------------------------------------------------------ [ 880.295649][ T51] kworker/u9:0/51 is trying to acquire lock: [ 880.301815][ T51] ffff88807a3ad360 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 880.312633][ T51] [ 880.312633][ T51] but task is already holding lock: [ 880.320564][ T51] ffff8880568afe68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 880.330073][ T51] [ 880.330073][ T51] which lock already depends on the new lock. [ 880.330073][ T51] [ 880.341431][ T51] [ 880.341431][ T51] the existing dependency chain (in reverse order) is: [ 880.350731][ T51] [ 880.350731][ T51] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 880.358812][ T51] __mutex_lock+0x19d/0x1550 [ 880.364108][ T51] nbd_queue_rq+0x373/0x1150 [ 880.370098][ T51] blk_mq_dispatch_rq_list+0x499/0x1990 [ 880.376530][ T51] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 880.383802][ T51] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 880.390395][ T51] blk_mq_run_work_fn+0x16c/0x300 [ 880.395957][ T51] process_scheduled_works+0xa8e/0x14e0 [ 880.402138][ T51] worker_thread+0xa47/0xfb0 [ 880.407333][ T51] kthread+0x388/0x470 [ 880.411923][ T51] ret_from_fork+0x514/0xb70 [ 880.417070][ T51] ret_from_fork_asm+0x1a/0x30 [ 880.422356][ T51] [ 880.422356][ T51] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 880.429589][ T51] __mutex_lock+0x19d/0x1550 [ 880.434998][ T51] nbd_queue_rq+0xc1/0x1150 [ 880.440044][ T51] blk_mq_dispatch_rq_list+0x499/0x1990 [ 880.446103][ T51] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 880.453308][ T51] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 880.459928][ T51] blk_mq_run_work_fn+0x16c/0x300 [ 880.466540][ T51] process_scheduled_works+0xa8e/0x14e0 [ 880.472979][ T51] worker_thread+0xa47/0xfb0 [ 880.478244][ T51] kthread+0x388/0x470 [ 880.482936][ T51] ret_from_fork+0x514/0xb70 [ 880.488411][ T51] ret_from_fork_asm+0x1a/0x30 [ 880.493954][ T51] [ 880.493954][ T51] -> #4 (set->srcu){.+.+}-{0:0}: [ 880.501256][ T51] __synchronize_srcu+0xc9/0x2f0 [ 880.506848][ T51] elevator_switch+0x1e8/0x7b0 [ 880.512377][ T51] elevator_change+0x2fa/0x480 [ 880.517881][ T51] elevator_set_default+0x375/0x440 [ 880.523888][ T51] blk_register_queue+0x3f3/0x4e0 [ 880.529729][ T51] __add_disk+0x6cb/0xe30 [ 880.534770][ T51] add_disk_fwnode+0xfb/0x4b0 [ 880.539988][ T51] nbd_dev_add+0x733/0xb60 [ 880.545197][ T51] nbd_init+0x15f/0x1e0 [ 880.550009][ T51] do_one_initcall+0x250/0x870 [ 880.555384][ T51] do_initcall_level+0x10a/0x1a0 [ 880.560797][ C0] Dropped outbound packet type=88ca [ 880.561097][ T51] do_initcalls+0x59/0xa0 [ 880.571115][ T51] kernel_init_freeable+0x29d/0x3e0 [ 880.577039][ T51] kernel_init+0x1d/0x1d0 [ 880.581889][ T51] ret_from_fork+0x514/0xb70 [ 880.587089][ T51] ret_from_fork_asm+0x1a/0x30 [ 880.592668][ T51] [ 880.592668][ T51] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 880.600839][ T51] __mutex_lock+0x19d/0x1550 [ 880.606056][ T51] elevator_change+0x1af/0x480 [ 880.611351][ T51] elevator_set_none+0xb5/0x140 [ 880.616816][ T51] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 880.623229][ T51] nbd_start_device+0x189/0xb30 [ 880.628693][ T51] nbd_genl_connect+0x1597/0x1c10 [ 880.634465][ T51] genl_family_rcv_msg_doit+0x233/0x340 [ 880.640619][ T51] genl_rcv_msg+0x614/0x7a0 [ 880.645941][ T51] netlink_rcv_skb+0x226/0x4a0 [ 880.651483][ T51] genl_rcv+0x28/0x40 [ 880.656325][ T51] netlink_unicast+0x7bb/0x940 [ 880.661807][ T51] netlink_sendmsg+0x813/0xb40 [ 880.667201][ T51] sock_sendmsg_nosec+0x13a/0x180 [ 880.672934][ T51] ____sys_sendmsg+0x54e/0x850 [ 880.678518][ T51] ___sys_sendmsg+0x2a5/0x360 [ 880.683752][ T51] __x64_sys_sendmsg+0x1b1/0x290 [ 880.689294][ T51] do_syscall_64+0x174/0x580 [ 880.694404][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.700826][ T51] [ 880.700826][ T51] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 880.709620][ T51] blk_alloc_queue+0x544/0x690 [ 880.714903][ T51] __blk_mq_alloc_disk+0x194/0x390 [ 880.720630][ T51] nbd_dev_add+0x494/0xb60 [ 880.725665][ T51] nbd_init+0x15f/0x1e0 [ 880.730434][ T51] do_one_initcall+0x250/0x870 [ 880.735727][ T51] do_initcall_level+0x10a/0x1a0 [ 880.741219][ T51] do_initcalls+0x59/0xa0 [ 880.746072][ T51] kernel_init_freeable+0x29d/0x3e0 [ 880.751883][ T51] kernel_init+0x1d/0x1d0 [ 880.756743][ T51] ret_from_fork+0x514/0xb70 [ 880.762040][ T51] ret_from_fork_asm+0x1a/0x30 [ 880.767337][ T51] [ 880.767337][ T51] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 880.774630][ T51] fs_reclaim_acquire+0x71/0x100 [ 880.780269][ T51] __kmalloc_noprof+0xbc/0x720 [ 880.785675][ T51] tls_sw_sendmsg+0x599/0x2860 [ 880.791220][ T51] sock_sendmsg_nosec+0x90/0x180 [ 880.796697][ T51] sock_sendmsg+0x1ca/0x2d0 [ 880.801896][ T51] splice_to_socket+0xb5e/0x12a0 [ 880.807720][ T51] direct_splice_actor+0x101/0x160 [ 880.813376][ T51] splice_direct_to_actor+0x57b/0xcb0 [ 880.819273][ T51] do_splice_direct+0x195/0x290 [ 880.824651][ T51] do_sendfile+0x52e/0x7c0 [ 880.829635][ T51] __se_sys_sendfile64+0x144/0x1a0 [ 880.835325][ T51] do_syscall_64+0x174/0x580 [ 880.840538][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.847057][ T51] [ 880.847057][ T51] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 880.855215][ T51] __lock_acquire+0x1520/0x2cf0 [ 880.860594][ T51] lock_acquire+0x106/0x350 [ 880.865736][ T51] lock_sock_nested+0x41/0x100 [ 880.871314][ T51] inet_shutdown+0x6a/0x390 [ 880.876425][ T51] nbd_mark_nsock_dead+0x2cb/0x550 [ 880.882319][ T51] recv_work+0x1cee/0x1e10 [ 880.887680][ T51] process_scheduled_works+0xa8e/0x14e0 [ 880.893751][ T51] worker_thread+0xa47/0xfb0 [ 880.898961][ T51] kthread+0x388/0x470 [ 880.903574][ T51] ret_from_fork+0x514/0xb70 [ 880.908700][ T51] ret_from_fork_asm+0x1a/0x30 [ 880.914155][ T51] [ 880.914155][ T51] other info that might help us debug this: [ 880.914155][ T51] [ 880.924670][ T51] Chain exists of: [ 880.924670][ T51] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 880.924670][ T51] [ 880.937977][ T51] Possible unsafe locking scenario: [ 880.937977][ T51] [ 880.946445][ T51] CPU0 CPU1 [ 880.952101][ T51] ---- ---- [ 880.957724][ T51] lock(&nsock->tx_lock); [ 880.962151][ T51] lock(&cmd->lock); [ 880.968855][ T51] lock(&nsock->tx_lock); [ 880.975973][ T51] lock(sk_lock-AF_INET6-NBD); [ 880.980921][ T51] [ 880.980921][ T51] *** DEADLOCK *** [ 880.980921][ T51] [ 880.989055][ T51] 3 locks held by kworker/u9:0/51: [ 880.994343][ T51] #0: ffff888026aee140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 881.005912][ T51] #1: ffffc90000bb7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 881.017837][ T51] #2: ffff8880568afe68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 881.027287][ T51] [ 881.027287][ T51] stack backtrace: [ 881.033408][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 881.033428][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.033440][ T51] Workqueue: nbd1-recv recv_work [ 881.033459][ T51] Call Trace: [ 881.033468][ T51] [ 881.033477][ T51] dump_stack_lvl+0xe8/0x150 [ 881.033500][ T51] print_circular_bug+0x2e1/0x300 [ 881.033518][ T51] check_noncircular+0x12e/0x150 [ 881.033542][ T51] __lock_acquire+0x1520/0x2cf0 [ 881.033564][ T51] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 881.033584][ T51] ? preempt_schedule_notrace+0x57/0x90 [ 881.033604][ T51] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 881.033620][ T51] ? __pfx_inet_shutdown+0x10/0x10 [ 881.033641][ T51] ? inet_shutdown+0x6a/0x390 [ 881.033658][ T51] lock_acquire+0x106/0x350 [ 881.033677][ T51] ? inet_shutdown+0x6a/0x390 [ 881.033700][ T51] lock_sock_nested+0x41/0x100 [ 881.033716][ T51] ? inet_shutdown+0x6a/0x390 [ 881.033735][ T51] inet_shutdown+0x6a/0x390 [ 881.033754][ T51] nbd_mark_nsock_dead+0x2cb/0x550 [ 881.033778][ T51] recv_work+0x1cee/0x1e10 [ 881.033793][ T51] ? __lock_acquire+0x683/0x2cf0 [ 881.033813][ T51] ? register_lock_class+0x31/0x2e0 [ 881.033839][ T51] ? __lock_acquire+0x683/0x2cf0 [ 881.033861][ T51] ? __pfx_recv_work+0x10/0x10 [ 881.033876][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 881.033892][ T51] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 881.033909][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 881.033928][ T51] ? rcu_is_watching+0x15/0xb0 [ 881.033951][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 881.033967][ T51] process_scheduled_works+0xa8e/0x14e0 [ 881.033992][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 881.034011][ T51] ? assign_work+0x3cf/0x5d0 [ 881.034028][ T51] worker_thread+0xa47/0xfb0 [ 881.034053][ T51] kthread+0x388/0x470 [ 881.034073][ T51] ? __pfx_worker_thread+0x10/0x10 [ 881.034088][ T51] ? __pfx_kthread+0x10/0x10 [ 881.034108][ T51] ret_from_fork+0x514/0xb70 [ 881.034129][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 881.034149][ T51] ? __switch_to+0xc89/0x1420 [ 881.034169][ T51] ? __pfx_kthread+0x10/0x10 [ 881.034188][ T51] ret_from_fork_asm+0x1a/0x30 [ 881.034208][ T51] [ 881.600672][ C0] Dropped outbound packet type=88ca [ 882.640571][ C0] Dropped outbound packet type=88ca [ 883.680917][ C0] Dropped outbound packet type=88ca [ 884.720538][ C0] Dropped outbound packet type=88ca [ 885.760645][ C0] Dropped outbound packet type=88ca [ 886.321157][ C0] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 886.800532][ C0] Dropped outbound packet type=88ca [ 886.960568][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.968728][ C1] bridge0: topology change detected, propagating [ 886.976279][ C0] bridge0: port 1(1) entered forwarding state [ 886.982920][ C0] bridge0: topology change detected, propagating [ 887.850816][ C0] Dropped outbound packet type=88ca [ 888.881152][ C0] Dropped outbound packet type=88ca [ 889.920733][ C0] Dropped outbound packet type=88ca